Edit tour

Linux Analysis Report
a-r.m-7.Sakura.elf

Overview

General Information

Sample name:	a-r.m-7.Sakura.elf
Analysis ID:	1575873
MD5:	ef31b64a14e86ea17eaea79daaf8a38a
SHA1:	53a802d5c3d4470ee11fa1e12033d3b82149520c
SHA256:	dcfb579cfa06efb1868b21db1e5133f42638d5f3aaa3ee611c38274c0afac8d8
Tags:	elfGafgytMiraiuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1575873
Start date and time:	2024-12-16 11:46:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	a-r.m-7.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@0/0

Warnings

VT rate limit hit for: a-r.m-7.Sakura.elf

Runtime Messages

Command:	/tmp/a-r.m-7.Sakura.elf
PID:	6223
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

a-r.m-7.Sakura.elf (PID: 6223, Parent: 6139, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/a-r.m-7.Sakura.elf

a-r.m-7.Sakura.elf New Fork (PID: 6225, Parent: 6223)

a-r.m-7.Sakura.elf New Fork (PID: 6227, Parent: 6225)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
a-r.m-7.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
a-r.m-7.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
a-r.m-7.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf54c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6223.1.00007f9280001000.00007f9280013000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6223.1.00007f9280001000.00007f9280013000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf54c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6225.1.00007f9280001000.00007f9280013000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6225.1.00007f9280001000.00007f9280013000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf3d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf3f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf40c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf420:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf434:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf448:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf45c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf470:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf484:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf498:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf4fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf510:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf524:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf538:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf54c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf560:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: a-r.m-7.Sakura.elf PID: 6223	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: a-r.m-7.Sakura.elf PID: 6223	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1942:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1956:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x196a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x197e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1992:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a0a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a1e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a32:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a46:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a5a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a6e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a82:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a96:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1aaa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1abe:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1ad2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: a-r.m-7.Sakura.elf PID: 6225	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: a-r.m-7.Sakura.elf PID: 6225	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd73e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd752:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd766:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd77a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd78e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7a2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7b6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7ca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7de:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd806:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd81a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd82e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd842:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd856:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd87e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd892:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T11:47:11.125196+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55668	93.123.85.8	12345	TCP
2024-12-16T11:47:12.314402+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55670	93.123.85.8	12345	TCP
2024-12-16T11:47:13.491550+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55672	93.123.85.8	12345	TCP
2024-12-16T11:47:14.667162+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55674	93.123.85.8	12345	TCP
2024-12-16T11:47:15.842686+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55676	93.123.85.8	12345	TCP
2024-12-16T11:47:17.015808+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55678	93.123.85.8	12345	TCP
2024-12-16T11:47:18.190328+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55680	93.123.85.8	12345	TCP
2024-12-16T11:47:19.362810+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55682	93.123.85.8	12345	TCP
2024-12-16T11:47:20.535711+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55684	93.123.85.8	12345	TCP
2024-12-16T11:47:21.722843+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55686	93.123.85.8	12345	TCP
2024-12-16T11:47:22.897983+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55688	93.123.85.8	12345	TCP
2024-12-16T11:47:24.073352+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55690	93.123.85.8	12345	TCP
2024-12-16T11:47:25.272641+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55692	93.123.85.8	12345	TCP
2024-12-16T11:47:26.447475+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55694	93.123.85.8	12345	TCP
2024-12-16T11:47:27.625112+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55696	93.123.85.8	12345	TCP
2024-12-16T11:47:28.827996+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55698	93.123.85.8	12345	TCP
2024-12-16T11:47:30.002482+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55700	93.123.85.8	12345	TCP
2024-12-16T11:47:31.176750+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55702	93.123.85.8	12345	TCP
2024-12-16T11:47:32.353662+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55704	93.123.85.8	12345	TCP
2024-12-16T11:47:33.530579+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55706	93.123.85.8	12345	TCP
2024-12-16T11:47:34.707769+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55708	93.123.85.8	12345	TCP
2024-12-16T11:47:35.891654+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55710	93.123.85.8	12345	TCP
2024-12-16T11:47:37.066687+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55712	93.123.85.8	12345	TCP
2024-12-16T11:47:38.245872+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55714	93.123.85.8	12345	TCP
2024-12-16T11:47:39.428572+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55716	93.123.85.8	12345	TCP
2024-12-16T11:47:40.602375+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55718	93.123.85.8	12345	TCP
2024-12-16T11:47:41.781429+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55720	93.123.85.8	12345	TCP
2024-12-16T11:47:42.956998+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55722	93.123.85.8	12345	TCP
2024-12-16T11:47:44.133688+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55724	93.123.85.8	12345	TCP
2024-12-16T11:47:45.328070+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55726	93.123.85.8	12345	TCP
2024-12-16T11:47:46.502038+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55728	93.123.85.8	12345	TCP
2024-12-16T11:47:47.675594+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55730	93.123.85.8	12345	TCP
2024-12-16T11:47:48.852440+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55732	93.123.85.8	12345	TCP
2024-12-16T11:47:50.026798+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55734	93.123.85.8	12345	TCP
2024-12-16T11:47:51.209114+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55736	93.123.85.8	12345	TCP
2024-12-16T11:47:52.384269+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55738	93.123.85.8	12345	TCP
2024-12-16T11:47:53.560133+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55740	93.123.85.8	12345	TCP
2024-12-16T11:47:54.734635+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55742	93.123.85.8	12345	TCP
2024-12-16T11:47:55.928065+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55744	93.123.85.8	12345	TCP
2024-12-16T11:47:57.107643+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55746	93.123.85.8	12345	TCP
2024-12-16T11:47:58.288778+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55748	93.123.85.8	12345	TCP
2024-12-16T11:47:59.481296+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55750	93.123.85.8	12345	TCP
2024-12-16T11:48:00.658169+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55752	93.123.85.8	12345	TCP
2024-12-16T11:48:01.832929+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55754	93.123.85.8	12345	TCP
2024-12-16T11:48:03.006793+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55756	93.123.85.8	12345	TCP
2024-12-16T11:48:04.181799+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55758	93.123.85.8	12345	TCP
2024-12-16T11:48:05.367627+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55760	93.123.85.8	12345	TCP
2024-12-16T11:48:06.548660+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55762	93.123.85.8	12345	TCP
2024-12-16T11:48:07.728428+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55764	93.123.85.8	12345	TCP
2024-12-16T11:48:08.930935+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55766	93.123.85.8	12345	TCP
2024-12-16T11:48:10.111739+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55768	93.123.85.8	12345	TCP
2024-12-16T11:48:11.285003+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55770	93.123.85.8	12345	TCP
2024-12-16T11:48:12.459745+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55772	93.123.85.8	12345	TCP
2024-12-16T11:48:13.634865+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55774	93.123.85.8	12345	TCP
2024-12-16T11:48:14.809546+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55776	93.123.85.8	12345	TCP
2024-12-16T11:48:16.006541+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55778	93.123.85.8	12345	TCP
2024-12-16T11:48:17.225468+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55780	93.123.85.8	12345	TCP
2024-12-16T11:48:18.399750+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55782	93.123.85.8	12345	TCP
2024-12-16T11:48:19.576776+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55784	93.123.85.8	12345	TCP
2024-12-16T11:48:20.752493+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55786	93.123.85.8	12345	TCP
2024-12-16T11:48:21.927684+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55788	93.123.85.8	12345	TCP
2024-12-16T11:48:23.115428+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55790	93.123.85.8	12345	TCP
2024-12-16T11:48:24.314487+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55792	93.123.85.8	12345	TCP
2024-12-16T11:48:25.491875+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55794	93.123.85.8	12345	TCP
2024-12-16T11:48:26.668616+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55796	93.123.85.8	12345	TCP
2024-12-16T11:48:27.853302+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55798	93.123.85.8	12345	TCP
2024-12-16T11:48:29.030773+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55800	93.123.85.8	12345	TCP
2024-12-16T11:48:30.310147+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55802	93.123.85.8	12345	TCP
2024-12-16T11:48:31.488387+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55804	93.123.85.8	12345	TCP
2024-12-16T11:48:32.663823+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55806	93.123.85.8	12345	TCP
2024-12-16T11:48:33.842183+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55808	93.123.85.8	12345	TCP
2024-12-16T11:48:35.018711+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55810	93.123.85.8	12345	TCP
2024-12-16T11:48:36.195805+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55812	93.123.85.8	12345	TCP
2024-12-16T11:48:37.373683+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55814	93.123.85.8	12345	TCP
2024-12-16T11:48:38.549022+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55816	93.123.85.8	12345	TCP
2024-12-16T11:48:39.745273+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55818	93.123.85.8	12345	TCP
2024-12-16T11:48:40.922420+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55820	93.123.85.8	12345	TCP
2024-12-16T11:48:42.097618+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55822	93.123.85.8	12345	TCP
2024-12-16T11:48:43.273946+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55824	93.123.85.8	12345	TCP
2024-12-16T11:48:44.449474+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55826	93.123.85.8	12345	TCP
2024-12-16T11:48:45.644408+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55828	93.123.85.8	12345	TCP
2024-12-16T11:48:46.899641+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55830	93.123.85.8	12345	TCP
2024-12-16T11:48:48.132736+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55832	93.123.85.8	12345	TCP
2024-12-16T11:48:49.311220+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55834	93.123.85.8	12345	TCP
2024-12-16T11:48:50.492003+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55836	93.123.85.8	12345	TCP
2024-12-16T11:48:51.667584+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55838	93.123.85.8	12345	TCP
2024-12-16T11:48:52.843085+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55840	93.123.85.8	12345	TCP
2024-12-16T11:48:54.021335+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55842	93.123.85.8	12345	TCP
2024-12-16T11:48:55.198208+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55844	93.123.85.8	12345	TCP
2024-12-16T11:48:56.372027+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55846	93.123.85.8	12345	TCP
2024-12-16T11:48:57.546879+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55848	93.123.85.8	12345	TCP
2024-12-16T11:48:58.727016+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55850	93.123.85.8	12345	TCP
2024-12-16T11:48:59.901403+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55852	93.123.85.8	12345	TCP
2024-12-16T11:49:01.076508+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55854	93.123.85.8	12345	TCP
2024-12-16T11:49:02.254357+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55856	93.123.85.8	12345	TCP
2024-12-16T11:49:03.428234+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55858	93.123.85.8	12345	TCP
2024-12-16T11:49:04.603234+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55860	93.123.85.8	12345	TCP
2024-12-16T11:49:05.780741+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55862	93.123.85.8	12345	TCP
2024-12-16T11:49:06.953782+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55864	93.123.85.8	12345	TCP
2024-12-16T11:49:08.128424+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55866	93.123.85.8	12345	TCP
2024-12-16T11:49:09.304921+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55868	93.123.85.8	12345	TCP
2024-12-16T11:49:10.479308+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55870	93.123.85.8	12345	TCP
2024-12-16T11:49:11.663946+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55872	93.123.85.8	12345	TCP
2024-12-16T11:49:12.840997+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55874	93.123.85.8	12345	TCP
2024-12-16T11:49:14.025508+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55876	93.123.85.8	12345	TCP
2024-12-16T11:49:15.198301+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55878	93.123.85.8	12345	TCP
2024-12-16T11:49:16.371545+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55880	93.123.85.8	12345	TCP
2024-12-16T11:49:17.545462+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55882	93.123.85.8	12345	TCP
2024-12-16T11:49:18.726702+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55884	93.123.85.8	12345	TCP
2024-12-16T11:49:19.901018+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55886	93.123.85.8	12345	TCP
2024-12-16T11:49:21.088493+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55888	93.123.85.8	12345	TCP
2024-12-16T11:49:22.264603+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55890	93.123.85.8	12345	TCP
2024-12-16T11:49:23.453213+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55892	93.123.85.8	12345	TCP
2024-12-16T11:49:24.628096+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55894	93.123.85.8	12345	TCP
2024-12-16T11:49:25.806610+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55896	93.123.85.8	12345	TCP
2024-12-16T11:49:26.984037+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55898	93.123.85.8	12345	TCP
2024-12-16T11:49:28.169457+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55900	93.123.85.8	12345	TCP
2024-12-16T11:49:29.346073+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55902	93.123.85.8	12345	TCP
2024-12-16T11:49:30.520535+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55904	93.123.85.8	12345	TCP
2024-12-16T11:49:31.703848+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55906	93.123.85.8	12345	TCP
2024-12-16T11:49:32.885168+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55908	93.123.85.8	12345	TCP
2024-12-16T11:49:34.064094+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55910	93.123.85.8	12345	TCP
2024-12-16T11:49:35.238796+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55912	93.123.85.8	12345	TCP
2024-12-16T11:49:36.414181+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55914	93.123.85.8	12345	TCP
2024-12-16T11:49:37.589167+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55916	93.123.85.8	12345	TCP
2024-12-16T11:49:38.764735+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55918	93.123.85.8	12345	TCP
2024-12-16T11:49:39.941519+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55920	93.123.85.8	12345	TCP
2024-12-16T11:49:41.117781+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55922	93.123.85.8	12345	TCP
2024-12-16T11:49:42.294094+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55924	93.123.85.8	12345	TCP
2024-12-16T11:49:43.470372+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55926	93.123.85.8	12345	TCP
2024-12-16T11:49:44.646607+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55928	93.123.85.8	12345	TCP
2024-12-16T11:49:45.822014+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55930	93.123.85.8	12345	TCP
2024-12-16T11:49:46.996055+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55932	93.123.85.8	12345	TCP
2024-12-16T11:49:48.170243+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55934	93.123.85.8	12345	TCP
2024-12-16T11:49:49.345523+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55936	93.123.85.8	12345	TCP
2024-12-16T11:49:50.528979+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55938	93.123.85.8	12345	TCP
2024-12-16T11:49:51.705127+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55940	93.123.85.8	12345	TCP
2024-12-16T11:49:52.882585+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55942	93.123.85.8	12345	TCP
2024-12-16T11:49:54.072432+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55944	93.123.85.8	12345	TCP
2024-12-16T11:49:55.249194+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55946	93.123.85.8	12345	TCP
2024-12-16T11:49:56.424537+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55948	93.123.85.8	12345	TCP
2024-12-16T11:49:57.599651+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55950	93.123.85.8	12345	TCP
2024-12-16T11:49:58.773271+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55952	93.123.85.8	12345	TCP
2024-12-16T11:49:59.950092+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55954	93.123.85.8	12345	TCP
2024-12-16T11:50:01.125091+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55956	93.123.85.8	12345	TCP
2024-12-16T11:50:02.306443+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55958	93.123.85.8	12345	TCP
2024-12-16T11:50:03.482960+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55960	93.123.85.8	12345	TCP
2024-12-16T11:50:04.658754+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55962	93.123.85.8	12345	TCP
2024-12-16T11:50:05.832801+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55964	93.123.85.8	12345	TCP
2024-12-16T11:50:07.006804+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55966	93.123.85.8	12345	TCP
2024-12-16T11:50:08.186190+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55968	93.123.85.8	12345	TCP
2024-12-16T11:50:09.361835+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55970	93.123.85.8	12345	TCP
2024-12-16T11:50:10.540611+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55972	93.123.85.8	12345	TCP
2024-12-16T11:50:11.714849+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55974	93.123.85.8	12345	TCP
2024-12-16T11:50:12.889287+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55976	93.123.85.8	12345	TCP
2024-12-16T11:50:14.065025+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55978	93.123.85.8	12345	TCP
2024-12-16T11:50:15.239196+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55980	93.123.85.8	12345	TCP
2024-12-16T11:50:16.416075+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55982	93.123.85.8	12345	TCP
2024-12-16T11:50:17.591554+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55984	93.123.85.8	12345	TCP
2024-12-16T11:50:18.767357+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55986	93.123.85.8	12345	TCP
2024-12-16T11:50:19.951913+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55988	93.123.85.8	12345	TCP
2024-12-16T11:50:21.393322+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55990	93.123.85.8	12345	TCP
2024-12-16T11:50:22.567990+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55992	93.123.85.8	12345	TCP
2024-12-16T11:50:23.749923+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55994	93.123.85.8	12345	TCP
2024-12-16T11:50:24.926112+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55996	93.123.85.8	12345	TCP
2024-12-16T11:50:26.104934+0100	2846526	1	A Network Trojan was detected	192.168.2.23	55998	93.123.85.8	12345	TCP
2024-12-16T11:50:27.287555+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56000	93.123.85.8	12345	TCP
2024-12-16T11:50:28.463323+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56002	93.123.85.8	12345	TCP
2024-12-16T11:50:29.642712+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56004	93.123.85.8	12345	TCP
2024-12-16T11:50:30.817282+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56006	93.123.85.8	12345	TCP
2024-12-16T11:50:31.994236+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56008	93.123.85.8	12345	TCP
2024-12-16T11:50:33.183150+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56010	93.123.85.8	12345	TCP
2024-12-16T11:50:34.369617+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56012	93.123.85.8	12345	TCP
2024-12-16T11:50:35.544297+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56014	93.123.85.8	12345	TCP
2024-12-16T11:50:36.718538+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56016	93.123.85.8	12345	TCP
2024-12-16T11:50:37.904369+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56018	93.123.85.8	12345	TCP
2024-12-16T11:50:39.078966+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56020	93.123.85.8	12345	TCP
2024-12-16T11:50:40.253609+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56022	93.123.85.8	12345	TCP
2024-12-16T11:50:41.427379+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56024	93.123.85.8	12345	TCP
2024-12-16T11:50:42.600060+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56026	93.123.85.8	12345	TCP
2024-12-16T11:50:43.784480+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56028	93.123.85.8	12345	TCP
2024-12-16T11:50:44.959609+0100	2846526	1	A Network Trojan was detected	192.168.2.23	56030	93.123.85.8	12345	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: a-r.m-7.Sakura.elf

