Edit tour

Linux Analysis Report
x-3.2-.Sakura.elf

Overview

General Information

Sample name:	x-3.2-.Sakura.elf
Analysis ID:	1575875
MD5:	727ccd2f0f69eaa2f5d6914f9b3db4b2
SHA1:	db3835960551669551cac54373ab38653c17df9a
SHA256:	252c138da8746a1d38a8fb7729318382995470c2634605388208ce76dd866842
Tags:	elfGafgytuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Contains symbols with names commonly found in malware

Machine Learning detection for sample

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1575875
Start date and time:	2024-12-16 11:48:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x-3.2-.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: x-3.2-.Sakura.elf

Runtime Messages

Command:	/tmp/x-3.2-.Sakura.elf
PID:	5435
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

x-3.2-.Sakura.elf (PID: 5435, Parent: 5356, MD5: 727ccd2f0f69eaa2f5d6914f9b3db4b2) Arguments: /tmp/x-3.2-.Sakura.elf

x-3.2-.Sakura.elf New Fork (PID: 5438, Parent: 5435)

x-3.2-.Sakura.elf New Fork (PID: 5439, Parent: 5438)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x-3.2-.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
x-3.2-.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc488:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc49c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc500:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc514:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc528:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc53c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc550:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc564:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc578:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc58c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc604:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc618:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x591:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_1b2e2a3a	unknown	unknown	0x81e:$a: 83 7D 18 00 74 25 8B 45 1C 83 E0 02 85 C0 74 1B C7 44 24 04 2D 00
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_9127f7be	unknown	unknown	0xc7b:$a: E4 F7 E1 89 D0 C1 E8 03 89 45 E8 8B 45 E8 01 C0 03 45 E8 C1
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5435.1.0000000008048000.0000000008057000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5435.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc488:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc49c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc500:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc514:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc528:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc53c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc550:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc564:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc578:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc58c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc604:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc618:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5435.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x591:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
5435.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_1b2e2a3a	unknown	unknown	0x81e:$a: 83 7D 18 00 74 25 8B 45 1C 83 E0 02 85 C0 74 1B C7 44 24 04 2D 00
5435.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_9127f7be	unknown	unknown	0xc7b:$a: E4 F7 E1 89 D0 C1 E8 03 89 45 E8 8B 45 E8 01 C0 03 45 E8 C1
5438.1.0000000008048000.0000000008057000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5438.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc488:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc49c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc500:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc514:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc528:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc53c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc550:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc564:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc578:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc58c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc604:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc618:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5438.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x591:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
5438.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_1b2e2a3a	unknown	unknown	0x81e:$a: 83 7D 18 00 74 25 8B 45 1C 83 E0 02 85 C0 74 1B C7 44 24 04 2D 00
5438.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_9127f7be	unknown	unknown	0xc7b:$a: E4 F7 E1 89 D0 C1 E8 03 89 45 E8 8B 45 E8 01 C0 03 45 E8 C1
Process Memory Space: x-3.2-.Sakura.elf PID: 5435	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x-3.2-.Sakura.elf PID: 5435	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc7b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc8f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcdf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcf3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: x-3.2-.Sakura.elf PID: 5438	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x-3.2-.Sakura.elf PID: 5438	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc17:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc2b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc3f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc53:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc67:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc7b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc8f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcdf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcf3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd07:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd1b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 9 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T11:49:42.843150+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53910	93.123.85.8	12345	TCP
2024-12-16T11:49:44.016117+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53912	93.123.85.8	12345	TCP
2024-12-16T11:49:45.194228+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53914	93.123.85.8	12345	TCP
2024-12-16T11:49:46.372686+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53916	93.123.85.8	12345	TCP
2024-12-16T11:49:47.545974+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53918	93.123.85.8	12345	TCP
2024-12-16T11:49:48.718175+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53920	93.123.85.8	12345	TCP
2024-12-16T11:49:49.891861+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53922	93.123.85.8	12345	TCP
2024-12-16T11:49:51.077130+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53924	93.123.85.8	12345	TCP
2024-12-16T11:49:52.253254+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53926	93.123.85.8	12345	TCP
2024-12-16T11:49:53.444941+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53928	93.123.85.8	12345	TCP
2024-12-16T11:49:54.618921+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53930	93.123.85.8	12345	TCP
2024-12-16T11:49:55.792778+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53932	93.123.85.8	12345	TCP
2024-12-16T11:49:56.965405+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53934	93.123.85.8	12345	TCP
2024-12-16T11:49:58.172844+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53936	93.123.85.8	12345	TCP
2024-12-16T11:49:59.346687+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53938	93.123.85.8	12345	TCP
2024-12-16T11:50:00.628986+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53940	93.123.85.8	12345	TCP
2024-12-16T11:50:01.801474+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53942	93.123.85.8	12345	TCP
2024-12-16T11:50:02.977881+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53944	93.123.85.8	12345	TCP
2024-12-16T11:50:04.150722+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53946	93.123.85.8	12345	TCP
2024-12-16T11:50:05.323639+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53948	93.123.85.8	12345	TCP
2024-12-16T11:50:06.500150+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53950	93.123.85.8	12345	TCP
2024-12-16T11:50:07.673217+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53952	93.123.85.8	12345	TCP
2024-12-16T11:50:08.846211+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53954	93.123.85.8	12345	TCP
2024-12-16T11:50:10.024155+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53956	93.123.85.8	12345	TCP
2024-12-16T11:50:11.199467+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53958	93.123.85.8	12345	TCP
2024-12-16T11:50:12.565541+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53960	93.123.85.8	12345	TCP
2024-12-16T11:50:13.738758+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53962	93.123.85.8	12345	TCP
2024-12-16T11:50:14.911655+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53964	93.123.85.8	12345	TCP
2024-12-16T11:50:16.084870+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53966	93.123.85.8	12345	TCP
2024-12-16T11:50:17.259393+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53968	93.123.85.8	12345	TCP
2024-12-16T11:50:18.435778+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53970	93.123.85.8	12345	TCP
2024-12-16T11:50:19.610093+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53972	93.123.85.8	12345	TCP
2024-12-16T11:50:20.786442+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53974	93.123.85.8	12345	TCP
2024-12-16T11:50:21.958702+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53976	93.123.85.8	12345	TCP
2024-12-16T11:50:23.132038+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53978	93.123.85.8	12345	TCP
2024-12-16T11:50:24.309605+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53980	93.123.85.8	12345	TCP
2024-12-16T11:50:25.488631+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53982	93.123.85.8	12345	TCP
2024-12-16T11:50:26.671644+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53984	93.123.85.8	12345	TCP
2024-12-16T11:50:27.845428+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53986	93.123.85.8	12345	TCP
2024-12-16T11:50:29.017596+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53988	93.123.85.8	12345	TCP
2024-12-16T11:50:30.191013+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53990	93.123.85.8	12345	TCP
2024-12-16T11:50:31.367195+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53992	93.123.85.8	12345	TCP
2024-12-16T11:50:32.540336+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53994	93.123.85.8	12345	TCP
2024-12-16T11:50:33.713510+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53996	93.123.85.8	12345	TCP
2024-12-16T11:50:34.889054+0100	2846526	1	A Network Trojan was detected	192.168.2.13	53998	93.123.85.8	12345	TCP
2024-12-16T11:50:36.067308+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54000	93.123.85.8	12345	TCP
2024-12-16T11:50:37.251976+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54002	93.123.85.8	12345	TCP
2024-12-16T11:50:38.427178+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54004	93.123.85.8	12345	TCP
2024-12-16T11:50:39.599668+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54006	93.123.85.8	12345	TCP
2024-12-16T11:50:40.773325+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54008	93.123.85.8	12345	TCP
2024-12-16T11:50:41.955258+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54010	93.123.85.8	12345	TCP
2024-12-16T11:50:43.135430+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54012	93.123.85.8	12345	TCP
2024-12-16T11:50:44.311761+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54014	93.123.85.8	12345	TCP
2024-12-16T11:50:45.487909+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54016	93.123.85.8	12345	TCP
2024-12-16T11:50:46.659588+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54018	93.123.85.8	12345	TCP
2024-12-16T11:50:47.839621+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54020	93.123.85.8	12345	TCP
2024-12-16T11:50:49.015620+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54022	93.123.85.8	12345	TCP
2024-12-16T11:50:50.194712+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54024	93.123.85.8	12345	TCP
2024-12-16T11:50:51.369206+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54026	93.123.85.8	12345	TCP
2024-12-16T11:50:52.560852+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54028	93.123.85.8	12345	TCP
2024-12-16T11:50:53.734832+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54030	93.123.85.8	12345	TCP
2024-12-16T11:50:54.908086+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54032	93.123.85.8	12345	TCP
2024-12-16T11:50:56.081925+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54034	93.123.85.8	12345	TCP
2024-12-16T11:50:57.256372+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54036	93.123.85.8	12345	TCP
2024-12-16T11:50:58.432261+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54038	93.123.85.8	12345	TCP
2024-12-16T11:50:59.612161+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54040	93.123.85.8	12345	TCP
2024-12-16T11:51:00.785879+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54042	93.123.85.8	12345	TCP
2024-12-16T11:51:01.970517+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54044	93.123.85.8	12345	TCP
2024-12-16T11:51:03.143748+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54046	93.123.85.8	12345	TCP
2024-12-16T11:51:04.513533+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54048	93.123.85.8	12345	TCP
2024-12-16T11:51:05.688047+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54050	93.123.85.8	12345	TCP
2024-12-16T11:51:06.867446+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54052	93.123.85.8	12345	TCP
2024-12-16T11:51:08.041983+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54054	93.123.85.8	12345	TCP
2024-12-16T11:51:09.216452+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54056	93.123.85.8	12345	TCP
2024-12-16T11:51:10.389272+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54058	93.123.85.8	12345	TCP
2024-12-16T11:51:11.562292+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54060	93.123.85.8	12345	TCP
2024-12-16T11:51:12.748772+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54062	93.123.85.8	12345	TCP
2024-12-16T11:51:13.920620+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54064	93.123.85.8	12345	TCP
2024-12-16T11:51:15.093714+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54066	93.123.85.8	12345	TCP
2024-12-16T11:51:16.266910+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54068	93.123.85.8	12345	TCP
2024-12-16T11:51:17.439055+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54070	93.123.85.8	12345	TCP
2024-12-16T11:51:18.613448+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54072	93.123.85.8	12345	TCP
2024-12-16T11:51:19.791764+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54074	93.123.85.8	12345	TCP
2024-12-16T11:51:20.967241+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54076	93.123.85.8	12345	TCP
2024-12-16T11:51:22.140977+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54078	93.123.85.8	12345	TCP
2024-12-16T11:51:23.313490+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54080	93.123.85.8	12345	TCP
2024-12-16T11:51:24.487766+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54082	93.123.85.8	12345	TCP
2024-12-16T11:51:25.660219+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54084	93.123.85.8	12345	TCP
2024-12-16T11:51:26.832395+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54086	93.123.85.8	12345	TCP
2024-12-16T11:51:28.013338+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54088	93.123.85.8	12345	TCP
2024-12-16T11:51:29.185986+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54090	93.123.85.8	12345	TCP
2024-12-16T11:51:30.359763+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54092	93.123.85.8	12345	TCP
2024-12-16T11:51:31.533288+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54094	93.123.85.8	12345	TCP
2024-12-16T11:51:32.710654+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54096	93.123.85.8	12345	TCP
2024-12-16T11:51:33.885543+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54098	93.123.85.8	12345	TCP
2024-12-16T11:51:35.061175+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54100	93.123.85.8	12345	TCP
2024-12-16T11:51:36.233382+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54102	93.123.85.8	12345	TCP
2024-12-16T11:51:37.405972+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54104	93.123.85.8	12345	TCP
2024-12-16T11:51:38.579358+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54106	93.123.85.8	12345	TCP
2024-12-16T11:51:39.752749+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54108	93.123.85.8	12345	TCP
2024-12-16T11:51:40.929147+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54110	93.123.85.8	12345	TCP
2024-12-16T11:51:42.102590+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54112	93.123.85.8	12345	TCP
2024-12-16T11:51:43.280423+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54114	93.123.85.8	12345	TCP
2024-12-16T11:51:44.457921+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54116	93.123.85.8	12345	TCP
2024-12-16T11:51:45.629697+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54118	93.123.85.8	12345	TCP
2024-12-16T11:51:46.994498+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54120	93.123.85.8	12345	TCP
2024-12-16T11:51:48.167362+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54122	93.123.85.8	12345	TCP
2024-12-16T11:51:49.342293+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54124	93.123.85.8	12345	TCP
2024-12-16T11:51:50.516628+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54126	93.123.85.8	12345	TCP
2024-12-16T11:51:51.693915+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54128	93.123.85.8	12345	TCP
2024-12-16T11:51:52.869411+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54130	93.123.85.8	12345	TCP
2024-12-16T11:51:54.042055+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54132	93.123.85.8	12345	TCP
2024-12-16T11:51:55.246805+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54134	93.123.85.8	12345	TCP
2024-12-16T11:51:56.459298+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54136	93.123.85.8	12345	TCP
2024-12-16T11:51:57.636462+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54138	93.123.85.8	12345	TCP
2024-12-16T11:51:59.951385+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54140	93.123.85.8	12345	TCP
2024-12-16T11:52:01.125421+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54142	93.123.85.8	12345	TCP
2024-12-16T11:52:02.395130+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54144	93.123.85.8	12345	TCP
2024-12-16T11:52:03.567233+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54146	93.123.85.8	12345	TCP
2024-12-16T11:52:04.739838+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54148	93.123.85.8	12345	TCP
2024-12-16T11:52:05.913330+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54150	93.123.85.8	12345	TCP
2024-12-16T11:52:07.090602+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54152	93.123.85.8	12345	TCP
2024-12-16T11:52:08.263706+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54154	93.123.85.8	12345	TCP
2024-12-16T11:52:09.437927+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54156	93.123.85.8	12345	TCP
2024-12-16T11:52:10.611406+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54158	93.123.85.8	12345	TCP
2024-12-16T11:52:11.783866+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54160	93.123.85.8	12345	TCP
2024-12-16T11:52:12.955792+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54162	93.123.85.8	12345	TCP
2024-12-16T11:52:14.134036+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54164	93.123.85.8	12345	TCP
2024-12-16T11:52:15.307266+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54166	93.123.85.8	12345	TCP
2024-12-16T11:52:16.482263+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54168	93.123.85.8	12345	TCP
2024-12-16T11:52:17.666846+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54170	93.123.85.8	12345	TCP
2024-12-16T11:52:18.844748+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54172	93.123.85.8	12345	TCP
2024-12-16T11:52:20.016716+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54174	93.123.85.8	12345	TCP
2024-12-16T11:52:21.190602+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54176	93.123.85.8	12345	TCP
2024-12-16T11:52:22.363800+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54178	93.123.85.8	12345	TCP
2024-12-16T11:52:23.537663+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54180	93.123.85.8	12345	TCP
2024-12-16T11:52:24.709850+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54182	93.123.85.8	12345	TCP
2024-12-16T11:52:25.904563+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54184	93.123.85.8	12345	TCP
2024-12-16T11:52:27.076293+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54186	93.123.85.8	12345	TCP
2024-12-16T11:52:28.265655+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54188	93.123.85.8	12345	TCP
2024-12-16T11:52:29.439010+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54190	93.123.85.8	12345	TCP
2024-12-16T11:52:30.611916+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54192	93.123.85.8	12345	TCP
2024-12-16T11:52:31.784193+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54194	93.123.85.8	12345	TCP
2024-12-16T11:52:32.960570+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54196	93.123.85.8	12345	TCP
2024-12-16T11:52:34.143199+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54198	93.123.85.8	12345	TCP
2024-12-16T11:52:35.318873+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54200	93.123.85.8	12345	TCP
2024-12-16T11:52:36.491466+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54202	93.123.85.8	12345	TCP
2024-12-16T11:52:37.667573+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54204	93.123.85.8	12345	TCP
2024-12-16T11:52:38.839961+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54206	93.123.85.8	12345	TCP
2024-12-16T11:52:40.011678+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54208	93.123.85.8	12345	TCP
2024-12-16T11:52:41.183232+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54210	93.123.85.8	12345	TCP
2024-12-16T11:52:42.359425+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54212	93.123.85.8	12345	TCP
2024-12-16T11:52:43.531689+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54214	93.123.85.8	12345	TCP
2024-12-16T11:52:44.704593+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54216	93.123.85.8	12345	TCP
2024-12-16T11:52:45.879929+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54218	93.123.85.8	12345	TCP
2024-12-16T11:52:47.053098+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54220	93.123.85.8	12345	TCP
2024-12-16T11:52:48.225118+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54222	93.123.85.8	12345	TCP
2024-12-16T11:52:49.399713+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54224	93.123.85.8	12345	TCP
2024-12-16T11:52:50.572475+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54226	93.123.85.8	12345	TCP
2024-12-16T11:52:51.750013+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54228	93.123.85.8	12345	TCP
2024-12-16T11:52:52.922887+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54230	93.123.85.8	12345	TCP
2024-12-16T11:52:54.097018+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54232	93.123.85.8	12345	TCP
2024-12-16T11:52:55.271416+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54234	93.123.85.8	12345	TCP
2024-12-16T11:52:56.449356+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54236	93.123.85.8	12345	TCP
2024-12-16T11:52:57.624549+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54238	93.123.85.8	12345	TCP
2024-12-16T11:52:58.805077+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54240	93.123.85.8	12345	TCP
2024-12-16T11:52:59.977819+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54242	93.123.85.8	12345	TCP
2024-12-16T11:53:01.176361+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54244	93.123.85.8	12345	TCP
2024-12-16T11:53:02.352130+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54246	93.123.85.8	12345	TCP
2024-12-16T11:53:03.528030+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54248	93.123.85.8	12345	TCP
2024-12-16T11:53:04.703631+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54250	93.123.85.8	12345	TCP
2024-12-16T11:53:05.880494+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54252	93.123.85.8	12345	TCP
2024-12-16T11:53:07.053114+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54254	93.123.85.8	12345	TCP
2024-12-16T11:53:08.231764+0100	2846526	1	A Network Trojan was detected	192.168.2.13	54256	93.123.85.8	12345	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x-3.2-.Sakura.elf

