Edit tour

Linux Analysis Report
na.elf

Overview

General Information

Sample name:	na.elf
Analysis ID:	1543693
MD5:	c12e6af54c0092045241315daf947c7f
SHA1:	cbe22199d0c92184dbd5888b6247791747d4a382
SHA256:	813884a0b10034ffafb44607c9ed74f5a4bde5dee76c0e3284e825d0ee0c998a
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1543693
Start date and time:	2024-10-28 09:23:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	na.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: na.elf

Runtime Messages

Command:	/tmp/na.elf
PID:	5566
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

na.elf (PID: 5566, Parent: 5486, MD5: 8943e5f8f8c280467b4472c15ae93ba9) Arguments: /tmp/na.elf

na.elf New Fork (PID: 5570, Parent: 5566)

na.elf New Fork (PID: 5572, Parent: 5570)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
na.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
na.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
na.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdd34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdeb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5570.1.00007ff020400000.00007ff020410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5570.1.00007ff020400000.00007ff020410000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdd34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdeb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5566.1.00007ff020400000.00007ff020410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5566.1.00007ff020400000.00007ff020410000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xdd34:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd48:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd5c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd70:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd84:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd98:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddc0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdde8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xddfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdeb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdec4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5566	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5566	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x75d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x75ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7600:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7614:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7628:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x763c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7650:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7664:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7678:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x768c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x76f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7704:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7718:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x772c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7740:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7754:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x7768:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: na.elf PID: 5570	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: na.elf PID: 5570	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x44a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x44bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x44d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x44e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x44f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x450c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4520:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4534:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4548:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x455c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4570:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4584:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4598:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x45fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4610:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-28T09:24:03.722456+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38686	93.123.85.205	7777	TCP
2024-10-28T09:24:04.869146+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38688	93.123.85.205	7777	TCP
2024-10-28T09:24:06.139003+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38690	93.123.85.205	7777	TCP
2024-10-28T09:24:07.352582+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38692	93.123.85.205	7777	TCP
2024-10-28T09:24:08.519357+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38694	93.123.85.205	7777	TCP
2024-10-28T09:24:09.761524+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38696	93.123.85.205	7777	TCP
2024-10-28T09:24:10.970581+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38698	93.123.85.205	7777	TCP
2024-10-28T09:24:12.160346+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38700	93.123.85.205	7777	TCP
2024-10-28T09:24:13.363560+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38702	93.123.85.205	7777	TCP
2024-10-28T09:24:14.822446+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38704	93.123.85.205	7777	TCP
2024-10-28T09:24:16.025615+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38706	93.123.85.205	7777	TCP
2024-10-28T09:24:17.128216+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38708	93.123.85.205	7777	TCP
2024-10-28T09:24:18.239502+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38710	93.123.85.205	7777	TCP
2024-10-28T09:24:19.332663+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38712	93.123.85.205	7777	TCP
2024-10-28T09:24:20.535878+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38714	93.123.85.205	7777	TCP
2024-10-28T09:24:21.831932+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38716	93.123.85.205	7777	TCP
2024-10-28T09:24:23.045049+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38718	93.123.85.205	7777	TCP
2024-10-28T09:24:24.226541+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38720	93.123.85.205	7777	TCP
2024-10-28T09:24:25.424975+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38722	93.123.85.205	7777	TCP
2024-10-28T09:24:26.663499+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38724	93.123.85.205	7777	TCP
2024-10-28T09:24:27.835550+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38726	93.123.85.205	7777	TCP
2024-10-28T09:24:28.930101+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38728	93.123.85.205	7777	TCP
2024-10-28T09:24:30.133063+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38730	93.123.85.205	7777	TCP
2024-10-28T09:24:31.168028+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38732	93.123.85.205	7777	TCP
2024-10-28T09:24:32.365728+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38734	93.123.85.205	7777	TCP
2024-10-28T09:24:33.558954+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38736	93.123.85.205	7777	TCP
2024-10-28T09:24:34.826818+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38738	93.123.85.205	7777	TCP
2024-10-28T09:24:36.019440+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38740	93.123.85.205	7777	TCP
2024-10-28T09:24:37.159755+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38742	93.123.85.205	7777	TCP
2024-10-28T09:24:38.368921+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38744	93.123.85.205	7777	TCP
2024-10-28T09:24:39.571118+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38746	93.123.85.205	7777	TCP
2024-10-28T09:24:40.727637+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38748	93.123.85.205	7777	TCP
2024-10-28T09:24:41.863945+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38750	93.123.85.205	7777	TCP
2024-10-28T09:24:43.021799+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38752	93.123.85.205	7777	TCP
2024-10-28T09:24:44.163907+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38754	93.123.85.205	7777	TCP
2024-10-28T09:24:45.271060+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38756	93.123.85.205	7777	TCP
2024-10-28T09:24:46.453856+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38758	93.123.85.205	7777	TCP
2024-10-28T09:24:48.653298+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38760	93.123.85.205	7777	TCP
2024-10-28T09:24:49.844172+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38762	93.123.85.205	7777	TCP
2024-10-28T09:24:51.030741+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38764	93.123.85.205	7777	TCP
2024-10-28T09:24:52.261850+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38766	93.123.85.205	7777	TCP
2024-10-28T09:24:53.481909+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38768	93.123.85.205	7777	TCP
2024-10-28T09:24:54.618942+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38770	93.123.85.205	7777	TCP
2024-10-28T09:24:55.736398+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38772	93.123.85.205	7777	TCP
2024-10-28T09:24:56.958647+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38774	93.123.85.205	7777	TCP
2024-10-28T09:24:58.217115+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38776	93.123.85.205	7777	TCP
2024-10-28T09:24:59.429827+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38778	93.123.85.205	7777	TCP
2024-10-28T09:25:00.568715+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38780	93.123.85.205	7777	TCP
2024-10-28T09:25:01.736822+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38782	93.123.85.205	7777	TCP
2024-10-28T09:25:02.876602+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38784	93.123.85.205	7777	TCP
2024-10-28T09:25:04.105220+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38786	93.123.85.205	7777	TCP
2024-10-28T09:25:05.255559+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38788	93.123.85.205	7777	TCP
2024-10-28T09:25:06.433366+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38790	93.123.85.205	7777	TCP
2024-10-28T09:25:08.663493+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38792	93.123.85.205	7777	TCP
2024-10-28T09:25:09.761078+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38794	93.123.85.205	7777	TCP
2024-10-28T09:25:10.937059+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38796	93.123.85.205	7777	TCP
2024-10-28T09:25:12.145147+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38798	93.123.85.205	7777	TCP
2024-10-28T09:25:13.310923+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38800	93.123.85.205	7777	TCP
2024-10-28T09:25:14.518464+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38802	93.123.85.205	7777	TCP
2024-10-28T09:25:15.661559+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38804	93.123.85.205	7777	TCP
2024-10-28T09:25:16.850483+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38806	93.123.85.205	7777	TCP
2024-10-28T09:25:18.059924+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38808	93.123.85.205	7777	TCP
2024-10-28T09:25:19.161917+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38810	93.123.85.205	7777	TCP
2024-10-28T09:25:20.341477+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38812	93.123.85.205	7777	TCP
2024-10-28T09:25:21.454291+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38814	93.123.85.205	7777	TCP
2024-10-28T09:25:22.718653+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38816	93.123.85.205	7777	TCP
2024-10-28T09:25:23.871335+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38818	93.123.85.205	7777	TCP
2024-10-28T09:25:25.018252+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38820	93.123.85.205	7777	TCP
2024-10-28T09:25:26.134540+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38822	93.123.85.205	7777	TCP
2024-10-28T09:25:27.268344+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38824	93.123.85.205	7777	TCP
2024-10-28T09:25:28.468888+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38826	93.123.85.205	7777	TCP
2024-10-28T09:25:29.723333+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38828	93.123.85.205	7777	TCP
2024-10-28T09:25:30.919994+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38830	93.123.85.205	7777	TCP
2024-10-28T09:25:32.036223+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38832	93.123.85.205	7777	TCP
2024-10-28T09:25:33.263685+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38834	93.123.85.205	7777	TCP
2024-10-28T09:25:34.447409+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38836	93.123.85.205	7777	TCP
2024-10-28T09:25:35.620346+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38838	93.123.85.205	7777	TCP
2024-10-28T09:25:36.860120+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38840	93.123.85.205	7777	TCP
2024-10-28T09:25:38.047179+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38842	93.123.85.205	7777	TCP
2024-10-28T09:25:39.148819+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38844	93.123.85.205	7777	TCP
2024-10-28T09:25:40.347636+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38846	93.123.85.205	7777	TCP
2024-10-28T09:25:41.468381+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38848	93.123.85.205	7777	TCP
2024-10-28T09:25:42.614652+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38850	93.123.85.205	7777	TCP
2024-10-28T09:25:43.760324+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38852	93.123.85.205	7777	TCP
2024-10-28T09:25:44.854642+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38854	93.123.85.205	7777	TCP
2024-10-28T09:25:46.050801+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38856	93.123.85.205	7777	TCP
2024-10-28T09:25:47.320547+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38858	93.123.85.205	7777	TCP
2024-10-28T09:25:49.006679+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38860	93.123.85.205	7777	TCP
2024-10-28T09:25:50.227433+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38862	93.123.85.205	7777	TCP
2024-10-28T09:25:51.416463+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38864	93.123.85.205	7777	TCP
2024-10-28T09:25:52.625971+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38866	93.123.85.205	7777	TCP
2024-10-28T09:25:53.748119+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38868	93.123.85.205	7777	TCP
2024-10-28T09:25:54.855664+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38870	93.123.85.205	7777	TCP
2024-10-28T09:25:56.118245+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38872	93.123.85.205	7777	TCP
2024-10-28T09:25:57.237060+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38874	93.123.85.205	7777	TCP
2024-10-28T09:25:58.432255+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38876	93.123.85.205	7777	TCP
2024-10-28T09:25:59.552715+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38878	93.123.85.205	7777	TCP
2024-10-28T09:26:00.723450+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38880	93.123.85.205	7777	TCP
2024-10-28T09:26:01.980079+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38882	93.123.85.205	7777	TCP
2024-10-28T09:26:04.138015+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38884	93.123.85.205	7777	TCP
2024-10-28T09:26:05.324813+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38886	93.123.85.205	7777	TCP
2024-10-28T09:26:06.468750+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38888	93.123.85.205	7777	TCP
2024-10-28T09:26:07.619056+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38890	93.123.85.205	7777	TCP
2024-10-28T09:26:08.815256+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38892	93.123.85.205	7777	TCP
2024-10-28T09:26:10.026572+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38894	93.123.85.205	7777	TCP
2024-10-28T09:26:11.164943+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38896	93.123.85.205	7777	TCP
2024-10-28T09:26:12.445336+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38898	93.123.85.205	7777	TCP
2024-10-28T09:26:13.719429+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38900	93.123.85.205	7777	TCP
2024-10-28T09:26:14.865113+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38902	93.123.85.205	7777	TCP
2024-10-28T09:26:16.016815+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38904	93.123.85.205	7777	TCP
2024-10-28T09:26:17.114190+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38906	93.123.85.205	7777	TCP
2024-10-28T09:26:18.251613+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38908	93.123.85.205	7777	TCP
2024-10-28T09:26:19.459569+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38910	93.123.85.205	7777	TCP
2024-10-28T09:26:20.643181+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38912	93.123.85.205	7777	TCP
2024-10-28T09:26:21.870558+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38914	93.123.85.205	7777	TCP
2024-10-28T09:26:23.116756+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38916	93.123.85.205	7777	TCP
2024-10-28T09:26:24.232150+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38918	93.123.85.205	7777	TCP
2024-10-28T09:26:25.432082+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38920	93.123.85.205	7777	TCP
2024-10-28T09:26:26.562952+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38922	93.123.85.205	7777	TCP
2024-10-28T09:26:27.670189+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38924	93.123.85.205	7777	TCP
2024-10-28T09:26:29.072429+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38926	93.123.85.205	7777	TCP
2024-10-28T09:26:30.264160+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38928	93.123.85.205	7777	TCP
2024-10-28T09:26:31.430136+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38930	93.123.85.205	7777	TCP
2024-10-28T09:26:32.619300+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38932	93.123.85.205	7777	TCP
2024-10-28T09:26:33.768074+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38934	93.123.85.205	7777	TCP
2024-10-28T09:26:34.848904+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38936	93.123.85.205	7777	TCP
2024-10-28T09:26:36.023584+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38938	93.123.85.205	7777	TCP
2024-10-28T09:26:37.130348+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38940	93.123.85.205	7777	TCP
2024-10-28T09:26:38.258828+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38942	93.123.85.205	7777	TCP
2024-10-28T09:26:39.425017+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38944	93.123.85.205	7777	TCP
2024-10-28T09:26:40.552382+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38946	93.123.85.205	7777	TCP
2024-10-28T09:26:41.724517+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38948	93.123.85.205	7777	TCP
2024-10-28T09:26:42.865150+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38950	93.123.85.205	7777	TCP
2024-10-28T09:26:44.056570+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38952	93.123.85.205	7777	TCP
2024-10-28T09:26:45.324213+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38954	93.123.85.205	7777	TCP
2024-10-28T09:26:46.479752+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38956	93.123.85.205	7777	TCP
2024-10-28T09:26:47.644752+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38958	93.123.85.205	7777	TCP
2024-10-28T09:26:48.676055+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38960	93.123.85.205	7777	TCP
2024-10-28T09:26:49.879761+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38962	93.123.85.205	7777	TCP
2024-10-28T09:26:50.923160+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38964	93.123.85.205	7777	TCP
2024-10-28T09:26:52.074724+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38966	93.123.85.205	7777	TCP
2024-10-28T09:26:53.235563+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38968	93.123.85.205	7777	TCP
2024-10-28T09:26:54.432892+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38970	93.123.85.205	7777	TCP
2024-10-28T09:26:55.621482+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38972	93.123.85.205	7777	TCP
2024-10-28T09:26:56.732195+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38974	93.123.85.205	7777	TCP
2024-10-28T09:26:57.828755+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38976	93.123.85.205	7777	TCP
2024-10-28T09:26:59.022947+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38978	93.123.85.205	7777	TCP
2024-10-28T09:27:00.153493+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38980	93.123.85.205	7777	TCP
2024-10-28T09:27:01.340929+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38982	93.123.85.205	7777	TCP
2024-10-28T09:27:02.473747+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38984	93.123.85.205	7777	TCP
2024-10-28T09:27:03.629748+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38986	93.123.85.205	7777	TCP
2024-10-28T09:27:05.755683+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38988	93.123.85.205	7777	TCP
2024-10-28T09:27:06.963584+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38990	93.123.85.205	7777	TCP
2024-10-28T09:27:08.147365+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38992	93.123.85.205	7777	TCP
2024-10-28T09:27:09.359936+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38994	93.123.85.205	7777	TCP
2024-10-28T09:27:10.551373+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38996	93.123.85.205	7777	TCP
2024-10-28T09:27:11.726344+0100	2846526	1	A Network Trojan was detected	192.168.2.15	38998	93.123.85.205	7777	TCP
2024-10-28T09:27:12.858122+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39000	93.123.85.205	7777	TCP
2024-10-28T09:27:14.032759+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39002	93.123.85.205	7777	TCP
2024-10-28T09:27:15.122683+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39004	93.123.85.205	7777	TCP
2024-10-28T09:27:16.242325+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39006	93.123.85.205	7777	TCP
2024-10-28T09:27:17.436741+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39008	93.123.85.205	7777	TCP
2024-10-28T09:27:18.565793+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39010	93.123.85.205	7777	TCP
2024-10-28T09:27:19.747292+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39012	93.123.85.205	7777	TCP
2024-10-28T09:27:20.951035+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39014	93.123.85.205	7777	TCP
2024-10-28T09:27:22.133332+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39016	93.123.85.205	7777	TCP
2024-10-28T09:27:23.553082+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39018	93.123.85.205	7777	TCP
2024-10-28T09:27:24.740516+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39020	93.123.85.205	7777	TCP
2024-10-28T09:27:25.929829+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39022	93.123.85.205	7777	TCP
2024-10-28T09:27:27.047975+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39024	93.123.85.205	7777	TCP
2024-10-28T09:27:28.238691+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39026	93.123.85.205	7777	TCP
2024-10-28T09:27:29.713304+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39028	93.123.85.205	7777	TCP
2024-10-28T09:27:31.010169+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39030	93.123.85.205	7777	TCP
2024-10-28T09:27:32.132641+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39032	93.123.85.205	7777	TCP
2024-10-28T09:27:33.325992+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39034	93.123.85.205	7777	TCP
2024-10-28T09:27:34.557800+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39036	93.123.85.205	7777	TCP
2024-10-28T09:27:35.810210+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39038	93.123.85.205	7777	TCP
2024-10-28T09:27:36.934326+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39040	93.123.85.205	7777	TCP
2024-10-28T09:27:38.123291+0100	2846526	1	A Network Trojan was detected	192.168.2.15	39042	93.123.85.205	7777	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: na.elf