Avira: detected

Found malware configuration

Source: a-r.m-7.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.8:12345"}

Multi AV Scanner detection for submitted file

Source: a-r.m-7.Sakura.elf

ReversingLabs: Detection: 63%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/a-r.m-7.Sakura.elf (PID: 6223)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55676 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55684 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55668 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55694 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55674 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55680 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55718 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55670 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55690 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55710 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55712 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55714 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55692 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55688 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55720 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55706 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55698 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55682 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55708 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55686 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55740 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55724 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55744 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55716 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55696 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55732 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55760 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55754 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55736 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55700 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55672 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55772 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55730 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55750 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55742 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55796 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55758 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55748 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55722 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55782 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55764 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55734 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55728 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55768 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55704 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55792 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55822 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55726 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55810 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55814 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55788 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55778 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55752 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55808 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55802 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55812 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55832 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55804 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55828 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55756 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55784 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55770 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55738 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55762 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55830 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55678 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55826 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55842 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55848 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55800 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55854 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55766 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55702 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55846 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55786 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55862 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55780 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55866 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55856 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55868 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55824 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55850 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55870 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55746 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55774 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55876 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55838 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55858 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55844 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55806 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55776 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55834 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55852 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55864 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55794 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55872 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55886 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55818 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55888 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55860 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55882 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55874 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55894 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55890 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55798 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55900 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55836 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55908 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55896 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55902 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55912 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55906 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55892 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55914 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55904 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55880 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55910 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55790 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55924 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55916 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55918 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55920 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55884 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55922 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55926 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55816 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55932 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55928 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55820 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55898 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55878 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55936 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55840 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55930 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55938 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55934 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55942 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55940 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55948 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55944 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55946 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55954 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55950 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55952 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55956 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55962 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55958 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55960 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55966 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55964 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55968 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55970 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55972 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55974 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55980 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55976 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55978 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55982 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55984 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55986 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55988 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55990 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55992 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55994 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55996 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:55998 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56004 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56000 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56008 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56006 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56002 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56010 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56014 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56012 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56018 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56020 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56016 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56022 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56024 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56026 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56028 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:56030 -> 93.123.85.8:12345

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 93.123.85.8 ports 1,2,3,4,5,12345

Source: global traffic

TCP traffic: 192.168.2.23:55668 -> 93.123.85.8:12345

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: a-r.m-7.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6223.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6225.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6223, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6225, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: a-r.m-7.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6223.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6225.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6223, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6225, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@0/0

Source: a-r.m-7.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/brk.S
Source: a-r.m-7.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crt1.S
Source: a-r.m-7.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crti.S
Source: a-r.m-7.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/powerpc/crtn.S

Source: /tmp/a-r.m-7.Sakura.elf (PID: 6223)

Queries kernel information via 'uname':

Jump to behavior

Source: a-r.m-7.Sakura.elf, 6223.1.00007fff0b9dc000.00007fff0b9fd000.rw-.sdmp, a-r.m-7.Sakura.elf, 6225.1.00007fff0b9dc000.00007fff0b9fd000.rw-.sdmp	Binary or memory string: (x86_64/usr/bin/qemu-ppc/tmp/a-r.m-7.Sakura.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/a-r.m-7.Sakura.elf
Source: a-r.m-7.Sakura.elf, 6223.1.0000560f90406000.0000560f904b6000.rw-.sdmp, a-r.m-7.Sakura.elf, 6225.1.0000560f90406000.0000560f904b6000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: a-r.m-7.Sakura.elf, 6223.1.00007fff0b9dc000.00007fff0b9fd000.rw-.sdmp	Binary or memory string: V/tmp/qemu-open.jr0BSM\$
Source: a-r.m-7.Sakura.elf, 6223.1.00007fff0b9dc000.00007fff0b9fd000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.jr0BSM
Source: a-r.m-7.Sakura.elf, 6223.1.0000560f90406000.0000560f904b6000.rw-.sdmp, a-r.m-7.Sakura.elf, 6225.1.0000560f90406000.0000560f904b6000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: a-r.m-7.Sakura.elf, 6223.1.00007fff0b9dc000.00007fff0b9fd000.rw-.sdmp, a-r.m-7.Sakura.elf, 6225.1.00007fff0b9dc000.00007fff0b9fd000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: a-r.m-7.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: a-r.m-7.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 6223.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6225.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6223, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6225, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: a-r.m-7.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: a-r.m-7.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 6223.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6225.1.00007f9280001000.00007f9280013000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6223, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a-r.m-7.Sakura.elf PID: 6225, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.8:12345"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
a-r.m-7.Sakura.elf	63%	ReversingLabs	Linux.Exploit.Mirai
a-r.m-7.Sakura.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
93.123.85.8:12345	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.8:12345	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
93.123.85.8	unknown	Bulgaria	43561	NET1-ASBG	true
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
93.123.85.8	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	p-p.c-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	SwiftSec.mpsl.elf	Get hash	malicious	Mirai	Browse
	SwiftSec.m68k.elf	Get hash	malicious	Mirai	Browse
	SwiftSec.ppc.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	la.bot.arm.elf	Get hash	malicious	Mirai	Browse
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	mipsel.elf	Get hash	malicious	Mirai	Browse
	.i.elf	Get hash	malicious	Unknown	Browse
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse
	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	la.bot.arm.elf	Get hash	malicious	Mirai	Browse
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	powerpc.elf	Get hash	malicious	Mirai	Browse
	mipsel.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	main_x86.elf	Get hash	malicious	Mirai	Browse
	.i.elf	Get hash	malicious	Unknown	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	armv6l.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_x86_64.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	arc.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	powerpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	armv6l.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_x86_64.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	arc.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	powerpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
NET1-ASBG	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	p-p.c-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	x86.elf	Get hash	malicious	Unknown	Browse	93.123.30.205
	ppc.elf	Get hash	malicious	Unknown	Browse	95.87.199.46
	rebirth.m68.elf	Get hash	malicious	Gafgyt	Browse	93.123.85.5
INIT7CH	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	powerpc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	mipsel.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_arm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_x86.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.jr0BSM (deleted)

Download File

Process:	/tmp/a-r.m-7.Sakura.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.092923044119184
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	a-r.m-7.Sakura.elf
File size:	93'907 bytes
MD5:	ef31b64a14e86ea17eaea79daaf8a38a
SHA1:	53a802d5c3d4470ee11fa1e12033d3b82149520c
SHA256:	dcfb579cfa06efb1868b21db1e5133f42638d5f3aaa3ee611c38274c0afac8d8
SHA512:	9dc4680042e3a17a365a27672164f93e7c589df37f4607d66e5d363eeeefc0b61b57297b373043470b3d3ed59ed7d54a9a84f28390359c3f01cb1ec0ac244e86
SSDEEP:	1536:QQK1n7bzX9jajzvxRq57wBRcGCMCZDxeBk+8cl4umXxVqDrstKfz9e:Q97vk51RcG7AWl4umXxVqDrIKfz9e
TLSH:	7B933A47B71C0B53C59B5AF12DAB3BF08B69B9E113D76185A10AEFD00372EB12412FA5
File Content Preview:	.ELF...........................4.."P.....4. ...(.......................\|...\|...............\|...\|...\|......g.........dt.Q.............................!..\|......$H...H......$8!. \|...N.. .!..\|.......?.............../...@..\?........+../...A..$8...})......N..

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	74320
Section Header Size:	40
Number of Section Headers:	17
Header String Table Index:	14