Avira: detected

Found malware configuration

Source: x-3.2-.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "93.123.85.8:12345"}

Multi AV Scanner detection for submitted file

Source: x-3.2-.Sakura.elf

ReversingLabs: Detection: 68%

Machine Learning detection for sample

Source: x-3.2-.Sakura.elf

Joe Sandbox ML: detected

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/x-3.2-.Sakura.elf (PID: 5435)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53912 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53954 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53976 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53960 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53982 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53914 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53974 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53946 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53934 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53964 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54004 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53986 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53950 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53958 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53980 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53996 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53988 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54010 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54002 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53932 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54006 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53928 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54140 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54014 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53910 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53918 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53952 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53920 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53956 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54172 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53922 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53978 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54144 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53970 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53926 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53948 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53998 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53916 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54000 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54154 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54208 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54030 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54028 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54142 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54218 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54050 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54158 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54230 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54092 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54242 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54162 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54254 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54036 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54068 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54034 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54120 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54166 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54246 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54046 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54052 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53966 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54078 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54100 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53968 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54114 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54108 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54048 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53972 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54124 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54138 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54170 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53984 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54104 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54126 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54042 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54188 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53940 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53962 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54214 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54160 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53994 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54016 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54184 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54040 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54128 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54186 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54072 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54234 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53924 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54032 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54106 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54152 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54168 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54192 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54066 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54146 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53936 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54080 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54118 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54130 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54178 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54096 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54148 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53930 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54248 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54020 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54204 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54252 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54088 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54256 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54228 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54024 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54174 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54190 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53938 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54122 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54164 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54090 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54232 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54094 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54084 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53942 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54156 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53992 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54196 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54062 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53944 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54012 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54222 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54210 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54150 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54236 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54026 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54098 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54060 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54112 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54054 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54132 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54038 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54022 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54110 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54102 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54044 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54182 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54056 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54134 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54064 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54198 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54244 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54058 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54074 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54070 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54238 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54176 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54240 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54082 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54116 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54194 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54180 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54200 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54220 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54212 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54226 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54076 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54136 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54206 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:53990 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54008 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54216 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54224 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54018 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54086 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54202 -> 93.123.85.8:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.13:54250 -> 93.123.85.8:12345

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 93.123.85.8 ports 1,2,3,4,5,12345

Source: global traffic

TCP traffic: 192.168.2.13:53910 -> 93.123.85.8:12345

Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8
Source: unknown	TCP traffic detected without corresponding DNS query: 93.123.85.8