Avira: detected

Found malware configuration

Source: na.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.205:7777"}

Multi AV Scanner detection for submitted file

Source: na.elf

ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/na.elf (PID: 5566)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38686 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38736 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38750 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38722 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38688 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38764 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38708 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38710 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38800 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38700 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38808 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38832 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38826 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38740 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38762 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38698 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38756 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38704 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38794 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38906 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38804 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38758 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38734 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38798 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38692 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38724 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38820 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38766 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38694 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38774 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38822 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38716 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38874 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38714 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38702 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38726 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38872 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38744 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38752 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38854 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38768 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38746 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38770 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38864 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38782 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38914 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38718 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38824 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38790 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38786 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38892 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38772 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38810 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38876 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39026 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38742 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38954 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38792 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38788 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39038 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38966 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38894 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38806 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39028 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38902 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38690 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39010 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38732 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38938 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38706 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38720 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38910 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38962 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38760 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38846 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39034 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38838 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38830 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38958 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38916 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38776 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38712 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38970 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38978 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38996 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38814 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38696 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39008 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38982 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38730 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38840 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38738 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38896 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38844 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38748 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39040 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38868 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38870 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38836 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38842 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38946 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38828 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38908 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38930 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38960 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38890 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38934 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38754 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38866 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38778 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38780 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38784 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38882 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38848 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38994 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38796 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38936 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38972 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38924 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38862 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38918 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38898 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38904 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39032 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38928 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38984 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39016 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38992 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39002 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38950 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39018 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39020 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39030 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38812 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38818 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38802 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38932 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38912 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38948 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38816 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38728 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38900 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38944 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39022 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38856 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38860 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38858 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38834 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38852 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38964 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39024 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39006 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38878 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38884 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38850 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38888 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38968 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38990 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38926 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38920 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38998 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38988 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39000 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38886 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38974 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38956 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38976 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39004 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39036 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38980 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39014 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38880 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39012 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38922 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:39042 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38940 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38942 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38952 -> 93.123.85.205:7777
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.15:38986 -> 93.123.85.205:7777

Source: global traffic

TCP traffic: 192.168.2.15:38686 -> 93.123.85.205:7777

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.205

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5570.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5566.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5566, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: na.elf PID: 5570, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: na.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5570.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5566.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5566, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: na.elf PID: 5570, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: na.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
Source: na.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm
Source: na.elf	ELF static info symbol of initial sample: libc/string/sh/sh4/memcpy.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/crt1.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/crti.S
Source: na.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/sh/crtn.S

Source: /tmp/na.elf (PID: 5566)

Queries kernel information via 'uname':

Jump to behavior

Source: na.elf, 5566.1.00007ffc03871000.00007ffc03892000.rw-.sdmp, na.elf, 5570.1.00007ffc03871000.00007ffc03892000.rw-.sdmp	Binary or memory string: Wx86_64/usr/bin/qemu-sh4/tmp/na.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/na.elf
Source: na.elf, 5566.1.00007ffc03871000.00007ffc03892000.rw-.sdmp, na.elf, 5570.1.00007ffc03871000.00007ffc03892000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-sh4
Source: na.elf, 5566.1.000055f44fee5000.000055f44ff48000.rw-.sdmp, na.elf, 5570.1.000055f44fee5000.000055f44ff48000.rw-.sdmp	Binary or memory string: U5!/etc/qemu-binfmt/sh4
Source: na.elf, 5566.1.000055f44fee5000.000055f44ff48000.rw-.sdmp, na.elf, 5570.1.000055f44fee5000.000055f44ff48000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/sh4

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5570.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5566.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5566, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5570, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: na.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: na.elf, type: SAMPLE
Source: Yara match	File source: 5570.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5566.1.00007ff020400000.00007ff020410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: na.elf PID: 5566, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: na.elf PID: 5570, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.205:7777"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
na.elf	63%	ReversingLabs	Linux.Exploit.Mirai
na.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.205:7777	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
93.123.85.205	unknown	Bulgaria		43561	NET1-ASBG	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
93.123.85.205	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NET1-ASBG	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205
	na.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.205

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.618316670843024
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	na.elf
File size:	88'733 bytes
MD5:	c12e6af54c0092045241315daf947c7f
SHA1:	cbe22199d0c92184dbd5888b6247791747d4a382
SHA256:	813884a0b10034ffafb44607c9ed74f5a4bde5dee76c0e3284e825d0ee0c998a
SHA512:	6bcf60f191d252f0706151928b7821c887f5bc6bb78ba6b054472820c0bd42178b6b6534b1ad06bbbb7e808d1fe30373ce57bff11b01a239d57cdd8bd3e35948
SSDEEP:	1536:ClN9YyOXmMSr4k9dgGwKGg0CfjGJC2dojMyTRLmkxVqOEeofzee:g7OXmMSr4krG3JtBQLmkxVqODofzee
TLSH:	78833B47E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A303CA7F8434F4CD790EF64
File Content Preview:	.ELF.....................@.4...........4. ...(...............@...@...........................A...A......g..........Q.td............................././"O.n........#.@........#.*@.....o&O.n...l..............................././.../.a"O.!...n...a.b("...q.