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x100000b8	0xb8	0xebe0	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x1000ec98	0xec98	0x20	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x1000ecb8	0xecb8	0x26c0	0x0	0x2	A	0	0	8
.eh_frame	PROGBITS	0x10011378	0x11378	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x1002137c	0x1137c	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x10021384	0x11384	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x1002138c	0x1138c	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x10021390	0x11390	0x358	0x0	0x3	WA	0	0	8
.sdata	PROGBITS	0x100216e8	0x116e8	0x44	0x0	0x3	WA	0	0	4
.sbss	NOBITS	0x10021730	0x1172c	0x6c	0x0	0x3	WA	0	0	8
.bss	NOBITS	0x1002179c	0x1172c	0x62f0	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x1172c	0xab0	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x121dc	0x73	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x124f8	0x2a00	0x10	0x0		16	249	4
.strtab	STRTAB	0x0	0x14ef8	0x1fdb	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x1137c	0x1137c	6.1398	0x5	R E	0x10000	.init .text .fini .rodata .eh_frame
LOAD	0x1137c	0x1002137c	0x1002137c	0x3b0	0x6710	2.8667	0x6	RW	0x10000	.ctors .dtors .jcr .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x10000094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x100000b8	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x1000ec98	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x1000ecb8	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x10011378	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x1002137c	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x10021384	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x1002138c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x10021390	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x100216e8	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x10021730	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x1002179c	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
C.110.5211	.symtab	0x1000f16c	8	OBJECT	<unknown>	DEFAULT	4
C.147.5527	.symtab	0x1000fae8	24	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x100217b8	16384	OBJECT	<unknown>	DEFAULT	12
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x10003570	336	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x10002b5c	360	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x1000381c	392	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x100020fc	1124	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_SDA_BASE_	.symtab	0x100296e8	0	NOTYPE	<unknown>	DEFAULT	10
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x10021380	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x1002137c	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x100216f0	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x1000fcec	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x10021724	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x100103d6	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x100216f8	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x1000ffec	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x10021388	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x10021384	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x10011378	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x10011378	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x100216f0	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x1000fcec	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x10021724	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x100103d6	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x100216f8	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x1000ffec	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x100216f4	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x10021728	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x100216fc	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x1000732c	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x1000d720	48	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x10009554	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x100070fc	120	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10008e88	148	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10008f88	128	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x1000d750	268	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x10006f10	60	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x1000a4b0	336	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10008a1c	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x10008a1c	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1000a61c	52	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x10006f94	72	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x10006fdc	72	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x10007d5c	52	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x10021770	4	OBJECT	<unknown>	HIDDEN	11
__GI_exit	.symtab	0x10008be4	132	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x1000a6e0	332	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x1000ae3c	432	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x1000ac88	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x1000afec	196	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x1000a82c	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x10007024	72	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x1000d51c	92	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x1000e92c	16	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x1000e93c	284	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x1000d578	184	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x100092bc	72	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x10009304	72	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x1000934c	72	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x100079c4	84	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x10007a18	836	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x1000706c	72	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x10007d90	52	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x10009394	72	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x10021774	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x10007990	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x10009964	192	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x1000795c	52	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x100078e0	124	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x1000b74c	676	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x1000b3e0	524	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10008934	232	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x10006d40	232	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x1000b2d4	44	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x100070b4	72	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1000ebac	128	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1000e730	264	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x10009658	156	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x100096f4	164	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x10009798	52	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x1000e838	244	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x10007338	144	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x100093dc	72	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x100070fc	120	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x1000a698	72	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x1000c0d8	48	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x100084e8	108	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x100087c0	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x1000b0b0	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x10007184	72	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x10007e00	56	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x10009424	112	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x100071cc	72	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x10007e38	56	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x10007e70	64	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x10007214	72	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x10007eb0	60	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x100086cc	244	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x1000a3ec	196	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x10007f20	224	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x10009494	120	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x10008c68	468	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x10007eec	52	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x1000c15c	140	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x10008850	228	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1000d85c	80	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x100073c8	256	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x100074c8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x100074c8	52	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x100074fc	32	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x1000b284	80	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x1000751c	164	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x1000b168	208	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x100097cc	188	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x1000d630	240	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x10009928	60	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x1000b238	76	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x100075c0	244	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x100076c4	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x10009888	160	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x10008a28	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x100076d0	156	FUNC	<unknown>	HIDDEN	2
__GI_tcsetattr	.symtab	0x1000776c	356	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x1000725c	72	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x1000c13c	32	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x1000730c	32	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x1000c1e8	204	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x1000950c	72	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x100072a4	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x1000dab4	92	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x1000db20	204	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x1000db10	16	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x100072ac	72	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x1002138c	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x1002138c	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x10021764	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x1002157c	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x10007f20	224	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x1002172c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10008f28	96	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x100216f4	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x10021728	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x100216fc	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x10021790	4	OBJECT	<unknown>	DEFAULT	11
__data_start	.symtab	0x10021398	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x1000bc48	272	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x1000d978	244	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x1000badc	196	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x10009a24	1692	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1000ec2c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x100000b8	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x10021390	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x1000d8ac	204	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1000b9f0	236	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x1000bba0	124	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x1002175c	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x1000732c	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x10021754	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x1000a394	88	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x1000d720	48	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x10009554	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x100082d0	160	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x100083b8	300	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0x10008370	44	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000839c	28	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x1000da6c	72	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x1000bc1c	44	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x10006fdc	72	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x10007d5c	52	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x10007174	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x10007024	72	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x1000706c	72	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1000ebac	128	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x100093dc	72	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x100070fc	120	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x1000a698	72	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x10007184	72	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x10007e00	56	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x100071cc	72	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x10007e38	56	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x10007e70	64	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x1000a3ec	196	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x10021758	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x100072a4	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x100072ac	72	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x10021700	4	OBJECT	<unknown>	DEFAULT	10
__malloc_heap_lock	.symtab	0x100259a8	24	OBJECT	<unknown>	DEFAULT	12
__malloc_sbrk_lock	.symtab	0x10027a58	24	OBJECT	<unknown>	DEFAULT	12
__nameserver	.symtab	0x10027a80	12	OBJECT	<unknown>	HIDDEN	12
__nameservers	.symtab	0x1002177c	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x1000bd58	100	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x1000a0c0	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x10021760	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x1002137c	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10008f1c	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x10008f24	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x1000c0d8	48	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x1000bdbc	796	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x10021598	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x10021768	4	OBJECT	<unknown>	HIDDEN	11
__searchdomain	.symtab	0x10027a70	16	OBJECT	<unknown>	HIDDEN	12
__searchdomains	.symtab	0x10021780	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x10008028	40	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x10008050	40	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x10008000	40	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x10009274	72	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x10021714	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x1000dbec	116	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1000c2b4	224	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x1000ea58	252	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x1000dc60	364	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x1000ab68	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3862	.symtab	0x10010374	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x1000ddcc	72	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1000eb54	88	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x1000de14	164	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x1000deb8	248	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x1000ac38	80	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x10021718	4	OBJECT	<unknown>	DEFAULT	10
__syscall_error	.symtab	0x1000c108	52	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x1000a650	72	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10008e88	148	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10008f88	128	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10009008	620	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x10021704	4	OBJECT	<unknown>	HIDDEN	10
__xpg_strerror_r	.symtab	0x1000d750	268	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x1000c394	96	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x1000a600	28	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x10021788	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x1002178c	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x1002172c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x10027a8c	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x10021770	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x10006f10	60	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x1000ec98	16	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x100259d8	8192	OBJECT	<unknown>	DEFAULT	12
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x1000c3f4	160	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x1000e06c	1732	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x10021774	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x10000094	16	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x1000dfb0	128	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x1000cb04	188	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x1000cecc	1304	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x1000cbc0	92	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x1000cc1c	624	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x1000ce8c	64	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10008f24	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10008f24	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x100279d8	128	OBJECT	<unknown>	HIDDEN	12
_start	.symtab	0x100001f0	72	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x1000a838	700	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x1000aaf4	116	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x1002171c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x100215c8	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x1000ad1c	288	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x10021798	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x100215e0	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x10021794	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x100215f8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x1000ab78	192	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x10021720	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x10008a30	436	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x1000e030	60	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x10010790	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x10009560	248	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x1000c494	1648	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x1000a4b0	336	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x10006f4c	72	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x100049d0	356	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x100043d4	1532	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10008a1c	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10008a1c	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x10003e34	1440	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x100076b4	16	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x10021784	4	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.2829	.symtab	0x1002176c	4	OBJECT	<unknown>	DEFAULT	11
brk	.symtab	0x1000a61c	52	FUNC	<unknown>	DEFAULT	2
bsd_signal	.symtab	0x10007f20	224	FUNC	<unknown>	DEFAULT	2
buf.2641	.symtab	0x100257b8	16	OBJECT	<unknown>	DEFAULT	12
buf.4865	.symtab	0x100257c8	460	OBJECT	<unknown>	DEFAULT	12
c	.symtab	0x100213b8	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x1000ec7c	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x1000014c	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x100001d4	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0x10006f94	72	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x10006fdc	72	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x100216e8	4	OBJECT	<unknown>	DEFAULT	10
completed.3069	.symtab	0x1002179c	1	OBJECT	<unknown>	DEFAULT	12
connect	.symtab	0x10007d5c	52	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x10001968	656	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x10007174	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x10001dc0	320	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x100216ec	4	OBJECT	<unknown>	DEFAULT	10
data_start	.symtab	0x10021398	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x1002175c	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x10021770	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x10008be4	132	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x10011330	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x1000a6e0	332	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x10006e28	132	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x10006eac	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x100004e8	232	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x1000ae3c	432	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x1000ac88	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x1000afec	196	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x10011318	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x1000a82c	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x10007024	72	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x1000d51c	92	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x10000168	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x100081d0	256	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x1000e92c	16	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x1000e92c	16	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x1000e93c	284	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x10002560	1532	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x1000d578	184	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x10004b34	40	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x10001538	124	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x100005d0	664	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x10004b5c	256	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x10000478	112	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x1000d3e4	312	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x100092bc	72	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x10009304	72	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x1000934c	72	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x100079c4	84	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x10007a18	836	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x1000706c	72	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x10007d90	52	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x10007dc4	60	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x10009394	72	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x10021734	4	OBJECT	<unknown>	DEFAULT	11
h.4864	.symtab	0x10025994	20	OBJECT	<unknown>	DEFAULT	12
h_errno	.symtab	0x10021774	4	OBJECT	<unknown>	DEFAULT	11
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0x100078d8	4	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x100078dc	4	FUNC	<unknown>	DEFAULT	2
i.4229	.symtab	0x100213bc	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x100073c8	256	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x10007990	52	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x10009964	192	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x1000795c	52	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x100078e0	124	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x1000b74c	676	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x1000b5ec	352	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x1000b3e0	524	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1000b300	224	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x1000639c	416	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x10000238	232	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x100213c0	264	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x100085d8	136	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10008934	232	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x10006d40	232	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x1000b2d4	44	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x100072f4	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x100070b4	72	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/brk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/powerpc/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x10001bf8	456	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1000ebac	128	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x10021740	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x1000653c	2052	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x10021730	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x10002010	236	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x100015b4	188	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x10002e0c	264	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x10008078	344	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1000e730	264	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x10009658	156	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x100096f4	164	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x10009798	52	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x1000e838	244	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x10007338	144	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x100214c8	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x100259c0	24	OBJECT	<unknown>	DEFAULT	12
mylock	.symtab	0x100215b0	24	OBJECT	<unknown>	DEFAULT	9
nanosleep	.symtab	0x100093dc	72	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1106	.symtab	0x10021750	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x100078d0	4	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x100078d4	4	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x10021738	8	OBJECT	<unknown>	DEFAULT	11
object.3150	.symtab	0x100217a0	24	OBJECT	<unknown>	DEFAULT	12
open	.symtab	0x100070fc	120	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x10021748	4	OBJECT	<unknown>	DEFAULT	11
p.3067	.symtab	0x10021394	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x1002174c	4	OBJECT	<unknown>	DEFAULT	11
poll	.symtab	0x1000a698	72	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4074	.symtab	0x100106e8	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x10000de8	1564	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x100009c4	128	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x10000be8	512	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x10000a44	420	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x10004c5c	5952	FUNC	<unknown>	DEFAULT	2
qual_chars.4079	.symtab	0x100106fc	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x1000c0d8	48	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x100084e4	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x10000320	344	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x100084e8	108	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x100102ec	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x100087c0	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x100214fc	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x1000b0b0	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x10007184	72	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x10007e00	56	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x10001670	760	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x100039a4	1168	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x10009424	112	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x100071cc	72	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x10007e38	56	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x10007e70	64	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x10007214	72	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x10007eb0	60	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x10008554	132	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x100086cc	244	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x1000a3ec	196	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x10007f20	224	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x10009494	120	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x10008c68	468	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x10007eec	52	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x10002cc4	328	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x10001404	308	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4078	.symtab	0x10010710	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4073	.symtab	0x100106f4	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4075	.symtab	0x1001073c	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4074	.symtab	0x10010754	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4077	.symtab	0x10010720	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4076	.symtab	0x10010730	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x1000c15c	140	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10008660	108	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10008660	108	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x10008850	228	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x10021594	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x10021778	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x10021710	4	OBJECT	<unknown>	DEFAULT	10
stdhexflood	.symtab	0x100036c0	348	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x10021708	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x1002170c	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x1000d85c	80	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x100073c8	256	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x100074c8	52	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x100074c8	52	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x100074fc	32	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x1000b284	80	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x1000d750	268	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x1000751c	164	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x1000b168	208	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x100097cc	188	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x1000d630	240	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x10009928	60	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x1000b238	76	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x100075c0	244	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x100076c4	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x10009888	160	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x10008a28	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x100076d0	156	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x10001f00	272	FUNC	<unknown>	DEFAULT	2
tcsetattr	.symtab	0x1000776c	356	FUNC	<unknown>	DEFAULT	2
tcsetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
time	.symtab	0x1000725c	72	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x1000c13c	32	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x1000730c	32	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x10000868	348	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x1001075c	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x10010774	12	OBJECT	<unknown>	DEFAULT	4
unknown.1128	.symtab	0x10010780	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x100214e0	28	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x1002139c	28	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x10008e3c	76	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x10002f14	1628	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x1000c1e8	204	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x1000950c	72	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x100072a4	8	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x1000dab4	92	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x1000db20	204	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x1000db10	16	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x100072ac	72	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3080	.symtab	0x100103a0	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-16T11:47:11.125196+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55668	93.123.85.8	12345	TCP