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a Author: unknown
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9127f7be Author: unknown
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a Author: unknown
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be Author: unknown
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a Author: unknown
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be Author: unknown
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 5435, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 5438, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6f24b67d0a6a4fc4e1cfea5a5414b82af1332a3e6074eb2178aee6b27702b407, id = 1b2e2a3a-1302-41c7-be99-43edb5563294, last_modified = 2021-09-16
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9127f7be reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 72c742cb8b11ddf030e10f67e13c0392748dcd970394ec77ace3d2baa705a375, id = 9127f7be-6e82-46a1-9f11-0b3570b0cd76, last_modified = 2021-09-16
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6f24b67d0a6a4fc4e1cfea5a5414b82af1332a3e6074eb2178aee6b27702b407, id = 1b2e2a3a-1302-41c7-be99-43edb5563294, last_modified = 2021-09-16
Source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 72c742cb8b11ddf030e10f67e13c0392748dcd970394ec77ace3d2baa705a375, id = 9127f7be-6e82-46a1-9f11-0b3570b0cd76, last_modified = 2021-09-16
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6f24b67d0a6a4fc4e1cfea5a5414b82af1332a3e6074eb2178aee6b27702b407, id = 1b2e2a3a-1302-41c7-be99-43edb5563294, last_modified = 2021-09-16
Source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 72c742cb8b11ddf030e10f67e13c0392748dcd970394ec77ace3d2baa705a375, id = 9127f7be-6e82-46a1-9f11-0b3570b0cd76, last_modified = 2021-09-16
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 5435, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 5438, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crt1.S
Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crti.S
Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crtn.S
Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/mmap.S

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: x-3.2-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-3.2-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x-3.2-.Sakura.elf PID: 5435, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x-3.2-.Sakura.elf PID: 5438, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: x-3.2-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-3.2-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5435.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5438.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x-3.2-.Sakura.elf PID: 5435, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x-3.2-.Sakura.elf PID: 5438, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "93.123.85.8:12345"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
x-3.2-.Sakura.elf	68%	ReversingLabs	Linux.Trojan.LnxSakura
x-3.2-.Sakura.elf	100%	Avira	EXP/ELF.Mirai.Z.A
x-3.2-.Sakura.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
93.123.85.8:12345	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
93.123.85.8	unknown	Bulgaria		43561	NET1-ASBG	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
93.123.85.8	a-r.m-7.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	p-p.c-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	SwiftSec.mpsl.elf	Get hash	malicious	Mirai	Browse
	SwiftSec.m68k.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	armv6l.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	p-p.c-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	debug.dbg.elf	Get hash	malicious	Mirai, Moobot	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NET1-ASBG	a-r.m-7.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	p-p.c-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	93.123.85.8
	x86.elf	Get hash	malicious	Unknown	Browse	93.123.30.205
	ppc.elf	Get hash	malicious	Unknown	Browse	95.87.199.46

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.306250965614156
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	x-3.2-.Sakura.elf
File size:	84'999 bytes
MD5:	727ccd2f0f69eaa2f5d6914f9b3db4b2
SHA1:	db3835960551669551cac54373ab38653c17df9a
SHA256:	252c138da8746a1d38a8fb7729318382995470c2634605388208ce76dd866842
SHA512:	cd311b2793301fb29d3849297242d9a8037fb28a2dd00bff5f4c1c6ddd488bb5b72af973ebfcf81bcff6f8780fe57d7aae4552b1a7096d6f99be723fc0f18c12
SSDEEP:	1536:W35b9Vc4N3J6lreu5r4hWj8L5WDloRmF+wVOz+sXcfW7k:Ab9Vc4JJ6liuq0Yl2oRmEwVOz+ucfW7k
TLSH:	C1833C02E743C6B3CC830BB2029BAA665931BDAA1E2A9F49F31D7DF45B128C47116F55
File Content Preview:	.ELF....................h...4...`.......4. ...(..............................................p...p.......i..........Q.td............................U..S.......w....h....s...[]...$.............U......=.s...t..1....$p.....$p......u........t...$.f..........s