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	<unknown>
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4001a0
Flags:	0x9
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	69296
Section Header Size:	40
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x400094	0x94	0x30	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x4000e0	0xe0	0xd520	0x0	0x6	AX	0	0	32
.fini	PROGBITS	0x40d600	0xd600	0x24	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x40d624	0xd624	0x266c	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x40fc90	0xfc90	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x410000	0x10000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x410008	0x10008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x410010	0x10010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x410014	0x10014	0x398	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x4103ac	0x103ac	0x635c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x103ac	0xa9e	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x10e4a	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x11108	0x29e0	0x10	0x0		14	249	4
.strtab	STRTAB	0x0	0x13ae8	0x1fb5	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xfc94	0xfc94	6.9203	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x10000	0x410000	0x410000	0x3ac	0x6708	2.7620	0x6	RW	0x10000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x400094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000e0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40d600	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40d624	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x40fc90	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x410000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x410008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x410010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x410014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x4103ac	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
/home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-sh4/gcc-core/gcc/config/sh/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
L1	.symtab	0x406b1c	0	NOTYPE	<unknown>	DEFAULT	2
L_abort	.symtab	0x4001d0	0	NOTYPE	<unknown>	DEFAULT	2
L_fini	.symtab	0x4001c8	0	NOTYPE	<unknown>	DEFAULT	2
L_init	.symtab	0x4001c4	0	NOTYPE	<unknown>	DEFAULT	2
L_main	.symtab	0x4001c0	0	NOTYPE	<unknown>	DEFAULT	2
L_uClibc_main	.symtab	0x4001cc	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x4103e0	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x403020	344	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x4026b0	372	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x4032e0	420	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x401cf4	1040	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x410004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x410000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x41004c	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x40e638	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x4103a4	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x40ed1e	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x410054	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x40e938	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x41000c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x410008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x40fc90	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x40fc90	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x41004c	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x40e638	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x4103a4	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x40ed1e	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x410054	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x40e938	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x410050	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x4103a8	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x410058	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x4070a0	20	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x40c378	216	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x40c5d8	32	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x408eec	20	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x406b24	172	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x406bd0	152	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x406e7c	160	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x4089c8	104	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x408a94	80	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x40c5f8	200	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x406c68	48	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x4080c0	244	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x408624	24	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x408624	24	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x406cd0	56	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x406d08	56	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x407af0	40	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x41460c	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x408794	112	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x40a078	272	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x406b24	172	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x406bd0	152	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x40a660	320	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x40c378	216	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x40a508	120	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x40a7a0	128	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x40a188	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x406d40	56	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x40c450	68	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x40d354	28	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x40d370	232	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40c494	156	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x40c378	216	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x408d48	56	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x408d80	56	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x408db8	56	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x4077fc	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x407844	684	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x406d78	56	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x407b18	40	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x408df0	56	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x414610	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x4077d0	44	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x409508	204	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x4077b8	24	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x407740	120	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x40add8	492	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x40ab04	408	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x408574	176	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x406db0	148	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40a9d0	36	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x406e44	56	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40d540	96	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x40d1bc	204	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x407140	636	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x409004	978	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x40c530	36	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x40d288	204	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x4073c0	124	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x408e28	56	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x406e7c	160	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x40a040	56	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x409ea4	40	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x4081c8	100	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x408448	104	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40a820	152	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x406f34	56	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x407b6c	40	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x408cb8	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x406f6c	52	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x407b94	40	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x407bbc	48	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x406fa0	56	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x407bec	44	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x408370	216	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x409ecc	160	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x407c40	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x408e60	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x408804	376	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x407c18	40	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x40b554	132	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x4084b0	196	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x40c6c0	64	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x40743c	192	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x4074fc	34	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x4074fc	34	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x40751e	30	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x40a984	76	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x40753c	136	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x40a8b8	154	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x4093d8	142	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x40c554	132	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x4094e0	40	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x40a952	48	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x4075c4	192	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x40769c	24	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x409468	120	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x40863c	20	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40a9f4	116	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x406fd8	56	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40b52c	40	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x407078	40	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x40b5d8	168	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x408eb4	56	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x407010	20	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x40c8b4	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x40c918	112	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x40c8f8	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x407024	56	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x410010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x410010	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x414600	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x410230	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x407c40	184	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x4103ac	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x408a4a	74	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x410050	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x4103a8	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x410058	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x414630	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x410014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x40b1a0	228	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x40c7ac	200	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x40b084	148	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x4095d4	1604	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x40d5c0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x4000e0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x410014	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x40c700	172	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x40afc4	192	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x40b118	104	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x4145f8	4	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x4070a0	20	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x4145f0	4	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x40c378	216	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x410000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x410000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x409e70	52	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x40c5d8	32	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x408eec	20	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x407f70	98	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x408010	176	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x407fd4	34	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x407ff6	26	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x410000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x410000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_brk	.symtab	0x409fc4	68	FUNC	<unknown>	HIDDEN	2
__init_brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__length_dotted	.symtab	0x40c874	64	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x40b180	32	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x406d08	56	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x407af0	40	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x406f1c	24	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x406b24	172	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x406bd0	152	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x406d40	56	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x406d78	56	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x40d540	96	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x408e28	56	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x406e7c	160	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x40a040	56	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x406f34	56	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x407b6c	40	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x406f6c	52	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x407b94	40	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x407bbc	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x409ecc	160	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x4145f4	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x407010	20	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x407024	56	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x41005c	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x4145d4	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x4166c4	24	OBJECT	<unknown>	DEFAULT	10
__nameserver	.symtab	0x4166ec	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x4166f8	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x40b284	68	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x409c18	600	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x4145fc	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x410000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x410000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x408a30	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x408a30	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x408a30	14	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x408a30	14	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x408a30	14	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x408a3e	12	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x409ea4	40	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x40b2c8	612	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x410250	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x414604	4	OBJECT	<unknown>	HIDDEN	10
__sdivsi3_i4	.symtab	0x40d5a0	14	FUNC	<unknown>	HIDDEN	2
__searchdomain	.symtab	0x4166dc	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x4166fc	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x407d24	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x407d4c	42	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x407cf8	44	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x408d10	56	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x410274	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x40c988	80	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x40b680	148	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x40d458	180	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x40c9d8	264	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x40a424	28	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3812	.symtab	0x40ecbc	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x40cae0	48	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x40d50c	52	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40cb10	120	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x40cb88	176	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x40a4d4	52	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x410278	4	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x40a008	56	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x4089c8	104	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x408a94	80	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x408ae4	468	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x410248	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3_i4	.symtab	0x406af4	48	FUNC	<unknown>	HIDDEN	2
__xpg_strerror_r	.symtab	0x40c5f8	200	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_brk	.symtab	0x409f8c	56	FUNC	<unknown>	HIDDEN	2
_charpad	.symtab	0x40b714	80	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x409f6c	32	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x416700	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x416704	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x4103ac	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x416708	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x41460c	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x406c68	48	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40d600	12	FUNC	<unknown>	HIDDEN	3
_fixed_buffers	.symtab	0x41463c	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40b764	124	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x40cccc	1264	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x414610	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x400094	12	FUNC	<unknown>	HIDDEN	1
_load_inttype	.symtab	0x40cc38	92	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40bd24	120	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40bff0	902	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40bd9c	72	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40bde4	464	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40bfb4	60	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x408a3e	12	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x408a3e	12	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x416644	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x4001a0	30	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40a1a0	536	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x40a3b8	108	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x41027c	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x410280	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x40a580	224	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x414638	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x410298	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x414634	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x4102b4	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x40a440	148	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x4102b0	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x408650	324	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40cc94	56	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x40f0d8	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x408f00	260	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40b7e0	1348	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x4080c0	244	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x406c98	56	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x4043b8	368	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x403e10	1448	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x408624	24	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x408624	24	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x4038d4	1340	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x407684	24	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x4145ec	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2753	.symtab	0x414608	4	OBJECT	<unknown>	DEFAULT	10
bsd_signal	.symtab	0x407c40	184	FUNC	<unknown>	DEFAULT	2
buf.2577	.symtab	0x4143e4	16	OBJECT	<unknown>	DEFAULT	10
buf.4814	.symtab	0x4143f4	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x410044	4	OBJECT	<unknown>	DEFAULT	9
chdir	.symtab	0x406cd0	56	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x406d08	56	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x410020	4	OBJECT	<unknown>	DEFAULT	9
completed.2217	.symtab	0x4103ac	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x407af0	40	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x4015e0	772	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x406f1c	24	FUNC	<unknown>	DEFAULT	2
crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x401a18	232	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x410040	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x41001c	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x4145f8	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x41460c	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x408794	112	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x40fc48	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x40a078	272	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x406b24	172	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x406bd0	152	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x4003f4	200	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x40a660	320	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40c378	216	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40a508	120	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40a7a0	128	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x40fc34	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x40a188	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x406d40	56	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40c450	68	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400140	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x407e80	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40d354	28	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x40d354	28	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40d370	232	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x402104	1452	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x40c494	156	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x404528	20	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x401188	84	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x4004bc	680	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x40453c	152	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x400398	92	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x40c378	216	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x408d48	56	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x408d80	56	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x408db8	56	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x4077fc	72	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x407844	684	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x406d78	56	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x407b18	40	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x407b40	44	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x408df0	56	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x4103cc	4	OBJECT	<unknown>	DEFAULT	10
h.4813	.symtab	0x4145c0	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x414610	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x4076fa	46	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x407728	22	FUNC	<unknown>	DEFAULT	2
i.4082	.symtab	0x410048	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x40743c	192	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x4077d0	44	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x409508	204	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x4077b8	24	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x407740	120	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x40add8	492	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x40ac9c	316	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x40ab04	408	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x40aa68	156	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x4062ac	340	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x4001d4	180	FUNC	<unknown>	DEFAULT	2
initial_fa	.symtab	0x410060	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x408298	120	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x408574	176	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x406db0	148	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40a9d0	36	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x40705c	28	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x406e44	56	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/sh/sh4/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/sh/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x4018e4	308	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40d540	96	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x4103d8	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x406400	1780	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x4103c8	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x401c14	224	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x4011dc	156	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x402944	248	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x407d78	264	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x40d1bc	204	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x407140	636	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x409004	978	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40c530	36	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x40d288	204	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x4073c0	124	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x410164	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x41017c	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x414614	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x408e28	56	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1030	.symtab	0x4143e0	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x4076b4	48	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x4076e4	22	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x4103d0	8	OBJECT	<unknown>	DEFAULT	10
object.2270	.symtab	0x4103b0	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x406e7c	160	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x41663c	4	OBJECT	<unknown>	DEFAULT	10
p.2215	.symtab	0x410018	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x416640	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x40a040	56	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4023	.symtab	0x40f030	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x400bf0	1072	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x400898	104	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x400a58	408	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x400900	344	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x4045d4	7384	FUNC	<unknown>	DEFAULT	2
qual_chars.4029	.symtab	0x40f044	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x409ea4	40	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x4081b4	20	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x400288	272	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x4081c8	100	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x40ec38	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x408448	104	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x4101b0	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x40a820	152	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x406f34	56	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x407b6c	40	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401278	872	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x403484	1104	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x408cb8	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x406f6c	52	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x407b94	40	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x407bbc	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x406fa0	56	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x407bec	44	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40822c	108	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x408370	216	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x409ecc	160	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x407c40	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x408e60	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x408804	376	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x407c18	40	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x402824	288	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x401020	360	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4028	.symtab	0x40f058	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4022	.symtab	0x40f03c	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4025	.symtab	0x40f084	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4024	.symtab	0x40f09c	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4027	.symtab	0x40f068	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4026	.symtab	0x40f078	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x40b554	132	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x408310	96	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x408310	96	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x4084b0	196	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x41024c	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x41462c	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x410270	4	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0x403178	360	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x410268	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x41026c	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x40c6c0	64	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40743c	192	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x4074fc	34	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x4074fc	34	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x40751e	30	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x40a984	76	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40c5f8	200	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x40753c	136	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x40a8b8	154	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x4093d8	142	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40c554	132	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x4094e0	40	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x40a952	48	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x4075c4	192	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x40769c	24	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x409468	120	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40863c	20	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x40a9f4	116	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x401b00	276	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x406fd8	56	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x40b52c	40	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x407078	40	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400764	308	FUNC	<unknown>	DEFAULT	2
trivial	.symtab	0x406b18	0	NOTYPE	<unknown>	DEFAULT	2
type_codes	.symtab	0x40f0a4	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x40f0bc	12	OBJECT	<unknown>	DEFAULT	4
unknown.1072	.symtab	0x40f0c8	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x410194	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x410024	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x40897c	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x402a3c	1508	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x40b5d8	168	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x408eb4	56	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x407010	20	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40c8b4	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40c918	112	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40c8f8	32	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x407024	56	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3026	.symtab	0x40ece8	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-28T09:24:03.722456+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38686	93.123.85.205	7777	TCP
2024-10-28T09:24:04.869146+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38688	93.123.85.205	7777	TCP
2024-10-28T09:24:06.139003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38690	93.123.85.205	7777	TCP
2024-10-28T09:24:07.352582+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38692	93.123.85.205	7777	TCP
2024-10-28T09:24:08.519357+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38694	93.123.85.205	7777	TCP
2024-10-28T09:24:09.761524+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38696	93.123.85.205	7777	TCP
2024-10-28T09:24:10.970581+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38698	93.123.85.205	7777	TCP
2024-10-28T09:24:12.160346+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38700	93.123.85.205	7777	TCP
2024-10-28T09:24:13.363560+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38702	93.123.85.205	7777	TCP
2024-10-28T09:24:14.822446+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38704	93.123.85.205	7777	TCP
2024-10-28T09:24:16.025615+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38706	93.123.85.205	7777	TCP
2024-10-28T09:24:17.128216+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38708	93.123.85.205	7777	TCP
2024-10-28T09:24:18.239502+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38710	93.123.85.205	7777	TCP
2024-10-28T09:24:19.332663+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38712	93.123.85.205	7777	TCP
2024-10-28T09:24:20.535878+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38714	93.123.85.205	7777	TCP
2024-10-28T09:24:21.831932+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38716	93.123.85.205	7777	TCP
2024-10-28T09:24:23.045049+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38718	93.123.85.205	7777	TCP
2024-10-28T09:24:24.226541+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38720	93.123.85.205	7777	TCP
2024-10-28T09:24:25.424975+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38722	93.123.85.205	7777	TCP
2024-10-28T09:24:26.663499+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38724	93.123.85.205	7777	TCP
2024-10-28T09:24:27.835550+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38726	93.123.85.205	7777	TCP