2024-12-16T11:47:12.314402+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55670	93.123.85.8	12345	TCP
2024-12-16T11:47:13.491550+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55672	93.123.85.8	12345	TCP
2024-12-16T11:47:14.667162+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55674	93.123.85.8	12345	TCP
2024-12-16T11:47:15.842686+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55676	93.123.85.8	12345	TCP
2024-12-16T11:47:17.015808+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55678	93.123.85.8	12345	TCP
2024-12-16T11:47:18.190328+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55680	93.123.85.8	12345	TCP
2024-12-16T11:47:19.362810+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55682	93.123.85.8	12345	TCP
2024-12-16T11:47:20.535711+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55684	93.123.85.8	12345	TCP
2024-12-16T11:47:21.722843+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55686	93.123.85.8	12345	TCP
2024-12-16T11:47:22.897983+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55688	93.123.85.8	12345	TCP
2024-12-16T11:47:24.073352+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55690	93.123.85.8	12345	TCP
2024-12-16T11:47:25.272641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55692	93.123.85.8	12345	TCP
2024-12-16T11:47:26.447475+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55694	93.123.85.8	12345	TCP
2024-12-16T11:47:27.625112+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55696	93.123.85.8	12345	TCP
2024-12-16T11:47:28.827996+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55698	93.123.85.8	12345	TCP
2024-12-16T11:47:30.002482+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55700	93.123.85.8	12345	TCP
2024-12-16T11:47:31.176750+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55702	93.123.85.8	12345	TCP
2024-12-16T11:47:32.353662+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55704	93.123.85.8	12345	TCP
2024-12-16T11:47:33.530579+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55706	93.123.85.8	12345	TCP
2024-12-16T11:47:34.707769+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55708	93.123.85.8	12345	TCP
2024-12-16T11:47:35.891654+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55710	93.123.85.8	12345	TCP
2024-12-16T11:47:37.066687+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55712	93.123.85.8	12345	TCP
2024-12-16T11:47:38.245872+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55714	93.123.85.8	12345	TCP
2024-12-16T11:47:39.428572+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55716	93.123.85.8	12345	TCP
2024-12-16T11:47:40.602375+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55718	93.123.85.8	12345	TCP
2024-12-16T11:47:41.781429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55720	93.123.85.8	12345	TCP
2024-12-16T11:47:42.956998+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55722	93.123.85.8	12345	TCP
2024-12-16T11:47:44.133688+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55724	93.123.85.8	12345	TCP
2024-12-16T11:47:45.328070+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55726	93.123.85.8	12345	TCP
2024-12-16T11:47:46.502038+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55728	93.123.85.8	12345	TCP
2024-12-16T11:47:47.675594+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55730	93.123.85.8	12345	TCP
2024-12-16T11:47:48.852440+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55732	93.123.85.8	12345	TCP
2024-12-16T11:47:50.026798+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55734	93.123.85.8	12345	TCP
2024-12-16T11:47:51.209114+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55736	93.123.85.8	12345	TCP
2024-12-16T11:47:52.384269+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55738	93.123.85.8	12345	TCP
2024-12-16T11:47:53.560133+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55740	93.123.85.8	12345	TCP
2024-12-16T11:47:54.734635+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55742	93.123.85.8	12345	TCP
2024-12-16T11:47:55.928065+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55744	93.123.85.8	12345	TCP
2024-12-16T11:47:57.107643+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55746	93.123.85.8	12345	TCP
2024-12-16T11:47:58.288778+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55748	93.123.85.8	12345	TCP
2024-12-16T11:47:59.481296+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55750	93.123.85.8	12345	TCP
2024-12-16T11:48:00.658169+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55752	93.123.85.8	12345	TCP
2024-12-16T11:48:01.832929+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55754	93.123.85.8	12345	TCP
2024-12-16T11:48:03.006793+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55756	93.123.85.8	12345	TCP
2024-12-16T11:48:04.181799+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55758	93.123.85.8	12345	TCP
2024-12-16T11:48:05.367627+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55760	93.123.85.8	12345	TCP
2024-12-16T11:48:06.548660+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55762	93.123.85.8	12345	TCP
2024-12-16T11:48:07.728428+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55764	93.123.85.8	12345	TCP
2024-12-16T11:48:08.930935+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55766	93.123.85.8	12345	TCP
2024-12-16T11:48:10.111739+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55768	93.123.85.8	12345	TCP
2024-12-16T11:48:11.285003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55770	93.123.85.8	12345	TCP
2024-12-16T11:48:12.459745+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55772	93.123.85.8	12345	TCP
2024-12-16T11:48:13.634865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55774	93.123.85.8	12345	TCP
2024-12-16T11:48:14.809546+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55776	93.123.85.8	12345	TCP
2024-12-16T11:48:16.006541+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55778	93.123.85.8	12345	TCP
2024-12-16T11:48:17.225468+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55780	93.123.85.8	12345	TCP
2024-12-16T11:48:18.399750+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55782	93.123.85.8	12345	TCP
2024-12-16T11:48:19.576776+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55784	93.123.85.8	12345	TCP
2024-12-16T11:48:20.752493+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55786	93.123.85.8	12345	TCP
2024-12-16T11:48:21.927684+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55788	93.123.85.8	12345	TCP
2024-12-16T11:48:23.115428+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55790	93.123.85.8	12345	TCP
2024-12-16T11:48:24.314487+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55792	93.123.85.8	12345	TCP
2024-12-16T11:48:25.491875+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55794	93.123.85.8	12345	TCP
2024-12-16T11:48:26.668616+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55796	93.123.85.8	12345	TCP
2024-12-16T11:48:27.853302+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55798	93.123.85.8	12345	TCP
2024-12-16T11:48:29.030773+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55800	93.123.85.8	12345	TCP
2024-12-16T11:48:30.310147+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55802	93.123.85.8	12345	TCP
2024-12-16T11:48:31.488387+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55804	93.123.85.8	12345	TCP
2024-12-16T11:48:32.663823+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55806	93.123.85.8	12345	TCP
2024-12-16T11:48:33.842183+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55808	93.123.85.8	12345	TCP
2024-12-16T11:48:35.018711+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55810	93.123.85.8	12345	TCP
2024-12-16T11:48:36.195805+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55812	93.123.85.8	12345	TCP
2024-12-16T11:48:37.373683+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55814	93.123.85.8	12345	TCP
2024-12-16T11:48:38.549022+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55816	93.123.85.8	12345	TCP
2024-12-16T11:48:39.745273+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55818	93.123.85.8	12345	TCP
2024-12-16T11:48:40.922420+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55820	93.123.85.8	12345	TCP
2024-12-16T11:48:42.097618+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55822	93.123.85.8	12345	TCP
2024-12-16T11:48:43.273946+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55824	93.123.85.8	12345	TCP
2024-12-16T11:48:44.449474+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55826	93.123.85.8	12345	TCP
2024-12-16T11:48:45.644408+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55828	93.123.85.8	12345	TCP
2024-12-16T11:48:46.899641+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55830	93.123.85.8	12345	TCP
2024-12-16T11:48:48.132736+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55832	93.123.85.8	12345	TCP
2024-12-16T11:48:49.311220+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55834	93.123.85.8	12345	TCP
2024-12-16T11:48:50.492003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55836	93.123.85.8	12345	TCP
2024-12-16T11:48:51.667584+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55838	93.123.85.8	12345	TCP
2024-12-16T11:48:52.843085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55840	93.123.85.8	12345	TCP
2024-12-16T11:48:54.021335+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55842	93.123.85.8	12345	TCP
2024-12-16T11:48:55.198208+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55844	93.123.85.8	12345	TCP
2024-12-16T11:48:56.372027+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55846	93.123.85.8	12345	TCP
2024-12-16T11:48:57.546879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55848	93.123.85.8	12345	TCP
2024-12-16T11:48:58.727016+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55850	93.123.85.8	12345	TCP
2024-12-16T11:48:59.901403+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55852	93.123.85.8	12345	TCP
2024-12-16T11:49:01.076508+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55854	93.123.85.8	12345	TCP
2024-12-16T11:49:02.254357+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55856	93.123.85.8	12345	TCP
2024-12-16T11:49:03.428234+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55858	93.123.85.8	12345	TCP
2024-12-16T11:49:04.603234+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55860	93.123.85.8	12345	TCP
2024-12-16T11:49:05.780741+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55862	93.123.85.8	12345	TCP
2024-12-16T11:49:06.953782+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55864	93.123.85.8	12345	TCP
2024-12-16T11:49:08.128424+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55866	93.123.85.8	12345	TCP
2024-12-16T11:49:09.304921+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55868	93.123.85.8	12345	TCP
2024-12-16T11:49:10.479308+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55870	93.123.85.8	12345	TCP
2024-12-16T11:49:11.663946+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55872	93.123.85.8	12345	TCP
2024-12-16T11:49:12.840997+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55874	93.123.85.8	12345	TCP
2024-12-16T11:49:14.025508+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55876	93.123.85.8	12345	TCP
2024-12-16T11:49:15.198301+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55878	93.123.85.8	12345	TCP
2024-12-16T11:49:16.371545+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55880	93.123.85.8	12345	TCP
2024-12-16T11:49:17.545462+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55882	93.123.85.8	12345	TCP
2024-12-16T11:49:18.726702+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55884	93.123.85.8	12345	TCP
2024-12-16T11:49:19.901018+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55886	93.123.85.8	12345	TCP
2024-12-16T11:49:21.088493+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55888	93.123.85.8	12345	TCP
2024-12-16T11:49:22.264603+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55890	93.123.85.8	12345	TCP
2024-12-16T11:49:23.453213+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55892	93.123.85.8	12345	TCP
2024-12-16T11:49:24.628096+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55894	93.123.85.8	12345	TCP
2024-12-16T11:49:25.806610+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55896	93.123.85.8	12345	TCP
2024-12-16T11:49:26.984037+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55898	93.123.85.8	12345	TCP
2024-12-16T11:49:28.169457+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55900	93.123.85.8	12345	TCP
2024-12-16T11:49:29.346073+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55902	93.123.85.8	12345	TCP
2024-12-16T11:49:30.520535+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55904	93.123.85.8	12345	TCP
2024-12-16T11:49:31.703848+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55906	93.123.85.8	12345	TCP
2024-12-16T11:49:32.885168+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55908	93.123.85.8	12345	TCP
2024-12-16T11:49:34.064094+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55910	93.123.85.8	12345	TCP
2024-12-16T11:49:35.238796+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55912	93.123.85.8	12345	TCP
2024-12-16T11:49:36.414181+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55914	93.123.85.8	12345	TCP
2024-12-16T11:49:37.589167+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55916	93.123.85.8	12345	TCP
2024-12-16T11:49:38.764735+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55918	93.123.85.8	12345	TCP
2024-12-16T11:49:39.941519+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55920	93.123.85.8	12345	TCP
2024-12-16T11:49:41.117781+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55922	93.123.85.8	12345	TCP
2024-12-16T11:49:42.294094+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55924	93.123.85.8	12345	TCP
2024-12-16T11:49:43.470372+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55926	93.123.85.8	12345	TCP
2024-12-16T11:49:44.646607+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55928	93.123.85.8	12345	TCP
2024-12-16T11:49:45.822014+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55930	93.123.85.8	12345	TCP
2024-12-16T11:49:46.996055+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55932	93.123.85.8	12345	TCP
2024-12-16T11:49:48.170243+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55934	93.123.85.8	12345	TCP
2024-12-16T11:49:49.345523+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55936	93.123.85.8	12345	TCP
2024-12-16T11:49:50.528979+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55938	93.123.85.8	12345	TCP
2024-12-16T11:49:51.705127+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55940	93.123.85.8	12345	TCP
2024-12-16T11:49:52.882585+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55942	93.123.85.8	12345	TCP
2024-12-16T11:49:54.072432+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55944	93.123.85.8	12345	TCP
2024-12-16T11:49:55.249194+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55946	93.123.85.8	12345	TCP
2024-12-16T11:49:56.424537+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55948	93.123.85.8	12345	TCP
2024-12-16T11:49:57.599651+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55950	93.123.85.8	12345	TCP
2024-12-16T11:49:58.773271+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55952	93.123.85.8	12345	TCP
2024-12-16T11:49:59.950092+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55954	93.123.85.8	12345	TCP
2024-12-16T11:50:01.125091+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55956	93.123.85.8	12345	TCP
2024-12-16T11:50:02.306443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55958	93.123.85.8	12345	TCP
2024-12-16T11:50:03.482960+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55960	93.123.85.8	12345	TCP
2024-12-16T11:50:04.658754+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55962	93.123.85.8	12345	TCP
2024-12-16T11:50:05.832801+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55964	93.123.85.8	12345	TCP
2024-12-16T11:50:07.006804+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55966	93.123.85.8	12345	TCP
2024-12-16T11:50:08.186190+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55968	93.123.85.8	12345	TCP
2024-12-16T11:50:09.361835+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55970	93.123.85.8	12345	TCP
2024-12-16T11:50:10.540611+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55972	93.123.85.8	12345	TCP
2024-12-16T11:50:11.714849+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55974	93.123.85.8	12345	TCP
2024-12-16T11:50:12.889287+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55976	93.123.85.8	12345	TCP
2024-12-16T11:50:14.065025+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55978	93.123.85.8	12345	TCP
2024-12-16T11:50:15.239196+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55980	93.123.85.8	12345	TCP
2024-12-16T11:50:16.416075+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55982	93.123.85.8	12345	TCP
2024-12-16T11:50:17.591554+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55984	93.123.85.8	12345	TCP
2024-12-16T11:50:18.767357+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55986	93.123.85.8	12345	TCP
2024-12-16T11:50:19.951913+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55988	93.123.85.8	12345	TCP
2024-12-16T11:50:21.393322+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55990	93.123.85.8	12345	TCP
2024-12-16T11:50:22.567990+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55992	93.123.85.8	12345	TCP
2024-12-16T11:50:23.749923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55994	93.123.85.8	12345	TCP
2024-12-16T11:50:24.926112+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55996	93.123.85.8	12345	TCP
2024-12-16T11:50:26.104934+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	55998	93.123.85.8	12345	TCP
2024-12-16T11:50:27.287555+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56000	93.123.85.8	12345	TCP
2024-12-16T11:50:28.463323+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56002	93.123.85.8	12345	TCP
2024-12-16T11:50:29.642712+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56004	93.123.85.8	12345	TCP
2024-12-16T11:50:30.817282+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56006	93.123.85.8	12345	TCP
2024-12-16T11:50:31.994236+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56008	93.123.85.8	12345	TCP
2024-12-16T11:50:33.183150+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56010	93.123.85.8	12345	TCP
2024-12-16T11:50:34.369617+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56012	93.123.85.8	12345	TCP
2024-12-16T11:50:35.544297+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56014	93.123.85.8	12345	TCP
2024-12-16T11:50:36.718538+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56016	93.123.85.8	12345	TCP
2024-12-16T11:50:37.904369+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56018	93.123.85.8	12345	TCP
2024-12-16T11:50:39.078966+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56020	93.123.85.8	12345	TCP
2024-12-16T11:50:40.253609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56022	93.123.85.8	12345	TCP
2024-12-16T11:50:41.427379+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56024	93.123.85.8	12345	TCP
2024-12-16T11:50:42.600060+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56026	93.123.85.8	12345	TCP
2024-12-16T11:50:43.784480+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56028	93.123.85.8	12345	TCP
2024-12-16T11:50:44.959609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	56030	93.123.85.8	12345	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 11:47:08.881134033 CET	43928	443	192.168.2.23	91.189.91.42
Dec 16, 2024 11:47:11.004461050 CET	55668	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:11.124150038 CET	12345	55668	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:11.124198914 CET	55668	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:11.125195980 CET	55668	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:11.245105982 CET	12345	55668	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:12.192454100 CET	12345	55668	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:12.192465067 CET	12345	55668	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:12.192589045 CET	55668	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:12.193304062 CET	55668	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:12.194464922 CET	55670	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:12.312957048 CET	12345	55668	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:12.314260960 CET	12345	55670	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:12.314328909 CET	55670	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:12.314402103 CET	55670	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:12.434098959 CET	12345	55670	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:13.369875908 CET	12345	55670	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:13.369963884 CET	12345	55670	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:13.370253086 CET	55670	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:13.370253086 CET	55670	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:13.371336937 CET	55672	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:13.490334034 CET	12345	55670	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:13.491275072 CET	12345	55672	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:13.491501093 CET	55672	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:13.491549969 CET	55672	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:13.611351967 CET	12345	55672	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:14.512465000 CET	42836	443	192.168.2.23	91.189.91.43
Dec 16, 2024 11:47:14.545958996 CET	12345	55672	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:14.546070099 CET	12345	55672	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:14.546266079 CET	55672	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:14.546266079 CET	55672	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:14.547080040 CET	55674	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:14.666249990 CET	12345	55672	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:14.666882038 CET	12345	55674	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:14.667112112 CET	55674	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:14.667161942 CET	55674	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:14.786938906 CET	12345	55674	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:15.721100092 CET	12345	55674	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:15.721595049 CET	55674	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:15.721736908 CET	12345	55674	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:15.721810102 CET	55674	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:15.722639084 CET	55676	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:15.841631889 CET	12345	55674	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:15.842448950 CET	12345	55676	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:15.842685938 CET	55676	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:15.842685938 CET	55676	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:15.962733984 CET	12345	55676	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:16.048222065 CET	42516	80	192.168.2.23	109.202.202.202
Dec 16, 2024 11:47:16.894629955 CET	12345	55676	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:16.894689083 CET	12345	55676	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:16.894818068 CET	55676	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:16.894910097 CET	55676	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:16.895829916 CET	55678	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:17.014811993 CET	12345	55676	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:17.015566111 CET	12345	55678	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:17.015636921 CET	55678	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:17.015808105 CET	55678	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:17.135746002 CET	12345	55678	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:18.069583893 CET	12345	55678	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:18.069645882 CET	12345	55678	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:18.069860935 CET	55678	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:18.069861889 CET	55678	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:18.070442915 CET	55680	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:18.189784050 CET	12345	55678	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:18.190207005 CET	12345	55680	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:18.190277100 CET	55680	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:18.190327883 CET	55680	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:18.310169935 CET	12345	55680	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:19.241801977 CET	12345	55680	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:19.241862059 CET	12345	55680	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:19.241957903 CET	55680	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:19.242006063 CET	55680	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:19.242901087 CET	55682	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:19.361819983 CET	12345	55680	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:19.362658024 CET	12345	55682	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:19.362766027 CET	55682	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:19.362809896 CET	55682	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:19.482774019 CET	12345	55682	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:20.414962053 CET	12345	55682	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:20.415088892 CET	12345	55682	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:20.415105104 CET	55682	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:20.415167093 CET	55682	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:20.415798903 CET	55684	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:20.534902096 CET	12345	55682	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:20.535459995 CET	12345	55684	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:20.535625935 CET	55684	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:20.535711050 CET	55684	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:20.655826092 CET	12345	55684	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:21.594552994 CET	12345	55684	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:21.594676971 CET	12345	55684	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:21.594774961 CET	55684	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:21.594860077 CET	55684	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:21.595698118 CET	55686	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:21.722503901 CET	12345	55684	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:21.722520113 CET	12345	55686	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:21.722668886 CET	55686	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:21.722842932 CET	55686	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:21.844218016 CET	12345	55686	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:22.775460005 CET	12345	55686	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:22.775495052 CET	12345	55686	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:22.775592089 CET	55686	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:22.775640965 CET	55686	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:22.776315928 CET	55688	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:22.896064997 CET	12345	55686	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:22.897830963 CET	12345	55688	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:22.897937059 CET	55688	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:22.897983074 CET	55688	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:23.018094063 CET	12345	55688	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:23.951819897 CET	12345	55688	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:23.952049971 CET	55688	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:23.952167988 CET	12345	55688	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:23.952227116 CET	55688	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:23.953159094 CET	55690	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:24.072134018 CET	12345	55688	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:24.073110104 CET	12345	55690	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:24.073226929 CET	55690	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:24.073352098 CET	55690	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:24.197526932 CET	12345	55690	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:25.151269913 CET	12345	55690	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:25.151397943 CET	12345	55690	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:25.151448011 CET	55690	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:25.151609898 CET	55690	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:25.152646065 CET	55692	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:25.271373034 CET	12345	55690	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:25.272381067 CET	12345	55692	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:25.272500038 CET	55692	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:25.272640944 CET	55692	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:25.392698050 CET	12345	55692	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:26.325166941 CET	12345	55692	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:26.325437069 CET	12345	55692	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:26.325628996 CET	55692	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:26.325712919 CET	55692	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:26.326776028 CET	55694	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:26.445904970 CET	12345	55692	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:26.447201014 CET	12345	55694	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:26.447360039 CET	55694	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:26.447474957 CET	55694	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:26.567137957 CET	12345	55694	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:27.503102064 CET	12345	55694	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:27.503149033 CET	12345	55694	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:27.503395081 CET	55694	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:27.503726959 CET	55694	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:27.504935980 CET	55696	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:27.623497963 CET	12345	55694	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:27.624806881 CET	12345	55696	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:27.624979973 CET	55696	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:27.625112057 CET	55696	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:27.744973898 CET	12345	55696	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:28.704798937 CET	12345	55696	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:28.704915047 CET	12345	55696	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:28.705034018 CET	55696	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:28.705272913 CET	55696	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:28.706465960 CET	55698	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:28.826754093 CET	12345	55696	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:28.827688932 CET	12345	55698	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:28.827996016 CET	55698	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:28.827996016 CET	55698	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:28.846339941 CET	43928	443	192.168.2.23	91.189.91.42