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048168
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	65120
Section Header Size:	40
Number of Section Headers:	16
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80480b0	0xb0	0xbca4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x8053d54	0xbd54	0x17	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x8053d80	0xbd80	0x293c	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x80566bc	0xe6bc	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x8057000	0xf000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x8057008	0xf008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x8057010	0xf010	0x4	0x0	0x3	WA	0	0	4
.got.plt	PROGBITS	0x8057014	0xf014	0xc	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x8057020	0xf020	0x2d8	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x8057300	0xf2f8	0x66e4	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0xf2f8	0xaf8	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0xfdf0	0x6f	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x100e0	0x2ac0	0x10	0x0		15	249	4
.strtab	STRTAB	0x0	0x12ba0	0x2067	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xe6c0	0xe6c0	6.5486	0x5	R E	0x1000	.init .text .fini .rodata .eh_frame
LOAD	0xf000	0x8057000	0x8057000	0x2f8	0x69e4	3.4208	0x6	RW	0x1000	.ctors .dtors .jcr .got.plt .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8048094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80480b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x8053d54	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x8053d80	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x80566bc	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x8057000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x8057008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x8057010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x8057014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x8057020	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x8057300	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.147.5470	.symtab	0x8054ba0	24	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x8057340	16384	OBJECT	<unknown>	DEFAULT	11
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x804a3d1	290	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x8049c33	306	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x804a61e	312	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x8049362	850	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x8057014	0	OBJECT	<unknown>	HIDDEN	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x8057004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x8057000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x8057058	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x8054da0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x80572f0	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x80556e0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x8057060	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x80550a0	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x805700c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x8057008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x80566bc	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x80566bc	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x8057058	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x8054da0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x80572f0	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x80556e0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x8057060	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x80550a0	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x805705c	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x80572f4	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x8057064	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x804d940	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x8052d9c	29	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x804fd04	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x804d784	75	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x804f688	63	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x804f6ff	64	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x8052dbc	182	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x804d604	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x804ed30	273	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x804f1c8	20	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x804f1c8	20	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x805095c	54	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x804d660	46	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x804fa74	50	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x804d690	46	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x804deb8	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x805b560	4	OBJECT	<unknown>	HIDDEN	11
__GI_exit	.symtab	0x804f31c	103	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x80509e4	271	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x8050fc8	333	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x8050e80	98	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x8051118	105	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x8050af4	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x804d6c0	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x8052cb0	49	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x8053ae0	27	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x8053afc	231	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x8052ce4	120	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x804faa8	37	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x804fad0	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x804faf8	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x804fb20	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x804db54	48	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x804db84	818	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x804fb48	17	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x804d6e8	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x804fb5c	50	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x804dee4	43	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x804fb90	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x805b564	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x804db2c	37	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x804fed8	148	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x804db17	21	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x804dac8	79	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x80516a9	465	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x80513ce	458	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x804f11d	171	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x804d710	63	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x80512b8	29	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x804d750	50	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x8053cbc	86	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x8053a0c	35	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x804fddc	39	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x804fe04	39	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x8052d78	33	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x8053a30	176	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x804d948	21	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x804f9e8	27	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x804fbb8	50	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x804fbec	50	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x804d784	75	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x80509ac	54	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x8050930	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x804ee4c	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x804f025	94	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x80511e8	99	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x804d7e8	54	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x804df4c	51	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x804fc20	78	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x804d820	63	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x804df80	51	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x804dfb4	67	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x804d860	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x804dff8	59	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x804ef8c	153	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x804f90b	218	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x804e060	175	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x804fc70	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x804f384	393	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x804e034	43	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x8051e6c	31	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x804f083	154	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x8052e74	54	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x804d960	30	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x8051184	29	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x8051184	29	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x804d980	27	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x8051280	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x80511a4	19	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x80511b8	46	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x804fe2c	38	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x8052d5c	25	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x804feb0	39	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x805124c	50	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x804d99c	206	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x804da84	25	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x804fe54	89	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x804f1dc	26	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x804f510	325	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x80512d8	112	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x804d888	46	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x8051e4c	29	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x804d920	29	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x8051e8c	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x804fcc8	59	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x804d8b8	26	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x805305c	69	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x80530c4	133	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x80530a4	30	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x804d8d4	54	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x8057010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x8057010	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x805b554	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x8057160	24	OBJECT	<unknown>	DEFAULT	10
__bsd_signal	.symtab	0x804e060	175	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x80572f8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x804f6cb	52	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x805705c	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x80572f4	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x8057064	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x805b584	4	OBJECT	<unknown>	HIDDEN	11
__data_start	.symtab	0x8057028	0	NOTYPE	<unknown>	DEFAULT	10
__decode_answer	.symtab	0x8051a48	249	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x8052f3c	217	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x805192c	171	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x804ff6c	1876	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x8053d20	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80480c0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x8057020	0	OBJECT	<unknown>	HIDDEN	10
__encode_dotted	.symtab	0x8052eac	144	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x805187c	175	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x80519d8	83	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x805b54c	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x804d940	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x805b544	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x8050904	44	FUNC	<unknown>	HIDDEN	2
__get_pc_thunk_bx	.symtab	0x80480b0	0	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x804fb48	17	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x8052d9c	29	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x804fd04	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x8053018	65	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x8051a2c	28	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x804d690	46	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x804deb8	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x804d7cf	25	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x804d6c0	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x804d6e8	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x8053cbc	86	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x804fbec	50	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x804d784	75	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x80509ac	54	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x804d7e8	54	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x804df4c	51	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x804d820	63	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x804df80	51	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x804dfb4	67	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x804f90b	218	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x805b548	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x804d8b8	26	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x804d8d4	54	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x804e9c9	424	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x804e174	38	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x8057068	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x805d640	888	OBJECT	<unknown>	DEFAULT	11
__malloc_trim	.symtab	0x804e93c	141	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x805d9c8	12	OBJECT	<unknown>	HIDDEN	11
__nameservers	.symtab	0x805d9d4	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x8051b44	49	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x80506c0	579	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x805b550	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x804f6ca	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x8050930	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x8051b75	724	FUNC	<unknown>	HIDDEN	2
__register_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x8057180	24	OBJECT	<unknown>	DEFAULT	10
__restore	.symtab	0x804f903	0	NOTYPE	<unknown>	DEFAULT	2
__restore_rt	.symtab	0x804f8fc	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x805b558	4	OBJECT	<unknown>	HIDDEN	11
__searchdomain	.symtab	0x805d9b8	16	OBJECT	<unknown>	HIDDEN	11
__searchdomains	.symtab	0x805d9d8	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x804e134	32	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x804e154	32	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x804e110	36	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x804fa04	50	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x80571a4	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x805314c	79	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x8051f3c	128	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x8053be4	164	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x805319c	234	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x8050db3	23	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4160	.symtab	0x8055670	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x8053288	40	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x8053c88	51	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x80532b0	110	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x8053320	167	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x8050e54	43	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x80571a8	4	OBJECT	<unknown>	DEFAULT	10
__syscall_error	.symtab	0x8050994	21	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x804fa38	59	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x804f688	63	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x804f6ff	64	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x804f73f	443	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x8057178	4	OBJECT	<unknown>	HIDDEN	10
__xpg_strerror_r	.symtab	0x8052dbc	182	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x8051fbc	54	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x8050948	18	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x805d9dc	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x805d9e0	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x80572f8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x805d9e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x805b560	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x804d604	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x8053d54	3	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x805b5a0	8192	OBJECT	<unknown>	DEFAULT	11
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x8051ff2	106	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x8053460	1449	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x805b564	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x8048094	3	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x80533c8	86	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x8052614	111	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x8052805	975	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x8052684	66	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x80526c8	273	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x80527dc	41	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x804f6ca	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x804f6ca	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x805d5c0	128	OBJECT	<unknown>	HIDDEN	11
_start	.symtab	0x8048168	34	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x8050b0c	579	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x8050d50	99	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x80571ac	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x80571b0	24	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_dec_use	.symtab	0x8050ee4	228	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x805b58c	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x80571c8	24	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_use_count	.symtab	0x805b588	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x8057200	240	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x8050dca	136	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x80571e0	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x804f1f8	289	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x8053420	61	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x8055aa0	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x804fd0c	207	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x805205c	1464	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x804ed30	273	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x804d62c	50	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x804b4b8	298	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x804af39	1407	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x804f1c8	20	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x804f1c8	20	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x804aade	1115	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x804da6c	21	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x805b540	1	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.3001	.symtab	0x805b55c	1	OBJECT	<unknown>	DEFAULT	11
brk	.symtab	0x805095c	54	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x804e060	175	FUNC	<unknown>	DEFAULT	2
buf.2827	.symtab	0x805b344	16	OBJECT	<unknown>	DEFAULT	11
buf.5162	.symtab	0x805b360	460	OBJECT	<unknown>	DEFAULT	11
c	.symtab	0x8057050	4	OBJECT	<unknown>	DEFAULT	10
chdir	.symtab	0x804d660	46	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x804fa74	50	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x804d690	46	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x805702c	4	OBJECT	<unknown>	DEFAULT	10
completed.2429	.symtab	0x8057300	1	OBJECT	<unknown>	DEFAULT	11
connect	.symtab	0x804deb8	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x8048e77	523	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x804d7cf	25	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x8049187	159	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x805704c	4	OBJECT	<unknown>	DEFAULT	10
data_start	.symtab	0x8057028	0	NOTYPE	<unknown>	DEFAULT	10
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x805b54c	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x805b560	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x804f31c	103	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x8056620	156	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x80509e4	271	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x80482e7	111	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x8050fc8	333	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x8050e80	98	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x8051118	105	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x805660c	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x8050af4	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x804d6c0	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x8052cb0	49	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8048110	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x804eb71	412	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x8053ae0	27	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x8053ae0	27	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x8053afc	231	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x80496b4	1407	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x8052ce4	120	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x804b5e2	10	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x8048c15	55	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8048356	547	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x804b5ec	154	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x80482bb	44	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x804faa8	37	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x804fad0	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x804faf8	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x804fb20	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x804db54	48	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x804db84	818	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x804fb48	17	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x804d6e8	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x804fb5c	50	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x804dee4	43	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x804df10	59	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x804fb90	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x8057324	4	OBJECT	<unknown>	DEFAULT	11