2024-10-28T09:24:28.930101+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38728	93.123.85.205	7777	TCP
2024-10-28T09:24:30.133063+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38730	93.123.85.205	7777	TCP
2024-10-28T09:24:31.168028+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38732	93.123.85.205	7777	TCP
2024-10-28T09:24:32.365728+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38734	93.123.85.205	7777	TCP
2024-10-28T09:24:33.558954+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38736	93.123.85.205	7777	TCP
2024-10-28T09:24:34.826818+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38738	93.123.85.205	7777	TCP
2024-10-28T09:24:36.019440+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38740	93.123.85.205	7777	TCP
2024-10-28T09:24:37.159755+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38742	93.123.85.205	7777	TCP
2024-10-28T09:24:38.368921+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38744	93.123.85.205	7777	TCP
2024-10-28T09:24:39.571118+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38746	93.123.85.205	7777	TCP
2024-10-28T09:24:40.727637+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38748	93.123.85.205	7777	TCP
2024-10-28T09:24:41.863945+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38750	93.123.85.205	7777	TCP
2024-10-28T09:24:43.021799+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38752	93.123.85.205	7777	TCP
2024-10-28T09:24:44.163907+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38754	93.123.85.205	7777	TCP
2024-10-28T09:24:45.271060+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38756	93.123.85.205	7777	TCP
2024-10-28T09:24:46.453856+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38758	93.123.85.205	7777	TCP
2024-10-28T09:24:48.653298+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38760	93.123.85.205	7777	TCP
2024-10-28T09:24:49.844172+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38762	93.123.85.205	7777	TCP
2024-10-28T09:24:51.030741+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38764	93.123.85.205	7777	TCP
2024-10-28T09:24:52.261850+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38766	93.123.85.205	7777	TCP
2024-10-28T09:24:53.481909+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38768	93.123.85.205	7777	TCP
2024-10-28T09:24:54.618942+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38770	93.123.85.205	7777	TCP
2024-10-28T09:24:55.736398+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38772	93.123.85.205	7777	TCP
2024-10-28T09:24:56.958647+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38774	93.123.85.205	7777	TCP
2024-10-28T09:24:58.217115+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38776	93.123.85.205	7777	TCP
2024-10-28T09:24:59.429827+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38778	93.123.85.205	7777	TCP
2024-10-28T09:25:00.568715+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38780	93.123.85.205	7777	TCP
2024-10-28T09:25:01.736822+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38782	93.123.85.205	7777	TCP
2024-10-28T09:25:02.876602+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38784	93.123.85.205	7777	TCP
2024-10-28T09:25:04.105220+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38786	93.123.85.205	7777	TCP
2024-10-28T09:25:05.255559+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38788	93.123.85.205	7777	TCP
2024-10-28T09:25:06.433366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38790	93.123.85.205	7777	TCP
2024-10-28T09:25:08.663493+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38792	93.123.85.205	7777	TCP
2024-10-28T09:25:09.761078+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38794	93.123.85.205	7777	TCP
2024-10-28T09:25:10.937059+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38796	93.123.85.205	7777	TCP
2024-10-28T09:25:12.145147+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38798	93.123.85.205	7777	TCP
2024-10-28T09:25:13.310923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38800	93.123.85.205	7777	TCP
2024-10-28T09:25:14.518464+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38802	93.123.85.205	7777	TCP
2024-10-28T09:25:15.661559+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38804	93.123.85.205	7777	TCP
2024-10-28T09:25:16.850483+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38806	93.123.85.205	7777	TCP
2024-10-28T09:25:18.059924+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38808	93.123.85.205	7777	TCP
2024-10-28T09:25:19.161917+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38810	93.123.85.205	7777	TCP
2024-10-28T09:25:20.341477+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38812	93.123.85.205	7777	TCP
2024-10-28T09:25:21.454291+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38814	93.123.85.205	7777	TCP
2024-10-28T09:25:22.718653+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38816	93.123.85.205	7777	TCP
2024-10-28T09:25:23.871335+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38818	93.123.85.205	7777	TCP
2024-10-28T09:25:25.018252+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38820	93.123.85.205	7777	TCP
2024-10-28T09:25:26.134540+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38822	93.123.85.205	7777	TCP
2024-10-28T09:25:27.268344+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38824	93.123.85.205	7777	TCP
2024-10-28T09:25:28.468888+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38826	93.123.85.205	7777	TCP
2024-10-28T09:25:29.723333+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38828	93.123.85.205	7777	TCP
2024-10-28T09:25:30.919994+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38830	93.123.85.205	7777	TCP
2024-10-28T09:25:32.036223+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38832	93.123.85.205	7777	TCP
2024-10-28T09:25:33.263685+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38834	93.123.85.205	7777	TCP
2024-10-28T09:25:34.447409+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38836	93.123.85.205	7777	TCP
2024-10-28T09:25:35.620346+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38838	93.123.85.205	7777	TCP
2024-10-28T09:25:36.860120+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38840	93.123.85.205	7777	TCP
2024-10-28T09:25:38.047179+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38842	93.123.85.205	7777	TCP
2024-10-28T09:25:39.148819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38844	93.123.85.205	7777	TCP
2024-10-28T09:25:40.347636+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38846	93.123.85.205	7777	TCP
2024-10-28T09:25:41.468381+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38848	93.123.85.205	7777	TCP
2024-10-28T09:25:42.614652+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38850	93.123.85.205	7777	TCP
2024-10-28T09:25:43.760324+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38852	93.123.85.205	7777	TCP
2024-10-28T09:25:44.854642+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38854	93.123.85.205	7777	TCP
2024-10-28T09:25:46.050801+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38856	93.123.85.205	7777	TCP
2024-10-28T09:25:47.320547+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38858	93.123.85.205	7777	TCP
2024-10-28T09:25:49.006679+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38860	93.123.85.205	7777	TCP
2024-10-28T09:25:50.227433+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38862	93.123.85.205	7777	TCP
2024-10-28T09:25:51.416463+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38864	93.123.85.205	7777	TCP
2024-10-28T09:25:52.625971+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38866	93.123.85.205	7777	TCP
2024-10-28T09:25:53.748119+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38868	93.123.85.205	7777	TCP
2024-10-28T09:25:54.855664+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38870	93.123.85.205	7777	TCP
2024-10-28T09:25:56.118245+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38872	93.123.85.205	7777	TCP
2024-10-28T09:25:57.237060+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38874	93.123.85.205	7777	TCP
2024-10-28T09:25:58.432255+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38876	93.123.85.205	7777	TCP
2024-10-28T09:25:59.552715+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38878	93.123.85.205	7777	TCP
2024-10-28T09:26:00.723450+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38880	93.123.85.205	7777	TCP
2024-10-28T09:26:01.980079+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38882	93.123.85.205	7777	TCP
2024-10-28T09:26:04.138015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38884	93.123.85.205	7777	TCP
2024-10-28T09:26:05.324813+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38886	93.123.85.205	7777	TCP
2024-10-28T09:26:06.468750+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38888	93.123.85.205	7777	TCP
2024-10-28T09:26:07.619056+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38890	93.123.85.205	7777	TCP
2024-10-28T09:26:08.815256+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38892	93.123.85.205	7777	TCP
2024-10-28T09:26:10.026572+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38894	93.123.85.205	7777	TCP
2024-10-28T09:26:11.164943+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38896	93.123.85.205	7777	TCP
2024-10-28T09:26:12.445336+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38898	93.123.85.205	7777	TCP
2024-10-28T09:26:13.719429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38900	93.123.85.205	7777	TCP
2024-10-28T09:26:14.865113+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38902	93.123.85.205	7777	TCP
2024-10-28T09:26:16.016815+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38904	93.123.85.205	7777	TCP
2024-10-28T09:26:17.114190+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38906	93.123.85.205	7777	TCP
2024-10-28T09:26:18.251613+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38908	93.123.85.205	7777	TCP
2024-10-28T09:26:19.459569+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38910	93.123.85.205	7777	TCP
2024-10-28T09:26:20.643181+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38912	93.123.85.205	7777	TCP
2024-10-28T09:26:21.870558+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38914	93.123.85.205	7777	TCP
2024-10-28T09:26:23.116756+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38916	93.123.85.205	7777	TCP
2024-10-28T09:26:24.232150+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38918	93.123.85.205	7777	TCP
2024-10-28T09:26:25.432082+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38920	93.123.85.205	7777	TCP
2024-10-28T09:26:26.562952+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38922	93.123.85.205	7777	TCP
2024-10-28T09:26:27.670189+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38924	93.123.85.205	7777	TCP
2024-10-28T09:26:29.072429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38926	93.123.85.205	7777	TCP
2024-10-28T09:26:30.264160+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38928	93.123.85.205	7777	TCP
2024-10-28T09:26:31.430136+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38930	93.123.85.205	7777	TCP
2024-10-28T09:26:32.619300+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38932	93.123.85.205	7777	TCP
2024-10-28T09:26:33.768074+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38934	93.123.85.205	7777	TCP
2024-10-28T09:26:34.848904+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38936	93.123.85.205	7777	TCP
2024-10-28T09:26:36.023584+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38938	93.123.85.205	7777	TCP
2024-10-28T09:26:37.130348+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38940	93.123.85.205	7777	TCP
2024-10-28T09:26:38.258828+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38942	93.123.85.205	7777	TCP
2024-10-28T09:26:39.425017+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38944	93.123.85.205	7777	TCP
2024-10-28T09:26:40.552382+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38946	93.123.85.205	7777	TCP
2024-10-28T09:26:41.724517+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38948	93.123.85.205	7777	TCP
2024-10-28T09:26:42.865150+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38950	93.123.85.205	7777	TCP
2024-10-28T09:26:44.056570+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38952	93.123.85.205	7777	TCP
2024-10-28T09:26:45.324213+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38954	93.123.85.205	7777	TCP
2024-10-28T09:26:46.479752+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38956	93.123.85.205	7777	TCP
2024-10-28T09:26:47.644752+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38958	93.123.85.205	7777	TCP
2024-10-28T09:26:48.676055+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38960	93.123.85.205	7777	TCP
2024-10-28T09:26:49.879761+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38962	93.123.85.205	7777	TCP
2024-10-28T09:26:50.923160+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38964	93.123.85.205	7777	TCP
2024-10-28T09:26:52.074724+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38966	93.123.85.205	7777	TCP
2024-10-28T09:26:53.235563+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38968	93.123.85.205	7777	TCP
2024-10-28T09:26:54.432892+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38970	93.123.85.205	7777	TCP
2024-10-28T09:26:55.621482+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38972	93.123.85.205	7777	TCP
2024-10-28T09:26:56.732195+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38974	93.123.85.205	7777	TCP
2024-10-28T09:26:57.828755+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38976	93.123.85.205	7777	TCP
2024-10-28T09:26:59.022947+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38978	93.123.85.205	7777	TCP
2024-10-28T09:27:00.153493+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38980	93.123.85.205	7777	TCP
2024-10-28T09:27:01.340929+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38982	93.123.85.205	7777	TCP
2024-10-28T09:27:02.473747+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38984	93.123.85.205	7777	TCP
2024-10-28T09:27:03.629748+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38986	93.123.85.205	7777	TCP
2024-10-28T09:27:05.755683+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38988	93.123.85.205	7777	TCP
2024-10-28T09:27:06.963584+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38990	93.123.85.205	7777	TCP
2024-10-28T09:27:08.147365+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38992	93.123.85.205	7777	TCP
2024-10-28T09:27:09.359936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38994	93.123.85.205	7777	TCP
2024-10-28T09:27:10.551373+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38996	93.123.85.205	7777	TCP
2024-10-28T09:27:11.726344+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	38998	93.123.85.205	7777	TCP
2024-10-28T09:27:12.858122+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39000	93.123.85.205	7777	TCP
2024-10-28T09:27:14.032759+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39002	93.123.85.205	7777	TCP
2024-10-28T09:27:15.122683+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39004	93.123.85.205	7777	TCP
2024-10-28T09:27:16.242325+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39006	93.123.85.205	7777	TCP
2024-10-28T09:27:17.436741+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39008	93.123.85.205	7777	TCP
2024-10-28T09:27:18.565793+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39010	93.123.85.205	7777	TCP
2024-10-28T09:27:19.747292+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39012	93.123.85.205	7777	TCP
2024-10-28T09:27:20.951035+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39014	93.123.85.205	7777	TCP
2024-10-28T09:27:22.133332+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39016	93.123.85.205	7777	TCP
2024-10-28T09:27:23.553082+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39018	93.123.85.205	7777	TCP
2024-10-28T09:27:24.740516+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39020	93.123.85.205	7777	TCP
2024-10-28T09:27:25.929829+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39022	93.123.85.205	7777	TCP
2024-10-28T09:27:27.047975+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39024	93.123.85.205	7777	TCP
2024-10-28T09:27:28.238691+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39026	93.123.85.205	7777	TCP
2024-10-28T09:27:29.713304+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39028	93.123.85.205	7777	TCP
2024-10-28T09:27:31.010169+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39030	93.123.85.205	7777	TCP
2024-10-28T09:27:32.132641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39032	93.123.85.205	7777	TCP
2024-10-28T09:27:33.325992+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39034	93.123.85.205	7777	TCP
2024-10-28T09:27:34.557800+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39036	93.123.85.205	7777	TCP
2024-10-28T09:27:35.810210+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39038	93.123.85.205	7777	TCP
2024-10-28T09:27:36.934326+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39040	93.123.85.205	7777	TCP
2024-10-28T09:27:38.123291+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.15	39042	93.123.85.205	7777	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 09:24:03.715154886 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:03.720685005 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:03.720732927 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:03.722455978 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:03.727757931 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:04.623409033 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:04.623708010 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:04.854856968 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:04.855336905 CET	38686	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:04.860646963 CET	7777	38686	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:04.863451004 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:04.869009972 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:04.869121075 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:04.869146109 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:04.874470949 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:05.822062016 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:05.822236061 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:06.132721901 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:06.133007050 CET	38688	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:06.133527040 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:06.138540030 CET	7777	38688	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:06.138791084 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:06.138851881 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:06.139003038 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:06.145672083 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:07.120102882 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:07.120265007 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:07.345665932 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:07.345877886 CET	38690	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:07.346446037 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:07.351454020 CET	7777	38690	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:07.352420092 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:07.352509975 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:07.352581978 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:07.358012915 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:08.307805061 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:08.307970047 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:08.513281107 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:08.513463020 CET	38692	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:08.513938904 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:08.518851995 CET	7777	38692	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:08.519198895 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:08.519247055 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:08.519356966 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:08.524625063 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:09.539089918 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:09.539325953 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:09.755232096 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:09.755450964 CET	38694	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:09.755985975 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:09.760868073 CET	7777	38694	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:09.761307955 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:09.761428118 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:09.761523962 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:09.766843081 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:10.735912085 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:10.736206055 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:10.963965893 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:10.964186907 CET	38696	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:10.964735985 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:10.969758034 CET	7777	38696	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:10.970288038 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:10.970453024 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:10.970581055 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:10.976062059 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:11.922306061 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:11.922456980 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:12.154195070 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:12.154375076 CET	38698	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:12.154860020 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:12.159785986 CET	7777	38698	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:12.160249949 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:12.160300970 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:12.160346031 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:12.165649891 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:13.136569977 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:13.136696100 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:13.357311010 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:13.357546091 CET	38700	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:13.358134031 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:13.362937927 CET	7777	38700	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:13.363430023 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:13.363492966 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:13.363559961 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:13.368824005 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.316093922 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.316210032 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.584239960 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.584414959 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.584944010 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.794930935 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.821098089 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.821396112 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.822037935 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.822161913 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.822218895 CET	7777	38702	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:14.822289944 CET	38702	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.822446108 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.822446108 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:14.827857971 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:15.820492983 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:15.820744038 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:16.019165039 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:16.019484043 CET	38704	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:16.020061970 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:16.025063992 CET	7777	38704	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:16.025446892 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:16.025531054 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:16.025614977 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:16.030996084 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:16.919878006 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:16.920171022 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:17.120780945 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:17.121098042 CET	38706	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:17.122562885 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:17.126415968 CET	7777	38706	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:17.128057957 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:17.128123999 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:17.128216028 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:17.133692980 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:18.009819984 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:18.009985924 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:18.233448029 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:18.233587027 CET	38708	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:18.234081984 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:18.239150047 CET	7777	38708	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:18.239387989 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:18.239435911 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:18.239501953 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:18.244893074 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:19.122162104 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:19.122288942 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:19.326236963 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:19.326391935 CET	38710	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:19.327167988 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:19.331763983 CET	7777	38710	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:19.332511902 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:19.332612991 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:19.332663059 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:19.338216066 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:20.321146965 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:20.321330070 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:20.529463053 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:20.529813051 CET	38712	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:20.530361891 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:20.535159111 CET	7777	38712	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:20.535712004 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:20.535773993 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:20.535877943 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:20.541238070 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:21.613547087 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:21.613711119 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:21.824784994 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:21.825069904 CET	38714	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:21.826231003 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:21.830579996 CET	7777	38714	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:21.831815004 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:21.831887960 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:21.831932068 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:21.837469101 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:22.807157993 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:22.807223082 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:23.038774967 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:23.038913012 CET	38716	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:23.039622068 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:23.044280052 CET	7777	38716	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:23.044944048 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:23.044996023 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:23.045048952 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:23.050374985 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:23.942600965 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:23.942783117 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:24.219508886 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:24.219819069 CET	38718	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:24.220760107 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:24.225332975 CET	7777	38718	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:24.226247072 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:24.226425886 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:24.226541042 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:24.232386112 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:25.222647905 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:25.222893000 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:25.418359041 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:25.418590069 CET	38720	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:25.419368982 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:25.424063921 CET	7777	38720	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:25.424846888 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:25.424926043 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:25.424974918 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:25.430464983 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:26.426698923 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:26.426841021 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:26.654723883 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:26.654906034 CET	38722	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:26.655518055 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:26.663183928 CET	7777	38722	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:26.663306952 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:26.663376093 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:26.663499117 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:26.671452999 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:27.624455929 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:27.624655962 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:27.828943968 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:27.829170942 CET	38724	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:27.830040932 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:27.834564924 CET	7777	38724	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:27.835356951 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:27.835421085 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:27.835550070 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:27.840887070 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:28.719346046 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:28.719546080 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:28.923496962 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:28.923717976 CET	38726	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:28.924609900 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:28.929090977 CET	7777	38726	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:28.929877043 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:28.929995060 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:28.930100918 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:28.935369015 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:29.914061069 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:29.914237976 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:30.126116037 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:30.126425982 CET	38728	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:30.127346039 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:30.132085085 CET	7777	38728	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:30.132854939 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:30.132944107 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:30.133063078 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:30.138370037 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:30.962414026 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:30.962584019 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:31.161341906 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:31.161554098 CET	38730	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:31.162477016 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:31.166973114 CET	7777	38730	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:31.167848110 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:31.167922020 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:31.168028116 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:31.173270941 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:32.137551069 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:32.137664080 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:32.358810902 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:32.359025002 CET	38732	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:32.360030890 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:32.364737988 CET	7777	38732	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:32.365494013 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:32.365562916 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:32.365727901 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:32.371225119 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:33.334280014 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:33.334415913 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:33.552573919 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:33.552727938 CET	38734	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:33.553483963 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:33.558233023 CET	7777	38734	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:33.558799028 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:33.558886051 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:33.558954000 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:33.564232111 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:34.560342073 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:34.560506105 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:34.820146084 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:34.820417881 CET	38736	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:34.821403980 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:34.825788021 CET	7777	38736	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:34.826678038 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:34.826773882 