Dec 16, 2024 11:47:28.948307991 CET	12345	55698	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:29.880300045 CET	12345	55698	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:29.880348921 CET	12345	55698	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:29.880767107 CET	55698	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:29.880768061 CET	55698	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:29.881702900 CET	55700	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:30.001223087 CET	12345	55698	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:30.002150059 CET	12345	55700	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:30.002322912 CET	55700	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:30.002481937 CET	55700	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:30.122343063 CET	12345	55700	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:31.054796934 CET	12345	55700	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:31.054845095 CET	12345	55700	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:31.055104017 CET	55700	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:31.055104971 CET	55700	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:31.056231022 CET	55702	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:31.175442934 CET	12345	55700	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:31.176316023 CET	12345	55702	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:31.176582098 CET	55702	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:31.176749945 CET	55702	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:31.296715975 CET	12345	55702	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:32.231915951 CET	12345	55702	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:32.232023954 CET	12345	55702	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:32.232044935 CET	55702	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:32.232203007 CET	55702	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:32.233277082 CET	55704	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:32.352003098 CET	12345	55702	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:32.353076935 CET	12345	55704	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:32.353307009 CET	55704	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:32.353662014 CET	55704	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:32.473839998 CET	12345	55704	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:33.408587933 CET	12345	55704	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:33.408660889 CET	12345	55704	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:33.409002066 CET	55704	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:33.409003019 CET	55704	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:33.410054922 CET	55706	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:33.529305935 CET	12345	55704	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:33.530149937 CET	12345	55706	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:33.530577898 CET	55706	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:33.530579090 CET	55706	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:33.650892973 CET	12345	55706	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:34.584323883 CET	12345	55706	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:34.584371090 CET	12345	55706	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:34.584837914 CET	55706	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:34.585124969 CET	55706	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:34.586981058 CET	55708	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:34.705383062 CET	12345	55706	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:34.707235098 CET	12345	55708	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:34.707498074 CET	55708	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:34.707768917 CET	55708	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:34.827738047 CET	12345	55708	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:35.768966913 CET	12345	55708	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:35.768990040 CET	12345	55708	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:35.769385099 CET	55708	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:35.769697905 CET	55708	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:35.771578074 CET	55710	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:35.889617920 CET	12345	55708	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:35.891303062 CET	12345	55710	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:35.891388893 CET	55710	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:35.891654015 CET	55710	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:36.011905909 CET	12345	55710	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:36.943994999 CET	12345	55710	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:36.944035053 CET	12345	55710	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:36.944283009 CET	55710	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:36.944514036 CET	55710	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:36.945785999 CET	55712	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:37.064598083 CET	12345	55710	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:37.066363096 CET	12345	55712	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:37.066544056 CET	55712	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:37.066687107 CET	55712	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:37.186667919 CET	12345	55712	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:38.122436047 CET	12345	55712	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:38.122474909 CET	12345	55712	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:38.122927904 CET	55712	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:38.123142004 CET	55712	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:38.125797987 CET	55714	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:38.243062973 CET	12345	55712	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:38.245743036 CET	12345	55714	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:38.245831966 CET	55714	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:38.245872021 CET	55714	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:38.367310047 CET	12345	55714	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:39.307122946 CET	12345	55714	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:39.307178974 CET	12345	55714	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:39.307363033 CET	55714	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:39.307460070 CET	55714	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:39.308422089 CET	55716	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:39.427369118 CET	12345	55714	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:39.428324938 CET	12345	55716	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:39.428481102 CET	55716	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:39.428571939 CET	55716	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:39.548649073 CET	12345	55716	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:40.480684042 CET	12345	55716	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:40.480956078 CET	12345	55716	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:40.481020927 CET	55716	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:40.481178045 CET	55716	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:40.482327938 CET	55718	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:40.600902081 CET	12345	55716	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:40.602089882 CET	12345	55718	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:40.602205992 CET	55718	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:40.602375031 CET	55718	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:40.722143888 CET	12345	55718	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:41.132792950 CET	42836	443	192.168.2.23	91.189.91.43
Dec 16, 2024 11:47:41.660231113 CET	12345	55718	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:41.660320997 CET	12345	55718	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:41.660609961 CET	55718	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:41.660610914 CET	55718	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:41.661453009 CET	55720	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:41.780529976 CET	12345	55718	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:41.781177998 CET	12345	55720	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:41.781300068 CET	55720	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:41.781429052 CET	55720	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:41.901161909 CET	12345	55720	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:42.834815025 CET	12345	55720	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:42.834855080 CET	12345	55720	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:42.835119009 CET	55720	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:42.835261106 CET	55720	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:42.836704016 CET	55722	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:42.955202103 CET	12345	55720	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:42.956629038 CET	12345	55722	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:42.956757069 CET	55722	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:42.956998110 CET	55722	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:43.076903105 CET	12345	55722	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:44.009644985 CET	12345	55722	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:44.010056019 CET	55722	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:44.010240078 CET	12345	55722	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:44.010536909 CET	55722	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:44.013237953 CET	55724	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:44.130448103 CET	12345	55722	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:44.133198023 CET	12345	55724	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:44.133455038 CET	55724	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:44.133687973 CET	55724	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:44.253398895 CET	12345	55724	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:45.206079960 CET	12345	55724	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:45.206132889 CET	12345	55724	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:45.206394911 CET	55724	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:45.206526041 CET	55724	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:45.207699060 CET	55726	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:45.326457024 CET	12345	55724	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:45.327723980 CET	12345	55726	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:45.327898026 CET	55726	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:45.328069925 CET	55726	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:45.447918892 CET	12345	55726	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:46.380142927 CET	12345	55726	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:46.380194902 CET	12345	55726	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:46.380561113 CET	55726	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:46.380620003 CET	55726	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:46.381799936 CET	55728	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:46.500694990 CET	12345	55726	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:46.501650095 CET	12345	55728	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:46.501986980 CET	55728	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:46.502038002 CET	55728	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:46.622714043 CET	12345	55728	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:47.275913000 CET	42516	80	192.168.2.23	109.202.202.202
Dec 16, 2024 11:47:47.553705931 CET	12345	55728	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:47.553777933 CET	12345	55728	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:47.553881884 CET	55728	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:47.554162025 CET	55728	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:47.555259943 CET	55730	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:47.674566984 CET	12345	55728	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:47.675427914 CET	12345	55730	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:47.675543070 CET	55730	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:47.675594091 CET	55730	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:47.795538902 CET	12345	55730	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:48.730912924 CET	12345	55730	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:48.730962992 CET	12345	55730	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:48.731055975 CET	55730	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:48.731353998 CET	55730	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:48.732280970 CET	55732	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:48.851358891 CET	12345	55730	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:48.852047920 CET	12345	55732	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:48.852161884 CET	55732	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:48.852440119 CET	55732	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:48.972218990 CET	12345	55732	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:49.905214071 CET	12345	55732	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:49.905261993 CET	12345	55732	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:49.905498028 CET	55732	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:49.905498028 CET	55732	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:49.906579018 CET	55734	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:50.025590897 CET	12345	55732	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:50.026573896 CET	12345	55734	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:50.026706934 CET	55734	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:50.026798010 CET	55734	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:50.146806002 CET	12345	55734	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:51.080307961 CET	12345	55734	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:51.080327034 CET	12345	55734	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:51.080528975 CET	55734	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:51.080627918 CET	55734	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:51.081782103 CET	55736	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:51.208873987 CET	12345	55734	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:51.208914042 CET	12345	55736	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:51.209038973 CET	55736	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:51.209114075 CET	55736	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:51.329098940 CET	12345	55736	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:52.262486935 CET	12345	55736	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:52.262547016 CET	12345	55736	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:52.262990952 CET	55736	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:52.262990952 CET	55736	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:52.264272928 CET	55738	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:52.383059978 CET	12345	55736	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:52.383989096 CET	12345	55738	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:52.384145021 CET	55738	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:52.384268999 CET	55738	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:52.504118919 CET	12345	55738	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:53.438580036 CET	12345	55738	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:53.438695908 CET	12345	55738	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:53.438883066 CET	55738	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:53.439038038 CET	55738	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:53.440131903 CET	55740	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:53.558722019 CET	12345	55738	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:53.559865952 CET	12345	55740	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:53.560060978 CET	55740	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:53.560132980 CET	55740	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:53.679954052 CET	12345	55740	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:54.612673998 CET	12345	55740	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:54.612724066 CET	12345	55740	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:54.613194942 CET	55740	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:54.613194942 CET	55740	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:54.614303112 CET	55742	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:54.733577013 CET	12345	55740	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:54.734380960 CET	12345	55742	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:54.734633923 CET	55742	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:54.734635115 CET	55742	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:54.854571104 CET	12345	55742	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:55.806999922 CET	12345	55742	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:55.807049990 CET	12345	55742	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:55.807132006 CET	55742	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:55.807213068 CET	55742	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:55.808079004 CET	55744	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:55.927072048 CET	12345	55742	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:55.927860022 CET	12345	55744	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:55.928064108 CET	55744	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:55.928065062 CET	55744	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:56.048269987 CET	12345	55744	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:56.986625910 CET	12345	55744	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:56.986704111 CET	12345	55744	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:56.986912012 CET	55744	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:56.987001896 CET	55744	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:56.987564087 CET	55746	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:57.107038021 CET	12345	55744	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:57.107378960 CET	12345	55746	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:57.107552052 CET	55746	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:57.107642889 CET	55746	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:57.227691889 CET	12345	55746	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:58.167851925 CET	12345	55746	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:58.167916059 CET	55746	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:58.167927980 CET	12345	55746	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:58.168046951 CET	55746	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:58.168659925 CET	55748	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:58.287993908 CET	12345	55746	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:58.288508892 CET	12345	55748	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:58.288662910 CET	55748	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:58.288778067 CET	55748	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:58.409102917 CET	12345	55748	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:59.359666109 CET	12345	55748	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:59.359714985 CET	12345	55748	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:59.359834909 CET	55748	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:59.359942913 CET	55748	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:59.360949039 CET	55750	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:59.480561972 CET	12345	55748	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:59.481076002 CET	12345	55750	93.123.85.8	192.168.2.23
Dec 16, 2024 11:47:59.481261969 CET	55750	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:59.481296062 CET	55750	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:47:59.601650000 CET	12345	55750	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:00.534356117 CET	12345	55750	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:00.534456015 CET	12345	55750	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:00.534899950 CET	55750	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:00.534987926 CET	55750	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:00.537501097 CET	55752	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:00.655456066 CET	12345	55750	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:00.657845020 CET	12345	55752	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:00.657996893 CET	55752	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:00.658169031 CET	55752	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:00.778383017 CET	12345	55752	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:01.711298943 CET	12345	55752	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:01.711617947 CET	12345	55752	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:01.711688995 CET	55752	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:01.711772919 CET	55752	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:01.712637901 CET	55754	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:01.831990004 CET	12345	55752	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:01.832442045 CET	12345	55754	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:01.832658052 CET	55754	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:01.832928896 CET	55754	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:01.953429937 CET	12345	55754	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:02.885040045 CET	12345	55754	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:02.885277987 CET	55754	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:02.885548115 CET	12345	55754	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:02.885725021 CET	55754	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:02.886689901 CET	55756	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:03.005563021 CET	12345	55754	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:03.006531000 CET	12345	55756	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:03.006793022 CET	55756	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:03.006793022 CET	55756	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:03.126600027 CET	12345	55756	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:04.059994936 CET	12345	55756	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:04.060040951 CET	12345	55756	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:04.060336113 CET	55756	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:04.060488939 CET	55756	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:04.061491966 CET	55758	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:04.180270910 CET	12345	55756	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:04.181291103 CET	12345	55758	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:04.181440115 CET	55758	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:04.181798935 CET	55758	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:04.301688910 CET	12345	55758	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:05.236726999 CET	12345	55758	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:05.237011909 CET	55758	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:05.246484041 CET	12345	55758	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:05.246658087 CET	55758	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:05.247512102 CET	55760	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:05.366920948 CET	12345	55758	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:05.367341995 CET	12345	55760	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:05.367579937 CET	55760	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:05.367626905 CET	55760	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:05.487462997 CET	12345	55760	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:06.427243948 CET	12345	55760	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:06.427381039 CET	12345	55760	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:06.427536964 CET	55760	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:06.427679062 CET	55760	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:06.428479910 CET	55762	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:06.547867060 CET	12345	55760	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:06.548329115 CET	12345	55762	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:06.548562050 CET	55762	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:06.548660040 CET	55762	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:06.757216930 CET	12345	55762	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:07.606751919 CET	12345	55762	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:07.606878996 CET	12345	55762	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:07.606901884 CET	55762	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:07.607064009 CET	55762	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:07.608128071 CET	55764	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:07.727214098 CET	12345	55762	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:07.728060007 CET	12345	55764	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:07.728337049 CET	55764	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:07.728427887 CET	55764	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:07.848421097 CET	12345	55764	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:08.809252024 CET	12345	55764	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:08.809300900 CET	12345	55764	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:08.809473991 CET	55764	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:08.809617996 CET	55764	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:08.810734034 CET	55766	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:08.930224895 CET	12345	55764	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:08.930676937 CET	12345	55766	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:08.930809975 CET	55766	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:08.930934906 CET	55766	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:09.050685883 CET	12345	55766	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:09.800858021 CET	43928	443	192.168.2.23	91.189.91.42
Dec 16, 2024 11:48:09.988368034 CET	12345	55766	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:09.988403082 CET	12345	55766	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:09.988868952 CET	55766	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:09.988868952 CET	55766	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:09.991450071 CET	55768	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:10.109605074 CET	12345	55766	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:10.111433983 CET	12345	55768	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:10.111603022 CET	55768	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:10.111738920 CET	55768	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:10.231688023 CET	12345	55768	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:11.163305044 CET	12345	55768	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:11.163562059 CET	12345	55768	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:11.163564920 CET	55768	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:11.163768053 CET	55768	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:11.164654970 CET	55770	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:11.283608913 CET	12345	55768	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:11.284605026 CET	12345	55770	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:11.285002947 CET	55770	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:11.285002947 CET	55770	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:11.405833960 CET	12345	55770	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:12.337869883 CET	12345	55770	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:12.338099957 CET	12345	55770	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:12.338116884 CET	55770	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:12.338323116 CET	55770	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:12.339709997 CET	55772	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:12.458704948 CET	12345	55770	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:12.459489107 CET	12345	55772	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:12.459578991 CET	55772	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:12.459744930 CET	55772	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:12.579457998 CET	12345	55772	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:13.511483908 CET	12345	55772	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:13.511631966 CET	12345	55772	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:13.512003899 CET	55772	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:13.512104034 CET	55772	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:13.514168024 CET	55774	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:13.632630110 CET	12345	55772	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:13.634300947 CET	12345	55774	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:13.634864092 CET	55774	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:13.634865046 CET	55774	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:13.755460024 CET	12345	55774	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:14.687549114 CET	12345	55774	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:14.687596083 CET	12345	55774	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:14.687742949 CET	55774	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:14.687897921 CET	55774	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:14.689075947 CET	55776	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:14.808283091 CET	12345	55774	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:14.808974028 CET	12345	55776	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:14.809364080 CET	55776	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:14.809545994 CET	55776	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:14.949399948 CET	12345	55776	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:15.883199930 CET	12345	55776	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:15.883249044 CET	12345	55776	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:15.883722067 CET	55776	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:15.883817911 CET	55776	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:15.886043072 CET	55778	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:16.003657103 CET	12345	55776	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:16.005892038 CET	12345	55778	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:16.006336927 CET	55778	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:16.006541014 CET	55778	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:16.126663923 CET	12345	55778	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:17.101898909 CET	12345	55778	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:17.101947069 CET	12345	55778	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:17.102260113 CET	55778	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:17.102458000 CET	55778	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:17.104845047 CET	55780	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:17.222400904 CET	12345	55778	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:17.224992990 CET	12345	55780	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:17.225229025 CET	55780	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:17.225467920 CET	55780	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:17.345381021 CET	12345	55780	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:18.276895046 CET	12345	55780	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:18.277069092 CET	12345	55780	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:18.277343988 CET	55780	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:18.277501106 CET	55780	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:18.279614925 CET	55782	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:18.397886992 CET	12345	55780	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:18.399427891 CET	12345	55782	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:18.399749994 CET	55782	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:18.399749994 CET	55782	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:18.519568920 CET	12345	55782	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:19.454080105 CET	12345	55782	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:19.454134941 CET	12345	55782	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:19.454442024 CET	55782	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:19.454490900 CET	55782	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:19.455981016 CET	55784	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:19.574281931 CET	12345	