h.5161	.symtab	0x805b52c	20	OBJECT	<unknown>	DEFAULT	11
h_errno	.symtab	0x805b564	4	OBJECT	<unknown>	DEFAULT	11
htonl	.symtab	0x804daad	7	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x804daa0	13	FUNC	<unknown>	DEFAULT	2
i.4243	.symtab	0x8057054	4	OBJECT	<unknown>	DEFAULT	10
index	.symtab	0x804d960	30	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x804db2c	37	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x804fed8	148	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x804db17	21	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x804dac8	79	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x80516a9	465	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x8051598	273	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x80513ce	458	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x8051348	134	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x804ce3b	334	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x804818c	111	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x804eef1	87	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x804f11d	171	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x804d710	63	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x80512b8	29	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x804d90c	17	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x804d750	50	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/mmap.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x8049082	261	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x8053cbc	86	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x8057330	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x804cf89	1507	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x8057320	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x80492de	132	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x8048c4c	106	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x8049e63	151	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x804e19a	1954	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x804ed0d	34	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x8053a0c	35	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x804fddc	39	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x804fe04	39	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x8052d78	33	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x8053a30	176	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x804d948	21	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap	.symtab	0x804f9e8	27	FUNC	<unknown>	DEFAULT	2
munmap	.symtab	0x804fbb8	50	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x8057080	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x8057098	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x805b568	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x804fbec	50	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1278	.symtab	0x805b340	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x804dac1	7	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x804dab4	13	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x8057328	8	OBJECT	<unknown>	DEFAULT	11
object.2482	.symtab	0x8057304	24	OBJECT	<unknown>	DEFAULT	11
open	.symtab	0x804d784	75	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x805d5a0	4	OBJECT	<unknown>	DEFAULT	11
p.2427	.symtab	0x8057024	0	OBJECT	<unknown>	DEFAULT	10
pids	.symtab	0x805d5a4	4	OBJECT	<unknown>	DEFAULT	11
poll	.symtab	0x80509ac	54	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4371	.symtab	0x80559ed	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x804887f	722	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8048624	66	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8048740	319	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8048666	218	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x804b686	6069	FUNC	<unknown>	DEFAULT	2
qual_chars.4377	.symtab	0x8055a00	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x8050930	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x804ee44	5	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x80481fb	192	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x804ee4c	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x80553a0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x804f025	94	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x80570e0	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x80511e8	99	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x804d7e8	54	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x804df4c	51	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x8048cb6	449	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x804a756	904	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x804fc20	78	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x804d820	63	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x804df80	51	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x804dfb4	67	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x804d860	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x804dff8	59	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x804ee94	93	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x804ef8c	153	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x804f90b	218	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x804e060	175	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x804fc70	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x804f384	393	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x804e034	43	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x8049d65	254	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x8048b51	196	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4376	.symtab	0x8055a14	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4370	.symtab	0x80559f9	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4373	.symtab	0x8055a3d	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4372	.symtab	0x8055a52	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4375	.symtab	0x8055a24	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4374	.symtab	0x8055a34	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x8051e6c	31	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x804ef48	67	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x804ef48	67	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x804f083	154	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x805717c	2	OBJECT	<unknown>	DEFAULT	10
static_ns	.symtab	0x805b580	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x80571a0	4	OBJECT	<unknown>	DEFAULT	10
stdhexflood	.symtab	0x804a4f3	299	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x8057198	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x805719c	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x8052e74	54	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x804d960	30	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x8051184	29	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x8051184	29	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x804d980	27	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x8051280	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x8052dbc	182	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x80511a4	19	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x80511b8	46	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x804fe2c	38	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x8052d5c	25	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x804feb0	39	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x805124c	50	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x804d99c	206	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x804da84	25	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x804fe54	89	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x804f1dc	26	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x804f510	325	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x80512d8	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x8049226	184	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x804d888	46	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x8051e4c	29	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x804d920	29	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x8048579	171	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x8055a5a	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x8055a72	12	OBJECT	<unknown>	DEFAULT	4
unknown.1330	.symtab	0x8055a7e	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x80570b0	28	OBJECT	<unknown>	DEFAULT	10
useragents	.symtab	0x8057030	28	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x804f658	48	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x8049efa	1239	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x8051e8c	176	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x804fcc8	59	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x804d8b8	26	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x805305c	69	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x80530c4	133	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x80530a4	30	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x804d8d4	54	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3285	.symtab	0x805569c	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-16T11:49:42.843150+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53910	93.123.85.8	12345	TCP
2024-12-16T11:49:44.016117+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53912	93.123.85.8	12345	TCP
2024-12-16T11:49:45.194228+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53914	93.123.85.8	12345	TCP
2024-12-16T11:49:46.372686+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53916	93.123.85.8	12345	TCP
2024-12-16T11:49:47.545974+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53918	93.123.85.8	12345	TCP
2024-12-16T11:49:48.718175+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53920	93.123.85.8	12345	TCP
2024-12-16T11:49:49.891861+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53922	93.123.85.8	12345	TCP
2024-12-16T11:49:51.077130+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53924	93.123.85.8	12345	TCP
2024-12-16T11:49:52.253254+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53926	93.123.85.8	12345	TCP
2024-12-16T11:49:53.444941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53928	93.123.85.8	12345	TCP
2024-12-16T11:49:54.618921+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53930	93.123.85.8	12345	TCP
2024-12-16T11:49:55.792778+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53932	93.123.85.8	12345	TCP
2024-12-16T11:49:56.965405+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53934	93.123.85.8	12345	TCP
2024-12-16T11:49:58.172844+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53936	93.123.85.8	12345	TCP
2024-12-16T11:49:59.346687+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53938	93.123.85.8	12345	TCP
2024-12-16T11:50:00.628986+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53940	93.123.85.8	12345	TCP
2024-12-16T11:50:01.801474+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53942	93.123.85.8	12345	TCP
2024-12-16T11:50:02.977881+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53944	93.123.85.8	12345	TCP
2024-12-16T11:50:04.150722+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53946	93.123.85.8	12345	TCP
2024-12-16T11:50:05.323639+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53948	93.123.85.8	12345	TCP
2024-12-16T11:50:06.500150+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53950	93.123.85.8	12345	TCP
2024-12-16T11:50:07.673217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53952	93.123.85.8	12345	TCP
2024-12-16T11:50:08.846211+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53954	93.123.85.8	12345	TCP
2024-12-16T11:50:10.024155+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53956	93.123.85.8	12345	TCP
2024-12-16T11:50:11.199467+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53958	93.123.85.8	12345	TCP
2024-12-16T11:50:12.565541+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53960	93.123.85.8	12345	TCP
2024-12-16T11:50:13.738758+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53962	93.123.85.8	12345	TCP
2024-12-16T11:50:14.911655+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53964	93.123.85.8	12345	TCP
2024-12-16T11:50:16.084870+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53966	93.123.85.8	12345	TCP
2024-12-16T11:50:17.259393+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53968	93.123.85.8	12345	TCP
2024-12-16T11:50:18.435778+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53970	93.123.85.8	12345	TCP
2024-12-16T11:50:19.610093+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53972	93.123.85.8	12345	TCP
2024-12-16T11:50:20.786442+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53974	93.123.85.8	12345	TCP
2024-12-16T11:50:21.958702+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53976	93.123.85.8	12345	TCP
2024-12-16T11:50:23.132038+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53978	93.123.85.8	12345	TCP
2024-12-16T11:50:24.309605+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53980	93.123.85.8	12345	TCP
2024-12-16T11:50:25.488631+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53982	93.123.85.8	12345	TCP
2024-12-16T11:50:26.671644+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53984	93.123.85.8	12345	TCP
2024-12-16T11:50:27.845428+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53986	93.123.85.8	12345	TCP
2024-12-16T11:50:29.017596+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53988	93.123.85.8	12345	TCP
2024-12-16T11:50:30.191013+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53990	93.123.85.8	12345	TCP
2024-12-16T11:50:31.367195+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53992	93.123.85.8	12345	TCP
2024-12-16T11:50:32.540336+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53994	93.123.85.8	12345	TCP
2024-12-16T11:50:33.713510+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53996	93.123.85.8	12345	TCP
2024-12-16T11:50:34.889054+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	53998	93.123.85.8	12345	TCP
2024-12-16T11:50:36.067308+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54000	93.123.85.8	12345	TCP
2024-12-16T11:50:37.251976+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54002	93.123.85.8	12345	TCP
2024-12-16T11:50:38.427178+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54004	93.123.85.8	12345	TCP
2024-12-16T11:50:39.599668+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54006	93.123.85.8	12345	TCP
2024-12-16T11:50:40.773325+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54008	93.123.85.8	12345	TCP
2024-12-16T11:50:41.955258+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54010	93.123.85.8	12345	TCP
2024-12-16T11:50:43.135430+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54012	93.123.85.8	12345	TCP
2024-12-16T11:50:44.311761+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54014	93.123.85.8	12345	TCP
2024-12-16T11:50:45.487909+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54016	93.123.85.8	12345	TCP
2024-12-16T11:50:46.659588+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54018	93.123.85.8	12345	TCP
2024-12-16T11:50:47.839621+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54020	93.123.85.8	12345	TCP
2024-12-16T11:50:49.015620+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54022	93.123.85.8	12345	TCP
2024-12-16T11:50:50.194712+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54024	93.123.85.8	12345	TCP
2024-12-16T11:50:51.369206+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54026	93.123.85.8	12345	TCP
2024-12-16T11:50:52.560852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54028	93.123.85.8	12345	TCP
2024-12-16T11:50:53.734832+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54030	93.123.85.8	12345	TCP
2024-12-16T11:50:54.908086+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54032	93.123.85.8	12345	TCP
2024-12-16T11:50:56.081925+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54034	93.123.85.8	12345	TCP
2024-12-16T11:50:57.256372+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54036	93.123.85.8	12345	TCP
2024-12-16T11:50:58.432261+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54038	93.123.85.8	12345	TCP
2024-12-16T11:50:59.612161+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54040	93.123.85.8	12345	TCP
2024-12-16T11:51:00.785879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54042	93.123.85.8	12345	TCP
2024-12-16T11:51:01.970517+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54044	93.123.85.8	12345	TCP
2024-12-16T11:51:03.143748+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54046	93.123.85.8	12345	TCP
2024-12-16T11:51:04.513533+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54048	93.123.85.8	12345	TCP
2024-12-16T11:51:05.688047+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54050	93.123.85.8	12345	TCP
2024-12-16T11:51:06.867446+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54052	93.123.85.8	12345	TCP
2024-12-16T11:51:08.041983+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54054	93.123.85.8	12345	TCP
2024-12-16T11:51:09.216452+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54056	93.123.85.8	12345	TCP
2024-12-16T11:51:10.389272+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54058	93.123.85.8	12345	TCP
2024-12-16T11:51:11.562292+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54060	93.123.85.8	12345	TCP
2024-12-16T11:51:12.748772+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54062	93.123.85.8	12345	TCP
2024-12-16T11:51:13.920620+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54064	93.123.85.8	12345	TCP
2024-12-16T11:51:15.093714+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54066	93.123.85.8	12345	TCP
2024-12-16T11:51:16.266910+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54068	93.123.85.8	12345	TCP
2024-12-16T11:51:17.439055+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54070	93.123.85.8	12345	TCP
2024-12-16T11:51:18.613448+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54072	93.123.85.8	12345	TCP
2024-12-16T11:51:19.791764+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54074	93.123.85.8	12345	TCP
2024-12-16T11:51:20.967241+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54076	93.123.85.8	12345	TCP
2024-12-16T11:51:22.140977+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54078	93.123.85.8	12345	TCP
2024-12-16T11:51:23.313490+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54080	93.123.85.8	12345	TCP
2024-12-16T11:51:24.487766+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54082	93.123.85.8	12345	TCP
2024-12-16T11:51:25.660219+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54084	93.123.85.8	12345	TCP
2024-12-16T11:51:26.832395+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54086	93.123.85.8	12345	TCP
2024-12-16T11:51:28.013338+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54088	93.123.85.8	12345	TCP
2024-12-16T11:51:29.185986+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54090	93.123.85.8	12345	TCP
2024-12-16T11:51:30.359763+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54092	93.123.85.8	12345	TCP
2024-12-16T11:51:31.533288+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54094	93.123.85.8	12345	TCP
2024-12-16T11:51:32.710654+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54096	93.123.85.8	12345	TCP
2024-12-16T11:51:33.885543+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54098	93.123.85.8	12345	TCP
2024-12-16T11:51:35.061175+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54100	93.123.85.8	12345	TCP
2024-12-16T11:51:36.233382+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54102	93.123.85.8	12345	TCP
2024-12-16T11:51:37.405972+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54104	93.123.85.8	12345	TCP
2024-12-16T11:51:38.579358+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54106	93.123.85.8	12345	TCP
2024-12-16T11:51:39.752749+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54108	93.123.85.8	12345	TCP
2024-12-16T11:51:40.929147+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54110	93.123.85.8	12345	TCP
2024-12-16T11:51:42.102590+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54112	93.123.85.8	12345	TCP
2024-12-16T11:51:43.280423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54114	93.123.85.8	12345	TCP
2024-12-16T11:51:44.457921+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54116	93.123.85.8	12345	TCP
2024-12-16T11:51:45.629697+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54118	93.123.85.8	12345	TCP
2024-12-16T11:51:46.994498+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54120	93.123.85.8	12345	TCP
2024-12-16T11:51:48.167362+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54122	93.123.85.8	12345	TCP
2024-12-16T11:51:49.342293+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54124	93.123.85.8	12345	TCP
2024-12-16T11:51:50.516628+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54126	93.123.85.8	12345	TCP
2024-12-16T11:51:51.693915+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54128	93.123.85.8	12345	TCP
2024-12-16T11:51:52.869411+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54130	93.123.85.8	12345	TCP
2024-12-16T11:51:54.042055+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54132	93.123.85.8	12345	TCP
2024-12-16T11:51:55.246805+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54134	93.123.85.8	12345	TCP