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:34.826817989 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:34.832103968 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:35.761415005 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:35.761591911 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:36.012753963 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:36.012948990 CET	38738	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:36.013818026 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:36.018533945 CET	7777	38738	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:36.019251108 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:36.019345045 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:36.019439936 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:36.024892092 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:36.949866056 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:36.950145006 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:37.152921915 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:37.153181076 CET	38740	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:37.154149055 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:37.158534050 CET	7777	38740	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:37.159555912 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:37.159626961 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:37.159754992 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:37.165052891 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:38.136051893 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:38.136183023 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:38.362461090 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:38.362657070 CET	38742	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:38.363392115 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:38.367932081 CET	7777	38742	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:38.368716002 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:38.368803978 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:38.368921041 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:38.374162912 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:39.519017935 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:39.519203901 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:39.523789883 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:39.523869038 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:39.564588070 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:39.564768076 CET	38744	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:39.565527916 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:39.570265055 CET	7777	38744	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:39.570916891 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:39.571005106 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:39.571118116 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:39.576436996 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:40.454562902 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:40.454787016 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:40.721321106 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:40.721566916 CET	38746	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:40.722110033 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:40.727005959 CET	7777	38746	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:40.727521896 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:40.727588892 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:40.727637053 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:40.732984066 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:41.626832008 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:41.627074957 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:41.857520103 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:41.857919931 CET	38748	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:41.858536005 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:41.863394976 CET	7777	38748	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:41.863828897 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:41.863884926 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:41.863945007 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:41.869364977 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:42.819443941 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:42.819686890 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:43.014667988 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:43.014823914 CET	38750	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:43.015500069 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:43.020965099 CET	7777	38750	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:43.021619081 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:43.021688938 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:43.021799088 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:43.027750015 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:43.928873062 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:43.929084063 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:44.157721043 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:44.157918930 CET	38752	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:44.158406019 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:44.163511038 CET	7777	38752	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:44.163727999 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:44.163793087 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:44.163907051 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:44.169246912 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:45.059226990 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:45.059405088 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:45.264833927 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:45.264997959 CET	38754	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:45.265546083 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:45.270375013 CET	7777	38754	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:45.270900011 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:45.270998001 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:45.271059990 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:45.276382923 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:46.224337101 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:46.224550009 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:46.447407961 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:46.447654963 CET	38756	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:46.448380947 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:46.453001022 CET	7777	38756	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:46.453679085 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:46.453752041 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:46.453855991 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:46.459070921 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:47.414683104 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:47.414827108 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.642153025 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:48.642221928 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:48.642359018 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.642359018 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.642389059 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:48.642472029 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.642905951 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:48.642995119 CET	38758	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.643338919 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.647732973 CET	7777	38758	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:48.653177977 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:48.653233051 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.653297901 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:48.658865929 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:49.617816925 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:49.617991924 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:49.837618113 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:49.837938070 CET	38760	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:49.838651896 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:49.843373060 CET	7777	38760	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:49.843997955 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:49.844060898 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:49.844172001 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:49.849438906 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:50.819638014 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:50.819803953 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:51.024358034 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:51.024506092 CET	38762	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:51.025208950 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:51.029922009 CET	7777	38762	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:51.030561924 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:51.030675888 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:51.030740976 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:51.036030054 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:52.017025948 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:52.017280102 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:52.254859924 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:52.255167007 CET	38764	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:52.255913973 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:52.261174917 CET	7777	38764	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:52.261703968 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:52.261792898 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:52.261850119 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:52.267954111 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:53.254297972 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:53.254451990 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:53.475086927 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:53.475317955 CET	38766	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:53.476259947 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:53.480725050 CET	7777	38766	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:53.481561899 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:53.481647968 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:53.481909037 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:53.487199068 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:54.418800116 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:54.419075966 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:54.612271070 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:54.612447023 CET	38768	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:54.613321066 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:54.617801905 CET	7777	38768	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:54.618647099 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:54.618761063 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:54.618942022 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:54.624265909 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:55.508291006 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:55.508440018 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:55.729846954 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:55.730094910 CET	38770	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:55.730885029 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:55.735415936 CET	7777	38770	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:55.736192942 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:55.736277103 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:55.736397982 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:55.741625071 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:56.718377113 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:56.718512058 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:56.951939106 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:56.952158928 CET	38772	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:56.953085899 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:56.957546949 CET	7777	38772	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:56.958453894 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:56.958525896 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:56.958647013 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:56.963937998 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:57.925081015 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:57.925301075 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:58.210298061 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:58.210519075 CET	38774	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:58.211518049 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:58.215902090 CET	7777	38774	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:58.216902971 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:58.216983080 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:58.217114925 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:58.222601891 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:59.152267933 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:59.152426958 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:59.422983885 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:59.423343897 CET	38776	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:59.424263954 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:59.428657055 CET	7777	38776	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:59.429626942 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:24:59.429697037 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:59.429826975 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:24:59.435075045 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:00.325889111 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:00.326030970 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:00.561966896 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:00.562206984 CET	38778	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:00.563208103 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:00.567720890 CET	7777	38778	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:00.568521976 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:00.568613052 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:00.568715096 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:00.574255943 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:01.522439957 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:01.522550106 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:01.730068922 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:01.730374098 CET	38780	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:01.731369972 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:01.735657930 CET	7777	38780	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:01.736640930 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:01.736701012 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:01.736821890 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:01.742139101 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:02.638927937 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:02.639055967 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:02.869823933 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:02.870066881 CET	38782	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:02.871005058 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:02.875431061 CET	7777	38782	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:02.876421928 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:02.876498938 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:02.876601934 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:02.881901026 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:03.824544907 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:03.824666977 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:04.098983049 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:04.099138021 CET	38784	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:04.099739075 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:04.104873896 CET	7777	38784	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:04.105108976 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:04.105163097 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:04.105220079 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:04.110532045 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:05.020791054 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:05.021008968 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:05.249088049 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:05.249253035 CET	38786	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:05.250040054 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:05.254659891 CET	7777	38786	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:05.255393982 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:05.255513906 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:05.255558968 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:05.261240005 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:06.220164061 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:06.220525026 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:06.426558018 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:06.426825047 CET	38788	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:06.427752972 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:06.432224989 CET	7777	38788	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:06.433190107 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:06.433258057 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:06.433366060 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:06.438656092 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:08.408910990 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:08.409228086 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:08.656948090 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:08.657135963 CET	38790	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:08.657929897 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:08.662440062 CET	7777	38790	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:08.663364887 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:08.663419008 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:08.663492918 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:08.668778896 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:09.754271030 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:09.754525900 CET	38792	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:09.755525112 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:09.759939909 CET	7777	38792	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:09.760926008 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:09.760991096 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:09.761077881 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:09.766527891 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:10.705240965 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:10.705432892 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:10.930367947 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:10.930617094 CET	38794	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:10.931363106 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:10.936270952 CET	7777	38794	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:10.936825037 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:10.936970949 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:10.937058926 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:10.942466974 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:11.917586088 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:11.917695045 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:12.138766050 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:12.138976097 CET	38796	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:12.139605999 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:12.144433975 CET	7777	38796	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:12.144992113 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:12.145091057 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:12.145147085 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:12.150449038 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:13.052511930 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:13.052675009 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:13.304171085 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:13.304392099 CET	38798	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:13.305309057 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:13.309951067 CET	7777	38798	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:13.310787916 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:13.310870886 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:13.310923100 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:13.316304922 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:14.233242989 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:14.233542919 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:14.511382103 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:14.511631012 CET	38800	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:14.512553930 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:14.517373085 CET	7777	38800	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:14.518280983 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:14.518348932 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:14.518464088 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:14.524914026 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:15.427486897 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:15.427683115 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:15.654727936 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:15.655014992 CET	38802	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:15.655710936 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:15.660435915 CET	7777	38802	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:15.661349058 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:15.661505938 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:15.661559105 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:15.666968107 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:16.660159111 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:16.660337925 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:16.844005108 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:16.844197035 CET	38804	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:16.845041037 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:16.849632025 CET	7777	38804	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:16.850357056 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:16.850425005 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:16.850482941 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:16.855844975 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:17.822613955 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:17.822792053 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:18.052928925 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:18.053314924 CET	38806	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:18.054325104 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:18.058681965 CET	7777	38806	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:18.059698105 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:18.059783936 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:18.059923887 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:18.065315008 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:18.947716951 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:18.948014021 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:19.155057907 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:19.155343056 CET	38808	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:19.156307936 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:19.160862923 CET	7777	38808	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:19.161669970 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:19.161792994 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:19.161916971 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:19.167190075 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:20.053910971 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:20.054210901 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:20.334702015 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:20.334944963 CET	38810	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:20.335800886 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:20.340281010 CET	7777	38810	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:20.341234922 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:20.341384888 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:20.341476917 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:20.347182035 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:21.246222019 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:21.246372938 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:21.447618008 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:21.448009968 CET	38812	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:21.448787928 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:21.453432083 CET	7777	38812	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:21.454103947 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:21.454179049 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:21.454291105 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:21.459688902 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:22.441147089 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:22.441323042 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:22.712039948 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:22.712408066 CET	38814	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:22.713027000 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:22.717796087 CET	7777	38814	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:22.718451023 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:22.718566895 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:22.718652964 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:22.724016905 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:23.655014038 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:23.655232906 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:23.864212036 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:23.864607096 CET	38816	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:23.865736008 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:23.869982958 CET	7777	38816	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:23.871069908 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:23.871167898 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:23.871335030 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:23.876687050 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:24.753093958 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:24.753365993 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:25.011292934 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:25.011704922 CET	38818	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:25.012624979 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:25.017273903 CET	7777	38818	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:25.018111944 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:25.018182993 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:25.018251896 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:25.023788929 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:25.863975048 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:25.864279985 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:26.127779007 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:26.128063917 CET	38820	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:26.128895044 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:26.133560896 CET	7777	38820	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:26.134337902 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:26.134426117 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:26.134540081 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:26.139959097 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:27.038106918 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:27.038295984 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:27.261306047 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:27.261584997 CET	38822	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:27.262619972 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:27.267074108 CET	7777	38822	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:27.268126011 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:27.268251896 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:27.268343925 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:27.273605108 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:28.236674070 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:28.236762047 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:28.462217093 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:28.462475061 CET	38824	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:28.463326931 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:28.467935085 CET	7777	38824	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:28.468744993 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:28.468811035 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:28.468888044 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:28.474261045 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:29.433876038 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:29.434144020 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:29.716344118 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:29.716618061 CET	38826	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:29.717784882 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:29.721944094 CET	7777	38826	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:29.723143101 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:29.723223925 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:29.723332882 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:29.728599072 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:30.889579058 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:30.889729977 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:30.889904022 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:30.889904022 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:30.913527012 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:30.913700104 CET	38828	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:30.914494991 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:30.919152021 CET	7777	38828	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:30.919874907 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:30.919929028 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:30.919994116 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:30.925667048 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:31.813890934 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:31.814055920 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:32.029664993 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:32.029817104 CET	38830	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:32.030719042 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:32.035293102 CET	7777	38830	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:32.036056042 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:32.036164045 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:32.036222935 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:32.041527987 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:33.032138109 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:33.032254934 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:33.256851912 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:33.257131100 CET	38832	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:33.258109093 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:33.262648106 CET	7777	38832	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:33.263518095 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:33.263613939 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:33.263684988 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:33.269037962 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:34.216995955 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:34.217144012 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:34.440291882 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:34.440455914 CET	38834	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:34.441206932 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:34.446373940 CET	7777	38834	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:34.447171926 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:34.447262049 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:34.447408915 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:34.453691959 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:35.359384060 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:35.359702110 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:35.613671064 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:35.613840103 CET	38836	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:35.614701033 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:35.619262934 CET	7777	38836	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:35.620198011 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:35.620259047 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:35.620346069 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:35.625694036 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:36.617808104 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:36.617938995 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:36.853260994 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:36.853432894 CET	38838	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:36.854569912 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:36.858817101 CET	7777	38838	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:36.859945059 