55782	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:19.576195955 CET	12345	55784	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:19.576560974 CET	55784	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:19.576776028 CET	55784	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:19.696549892 CET	12345	55784	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:20.629388094 CET	12345	55784	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:20.629434109 CET	12345	55784	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:20.629803896 CET	55784	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:20.630151033 CET	55784	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:20.631694078 CET	55786	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:20.750549078 CET	12345	55784	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:20.751878023 CET	12345	55786	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:20.752409935 CET	55786	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:20.752492905 CET	55786	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:20.872802019 CET	12345	55786	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:21.805470943 CET	12345	55786	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:21.805579901 CET	12345	55786	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:21.805810928 CET	55786	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:21.806085110 CET	55786	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:21.807244062 CET	55788	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:21.925937891 CET	12345	55786	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:21.927058935 CET	12345	55788	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:21.927264929 CET	55788	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:21.927684069 CET	55788	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:22.047513008 CET	12345	55788	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:22.991594076 CET	12345	55788	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:22.991648912 CET	12345	55788	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:22.991812944 CET	55788	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:22.991812944 CET	55788	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:22.994743109 CET	55790	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:23.111938000 CET	12345	55788	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:23.114797115 CET	12345	55790	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:23.115284920 CET	55790	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:23.115427971 CET	55790	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:23.235549927 CET	12345	55790	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:24.190716982 CET	12345	55790	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:24.190768003 CET	12345	55790	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:24.191164017 CET	55790	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:24.191411972 CET	55790	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:24.193331003 CET	55792	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:24.311568975 CET	12345	55790	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:24.313694954 CET	12345	55792	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:24.314323902 CET	55792	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:24.314486980 CET	55792	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:24.434763908 CET	12345	55792	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:25.367120981 CET	12345	55792	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:25.367175102 CET	12345	55792	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:25.367784023 CET	55792	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:25.367784977 CET	55792	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:25.371027946 CET	55794	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:25.488215923 CET	12345	55792	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:25.491125107 CET	12345	55794	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:25.491766930 CET	55794	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:25.491874933 CET	55794	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:25.612495899 CET	12345	55794	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:26.545229912 CET	12345	55794	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:26.545380116 CET	12345	55794	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:26.545797110 CET	55794	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:26.546005964 CET	55794	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:26.547832012 CET	55796	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:26.666047096 CET	12345	55794	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:26.667911053 CET	12345	55796	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:26.668343067 CET	55796	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:26.668616056 CET	55796	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:26.788542032 CET	12345	55796	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:27.727879047 CET	12345	55796	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:27.727998972 CET	12345	55796	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:27.728370905 CET	55796	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:27.728481054 CET	55796	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:27.731550932 CET	55798	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:27.848788977 CET	12345	55796	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:27.852612019 CET	12345	55798	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:27.853193045 CET	55798	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:27.853302002 CET	55798	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:27.973678112 CET	12345	55798	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:28.907409906 CET	12345	55798	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:28.907474041 CET	12345	55798	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:28.907752991 CET	55798	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:28.907753944 CET	55798	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:28.910286903 CET	55800	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:29.028315067 CET	12345	55798	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:29.030342102 CET	12345	55800	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:29.030715942 CET	55800	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:29.030772924 CET	55800	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:29.151519060 CET	12345	55800	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:30.083971977 CET	12345	55800	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:30.084031105 CET	12345	55800	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:30.084415913 CET	55800	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:30.084609985 CET	55800	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:30.087707043 CET	55802	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:30.309482098 CET	12345	55800	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:30.309519053 CET	12345	55802	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:30.309919119 CET	55802	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:30.310147047 CET	55802	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:30.430886030 CET	12345	55802	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:31.364200115 CET	12345	55802	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:31.364257097 CET	12345	55802	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:31.364651918 CET	55802	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:31.364738941 CET	55802	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:31.367140055 CET	55804	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:31.485544920 CET	12345	55802	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:31.488080025 CET	12345	55804	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:31.488387108 CET	55804	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:31.488387108 CET	55804	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:31.609272003 CET	12345	55804	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:32.540963888 CET	12345	55804	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:32.541028976 CET	12345	55804	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:32.541271925 CET	55804	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:32.541271925 CET	55804	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:32.543593884 CET	55806	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:32.661809921 CET	12345	55804	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:32.663485050 CET	12345	55806	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:32.663821936 CET	55806	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:32.663822889 CET	55806	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:32.784816980 CET	12345	55806	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:33.717051983 CET	12345	55806	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:33.717075109 CET	12345	55806	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:33.717641115 CET	55806	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:33.718013048 CET	55806	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:33.721045971 CET	55808	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:33.838301897 CET	12345	55806	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:33.841634035 CET	12345	55808	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:33.842183113 CET	55808	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:33.842183113 CET	55808	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:33.962404966 CET	12345	55808	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:34.894706011 CET	12345	55808	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:34.894731045 CET	12345	55808	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:34.895292044 CET	55808	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:34.895437002 CET	55808	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:34.897752047 CET	55810	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:35.015455008 CET	12345	55808	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:35.017761946 CET	12345	55810	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:35.018361092 CET	55810	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:35.018711090 CET	55810	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:35.139050007 CET	12345	55810	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:36.071932077 CET	12345	55810	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:36.072076082 CET	12345	55810	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:36.072494984 CET	55810	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:36.072788954 CET	55810	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:36.075208902 CET	55812	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:36.192944050 CET	12345	55810	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:36.195089102 CET	12345	55812	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:36.195444107 CET	55812	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:36.195805073 CET	55812	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:36.317487001 CET	12345	55812	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:37.249969006 CET	12345	55812	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:37.249999046 CET	12345	55812	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:37.250410080 CET	55812	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:37.250650883 CET	55812	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:37.253170967 CET	55814	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:37.370697021 CET	12345	55812	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:37.373003960 CET	12345	55814	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:37.373568058 CET	55814	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:37.373682976 CET	55814	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:37.493876934 CET	12345	55814	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:38.426680088 CET	12345	55814	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:38.426701069 CET	12345	55814	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:38.426987886 CET	55814	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:38.427078962 CET	55814	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:38.428472042 CET	55816	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:38.547401905 CET	12345	55814	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:38.548337936 CET	12345	55816	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:38.548746109 CET	55816	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:38.549021959 CET	55816	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:38.669128895 CET	12345	55816	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:39.622078896 CET	12345	55816	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:39.622184038 CET	12345	55816	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:39.622723103 CET	55816	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:39.622724056 CET	55816	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:39.624713898 CET	55818	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:39.743541956 CET	12345	55816	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:39.744620085 CET	12345	55818	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:39.745110035 CET	55818	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:39.745273113 CET	55818	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:39.865724087 CET	12345	55818	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:40.798573017 CET	12345	55818	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:40.798621893 CET	12345	55818	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:40.799128056 CET	55818	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:40.799236059 CET	55818	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:40.801793098 CET	55820	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:40.919547081 CET	12345	55818	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:40.921854019 CET	12345	55820	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:40.922214985 CET	55820	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:40.922420025 CET	55820	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:41.042610884 CET	12345	55820	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:41.973790884 CET	12345	55820	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:41.974231005 CET	12345	55820	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:41.974329948 CET	55820	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:41.974416971 CET	55820	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:41.977282047 CET	55822	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:42.094654083 CET	12345	55820	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:42.097037077 CET	12345	55822	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:42.097465992 CET	55822	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:42.097618103 CET	55822	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:42.217782021 CET	12345	55822	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:43.149621010 CET	12345	55822	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:43.149981022 CET	12345	55822	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:43.150223970 CET	55822	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:43.150630951 CET	55822	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:43.152775049 CET	55824	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:43.270797014 CET	12345	55822	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:43.273027897 CET	12345	55824	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:43.273660898 CET	55824	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:43.273946047 CET	55824	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:43.393978119 CET	12345	55824	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:44.326438904 CET	12345	55824	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:44.326539993 CET	12345	55824	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:44.327069044 CET	55824	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:44.327069044 CET	55824	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:44.329117060 CET	55826	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:44.447411060 CET	12345	55824	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:44.449094057 CET	12345	55826	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:44.449474096 CET	55826	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:44.449474096 CET	55826	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:44.569809914 CET	12345	55826	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:45.520312071 CET	12345	55826	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:45.520368099 CET	12345	55826	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:45.520508051 CET	55826	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:45.520864964 CET	55826	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:45.522608995 CET	55828	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:45.640959978 CET	12345	55826	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:45.643493891 CET	12345	55828	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:45.643908024 CET	55828	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:45.644407988 CET	55828	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:45.764411926 CET	12345	55828	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:46.696914911 CET	12345	55828	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:46.696964025 CET	12345	55828	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:46.697418928 CET	55828	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:46.697593927 CET	55828	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:46.699968100 CET	55830	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:46.899070978 CET	12345	55828	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:46.899110079 CET	12345	55830	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:46.899380922 CET	55830	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:46.899641037 CET	55830	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:47.019428015 CET	12345	55830	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:48.009284019 CET	12345	55830	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:48.009432077 CET	12345	55830	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:48.009864092 CET	55830	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:48.009991884 CET	55830	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:48.012164116 CET	55832	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:48.131903887 CET	12345	55830	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:48.132203102 CET	12345	55832	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:48.132498980 CET	55832	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:48.132735968 CET	55832	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:48.253966093 CET	12345	55832	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:49.188930035 CET	12345	55832	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:49.189035892 CET	12345	55832	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:49.189184904 CET	55832	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:49.189414978 CET	55832	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:49.190937996 CET	55834	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:49.309350967 CET	12345	55832	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:49.310961962 CET	12345	55834	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:49.311161995 CET	55834	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:49.311219931 CET	55834	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:49.432194948 CET	12345	55834	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:50.368506908 CET	12345	55834	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:50.368541956 CET	12345	55834	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:50.368747950 CET	55834	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:50.368747950 CET	55834	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:50.370868921 CET	55836	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:50.488949060 CET	12345	55834	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:50.491717100 CET	12345	55836	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:50.492002964 CET	55836	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:50.492002964 CET	55836	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:50.612099886 CET	12345	55836	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:51.545248032 CET	12345	55836	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:51.545429945 CET	12345	55836	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:51.545845032 CET	55836	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:51.545845985 CET	55836	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:51.547401905 CET	55838	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:51.666045904 CET	12345	55836	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:51.667349100 CET	12345	55838	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:51.667582989 CET	55838	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:51.667583942 CET	55838	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:51.787756920 CET	12345	55838	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:52.718996048 CET	12345	55838	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:52.719305038 CET	12345	55838	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:52.719604015 CET	55838	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:52.719873905 CET	55838	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:52.722114086 CET	55840	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:52.839978933 CET	12345	55838	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:52.842403889 CET	12345	55840	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:52.842925072 CET	55840	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:52.843085051 CET	55840	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:52.963103056 CET	12345	55840	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:53.898175955 CET	12345	55840	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:53.898196936 CET	12345	55840	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:53.898708105 CET	55840	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:53.899072886 CET	55840	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:53.900907993 CET	55842	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:54.019328117 CET	12345	55840	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:54.020682096 CET	12345	55842	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:54.021107912 CET	55842	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:54.021334887 CET	55842	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:54.142780066 CET	12345	55842	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:55.073795080 CET	12345	55842	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:55.073837996 CET	12345	55842	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:55.074196100 CET	55842	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:55.074292898 CET	55842	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:55.077311993 CET	55844	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:55.194598913 CET	12345	55842	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:55.197886944 CET	12345	55844	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:55.198115110 CET	55844	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:55.198208094 CET	55844	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:55.318161964 CET	12345	55844	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:56.250159979 CET	12345	55844	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:56.250329018 CET	55844	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:56.250777960 CET	12345	55844	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:56.250885010 CET	55844	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:56.251774073 CET	55846	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:56.370721102 CET	12345	55844	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:56.371686935 CET	12345	55846	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:56.372026920 CET	55846	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:56.372026920 CET	55846	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:56.492902994 CET	12345	55846	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:57.425343037 CET	12345	55846	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:57.425367117 CET	12345	55846	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:57.425652027 CET	55846	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:57.425652027 CET	55846	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:57.426749945 CET	55848	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:57.545805931 CET	12345	55846	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:57.546618938 CET	12345	55848	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:57.546736956 CET	55848	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:57.546879053 CET	55848	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:57.667390108 CET	12345	55848	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:58.605372906 CET	12345	55848	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:58.605525017 CET	12345	55848	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:58.605669975 CET	55848	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:58.605746984 CET	55848	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:58.607026100 CET	55850	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:58.725718021 CET	12345	55848	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:58.726756096 CET	12345	55850	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:58.726982117 CET	55850	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:58.727015972 CET	55850	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:58.846956968 CET	12345	55850	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:59.779375076 CET	12345	55850	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:59.779427052 CET	12345	55850	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:59.779546022 CET	55850	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:59.779705048 CET	55850	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:59.780980110 CET	55852	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:59.899533987 CET	12345	55850	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:59.900993109 CET	12345	55852	93.123.85.8	192.168.2.23
Dec 16, 2024 11:48:59.901310921 CET	55852	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:48:59.901402950 CET	55852	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:00.021373034 CET	12345	55852	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:00.954252005 CET	12345	55852	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:00.954276085 CET	12345	55852	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:00.954687119 CET	55852	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:00.954776049 CET	55852	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:00.955949068 CET	55854	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:01.075009108 CET	12345	55852	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:01.076194048 CET	12345	55854	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:01.076508045 CET	55854	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:01.076508045 CET	55854	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:01.196763992 CET	12345	55854	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:02.132656097 CET	12345	55854	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:02.132751942 CET	12345	55854	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:02.132942915 CET	55854	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:02.133050919 CET	55854	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:02.133977890 CET	55856	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:02.253302097 CET	12345	55854	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:02.254079103 CET	12345	55856	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:02.254252911 CET	55856	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:02.254357100 CET	55856	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:02.374490976 CET	12345	55856	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:03.306890965 CET	12345	55856	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:03.306992054 CET	12345	55856	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:03.307061911 CET	55856	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:03.307135105 CET	55856	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:03.308175087 CET	55858	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:03.427138090 CET	12345	55856	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:03.428035021 CET	12345	55858	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:03.428149939 CET	55858	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:03.428234100 CET	55858	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:03.548975945 CET	12345	55858	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:04.481580019 CET	12345	55858	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:04.481761932 CET	12345	55858	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:04.481924057 CET	55858	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:04.482059956 CET	55858	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:04.483045101 CET	55860	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:04.602149010 CET	12345	55858	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:04.602853060 CET	12345	55860	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:04.603054047 CET	55860	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:04.603234053 CET	55860	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:04.723000050 CET	12345	55860	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:05.658963919 CET	12345	55860	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:05.658987045 CET	12345	55860	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:05.659214020 CET	55860	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:05.659285069 CET	55860	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:05.660586119 CET	55862	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:05.779210091 CET	12345	55860	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:05.780482054 CET	12345	55862	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:05.780627966 CET	55862	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:05.780740976 CET	55862	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:05.900552988 CET	12345	55862	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:06.832659006 CET	12345	55862	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:06.832727909 CET	12345	55862	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:06.832937002 CET	55862	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:06.833048105 CET	55862	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:06.833797932 CET	55864	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:06.953294039 CET	12345	55862	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:06.953573942 CET	12345	55864	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:06.953782082 CET	55864	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:06.953782082 CET	55864	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:07.073678017 CET	12345	55864	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:08.006277084 CET	12345	55864	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:08.006319046 CET	12345	55864	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:08.006535053 CET	55864	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:08.006535053 CET	55864	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:08.007296085 CET	55866	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:08.128072023 CET	12345	55864	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:08.128088951 CET	12345	55866	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:08.128276110 CET	55866	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:08.128423929 CET	55866	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:08.248117924 CET	12345	55866	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:09.183607101 CET	12345	55866	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:09.183640957 CET	12345	55866	