2024-12-16T11:51:56.459298+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54136	93.123.85.8	12345	TCP
2024-12-16T11:51:57.636462+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54138	93.123.85.8	12345	TCP
2024-12-16T11:51:59.951385+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54140	93.123.85.8	12345	TCP
2024-12-16T11:52:01.125421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54142	93.123.85.8	12345	TCP
2024-12-16T11:52:02.395130+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54144	93.123.85.8	12345	TCP
2024-12-16T11:52:03.567233+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54146	93.123.85.8	12345	TCP
2024-12-16T11:52:04.739838+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54148	93.123.85.8	12345	TCP
2024-12-16T11:52:05.913330+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54150	93.123.85.8	12345	TCP
2024-12-16T11:52:07.090602+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54152	93.123.85.8	12345	TCP
2024-12-16T11:52:08.263706+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54154	93.123.85.8	12345	TCP
2024-12-16T11:52:09.437927+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54156	93.123.85.8	12345	TCP
2024-12-16T11:52:10.611406+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54158	93.123.85.8	12345	TCP
2024-12-16T11:52:11.783866+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54160	93.123.85.8	12345	TCP
2024-12-16T11:52:12.955792+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54162	93.123.85.8	12345	TCP
2024-12-16T11:52:14.134036+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54164	93.123.85.8	12345	TCP
2024-12-16T11:52:15.307266+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54166	93.123.85.8	12345	TCP
2024-12-16T11:52:16.482263+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54168	93.123.85.8	12345	TCP
2024-12-16T11:52:17.666846+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54170	93.123.85.8	12345	TCP
2024-12-16T11:52:18.844748+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54172	93.123.85.8	12345	TCP
2024-12-16T11:52:20.016716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54174	93.123.85.8	12345	TCP
2024-12-16T11:52:21.190602+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54176	93.123.85.8	12345	TCP
2024-12-16T11:52:22.363800+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54178	93.123.85.8	12345	TCP
2024-12-16T11:52:23.537663+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54180	93.123.85.8	12345	TCP
2024-12-16T11:52:24.709850+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54182	93.123.85.8	12345	TCP
2024-12-16T11:52:25.904563+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54184	93.123.85.8	12345	TCP
2024-12-16T11:52:27.076293+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54186	93.123.85.8	12345	TCP
2024-12-16T11:52:28.265655+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54188	93.123.85.8	12345	TCP
2024-12-16T11:52:29.439010+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54190	93.123.85.8	12345	TCP
2024-12-16T11:52:30.611916+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54192	93.123.85.8	12345	TCP
2024-12-16T11:52:31.784193+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54194	93.123.85.8	12345	TCP
2024-12-16T11:52:32.960570+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54196	93.123.85.8	12345	TCP
2024-12-16T11:52:34.143199+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54198	93.123.85.8	12345	TCP
2024-12-16T11:52:35.318873+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54200	93.123.85.8	12345	TCP
2024-12-16T11:52:36.491466+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54202	93.123.85.8	12345	TCP
2024-12-16T11:52:37.667573+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54204	93.123.85.8	12345	TCP
2024-12-16T11:52:38.839961+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54206	93.123.85.8	12345	TCP
2024-12-16T11:52:40.011678+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54208	93.123.85.8	12345	TCP
2024-12-16T11:52:41.183232+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54210	93.123.85.8	12345	TCP
2024-12-16T11:52:42.359425+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54212	93.123.85.8	12345	TCP
2024-12-16T11:52:43.531689+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54214	93.123.85.8	12345	TCP
2024-12-16T11:52:44.704593+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54216	93.123.85.8	12345	TCP
2024-12-16T11:52:45.879929+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54218	93.123.85.8	12345	TCP
2024-12-16T11:52:47.053098+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54220	93.123.85.8	12345	TCP
2024-12-16T11:52:48.225118+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54222	93.123.85.8	12345	TCP
2024-12-16T11:52:49.399713+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54224	93.123.85.8	12345	TCP
2024-12-16T11:52:50.572475+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54226	93.123.85.8	12345	TCP
2024-12-16T11:52:51.750013+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54228	93.123.85.8	12345	TCP
2024-12-16T11:52:52.922887+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54230	93.123.85.8	12345	TCP
2024-12-16T11:52:54.097018+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54232	93.123.85.8	12345	TCP
2024-12-16T11:52:55.271416+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54234	93.123.85.8	12345	TCP
2024-12-16T11:52:56.449356+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54236	93.123.85.8	12345	TCP
2024-12-16T11:52:57.624549+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54238	93.123.85.8	12345	TCP
2024-12-16T11:52:58.805077+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54240	93.123.85.8	12345	TCP
2024-12-16T11:52:59.977819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54242	93.123.85.8	12345	TCP
2024-12-16T11:53:01.176361+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54244	93.123.85.8	12345	TCP
2024-12-16T11:53:02.352130+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54246	93.123.85.8	12345	TCP
2024-12-16T11:53:03.528030+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54248	93.123.85.8	12345	TCP
2024-12-16T11:53:04.703631+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54250	93.123.85.8	12345	TCP
2024-12-16T11:53:05.880494+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54252	93.123.85.8	12345	TCP
2024-12-16T11:53:07.053114+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54254	93.123.85.8	12345	TCP
2024-12-16T11:53:08.231764+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.13	54256	93.123.85.8	12345	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 11:49:42.722393990 CET	53910	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:42.842516899 CET	12345	53910	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:42.842977047 CET	53910	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:42.843149900 CET	53910	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:42.963494062 CET	12345	53910	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:43.895262957 CET	12345	53910	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:43.895286083 CET	12345	53910	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:43.895582914 CET	53910	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:43.895625114 CET	53910	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:43.895631075 CET	53912	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:44.015909910 CET	12345	53910	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:44.015938997 CET	12345	53912	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:44.016062021 CET	53912	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:44.016117096 CET	53912	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:44.136425972 CET	12345	53912	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:45.073497057 CET	12345	53912	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:45.073519945 CET	12345	53912	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:45.073748112 CET	53912	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:45.073748112 CET	53912	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:45.073748112 CET	53914	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:45.193820000 CET	12345	53912	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:45.193862915 CET	12345	53914	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:45.194164991 CET	53914	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:45.194227934 CET	53914	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:45.313990116 CET	12345	53914	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:46.252275944 CET	12345	53914	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:46.252465963 CET	53914	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:46.252511024 CET	12345	53914	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:46.252595901 CET	53914	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:46.252661943 CET	53916	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:46.372447968 CET	12345	53914	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:46.372513056 CET	12345	53916	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:46.372654915 CET	53916	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:46.372685909 CET	53916	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:46.492722988 CET	12345	53916	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:47.425134897 CET	12345	53916	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:47.425184965 CET	12345	53916	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:47.425468922 CET	53916	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:47.425468922 CET	53916	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:47.425468922 CET	53918	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:47.545650005 CET	12345	53916	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:47.545701981 CET	12345	53918	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:47.545974016 CET	53918	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:47.545974016 CET	53918	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:47.666279078 CET	12345	53918	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:48.597697020 CET	12345	53918	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:48.597764015 CET	12345	53918	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:48.597909927 CET	53918	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:48.597909927 CET	53918	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:48.597956896 CET	53920	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:48.717873096 CET	12345	53918	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:48.717900038 CET	12345	53920	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:48.718084097 CET	53920	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:48.718174934 CET	53920	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:48.837935925 CET	12345	53920	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:49.771076918 CET	12345	53920	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:49.771143913 CET	12345	53920	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:49.771301031 CET	53920	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:49.771368027 CET	53920	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:49.771404982 CET	53922	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:49.891360998 CET	12345	53920	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:49.891436100 CET	12345	53922	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:49.891860962 CET	53922	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:49.891860962 CET	53922	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:50.011746883 CET	12345	53922	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:50.956549883 CET	12345	53922	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:50.956587076 CET	12345	53922	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:50.956758022 CET	53922	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:50.956846952 CET	53922	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:50.956943989 CET	53924	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:51.076904058 CET	12345	53922	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:51.076920986 CET	12345	53924	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:51.077089071 CET	53924	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:51.077130079 CET	53924	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:51.196897984 CET	12345	53924	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:52.132438898 CET	12345	53924	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:52.132554054 CET	12345	53924	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:52.132756948 CET	53924	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:52.132817030 CET	53924	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:52.132884979 CET	53926	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:52.252926111 CET	12345	53924	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:52.252980947 CET	12345	53926	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:52.253196001 CET	53926	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:52.253253937 CET	53926	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:52.373178005 CET	12345	53926	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:53.324686050 CET	12345	53926	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:53.324816942 CET	53926	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:53.324832916 CET	12345	53926	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:53.324886084 CET	53926	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:53.324939966 CET	53928	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:53.444734097 CET	12345	53926	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:53.444792986 CET	12345	53928	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:53.444890022 CET	53928	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:53.444941044 CET	53928	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:53.564995050 CET	12345	53928	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:54.498410940 CET	12345	53928	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:54.498470068 CET	12345	53928	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:54.498682976 CET	53928	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:54.498771906 CET	53928	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:54.498878956 CET	53930	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:54.618633986 CET	12345	53928	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:54.618696928 CET	12345	53930	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:54.618824959 CET	53930	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:54.618921041 CET	53930	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:54.740315914 CET	12345	53930	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:55.672173977 CET	12345	53930	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:55.672281981 CET	12345	53930	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:55.672380924 CET	53930	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:55.672411919 CET	53930	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:55.672487974 CET	53932	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:55.792404890 CET	12345	53930	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:55.792452097 CET	12345	53932	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:55.792686939 CET	53932	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:55.792778015 CET	53932	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:55.912671089 CET	12345	53932	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:56.845019102 CET	12345	53932	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:56.845056057 CET	12345	53932	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:56.845212936 CET	53932	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:56.845376968 CET	53932	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:56.845474958 CET	53934	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:56.965107918 CET	12345	53932	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:56.965159893 CET	12345	53934	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:56.965312958 CET	53934	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:56.965404987 CET	53934	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:57.085268021 CET	12345	53934	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:58.052182913 CET	12345	53934	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:58.052392960 CET	12345	53934	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:58.052505016 CET	53934	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:58.052584887 CET	53934	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:58.052665949 CET	53936	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:58.172524929 CET	12345	53934	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:58.172570944 CET	12345	53936	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:58.172753096 CET	53936	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:58.172843933 CET	53936	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:58.292823076 CET	12345	53936	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:59.225845098 CET	12345	53936	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:59.225899935 CET	12345	53936	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:59.226094961 CET	53936	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:59.226135015 CET	53936	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:59.226190090 CET	53938	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:59.346292973 CET	12345	53936	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:59.346337080 CET	12345	53938	93.123.85.8	192.168.2.13
Dec 16, 2024 11:49:59.346553087 CET	53938	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:59.346687078 CET	53938	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:49:59.466922998 CET	12345	53938	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:00.401201010 CET	12345	53938	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:00.401276112 CET	12345	53938	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:00.401438951 CET	53938	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:00.401519060 CET	53938	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:00.401700974 CET	53940	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:00.521348953 CET	12345	53938	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:00.628703117 CET	12345	53940	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:00.628984928 CET	53940	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:00.628985882 CET	53940	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:00.749089956 CET	12345	53940	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:01.680689096 CET	12345	53940	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:01.680706978 CET	12345	53940	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:01.681026936 CET	53940	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:01.681231022 CET	53940	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:01.681339979 CET	53942	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:01.800964117 CET	12345	53940	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:01.801057100 CET	12345	53942	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:01.801366091 CET	53942	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:01.801474094 CET	53942	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:01.921339035 CET	12345	53942	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:02.857310057 CET	12345	53942	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:02.857357025 CET	12345	53942	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:02.857516050 CET	53942	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:02.857634068 CET	53942	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:02.857753992 CET	53944	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:02.977477074 CET	12345	53942	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:02.977520943 CET	12345	53944	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:02.977806091 CET	53944	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:02.977880955 CET	53944	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:03.097940922 CET	12345	53944	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:04.029828072 CET	12345	53944	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:04.029897928 CET	12345	53944	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:04.030071020 CET	53944	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:04.030179024 CET	53944	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:04.030265093 CET	53946	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:04.150254011 CET	12345	53944	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:04.150302887 CET	12345	53946	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:04.150661945 CET	53946	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:04.150722027 CET	53946	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:04.271744013 CET	12345	53946	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:05.202809095 CET	12345	53946	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:05.202848911 CET	12345	53946	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:05.203277111 CET	53946	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:05.203278065 CET	53946	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:05.203330994 CET	53948	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:05.323379993 CET	12345	53948	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:05.323429108 CET	12345	53946	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:05.323565006 CET	53948	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:05.323638916 CET	53948	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:05.443823099 CET	12345	53948	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:06.379776001 CET	12345	53948	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:06.379803896 CET	12345	53948	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:06.380098104 CET	53948	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:06.380099058 CET	53948	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:06.380155087 CET	53950	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:06.499932051 