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:36.860045910 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:36.860120058 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:36.865483046 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:37.828875065 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:37.829109907 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:38.040452003 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:38.040677071 CET	38840	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:38.041563034 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:38.046243906 CET	7777	38840	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:38.047020912 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:38.047127962 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:38.047178984 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:38.052774906 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:38.957492113 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:38.957648993 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:39.141869068 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:39.142236948 CET	38842	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:39.143243074 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:39.147747993 CET	7777	38842	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:39.148633003 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:39.148705959 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:39.148818970 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:39.154123068 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:40.110774040 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:40.111104012 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:40.339931965 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:40.340358973 CET	38844	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:40.341460943 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:40.346364021 CET	7777	38844	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:40.347435951 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:40.347507954 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:40.347635984 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:40.353575945 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:41.246983051 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:41.247344971 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:41.461308002 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:41.461554050 CET	38846	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:41.462635994 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:41.467070103 CET	7777	38846	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:41.468153000 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:41.468283892 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:41.468380928 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:41.473754883 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:42.428112030 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:42.428416967 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:42.607434988 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:42.607845068 CET	38848	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:42.608993053 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:42.613465071 CET	7777	38848	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:42.614435911 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:42.614542961 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:42.614651918 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:42.620148897 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:43.547949076 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:43.548207045 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:43.753236055 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:43.753556013 CET	38850	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:43.754440069 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:43.759172916 CET	7777	38850	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:43.759810925 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:43.760114908 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:43.760324001 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:43.765785933 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:44.659666061 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:44.659790993 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:44.847914934 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:44.848133087 CET	38852	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:44.848995924 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:44.853853941 CET	7777	38852	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:44.854465008 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:44.854542017 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:44.854641914 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:44.859941959 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:45.826109886 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:45.826436996 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:46.043097973 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:46.043421030 CET	38854	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:46.045130968 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:46.048964024 CET	7777	38854	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:46.050575972 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:46.050678015 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:46.050801039 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:46.056219101 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:47.063399076 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:47.063545942 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:47.313740015 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:47.314074993 CET	38856	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:47.314971924 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:47.319459915 CET	7777	38856	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:47.320346117 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:47.320441961 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:47.320547104 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:47.325818062 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:48.995590925 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:48.995800972 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:48.995831013 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:48.995899916 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:48.995944977 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:48.995961905 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:48.995996952 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:48.996072054 CET	38858	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:48.996804953 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:49.001691103 CET	7777	38858	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:49.006541967 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:49.006606102 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:49.006679058 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:49.012115002 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:49.919991016 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:49.920285940 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:50.220969915 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:50.221177101 CET	38860	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:50.221973896 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:50.226561069 CET	7777	38860	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:50.227309942 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:50.227365017 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:50.227432966 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:50.232707024 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:51.157365084 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:51.157586098 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:51.410026073 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:51.410192013 CET	38862	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:51.411040068 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:51.415473938 CET	7777	38862	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:51.416301012 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:51.416434050 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:51.416462898 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:51.421731949 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:52.418760061 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:52.418924093 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:52.619083881 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:52.619460106 CET	38864	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:52.620448112 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:52.624845028 CET	7777	38864	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:52.625781059 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:52.625874043 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:52.625971079 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:52.631278038 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:53.508070946 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:53.508364916 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:53.741157055 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:53.741429090 CET	38866	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:53.742491961 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:53.746891975 CET	7777	38866	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:53.747900009 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:53.747997999 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:53.748119116 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:53.753449917 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:54.662830114 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:54.663028002 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:54.849206924 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:54.849349976 CET	38868	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:54.850132942 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:54.854768038 CET	7777	38868	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:54.855541945 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:54.855618000 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:54.855664015 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:54.862421036 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:55.865541935 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:55.865737915 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:56.111572027 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:56.111921072 CET	38870	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:56.112690926 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:56.117355108 CET	7777	38870	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:56.118096113 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:56.118244886 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:56.118244886 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:56.123806953 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:57.019013882 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:57.019243002 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:57.230463028 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:57.230643988 CET	38872	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:57.231538057 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:57.236037016 CET	7777	38872	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:57.236947060 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:57.237000942 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:57.237060070 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:57.242399931 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:58.224179029 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:58.224330902 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:58.425214052 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:58.425398111 CET	38874	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:58.426276922 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:58.431349039 CET	7777	38874	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:58.432080984 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:58.432178020 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:58.432255030 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:58.438906908 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:59.330226898 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:59.330374002 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:59.546284914 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:59.546458960 CET	38876	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:59.547059059 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:59.551971912 CET	7777	38876	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:59.552557945 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:25:59.552620888 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:59.552715063 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:25:59.558032990 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:00.511326075 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:00.511456966 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:00.716810942 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:00.716965914 CET	38878	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:00.717852116 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:00.722799063 CET	7777	38878	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:00.723248959 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:00.723331928 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:00.723449945 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:00.729335070 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:01.663336992 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:01.663516998 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:01.973591089 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:01.973769903 CET	38880	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:01.974441051 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:01.979309082 CET	7777	38880	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:01.979927063 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:01.980015039 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:01.980078936 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:01.985419035 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:03.930974007 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:03.931130886 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:04.131762981 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:04.132055998 CET	38882	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:04.132606030 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:04.137500048 CET	7777	38882	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:04.137872934 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:04.137957096 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:04.138015032 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:04.143373013 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:05.049055099 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:05.049319029 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:05.318166018 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:05.318471909 CET	38884	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:05.319331884 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:05.323870897 CET	7777	38884	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:05.324656963 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:05.324812889 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:05.324812889 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:05.330307961 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:06.232002020 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:06.232194901 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:06.462323904 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:06.462507963 CET	38886	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:06.463278055 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:06.467884064 CET	7777	38886	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:06.468611002 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:06.468694925 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:06.468750000 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:06.474083900 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:07.353173018 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:07.353492022 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:07.612445116 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:07.612895966 CET	38888	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:07.613552094 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:07.618280888 CET	7777	38888	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:07.618881941 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:07.618948936 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:07.619055986 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:07.624274015 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:08.530389071 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:08.530606031 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:08.808269978 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:08.808593035 CET	38890	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:08.809708118 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:08.814002991 CET	7777	38890	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:08.815032959 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:08.815157890 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:08.815256119 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:08.820523024 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:09.818948030 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:09.819211960 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:10.020039082 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:10.020265102 CET	38892	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:10.020874023 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:10.025983095 CET	7777	38892	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:10.026345015 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:10.026403904 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:10.026571989 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:10.031930923 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:10.955260038 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:10.955471039 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:11.158020020 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:11.158221006 CET	38894	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:11.159452915 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:11.163645983 CET	7777	38894	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:11.164818048 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:11.164880991 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:11.164942980 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:11.170253992 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:12.214195013 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:12.214303017 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:12.438710928 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:12.438946009 CET	38896	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:12.439785957 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:12.444448948 CET	7777	38896	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:12.445154905 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:12.445216894 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:12.445336103 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:12.450722933 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:13.419960022 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:13.420177937 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:13.712678909 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:13.712873936 CET	38898	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:13.713793039 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:13.718333960 CET	7777	38898	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:13.719223976 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:13.719337940 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:13.719429016 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:13.724706888 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:14.643933058 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:14.644114971 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:14.858203888 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:14.858481884 CET	38900	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:14.859477043 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:14.863864899 CET	7777	38900	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:14.864886999 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:14.864969969 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:14.865113020 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:14.870348930 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:15.758255005 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:15.758450985 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:16.009810925 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:16.010159016 CET	38902	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:16.011220932 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:16.015608072 CET	7777	38902	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:16.016664982 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:16.016761065 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:16.016814947 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:16.022111893 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:16.854774952 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:16.855098963 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:17.106517076 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:17.106806993 CET	38904	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:17.108614922 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:17.112317085 CET	7777	38904	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:17.114033937 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:17.114089966 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:17.114190102 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:17.119560957 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:18.052329063 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:18.052573919 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:18.244916916 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:18.245140076 CET	38906	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:18.245999098 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:18.250392914 CET	7777	38906	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:18.251364946 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:18.251507044 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:18.251612902 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:18.256877899 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:19.217752934 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:19.217992067 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:19.452555895 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:19.452837944 CET	38908	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:19.454015970 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:19.458256006 CET	7777	38908	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:19.459350109 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:19.459438086 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:19.459568977 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:19.464911938 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:20.416579008 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:20.416726112 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:20.636162996 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:20.636385918 CET	38910	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:20.637675047 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:20.641834974 CET	7777	38910	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:20.643069029 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:20.643131971 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:20.643181086 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:20.648555994 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:21.623883963 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:21.624109983 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:21.863615036 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:21.863902092 CET	38912	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:21.865012884 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:21.869492054 CET	7777	38912	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:21.870381117 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:21.870445967 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:21.870558023 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:21.875793934 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:22.840749979 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:22.840951920 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:23.109802961 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:23.109988928 CET	38914	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:23.111170053 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:23.115274906 CET	7777	38914	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:23.116523981 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:23.116667986 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:23.116755962 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:23.122052908 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:24.014142036 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:24.014308929 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:24.225810051 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:24.225964069 CET	38916	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:24.226746082 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:24.231385946 CET	7777	38916	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:24.232023001 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:24.232084036 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:24.232150078 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:24.237441063 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:25.149065971 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:25.149262905 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:25.425187111 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:25.425403118 CET	38918	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:25.426469088 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:25.430744886 CET	7777	38918	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:25.431842089 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:25.432027102 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:25.432081938 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:25.437434912 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:26.359493971 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:26.359766006 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:26.556129932 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:26.556570053 CET	38920	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:26.557363033 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:26.562052965 CET	7777	38920	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:26.562707901 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:26.562905073 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:26.562952042 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:26.568317890 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:27.453208923 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:27.453375101 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:27.663039923 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:27.663338900 CET	38922	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:27.664554119 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:27.668838024 CET	7777	38922	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:27.669961929 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:27.670052052 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:27.670188904 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:27.675409079 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:28.665515900 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:28.665676117 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:29.063143015 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:29.063364029 CET	38924	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:29.064214945 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:29.072211027 CET	7777	38924	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:29.072253942 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:29.072324038 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:29.072428942 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:29.077759981 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:30.043945074 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:30.044061899 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:30.257400036 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:30.257570028 CET	38926	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:30.258661032 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:30.262849092 CET	7777	38926	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:30.264018059 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:30.264111996 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:30.264159918 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:30.269644976 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:31.209094048 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:31.209230900 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:31.423731089 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:31.423943043 CET	38928	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:31.424613953 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:31.429451942 CET	7777	38928	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:31.429995060 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:31.430052042 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:31.430135965 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:31.435597897 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:32.328280926 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:32.328406096 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:32.612145901 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:32.612448931 CET	38930	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:32.613766909 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:32.617923975 CET	7777	38930	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:32.619112968 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:32.619199038 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:32.619299889 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:32.624635935 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:33.552079916 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:33.552273989 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:33.761547089 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:33.761738062 CET	38932	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:33.762610912 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:33.767329931 CET	7777	38932	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:33.767951965 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:33.768008947 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:33.768074036 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:33.773444891 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:34.663846016 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:34.664005041 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:34.841844082 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:34.841981888 CET	38934	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:34.843343019 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:34.847325087 CET	7777	38934	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:34.848690033 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:34.848782063 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:34.848903894 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:34.854161024 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:35.806232929 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:35.806436062 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:36.016603947 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:36.016905069 CET	38936	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:36.018018961 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:36.022361994 CET	7777	38936	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:36.023454905 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:36.023549080 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:36.023583889 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:36.028958082 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:36.912579060 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:36.912832975 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:37.123284101 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:37.123584986 CET	38938	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:37.124742031 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:37.129028082 CET	7777	38938	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:37.130140066 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:37.130233049 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:37.130347967 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:37.135595083 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:38.027354002 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:38.027519941 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:38.252180099 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:38.252398014 CET	38940	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:38.253343105 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:38.257837057 CET	7777	38940	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:38.258702040 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:38.258763075 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:38.258827925 