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:09.183861017 CET	55866	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:09.183861971 CET	55866	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:09.184714079 CET	55868	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:09.303850889 CET	12345	55866	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:09.304634094 CET	12345	55868	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:09.304779053 CET	55868	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:09.304920912 CET	55868	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:09.425230980 CET	12345	55868	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:10.357053995 CET	12345	55868	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:10.357065916 CET	12345	55868	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:10.357217073 CET	55868	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:10.357341051 CET	55868	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:10.358584881 CET	55870	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:10.477597952 CET	12345	55868	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:10.478883028 CET	12345	55870	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:10.479072094 CET	55870	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:10.479307890 CET	55870	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:10.599096060 CET	12345	55870	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:11.542298079 CET	12345	55870	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:11.542469978 CET	55870	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:11.542721033 CET	12345	55870	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:11.542817116 CET	55870	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:11.543915033 CET	55872	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:11.662708998 CET	12345	55870	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:11.663758993 CET	12345	55872	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:11.663889885 CET	55872	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:11.663945913 CET	55872	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:11.784051895 CET	12345	55872	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:12.719209909 CET	12345	55872	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:12.719604969 CET	55872	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:12.719707966 CET	12345	55872	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:12.719930887 CET	55872	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:12.720896006 CET	55874	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:12.840123892 CET	12345	55872	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:12.840786934 CET	12345	55874	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:12.840893984 CET	55874	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:12.840996981 CET	55874	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:12.961090088 CET	12345	55874	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:13.904129028 CET	12345	55874	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:13.904254913 CET	55874	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:13.904400110 CET	12345	55874	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:13.904475927 CET	55874	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:13.905399084 CET	55876	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:14.024194002 CET	12345	55874	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:14.025216103 CET	12345	55876	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:14.025319099 CET	55876	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:14.025507927 CET	55876	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:14.145457029 CET	12345	55876	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:15.077446938 CET	12345	55876	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:15.077586889 CET	55876	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:15.077600956 CET	12345	55876	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:15.077675104 CET	55876	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:15.078538895 CET	55878	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:15.197366953 CET	12345	55876	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:15.198206902 CET	12345	55878	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:15.198265076 CET	55878	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:15.198301077 CET	55878	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:15.318072081 CET	12345	55878	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:16.249759912 CET	12345	55878	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:16.249881983 CET	12345	55878	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:16.250044107 CET	55878	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:16.250184059 CET	55878	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:16.251424074 CET	55880	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:16.369957924 CET	12345	55878	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:16.371232033 CET	12345	55880	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:16.371368885 CET	55880	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:16.371545076 CET	55880	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:16.491254091 CET	12345	55880	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:17.423902035 CET	12345	55880	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:17.423947096 CET	12345	55880	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:17.424099922 CET	55880	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:17.424221992 CET	55880	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:17.425322056 CET	55882	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:17.544289112 CET	12345	55880	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:17.545047998 CET	12345	55882	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:17.545327902 CET	55882	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:17.545461893 CET	55882	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:17.665360928 CET	12345	55882	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:18.605381966 CET	12345	55882	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:18.605515003 CET	12345	55882	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:18.605555058 CET	55882	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:18.605695009 CET	55882	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:18.606704950 CET	55884	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:18.725438118 CET	12345	55882	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:18.726418972 CET	12345	55884	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:18.726555109 CET	55884	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:18.726701975 CET	55884	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:18.846566916 CET	12345	55884	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:19.778578997 CET	12345	55884	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:19.778721094 CET	12345	55884	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:19.778915882 CET	55884	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:19.779205084 CET	55884	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:19.780683994 CET	55886	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:19.899087906 CET	12345	55884	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:19.900573015 CET	12345	55886	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:19.901017904 CET	55886	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:19.901017904 CET	55886	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:20.020944118 CET	12345	55886	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:20.965200901 CET	12345	55886	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:20.965215921 CET	12345	55886	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:20.965476990 CET	55886	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:20.965657949 CET	55886	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:20.968151093 CET	55888	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:21.085650921 CET	12345	55886	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:21.088020086 CET	12345	55888	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:21.088264942 CET	55888	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:21.088493109 CET	55888	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:21.208482027 CET	12345	55888	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:22.142929077 CET	12345	55888	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:22.143068075 CET	12345	55888	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:22.143275023 CET	55888	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:22.143410921 CET	55888	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:22.144359112 CET	55890	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:22.263328075 CET	12345	55888	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:22.264405966 CET	12345	55890	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:22.264601946 CET	55890	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:22.264602900 CET	55890	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:22.385679960 CET	12345	55890	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:23.329365969 CET	12345	55890	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:23.329583883 CET	12345	55890	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:23.329969883 CET	55890	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:23.329971075 CET	55890	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:23.332576036 CET	55892	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:23.450016975 CET	12345	55890	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:23.452687025 CET	12345	55892	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:23.453109026 CET	55892	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:23.453212976 CET	55892	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:23.573225975 CET	12345	55892	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:24.505321026 CET	12345	55892	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:24.505367041 CET	12345	55892	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:24.505742073 CET	55892	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:24.505742073 CET	55892	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:24.507674932 CET	55894	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:24.626045942 CET	12345	55892	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:24.627907038 CET	12345	55894	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:24.628096104 CET	55894	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:24.628096104 CET	55894	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:24.748017073 CET	12345	55894	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:25.682760000 CET	12345	55894	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:25.682975054 CET	12345	55894	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:25.683090925 CET	55894	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:25.683248043 CET	55894	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:25.686069965 CET	55896	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:25.803246975 CET	12345	55894	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:25.806194067 CET	12345	55896	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:25.806610107 CET	55896	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:25.806610107 CET	55896	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:25.927768946 CET	12345	55896	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:26.859700918 CET	12345	55896	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:26.859826088 CET	12345	55896	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:26.860196114 CET	55896	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:26.860196114 CET	55896	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:26.863276005 CET	55898	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:26.980499029 CET	12345	55896	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:26.983900070 CET	12345	55898	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:26.984036922 CET	55898	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:26.984036922 CET	55898	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:27.104193926 CET	12345	55898	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:28.046459913 CET	12345	55898	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:28.046590090 CET	12345	55898	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:28.046869040 CET	55898	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:28.046998024 CET	55898	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:28.049134016 CET	55900	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:28.166938066 CET	12345	55898	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:28.168977976 CET	12345	55900	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:28.169323921 CET	55900	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:28.169456959 CET	55900	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:28.417668104 CET	12345	55900	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:29.223428011 CET	12345	55900	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:29.223558903 CET	12345	55900	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:29.223733902 CET	55900	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:29.223805904 CET	55900	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:29.225492001 CET	55902	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:29.344449997 CET	12345	55900	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:29.345633030 CET	12345	55902	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:29.345781088 CET	55902	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:29.346072912 CET	55902	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:29.466161966 CET	12345	55902	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:30.398328066 CET	12345	55902	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:30.398427010 CET	12345	55902	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:30.398700953 CET	55902	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:30.398827076 CET	55902	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:30.400029898 CET	55904	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:30.518687963 CET	12345	55902	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:30.520126104 CET	12345	55904	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:30.520422935 CET	55904	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:30.520534992 CET	55904	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:30.640487909 CET	12345	55904	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:31.582278967 CET	12345	55904	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:31.582490921 CET	55904	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:31.582501888 CET	12345	55904	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:31.582642078 CET	55904	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:31.583770037 CET	55906	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:31.702572107 CET	12345	55904	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:31.703571081 CET	12345	55906	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:31.703733921 CET	55906	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:31.703847885 CET	55906	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:31.823921919 CET	12345	55906	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:32.762696981 CET	12345	55906	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:32.762830973 CET	55906	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:32.764134884 CET	12345	55906	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:32.764318943 CET	55906	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:32.765057087 CET	55908	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:32.883991003 CET	12345	55906	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:32.884903908 CET	12345	55908	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:32.885059118 CET	55908	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:32.885168076 CET	55908	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:33.005017996 CET	12345	55908	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:33.941239119 CET	12345	55908	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:33.941391945 CET	12345	55908	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:33.941551924 CET	55908	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:33.941863060 CET	55908	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:33.943893909 CET	55910	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:34.061697006 CET	12345	55908	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:34.063622952 CET	12345	55910	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:34.063935041 CET	55910	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:34.064094067 CET	55910	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:34.183955908 CET	12345	55910	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:35.116755009 CET	12345	55910	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:35.116801977 CET	12345	55910	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:35.117055893 CET	55910	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:35.117139101 CET	55910	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:35.118235111 CET	55912	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:35.237313032 CET	12345	55910	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:35.238234997 CET	12345	55912	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:35.238795042 CET	55912	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:35.238795996 CET	55912	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:35.358776093 CET	12345	55912	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:36.291548014 CET	12345	55912	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:36.291740894 CET	12345	55912	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:36.291855097 CET	55912	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:36.292011976 CET	55912	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:36.294120073 CET	55914	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:36.411717892 CET	12345	55912	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:36.413917065 CET	12345	55914	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:36.414016962 CET	55914	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:36.414180994 CET	55914	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:36.533991098 CET	12345	55914	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:37.466723919 CET	12345	55914	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:37.466754913 CET	12345	55914	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:37.467128992 CET	55914	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:37.467217922 CET	55914	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:37.468964100 CET	55916	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:37.587253094 CET	12345	55914	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:37.588845015 CET	12345	55916	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:37.589010000 CET	55916	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:37.589167118 CET	55916	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:37.709184885 CET	12345	55916	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:38.641324043 CET	12345	55916	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:38.641345024 CET	12345	55916	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:38.641740084 CET	55916	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:38.642013073 CET	55916	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:38.644288063 CET	55918	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:38.762577057 CET	12345	55916	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:38.764271021 CET	12345	55918	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:38.764734030 CET	55918	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:38.764734983 CET	55918	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:38.885051966 CET	12345	55918	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:39.818335056 CET	12345	55918	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:39.818417072 CET	12345	55918	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:39.818531036 CET	55918	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:39.818711042 CET	55918	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:39.820625067 CET	55920	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:39.939121008 CET	12345	55918	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:39.940809965 CET	12345	55920	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:39.941189051 CET	55920	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:39.941519022 CET	55920	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:40.061444044 CET	12345	55920	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:40.993622065 CET	12345	55920	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:40.993839025 CET	12345	55920	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:40.994122028 CET	55920	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:40.994461060 CET	55920	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:40.996742010 CET	55922	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:41.114877939 CET	12345	55920	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:41.117085934 CET	12345	55922	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:41.117424011 CET	55922	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:41.117780924 CET	55922	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:41.237739086 CET	12345	55922	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:42.171082973 CET	12345	55922	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:42.171102047 CET	12345	55922	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:42.171300888 CET	55922	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:42.171708107 CET	55922	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:42.173897982 CET	55924	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:42.291536093 CET	12345	55922	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:42.293665886 CET	12345	55924	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:42.293785095 CET	55924	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:42.294094086 CET	55924	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:42.413995981 CET	12345	55924	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:43.346863985 CET	12345	55924	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:43.346947908 CET	12345	55924	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:43.347023964 CET	55924	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:43.347295046 CET	55924	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:43.349992990 CET	55926	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:43.467130899 CET	12345	55924	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:43.469795942 CET	12345	55926	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:43.470098019 CET	55926	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:43.470371962 CET	55926	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:43.590070963 CET	12345	55926	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:44.522651911 CET	12345	55926	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:44.522891998 CET	12345	55926	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:44.523036957 CET	55926	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:44.523329020 CET	55926	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:44.526330948 CET	55928	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:44.642992973 CET	12345	55926	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:44.646146059 CET	12345	55928	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:44.646487951 CET	55928	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:44.646606922 CET	55928	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:44.766916990 CET	12345	55928	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:45.698266029 CET	12345	55928	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:45.698313951 CET	12345	55928	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:45.698735952 CET	55928	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:45.698735952 CET	55928	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:45.701581001 CET	55930	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:45.819169998 CET	12345	55928	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:45.821363926 CET	12345	55930	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:45.821620941 CET	55930	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:45.822014093 CET	55930	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:45.942001104 CET	12345	55930	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:46.873765945 CET	12345	55930	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:46.873811007 CET	12345	55930	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:46.874202967 CET	55930	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:46.874414921 CET	55930	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:46.875550032 CET	55932	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:46.994401932 CET	12345	55930	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:46.995589972 CET	12345	55932	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:46.995764017 CET	55932	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:46.996054888 CET	55932	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:47.115925074 CET	12345	55932	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:48.048114061 CET	12345	55932	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:48.048240900 CET	12345	55932	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:48.048527002 CET	55932	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:48.048681974 CET	55932	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:48.050054073 CET	55934	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:48.168474913 CET	12345	55932	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:48.169910908 CET	12345	55934	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:48.170123100 CET	55934	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:48.170243025 CET	55934	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:48.290080070 CET	12345	55934	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:49.224802971 CET	12345	55934	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:49.224911928 CET	12345	55934	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:49.224940062 CET	55934	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:49.224992037 CET	55934	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:49.225613117 CET	55936	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:49.345155001 CET	12345	55934	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:49.345277071 CET	12345	55936	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:49.345499039 CET	55936	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:49.345523119 CET	55936	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:49.466259003 CET	12345	55936	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:50.407830954 CET	12345	55936	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:50.407866001 CET	12345	55936	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:50.408071995 CET	55936	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:50.408071995 CET	55936	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:50.408983946 CET	55938	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:50.528085947 CET	12345	55936	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:50.528724909 CET	12345	55938	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:50.528811932 CET	55938	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:50.528979063 CET	55938	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:50.648982048 CET	12345	55938	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:51.583425999 CET	12345	55938	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:51.583457947 CET	12345	55938	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:51.583982944 CET	55938	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:51.584017992 CET	55938	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:51.584826946 CET	55940	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:51.704109907 CET	12345	55938	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:51.704783916 CET	12345	55940	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:51.705001116 CET	55940	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:51.705127001 CET	55940	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:51.825099945 CET	12345	55940	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:52.761760950 CET	12345	55940	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:52.761832952 CET	12345	55940	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:52.761827946 CET	55940	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:52.761919022 CET	55940	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:52.762635946 CET	55942	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:52.881752968 CET	12345	55940	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:52.882453918 CET	12345	55942	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:52.882514954 CET	55942	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:52.882585049 CET	55942	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:53.002362967 CET	12345	55942	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:53.950720072 CET	12345	55942	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:53.950787067 CET	12345	55942	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:53.950813055 CET	55942	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:53.950896978 CET	55942	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:53.952439070 CET	55944	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:54.070760012 CET	12345	55942	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:54.072279930 CET	12345	55944	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:54.072384119 CET	55944	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:54.072432041 CET	55944	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:54.192289114 CET	12345	55944	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:55.128179073 CET	12345	55944	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:55.128350973 CET	12345	55944	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:55.128561974 CET	55944	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:55.128561974 CET	55944	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:55.129188061 CET	55946	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:55.248317957 CET	12345	55944	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:55.248939991 CET	12345	55946	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:55.249193907 CET	55946	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:55.249193907 CET	55946	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:55.369904995 CET	12345	55946	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:56.303555012 CET	12345	55946	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:56.303646088 CET	12345	55946	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:56.303805113 CET	55946	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:56.303805113 CET	55946	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:56.304572105 CET	55948	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:56.423604965 CET	12345	55946	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:56.424352884 CET	12345	55948	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:56.424536943 CET	55948	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:56.424536943 CET	55948	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:56.545449018 CET	12345	55948	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:57.478693008 CET	12345	55948	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:57.478842020 CET	12345	55948	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:57.478895903 CET	55948	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:57.478990078 CET	55948	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:57.479576111 CET	55950	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:57.598778009 CET	12345	55948	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:57.599438906 CET	12345	55950	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:57.599560976 CET	55950	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:57.599651098 CET	55950	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:57.719387054 CET	12345	55950	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:58.652009010 CET	12345	55950	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:58.652096987 CET	12345	55950	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:58.652158022 CET	55950	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:58.652221918 CET	55950	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:58.653008938 CET	55952	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:58.772099972 CET	12345	55950	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:58.772856951 CET	12345	55952	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:58.773171902 CET	55952	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:58.773271084 CET	55952	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:58.893100023 CET	12345	55952	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:59.829042912 CET	12345	55952	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:59.829091072 CET	12345	55952	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:59.829303980 CET	55952	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:59.829412937 CET	55952	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:59.829983950 CET	55954	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:59.949357986 CET	12345	55952	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:59.949878931 CET	12345	55954	93.123.85.8	192.168.2.23