CET	12345	53948	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:06.499955893 CET	12345	53950	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:06.500149965 CET	53950	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:06.500149965 CET	53950	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:06.619967937 CET	12345	53950	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:07.552517891 CET	12345	53950	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:07.552628994 CET	12345	53950	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:07.552845955 CET	53950	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:07.552911043 CET	53950	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:07.552989006 CET	53952	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:07.672884941 CET	12345	53950	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:07.672908068 CET	12345	53952	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:07.673217058 CET	53952	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:07.673217058 CET	53952	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:07.793103933 CET	12345	53952	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:08.724642992 CET	12345	53952	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:08.724695921 CET	12345	53952	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:08.725002050 CET	53952	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:08.725003004 CET	53952	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:08.725085974 CET	53954	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:08.845918894 CET	12345	53952	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:08.845966101 CET	12345	53954	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:08.846210003 CET	53954	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:08.846210957 CET	53954	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:08.966820002 CET	12345	53954	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:09.902795076 CET	12345	53954	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:09.902844906 CET	12345	53954	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:09.903141975 CET	53954	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:09.903239965 CET	53954	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:09.903443098 CET	53956	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:10.023802042 CET	12345	53954	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:10.023852110 CET	12345	53956	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:10.024153948 CET	53956	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:10.024154902 CET	53956	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:10.144664049 CET	12345	53956	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:11.076675892 CET	12345	53956	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:11.076726913 CET	12345	53956	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:11.076915026 CET	53956	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:11.077028990 CET	53956	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:11.077028990 CET	53958	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:11.199039936 CET	12345	53956	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:11.199089050 CET	12345	53958	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:11.199363947 CET	53958	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:11.199466944 CET	53958	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:11.319439888 CET	12345	53958	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:12.444494963 CET	12345	53958	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:12.444540977 CET	12345	53958	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:12.444685936 CET	53958	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:12.444736004 CET	53958	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:12.444747925 CET	53960	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:12.513156891 CET	12345	53958	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:12.513560057 CET	53958	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:12.565103054 CET	12345	53958	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:12.565154076 CET	12345	53960	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:12.565435886 CET	53960	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:12.565541029 CET	53960	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:12.685790062 CET	12345	53960	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:13.617660999 CET	12345	53960	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:13.617721081 CET	12345	53960	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:13.618151903 CET	53960	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:13.618151903 CET	53960	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:13.618232965 CET	53962	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:13.738466978 CET	12345	53960	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:13.738521099 CET	12345	53962	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:13.738656044 CET	53962	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:13.738758087 CET	53962	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:13.858824015 CET	12345	53962	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:14.790874004 CET	12345	53962	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:14.790924072 CET	12345	53962	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:14.791234970 CET	53962	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:14.791454077 CET	53962	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:14.791574001 CET	53964	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:14.911180973 CET	12345	53962	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:14.911259890 CET	12345	53964	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:14.911541939 CET	53964	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:14.911654949 CET	53964	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:15.031502962 CET	12345	53964	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:15.963776112 CET	12345	53964	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:15.963809013 CET	12345	53964	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:15.964226007 CET	53964	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:15.964251041 CET	53964	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:15.964432955 CET	53966	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:16.084466934 CET	12345	53964	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:16.084525108 CET	12345	53966	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:16.084731102 CET	53966	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:16.084870100 CET	53966	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:16.205560923 CET	12345	53966	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:17.138212919 CET	12345	53966	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:17.138259888 CET	12345	53966	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:17.138619900 CET	53966	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:17.138849020 CET	53966	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:17.138879061 CET	53968	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:17.258879900 CET	12345	53966	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:17.258975029 CET	12345	53968	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:17.259260893 CET	53968	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:17.259392977 CET	53968	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:17.379523039 CET	12345	53968	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:18.315279007 CET	12345	53968	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:18.315433025 CET	12345	53968	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:18.315521955 CET	53968	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:18.315608025 CET	53968	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:18.315608025 CET	53970	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:18.435503006 CET	12345	53968	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:18.435584068 CET	12345	53970	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:18.435704947 CET	53970	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:18.435777903 CET	53970	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:18.555665016 CET	12345	53970	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:19.488821030 CET	12345	53970	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:19.489209890 CET	12345	53970	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:19.489348888 CET	53972	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:19.489386082 CET	53970	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:19.489386082 CET	53970	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:19.609579086 CET	12345	53972	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:19.609603882 CET	12345	53970	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:19.610045910 CET	53972	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:19.610093117 CET	53972	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:19.730370045 CET	12345	53972	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:20.665760040 CET	12345	53972	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:20.665827036 CET	12345	53972	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:20.666081905 CET	53972	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:20.666203022 CET	53972	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:20.666203976 CET	53974	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:20.786130905 CET	12345	53972	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:20.786178112 CET	12345	53974	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:20.786391020 CET	53974	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:20.786442041 CET	53974	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:20.906344891 CET	12345	53974	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:21.838418961 CET	12345	53974	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:21.838442087 CET	12345	53974	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:21.838563919 CET	53974	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:21.838608980 CET	53974	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:21.838669062 CET	53976	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:21.958498001 CET	12345	53974	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:21.958544970 CET	12345	53976	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:21.958637953 CET	53976	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:21.958702087 CET	53976	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:22.078542948 CET	12345	53976	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:23.010966063 CET	12345	53976	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:23.011023998 CET	12345	53976	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:23.011236906 CET	53976	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:23.011236906 CET	53976	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:23.011236906 CET	53978	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:23.131738901 CET	12345	53976	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:23.131836891 CET	12345	53978	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:23.132038116 CET	53978	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:23.132038116 CET	53978	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:23.252207994 CET	12345	53978	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:24.188817024 CET	12345	53978	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:24.188867092 CET	12345	53978	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:24.189026117 CET	53978	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:24.189026117 CET	53978	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:24.189143896 CET	53980	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:24.309312105 CET	12345	53978	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:24.309366941 CET	12345	53980	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:24.309514999 CET	53980	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:24.309604883 CET	53980	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:24.429610014 CET	12345	53980	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:25.367721081 CET	12345	53980	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:25.367770910 CET	12345	53980	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:25.367916107 CET	53980	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:25.368007898 CET	53980	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:25.368007898 CET	53982	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:25.488430977 CET	12345	53980	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:25.488478899 CET	12345	53982	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:25.488590002 CET	53982	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:25.488631010 CET	53982	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:25.608825922 CET	12345	53982	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:26.550575972 CET	12345	53982	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:26.550625086 CET	12345	53982	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:26.550859928 CET	53982	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:26.550908089 CET	53982	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:26.550957918 CET	53984	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:26.671199083 CET	12345	53982	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:26.671247005 CET	12345	53984	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:26.671432972 CET	53984	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:26.671643972 CET	53984	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:26.791639090 CET	12345	53984	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:27.724982977 CET	12345	53984	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:27.725168943 CET	53984	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:27.725229979 CET	12345	53984	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:27.725307941 CET	53984	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:27.725361109 CET	53986	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:27.845283031 CET	12345	53984	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:27.845307112 CET	12345	53986	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:27.845386028 CET	53986	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:27.845427990 CET	53986	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:27.965240955 CET	12345	53986	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:28.897068977 CET	12345	53986	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:28.897095919 CET	12345	53986	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:28.897243977 CET	53986	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:28.897300005 CET	53986	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:28.897322893 CET	53988	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:29.017258883 CET	12345	53986	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:29.017282009 CET	12345	53988	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:29.017410040 CET	53988	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:29.017596006 CET	53988	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:29.137563944 CET	12345	53988	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:30.070046902 CET	12345	53988	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:30.070203066 CET	12345	53988	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:30.070208073 CET	53988	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:30.070298910 CET	53988	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:30.070347071 CET	53990	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:30.190783024 CET	12345	53988	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:30.190809011 CET	12345	53990	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:30.190946102 CET	53990	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:30.191013098 CET	53990	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:30.311033010 CET	12345	53990	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:31.246196032 CET	12345	53990	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:31.246252060 CET	12345	53990	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:31.246347904 CET	53990	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:31.246393919 CET	53990	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:31.246550083 CET	53992	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:31.366868019 CET	12345	53990	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:31.366914034 CET	12345	53992	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:31.367100954 CET	53992	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:31.367194891 CET	53992	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:31.487113953 CET	12345	53992	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:32.419562101 CET	12345	53992	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:32.419600010 CET	12345	53992	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:32.419815063 CET	53992	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:32.419815063 CET	53992	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:32.419815063 CET	53994	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:32.540030003 CET	12345	53992	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:32.540055037 CET	12345	53994	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:32.540334940 CET	53994	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:32.540335894 CET	53994	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:32.660311937 CET	12345	53994	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:33.592350960 CET	12345	53994	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:33.592387915 CET	12345	53994	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:33.593169928 CET	53994	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:33.593242884 CET	53994	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:33.593348980 CET	53996	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:33.713160038 CET	12345	53994	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:33.713232040 CET	12345	53996	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:33.713424921 CET	53996	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:33.713510036 CET	53996	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:33.833627939 CET	12345	53996	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:34.767883062 CET	12345	53996	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:34.767925024 CET	12345	53996	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:34.768167973 CET	53996	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:34.768261909 CET	53996	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:34.768261909 CET	53998	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:34.888783932 CET	12345	53996	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:34.888834000 CET	12345	53998	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:34.888979912 CET	53998	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:34.889054060 CET	53998	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:35.009114981 CET	12345	53998	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:35.946106911 CET	12345	53998	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:35.946176052 CET	12345	53998	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:35.946372032 CET	53998	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:35.946450949 CET	53998	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:35.946458101 CET	54000	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:36.066939116 CET	12345	53998	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:36.066992998 CET	12345	54000	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:36.067174911 CET	54000	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:36.067307949 CET	54000	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:36.187731981 CET	12345	54000	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:37.131488085 CET	12345	54000	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:37.131531954 CET	12345	54000	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:37.131769896 CET	54000	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:37.131848097 CET	54000	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:37.131927013 CET	54002	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:37.251786947 CET	12345	54000	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:37.251806021 CET	12345	54002	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:37.251931906 CET	54002	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:37.251976013 CET	54002	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:37.372044086 CET	12345	54002	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:38.306267977 CET	12345	54002	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:38.306361914 CET	12345	54002	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:38.306525946 CET	54002	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:38.306629896 CET	54002	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:38.306721926 CET	54004	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:38.426825047 CET	12345	54002	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:38.426876068 CET	12345	54004	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:38.427093983 CET	54004	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:38.427177906 CET	54004	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:38.547205925 CET	12345	54004	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:39.479155064 CET	12345	54004	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:39.479278088 CET	12345	54004	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:39.479345083 CET	54004	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:39.479566097 CET	54004	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:39.479684114 CET	54006	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:39.599461079 CET	12345	54004	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:39.599495888 