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:38.264329910 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:39.156084061 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:39.156286955 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:39.418636084 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:39.418930054 CET	38942	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:39.419552088 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:39.424320936 CET	7777	38942	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:39.424915075 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:39.424973965 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:39.425017118 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:39.430383921 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:40.351861000 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:40.352039099 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:40.545877934 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:40.546113968 CET	38944	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:40.546838999 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:40.551580906 CET	7777	38944	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:40.552244902 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:40.552325010 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:40.552381992 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:40.557780981 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:41.457760096 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:41.457879066 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:41.718094110 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:41.718277931 CET	38946	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:41.718875885 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:41.723887920 CET	7777	38946	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:41.724344015 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:41.724477053 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:41.724517107 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:41.730003119 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:42.640959978 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:42.641087055 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:42.858608961 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:42.858783007 CET	38948	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:42.859678030 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:42.864392996 CET	7777	38948	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:42.865036964 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:42.865098000 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:42.865149975 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:42.870445013 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:43.812938929 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:43.813240051 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:44.049880028 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:44.050054073 CET	38950	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:44.050800085 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:44.055464983 CET	7777	38950	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:44.056420088 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:44.056509018 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:44.056570053 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:44.061913013 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:45.011917114 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:45.012046099 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:45.317555904 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:45.317704916 CET	38952	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:45.318619967 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:45.323167086 CET	7777	38952	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:45.324013948 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:45.324085951 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:45.324213028 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:45.329565048 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:46.241823912 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:46.241998911 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:46.473495960 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:46.473531961 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:46.473618984 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:46.473668098 CET	38954	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:46.474248886 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:46.479022026 CET	7777	38954	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:46.479546070 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:46.479641914 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:46.479752064 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:46.485018015 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:47.415105104 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:47.415222883 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:47.638581038 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:47.638732910 CET	38956	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:47.639307022 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:47.644143105 CET	7777	38956	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:47.644642115 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:47.644685984 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:47.644752026 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:47.650043011 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:48.456470966 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:48.456545115 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:48.669924974 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:48.670012951 CET	38958	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:48.670466900 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:48.675584078 CET	7777	38958	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:48.675936937 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:48.675988913 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:48.676054955 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:48.681535959 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:49.605690002 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:49.605756998 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:49.815279961 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:49.815481901 CET	38960	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:49.820795059 CET	7777	38960	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:49.835680962 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:49.841142893 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:49.841212034 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:49.879760981 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:49.885160923 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:50.718138933 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:50.718303919 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:50.916452885 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:50.916697025 CET	38962	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:50.917486906 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:50.922120094 CET	7777	38962	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:50.922995090 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:50.923158884 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:50.923160076 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:50.928792000 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:51.823194981 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:51.823380947 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:52.068517923 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:52.068701982 CET	38964	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:52.069319010 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:52.074145079 CET	7777	38964	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:52.074635983 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:52.074687958 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:52.074723959 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:52.080143929 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:53.013075113 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:53.013245106 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:53.229294062 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:53.229465961 CET	38966	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:53.230071068 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:53.234812975 CET	7777	38966	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:53.235392094 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:53.235460043 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:53.235563040 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:53.240892887 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:54.210371971 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:54.211353064 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:54.426055908 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:54.426390886 CET	38968	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:54.427251101 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:54.431747913 CET	7777	38968	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:54.432770014 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:54.432892084 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:54.432892084 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:54.438337088 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:55.332001925 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:55.332277060 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:55.615148067 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:55.615468979 CET	38970	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:55.616050005 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:55.620975018 CET	7777	38970	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:55.621344090 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:55.621412039 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:55.621481895 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:55.626806974 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:56.513544083 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:56.513746977 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:56.725598097 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:56.725831032 CET	38972	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:56.726650000 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:56.731399059 CET	7777	38972	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:56.732038021 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:56.732103109 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:56.732194901 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:56.737550020 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:57.617301941 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:57.617466927 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:57.822010040 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:57.822244883 CET	38974	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:57.823241949 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:57.827785015 CET	7777	38974	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:57.828577042 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:57.828707933 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:57.828754902 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:57.834088087 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:58.751667976 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:58.751981020 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:59.016695976 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:59.016911983 CET	38976	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:59.017537117 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:59.022449017 CET	7777	38976	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:59.022833109 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:59.022883892 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:59.022947073 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:26:59.028274059 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:59.930577040 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:26:59.930780888 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:00.147069931 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:00.147278070 CET	38978	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:00.147789001 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:00.152766943 CET	7777	38978	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:00.153352976 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:00.153433084 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:00.153492928 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:00.159189939 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:01.107358932 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:01.107511997 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:01.334084034 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:01.334389925 CET	38980	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:01.335341930 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:01.339919090 CET	7777	38980	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:01.340730906 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:01.340821028 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:01.340929031 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:01.346234083 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:02.262063026 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:02.262371063 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:02.464901924 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:02.465127945 CET	38982	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:02.467530966 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:02.471185923 CET	7777	38982	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:02.473561049 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:02.473663092 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:02.473747015 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:02.478991985 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:03.417047024 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:03.417164087 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:03.620836020 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:03.620976925 CET	38984	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:03.624243975 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:03.626363039 CET	7777	38984	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:03.629648924 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:03.629693985 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:03.629748106 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:03.635113001 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.522725105 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.522810936 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.522859097 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.522886038 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.522906065 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.522906065 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.522952080 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.523011923 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.523199081 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.523246050 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.523536921 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.734163046 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.755448103 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.755490065 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.755510092 CET	7777	38986	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:05.755590916 CET	38986	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.755609989 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.755682945 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:05.761054993 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:06.722920895 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:06.723120928 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:06.956677914 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:06.957029104 CET	38988	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:06.957952976 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:06.962572098 CET	7777	38988	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:06.963368893 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:06.963455915 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:06.963583946 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:06.968897104 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:07.924802065 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:07.925044060 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:08.141031981 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:08.141200066 CET	38990	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:08.141880035 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:08.146636963 CET	7777	38990	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:08.147237062 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:08.147304058 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:08.147365093 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:08.153074026 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:09.121139050 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:09.121249914 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:09.348649025 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:09.348829031 CET	38992	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:09.349685907 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:09.358752966 CET	7777	38992	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:09.359802008 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:09.359864950 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:09.359935999 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:09.370521069 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:10.315287113 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:10.315421104 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:10.544722080 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:10.545002937 CET	38994	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:10.545804024 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:10.550328970 CET	7777	38994	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:10.551184893 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:10.551264048 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:10.551373005 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:10.556721926 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:11.526107073 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:11.526221037 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:11.718588114 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:11.718806982 CET	38996	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:11.719861984 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:11.725305080 CET	7777	38996	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:11.726135969 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:11.726255894 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:11.726344109 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:11.732002020 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:12.643811941 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:12.644143105 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:12.851525068 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:12.851872921 CET	38998	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:12.852646112 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:12.857575893 CET	7777	38998	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:12.857999086 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:12.858059883 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:12.858122110 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:12.863558054 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:13.760967016 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:13.761357069 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:14.025700092 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:14.025963068 CET	39000	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:14.026973963 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:14.031339884 CET	7777	39000	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:14.032567978 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:14.032635927 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:14.032758951 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:14.038259983 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:14.915956020 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:14.916270971 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:15.115067005 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:15.115282059 CET	39002	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:15.116311073 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:15.121417999 CET	7777	39002	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:15.122467041 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:15.122569084 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:15.122683048 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:15.128635883 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:16.029145002 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:16.029650927 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:16.234365940 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:16.234668970 CET	39004	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:16.235733032 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:16.240364075 CET	7777	39004	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:16.242027044 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:16.242120981 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:16.242325068 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:16.247592926 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:17.133666039 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:17.133974075 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:17.430484056 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:17.430670977 CET	39006	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:17.431291103 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:17.436184883 CET	7777	39006	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:17.436638117 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:17.436700106 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:17.436741114 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:17.442065001 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:18.357883930 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:18.358118057 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:18.556075096 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:18.556387901 CET	39008	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:18.557288885 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:18.564286947 CET	7777	39008	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:18.565578938 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:18.565648079 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:18.565793037 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:18.575383902 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:19.518596888 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:19.518765926 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:19.741178989 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:19.741349936 CET	39010	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:19.741915941 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:19.746602058 CET	7777	39010	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:19.747186899 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:19.747240067 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:19.747292042 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:19.752619028 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:20.754477024 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:20.754662991 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:20.944561958 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:20.944802046 CET	39012	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:20.945501089 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:20.950207949 CET	7777	39012	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:20.950851917 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:20.950926065 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:20.951035023 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:20.956361055 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:21.905118942 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:21.905441999 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:22.126719952 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:22.126970053 CET	39014	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:22.127746105 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:22.132402897 CET	7777	39014	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:22.133197069 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:22.133297920 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:22.133332014 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:22.138843060 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:23.316420078 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:23.316606998 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:23.546922922 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:23.547157049 CET	39016	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:23.547728062 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:23.552593946 CET	7777	39016	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:23.552958965 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:23.553044081 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:23.553081989 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:23.559586048 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:24.510624886 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:24.510960102 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:24.731223106 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:24.731570005 CET	39018	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:24.732225895 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:24.740240097 CET	7777	39018	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:24.740252972 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:24.740344048 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:24.740515947 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:24.745925903 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:25.715298891 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:25.715394974 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:25.923909903 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:25.924038887 CET	39020	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:25.924449921 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:25.929624081 CET	7777	39020	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:25.929738998 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:25.929771900 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:25.929828882 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:25.935276985 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:26.814625978 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:26.814760923 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:27.041766882 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:27.041903973 CET	39022	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:27.042470932 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:27.047374964 CET	7777	39022	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:27.047801018 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:27.047919035 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:27.047975063 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:27.053314924 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:28.008464098 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:28.008634090 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:28.232716084 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:28.232840061 CET	39024	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:28.233220100 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:28.238320112 CET	7777	39024	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:28.238563061 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:28.238646984 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:28.238691092 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:28.244131088 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.704802036 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.704869986 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.704890013 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.704945087 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.704945087 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.704987049 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.705509901 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.705581903 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.705616951 CET	39026	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.713061094 CET	7777	39026	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.713179111 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:29.713253021 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.713304043 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:29.718576908 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:30.630898952 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:30.631270885 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:31.003998995 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:31.004234076 CET	39028	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:31.004746914 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:31.009497881 CET	7777	39028	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:31.010020971 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:31.010145903 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:31.010169029 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:31.015539885 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:31.850132942 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:31.850228071 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:32.126755953 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:32.126844883 CET	39030	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:32.127207041 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:32.132148027 CET	7777	39030	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:32.132510900 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:32.132586956 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:32.132641077 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:32.137881041 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:33.043895006 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:33.044017076 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:33.319765091 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:33.319956064 CET	39032	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:33.320482969 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:33.325365067 CET	7777	39032	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:33.325851917 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:33.325932980 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:33.325992107 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:33.332448006 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:34.305027008 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:34.305128098 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:34.551361084 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:34.551829100 CET	39034	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:34.552428007 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:34.557099104 CET	7777	39034	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:34.557677984 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:34.557732105 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:34.557800055 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:34.563065052 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:35.526209116 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:35.526361942 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:35.804120064 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:35.804296970 CET	39036	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:35.804853916 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:35.809705973 CET	7777	39036	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:35.810120106 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:35.810184002 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:35.810209990 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:35.815610886 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:36.711759090 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:36.711867094 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:36.928222895 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:36.928764105 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:36.929246902 CET	39038	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:36.934196949 CET	7777	39040	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:36.934274912 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:36.934325933 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:36.934593916 CET	7777	39038	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:36.939948082 CET	7777	39040	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:37.855452061 CET	7777	39040	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:37.855540037 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:38.117115974 CET	7777	39040	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:38.117276907 CET	39040	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:38.117834091 CET	39042	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:38.122575045 CET	7777	39040	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:38.123159885 CET	7777	39042	93.123.85.205	192.168.2.15
Oct 28, 2024 09:27:38.123238087 CET	39042	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:38.123291016 CET	39042	7777	192.168.2.15	93.123.85.205
Oct 28, 2024 09:27:38.129015923 CET	7777	39042	93.123.85.205	192.168.2.15