Dec 16, 2024 11:49:59.950092077 CET	55954	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:49:59.950092077 CET	55954	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:00.070382118 CET	12345	55954	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:01.003299952 CET	12345	55954	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:01.003377914 CET	12345	55954	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:01.003532887 CET	55954	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:01.003729105 CET	55954	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:01.004616976 CET	55956	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:01.124047995 CET	12345	55954	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:01.124763966 CET	12345	55956	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:01.125019073 CET	55956	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:01.125091076 CET	55956	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:01.245106936 CET	12345	55956	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:02.185157061 CET	12345	55956	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:02.185219049 CET	12345	55956	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:02.185579062 CET	55956	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:02.185579062 CET	55956	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:02.186180115 CET	55958	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:02.305902958 CET	12345	55956	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:02.306154013 CET	12345	55958	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:02.306365967 CET	55958	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:02.306442976 CET	55958	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:02.426403046 CET	12345	55958	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:03.361481905 CET	12345	55958	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:03.361530066 CET	12345	55958	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:03.361785889 CET	55958	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:03.361834049 CET	55958	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:03.362765074 CET	55960	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:03.481909990 CET	12345	55958	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:03.482616901 CET	12345	55960	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:03.482880116 CET	55960	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:03.482959986 CET	55960	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:03.603106976 CET	12345	55960	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:04.537501097 CET	12345	55960	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:04.537549019 CET	12345	55960	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:04.537769079 CET	55960	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:04.537769079 CET	55960	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:04.538484097 CET	55962	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:04.657974005 CET	12345	55960	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:04.658576012 CET	12345	55962	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:04.658752918 CET	55962	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:04.658754110 CET	55962	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:04.778585911 CET	12345	55962	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:05.710865974 CET	12345	55962	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:05.711013079 CET	12345	55962	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:05.711329937 CET	55962	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:05.711329937 CET	55962	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:05.712409973 CET	55964	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:05.831460953 CET	12345	55962	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:05.832340002 CET	12345	55964	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:05.832741022 CET	55964	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:05.832801104 CET	55964	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:05.952913046 CET	12345	55964	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:06.885190010 CET	12345	55964	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:06.885255098 CET	12345	55964	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:06.885457039 CET	55964	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:06.885509014 CET	55964	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:06.886583090 CET	55966	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:07.005600929 CET	12345	55964	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:07.006405115 CET	12345	55966	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:07.006537914 CET	55966	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:07.006803989 CET	55966	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:07.126899004 CET	12345	55966	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:08.064294100 CET	12345	55966	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:08.064410925 CET	12345	55966	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:08.064794064 CET	55966	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:08.064794064 CET	55966	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:08.065644026 CET	55968	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:08.185050964 CET	12345	55966	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:08.185806990 CET	12345	55968	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:08.186083078 CET	55968	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:08.186189890 CET	55968	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:08.306339979 CET	12345	55968	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:09.239178896 CET	12345	55968	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:09.239500999 CET	12345	55968	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:09.239805937 CET	55968	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:09.239911079 CET	55968	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:09.241466999 CET	55970	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:09.360372066 CET	12345	55968	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:09.361547947 CET	12345	55970	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:09.361639023 CET	55970	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:09.361835003 CET	55970	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:09.482017040 CET	12345	55970	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:10.417243958 CET	12345	55970	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:10.417282104 CET	12345	55970	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:10.417521000 CET	55970	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:10.417608976 CET	55970	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:10.419027090 CET	55972	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:10.540277004 CET	12345	55970	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:10.540329933 CET	12345	55972	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:10.540544033 CET	55972	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:10.540611029 CET	55972	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:10.660640001 CET	12345	55972	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:11.592974901 CET	12345	55972	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:11.593106985 CET	12345	55972	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:11.593498945 CET	55972	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:11.593693018 CET	55972	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:11.594538927 CET	55974	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:11.713851929 CET	12345	55972	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:11.714541912 CET	12345	55974	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:11.714795113 CET	55974	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:11.714848995 CET	55974	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:11.834959984 CET	12345	55974	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:12.767381907 CET	12345	55974	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:12.767446041 CET	12345	55974	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:12.767899990 CET	55974	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:12.767905951 CET	55974	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:12.768954992 CET	55976	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:12.888420105 CET	12345	55974	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:12.889060020 CET	12345	55976	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:12.889286041 CET	55976	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:12.889286995 CET	55976	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:13.009896994 CET	12345	55976	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:13.942907095 CET	12345	55976	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:13.942961931 CET	12345	55976	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:13.943176031 CET	55976	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:13.943358898 CET	55976	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:13.944601059 CET	55978	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:14.063184023 CET	12345	55976	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:14.064672947 CET	12345	55978	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:14.064934969 CET	55978	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:14.065025091 CET	55978	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:14.184912920 CET	12345	55978	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:15.117856026 CET	12345	55978	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:15.117953062 CET	12345	55978	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:15.118166924 CET	55978	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:15.118166924 CET	55978	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:15.118887901 CET	55980	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:15.238502026 CET	12345	55978	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:15.238965988 CET	12345	55980	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:15.239196062 CET	55980	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:15.239196062 CET	55980	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:15.360713959 CET	12345	55980	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:16.291609049 CET	12345	55980	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:16.291793108 CET	12345	55980	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:16.292289972 CET	55980	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:16.292476892 CET	55980	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:16.295353889 CET	55982	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:16.412463903 CET	12345	55980	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:16.415550947 CET	12345	55982	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:16.416074991 CET	55982	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:16.416074991 CET	55982	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:16.536566973 CET	12345	55982	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:17.468417883 CET	12345	55982	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:17.468519926 CET	12345	55982	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:17.468883038 CET	55982	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:17.468883038 CET	55982	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:17.470500946 CET	55984	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:17.589097977 CET	12345	55982	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:17.590784073 CET	12345	55984	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:17.591233969 CET	55984	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:17.591553926 CET	55984	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:17.711479902 CET	12345	55984	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:18.645967960 CET	12345	55984	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:18.645991087 CET	12345	55984	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:18.646152973 CET	55984	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:18.646275043 CET	55984	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:18.647350073 CET	55986	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:18.766124010 CET	12345	55984	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:18.767085075 CET	12345	55986	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:18.767227888 CET	55986	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:18.767357111 CET	55986	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:18.887233973 CET	12345	55986	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:19.830274105 CET	12345	55986	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:19.830302954 CET	12345	55986	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:19.830490112 CET	55986	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:19.830563068 CET	55986	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:19.831881046 CET	55988	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:19.950454950 CET	12345	55986	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:19.951651096 CET	12345	55988	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:19.951767921 CET	55988	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:19.951913118 CET	55988	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:20.337277889 CET	12345	55988	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:21.271286964 CET	12345	55988	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:21.271369934 CET	12345	55988	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:21.271466017 CET	55988	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:21.271544933 CET	55988	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:21.273152113 CET	55990	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:21.391426086 CET	12345	55988	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:21.392965078 CET	12345	55990	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:21.393158913 CET	55990	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:21.393321991 CET	55990	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:21.513139963 CET	12345	55990	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:22.445856094 CET	12345	55990	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:22.445914984 CET	12345	55990	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:22.446026087 CET	55990	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:22.446134090 CET	55990	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:22.447792053 CET	55992	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:22.566106081 CET	12345	55990	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:22.567719936 CET	12345	55992	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:22.567934036 CET	55992	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:22.567990065 CET	55992	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:22.687870026 CET	12345	55992	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:23.628566980 CET	12345	55992	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:23.628638029 CET	12345	55992	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:23.628770113 CET	55992	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:23.628849030 CET	55992	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:23.629643917 CET	55994	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:23.748960972 CET	12345	55992	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:23.749630928 CET	12345	55994	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:23.749768972 CET	55994	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:23.749922991 CET	55994	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:23.869716883 CET	12345	55994	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:24.804456949 CET	12345	55994	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:24.804636955 CET	55994	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:24.804733992 CET	12345	55994	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:24.804831982 CET	55994	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:24.805902004 CET	55996	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:24.924825907 CET	12345	55994	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:24.925791025 CET	12345	55996	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:24.925925016 CET	55996	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:24.926111937 CET	55996	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:25.046302080 CET	12345	55996	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:25.983032942 CET	12345	55996	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:25.983079910 CET	12345	55996	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:25.983342886 CET	55996	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:25.983473063 CET	55996	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:25.984793901 CET	55998	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:26.103637934 CET	12345	55996	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:26.104729891 CET	12345	55998	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:26.104933977 CET	55998	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:26.104933977 CET	55998	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:26.225035906 CET	12345	55998	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:27.165000916 CET	12345	55998	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:27.165102005 CET	12345	55998	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:27.165359020 CET	55998	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:27.165462017 CET	55998	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:27.167370081 CET	56000	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:27.285558939 CET	12345	55998	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:27.287158012 CET	12345	56000	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:27.287458897 CET	56000	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:27.287554979 CET	56000	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:27.407614946 CET	12345	56000	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:28.341598988 CET	12345	56000	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:28.341716051 CET	12345	56000	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:28.341809988 CET	56000	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:28.341877937 CET	56000	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:28.343048096 CET	56002	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:28.461957932 CET	12345	56000	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:28.462997913 CET	12345	56002	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:28.463138103 CET	56002	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:28.463323116 CET	56002	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:28.632500887 CET	12345	56002	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:29.521277905 CET	12345	56002	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:29.521349907 CET	12345	56002	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:29.521476030 CET	56002	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:29.521629095 CET	56002	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:29.522550106 CET	56004	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:29.641428947 CET	12345	56002	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:29.642385006 CET	12345	56004	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:29.642540932 CET	56004	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:29.642712116 CET	56004	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:29.762840033 CET	12345	56004	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:30.695580959 CET	12345	56004	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:30.695647001 CET	12345	56004	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:30.695904970 CET	56004	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:30.696074009 CET	56004	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:30.697052956 CET	56006	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:30.815911055 CET	12345	56004	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:30.816863060 CET	12345	56006	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:30.816993952 CET	56006	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:30.817281961 CET	56006	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:30.937047958 CET	12345	56006	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:31.872669935 CET	12345	56006	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:31.872740984 CET	12345	56006	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:31.872982025 CET	56006	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:31.873150110 CET	56006	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:31.874007940 CET	56008	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:31.993158102 CET	12345	56006	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:31.993988991 CET	12345	56008	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:31.994090080 CET	56008	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:31.994235992 CET	56008	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:32.114155054 CET	12345	56008	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:33.061614990 CET	12345	56008	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:33.061647892 CET	12345	56008	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:33.061871052 CET	56008	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:33.061944008 CET	56008	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:33.062783003 CET	56010	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:33.182121038 CET	12345	56008	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:33.182888031 CET	12345	56010	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:33.183099031 CET	56010	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:33.183150053 CET	56010	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:33.303072929 CET	12345	56010	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:34.248243093 CET	12345	56010	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:34.248270035 CET	12345	56010	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:34.248553038 CET	56010	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:34.248744011 CET	56010	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:34.249636889 CET	56012	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:34.368542910 CET	12345	56010	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:34.369369030 CET	12345	56012	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:34.369477987 CET	56012	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:34.369616985 CET	56012	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:34.490350008 CET	12345	56012	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:35.422696114 CET	12345	56012	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:35.422751904 CET	12345	56012	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:35.422878027 CET	56012	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:35.422946930 CET	56012	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:35.423583984 CET	56014	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:35.543551922 CET	12345	56012	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:35.543993950 CET	12345	56014	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:35.544148922 CET	56014	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:35.544296980 CET	56014	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:35.664324045 CET	12345	56014	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:36.597188950 CET	12345	56014	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:36.597338915 CET	12345	56014	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:36.597368956 CET	56014	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:36.597467899 CET	56014	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:36.598391056 CET	56016	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:36.717396975 CET	12345	56014	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:36.718278885 CET	12345	56016	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:36.718455076 CET	56016	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:36.718538046 CET	56016	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:36.838459015 CET	12345	56016	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:37.783452034 CET	12345	56016	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:37.783540964 CET	12345	56016	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:37.783597946 CET	56016	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:37.783740044 CET	56016	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:37.784368038 CET	56018	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:37.903625011 CET	12345	56016	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:37.904124022 CET	12345	56018	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:37.904295921 CET	56018	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:37.904369116 CET	56018	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:38.024601936 CET	12345	56018	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:38.957660913 CET	12345	56018	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:38.957688093 CET	12345	56018	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:38.957864046 CET	56018	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:38.958050966 CET	56018	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:38.958971977 CET	56020	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:39.077873945 CET	12345	56018	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:39.078742981 CET	12345	56020	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:39.078964949 CET	56020	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:39.078965902 CET	56020	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:39.198899984 CET	12345	56020	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:40.132525921 CET	12345	56020	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:40.132572889 CET	12345	56020	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:40.132755041 CET	56020	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:40.132816076 CET	56020	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:40.133474112 CET	56022	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:40.252917051 CET	12345	56020	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:40.253434896 CET	12345	56022	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:40.253608942 CET	56022	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:40.253608942 CET	56022	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:40.373955011 CET	12345	56022	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:41.306566000 CET	12345	56022	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:41.306624889 CET	12345	56022	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:41.306835890 CET	56022	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:41.306835890 CET	56022	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:41.307431936 CET	56024	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:41.426718950 CET	12345	56022	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:41.427225113 CET	12345	56024	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:41.427298069 CET	56024	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:41.427378893 CET	56024	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:41.547238111 CET	12345	56024	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:42.479156017 CET	12345	56024	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:42.479218006 CET	12345	56024	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:42.479406118 CET	56024	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:42.479406118 CET	56024	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:42.480026960 CET	56026	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:42.599308968 CET	12345	56024	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:42.599777937 CET	12345	56026	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:42.599884987 CET	56026	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:42.600059986 CET	56026	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:42.719784021 CET	12345	56026	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:43.662868023 CET	12345	56026	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:43.662892103 CET	12345	56026	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:43.663254976 CET	56026	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:43.663424015 CET	56026	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:43.664396048 CET	56028	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:43.783185005 CET	12345	56026	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:43.784162998 CET	12345	56028	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:43.784257889 CET	56028	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:43.784480095 CET	56028	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:43.904310942 CET	12345	56028	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:44.838689089 CET	12345	56028	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:44.838773966 CET	12345	56028	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:44.838891029 CET	56028	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:44.838891029 CET	56028	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:44.839508057 CET	56030	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:44.959037066 CET	12345	56028	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:44.959285021 CET	12345	56030	93.123.85.8	192.168.2.23
Dec 16, 2024 11:50:44.959378958 CET	56030	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:44.959609032 CET	56030	12345	192.168.2.23	93.123.85.8
Dec 16, 2024 11:50:45.079366922 CET	12345	56030	93.123.85.8	192.168.2.23

System Behavior

Analysis Process: a-r.m-7.Sakura.elf PID: 6223, Parent PID: 6139

General

Start time (UTC):	10:47:09
Start date (UTC):	16/12/2024
Path:	/tmp/a-r.m-7.Sakura.elf
Arguments:	/tmp/a-r.m-7.Sakura.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: a-r.m-7.Sakura.elf PID: 6225, Parent PID: 6223

General

Start time (UTC):	10:47:10
Start date (UTC):	16/12/2024
Path:	/tmp/a-r.m-7.Sakura.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Chronological Activities

Analysis Process: a-r.m-7.Sakura.elf PID: 6227, Parent PID: 6225

General

Start time (UTC):	10:47:10
Start date (UTC):	16/12/2024
Path:	/tmp/a-r.m-7.Sakura.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report a-r.m-7.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.jr0BSM (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: a-r.m-7.Sakura.elf PID: 6223, Parent PID: 6139

General

Chronological Activities

Analysis Process: a-r.m-7.Sakura.elf PID: 6225, Parent PID: 6223

General

Chronological Activities

Analysis Process: a-r.m-7.Sakura.elf PID: 6227, Parent PID: 6225

General

Chronological Activities

Linux Analysis Report
a-r.m-7.Sakura.elf