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 09:26:48.548600912 CET	51965	53	192.168.2.15	1.1.1.1
Oct 28, 2024 09:26:48.548660040 CET	48865	53	192.168.2.15	1.1.1.1
Oct 28, 2024 09:26:48.556693077 CET	53	48865	1.1.1.1	192.168.2.15
Oct 28, 2024 09:26:48.556986094 CET	53	51965	1.1.1.1	192.168.2.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 09:26:48.548600912 CET	192.168.2.15	1.1.1.1	0x1a3e	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 09:26:48.548660040 CET	192.168.2.15	1.1.1.1	0x677f	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 09:26:48.556986094 CET	1.1.1.1	192.168.2.15	0x1a3e	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Oct 28, 2024 09:26:48.556986094 CET	1.1.1.1	192.168.2.15	0x1a3e	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: na.elf PID: 5566, Parent PID: 5486

General

Start time (UTC):	08:24:02
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	/tmp/na.elf
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Chronological Activities

Analysis Process: na.elf PID: 5570, Parent PID: 5566

General

Start time (UTC):	08:24:02
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Chronological Activities

Analysis Process: na.elf PID: 5572, Parent PID: 5570

General

Start time (UTC):	08:24:02
Start date (UTC):	28/10/2024
Path:	/tmp/na.elf
Arguments:	-
File size:	4139976 bytes
MD5 hash:	8943e5f8f8c280467b4472c15ae93ba9

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report na.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: na.elf PID: 5566, Parent PID: 5486

General

Chronological Activities

Analysis Process: na.elf PID: 5570, Parent PID: 5566

General

Chronological Activities

Analysis Process: na.elf PID: 5572, Parent PID: 5570

General

Chronological Activities

Linux Analysis Report
na.elf