CET	12345	54006	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:39.599630117 CET	54006	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:39.599668026 CET	54006	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:39.719603062 CET	12345	54006	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:40.652812004 CET	12345	54006	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:40.652870893 CET	12345	54006	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:40.653055906 CET	54006	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:40.653143883 CET	54006	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:40.653242111 CET	54008	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:40.772926092 CET	12345	54006	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:40.772980928 CET	12345	54008	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:40.773324966 CET	54008	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:40.773324966 CET	54008	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:40.893335104 CET	12345	54008	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:41.834160089 CET	12345	54008	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:41.834301949 CET	12345	54008	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:41.834340096 CET	54008	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:41.834417105 CET	54008	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:41.834614038 CET	54010	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:41.954601049 CET	12345	54008	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:41.955028057 CET	12345	54010	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:41.955189943 CET	54010	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:41.955257893 CET	54010	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:42.075088978 CET	12345	54010	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:43.014823914 CET	12345	54010	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:43.014847994 CET	12345	54010	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:43.014950037 CET	54010	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:43.015085936 CET	54010	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:43.015191078 CET	54012	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:43.135217905 CET	12345	54010	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:43.135262012 CET	12345	54012	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:43.135373116 CET	54012	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:43.135430098 CET	54012	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:43.255398035 CET	12345	54012	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:44.191438913 CET	12345	54012	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:44.191472054 CET	12345	54012	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:44.191565990 CET	54012	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:44.191618919 CET	54012	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:44.191659927 CET	54014	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:44.311589003 CET	12345	54012	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:44.311606884 CET	12345	54014	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:44.311712027 CET	54014	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:44.311760902 CET	54014	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:44.431639910 CET	12345	54014	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:45.367204905 CET	12345	54014	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:45.367263079 CET	12345	54014	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:45.367419958 CET	54014	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:45.367510080 CET	54016	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:45.367547035 CET	54014	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:45.487615108 CET	12345	54016	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:45.487654924 CET	12345	54014	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:45.487829924 CET	54016	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:45.487909079 CET	54016	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:45.608120918 CET	12345	54016	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:46.538825989 CET	12345	54016	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:46.539105892 CET	54016	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:46.539127111 CET	12345	54016	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:46.539207935 CET	54016	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:46.539246082 CET	54018	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:46.659410954 CET	12345	54016	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:46.659429073 CET	12345	54018	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:46.659540892 CET	54018	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:46.659588099 CET	54018	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:46.779455900 CET	12345	54018	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:47.719197035 CET	12345	54018	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:47.719434977 CET	12345	54018	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:47.719541073 CET	54018	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:47.719584942 CET	54018	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:47.719609976 CET	54020	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:47.839452982 CET	12345	54018	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:47.839479923 CET	12345	54020	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:47.839620113 CET	54020	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:47.839621067 CET	54020	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:47.959449053 CET	12345	54020	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:48.894526958 CET	12345	54020	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:48.894707918 CET	12345	54020	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:48.895036936 CET	54020	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:48.895036936 CET	54020	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:48.895036936 CET	54022	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:49.015213013 CET	12345	54020	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:49.015256882 CET	12345	54022	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:49.015470982 CET	54022	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:49.015619993 CET	54022	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:49.135585070 CET	12345	54022	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:50.073800087 CET	12345	54022	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:50.073844910 CET	12345	54022	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:50.074026108 CET	54024	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:50.074048996 CET	54022	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:50.074048996 CET	54022	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:50.194366932 CET	12345	54024	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:50.194410086 CET	12345	54022	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:50.194667101 CET	54024	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:50.194711924 CET	54024	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:50.315417051 CET	12345	54024	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:51.247718096 CET	12345	54024	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:51.247767925 CET	12345	54024	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:51.247948885 CET	54024	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:51.247984886 CET	54024	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:51.248037100 CET	54026	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:51.368916035 CET	12345	54024	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:51.368957043 CET	12345	54026	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:51.369205952 CET	54026	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:51.369205952 CET	54026	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:51.489361048 CET	12345	54026	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:52.440186977 CET	12345	54026	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:52.440252066 CET	12345	54026	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:52.440361023 CET	54026	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:52.440409899 CET	54026	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:52.440428972 CET	54028	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:52.560441971 CET	12345	54026	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:52.560545921 CET	12345	54028	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:52.560774088 CET	54028	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:52.560852051 CET	54028	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:52.681420088 CET	12345	54028	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:53.614423037 CET	12345	54028	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:53.614460945 CET	12345	54028	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:53.614634037 CET	54028	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:53.614716053 CET	54028	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:53.614810944 CET	54030	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:53.734606981 CET	12345	54028	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:53.734661102 CET	12345	54030	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:53.734796047 CET	54030	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:53.734832048 CET	54030	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:53.854682922 CET	12345	54030	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:54.787585020 CET	12345	54030	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:54.787621021 CET	12345	54030	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:54.787821054 CET	54030	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:54.787861109 CET	54030	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:54.787934065 CET	54032	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:54.907871008 CET	12345	54030	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:54.907896996 CET	12345	54032	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:54.908086061 CET	54032	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:54.908086061 CET	54032	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:55.028371096 CET	12345	54032	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:55.961227894 CET	12345	54032	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:55.961285114 CET	12345	54032	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:55.961388111 CET	54032	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:55.961435080 CET	54032	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:55.961476088 CET	54034	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:56.081739902 CET	12345	54032	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:56.081763029 CET	12345	54034	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:56.081882000 CET	54034	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:56.081924915 CET	54034	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:56.201874971 CET	12345	54034	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:57.136117935 CET	12345	54034	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:57.136142969 CET	12345	54034	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:57.136253119 CET	54034	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:57.136313915 CET	54034	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:57.136373997 CET	54036	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:57.256182909 CET	12345	54034	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:57.256207943 CET	12345	54036	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:57.256316900 CET	54036	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:57.256371975 CET	54036	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:57.376244068 CET	12345	54036	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:58.311558008 CET	12345	54036	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:58.311693907 CET	54036	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:58.311800957 CET	12345	54036	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:58.311985970 CET	54036	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:58.312031984 CET	54038	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:58.432017088 CET	12345	54036	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:58.432065964 CET	12345	54038	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:58.432213068 CET	54038	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:58.432260990 CET	54038	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:58.552968979 CET	12345	54038	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:59.491934061 CET	12345	54038	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:59.492007971 CET	12345	54038	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:59.492063999 CET	54038	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:59.492125988 CET	54038	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:59.492192984 CET	54040	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:59.611886024 CET	12345	54038	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:59.611908913 CET	12345	54040	93.123.85.8	192.168.2.13
Dec 16, 2024 11:50:59.612083912 CET	54040	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:59.612160921 CET	54040	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:50:59.732021093 CET	12345	54040	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:00.664771080 CET	12345	54040	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:00.665003061 CET	54040	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:00.665112019 CET	12345	54040	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:00.665245056 CET	54040	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:00.665337086 CET	54042	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:00.785578012 CET	12345	54040	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:00.785624027 CET	12345	54042	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:00.785763979 CET	54042	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:00.785878897 CET	54042	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:00.905812025 CET	12345	54042	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:01.849824905 CET	12345	54042	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:01.849869013 CET	12345	54042	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:01.850147009 CET	54042	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:01.850147009 CET	54042	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:01.850244045 CET	54044	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:01.970179081 CET	12345	54042	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:01.970220089 CET	12345	54044	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:01.970459938 CET	54044	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:01.970516920 CET	54044	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:02.090750933 CET	12345	54044	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:03.023300886 CET	12345	54044	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:03.023394108 CET	12345	54044	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:03.023533106 CET	54044	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:03.023578882 CET	54044	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:03.023636103 CET	54046	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:03.143518925 CET	12345	54044	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:03.143546104 CET	12345	54046	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:03.143690109 CET	54046	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:03.143748045 CET	54046	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:03.263626099 CET	12345	54046	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:04.392858982 CET	12345	54046	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:04.393294096 CET	54046	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:04.393448114 CET	54048	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:04.513210058 CET	12345	54046	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:04.513257027 CET	12345	54048	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:04.513442039 CET	54048	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:04.513533115 CET	54048	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:04.635198116 CET	12345	54048	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:05.567120075 CET	12345	54048	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:05.567178965 CET	12345	54048	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:05.567291975 CET	54048	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:05.567379951 CET	54048	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:05.567379951 CET	54050	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:05.687860966 CET	12345	54048	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:05.687880039 CET	12345	54050	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:05.687990904 CET	54050	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:05.688046932 CET	54050	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:05.807926893 CET	12345	54050	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:06.747009993 CET	12345	54050	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:06.747072935 CET	12345	54050	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:06.747174025 CET	54050	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:06.747359991 CET	54050	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:06.747472048 CET	54052	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:06.867204905 CET	12345	54050	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:06.867274046 CET	12345	54052	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:06.867403984 CET	54052	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:06.867445946 CET	54052	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:06.987590075 CET	12345	54052	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:07.921518087 CET	12345	54052	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:07.921556950 CET	12345	54052	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:07.921736956 CET	54052	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:07.921835899 CET	54052	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:07.921914101 CET	54054	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:08.041685104 CET	12345	54052	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:08.041704893 CET	12345	54054	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:08.041887045 CET	54054	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:08.041982889 CET	54054	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:08.161971092 CET	12345	54054	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:09.094757080 CET	12345	54054	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:09.094789982 CET	12345	54054	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:09.094897985 CET	54054	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:09.094932079 CET	54054	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:09.094965935 CET	54056	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:09.215235949 CET	12345	54054	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:09.216212034 CET	12345	54056	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:09.216315985 CET	54056	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:09.216451883 CET	54056	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:09.336998940 CET	12345	54056	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:10.268378973 CET	12345	54056	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:10.268491030 CET	12345	54056	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:10.268528938 CET	54056	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:10.268580914 CET	54056	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:10.268625021 CET	54058	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:10.389031887 CET	12345	54056	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:10.389072895 CET	12345	54058	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:10.389213085 CET	54058	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:10.389271975 CET	54058	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:10.509457111 CET	12345	54058	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:11.441711903 CET	12345	54058	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:11.441793919 CET	12345	54058	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:11.441915989 CET	54058	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:11.442032099 CET	54058	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:11.442157984 CET	54060	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:11.561670065 CET	12345	54058	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:11.561919928 CET	12345	54060	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:11.562199116 CET	54060	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:11.562292099 CET	54060	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:11.682440996 CET	12345	54060	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:12.627253056 CET	12345	54060	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:12.627270937 CET	12345	54060	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:12.627398014 CET	54060	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:12.627558947 CET	54060	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:12.627657890 CET	54062	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:12.748497009 CET	12345	54060	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:12.748539925 CET	12345	54062	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:12.748661995 CET	54062	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:12.748771906 CET	54062	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:12.868570089 CET	12345	54062	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:13.799984932 CET	12345	54062	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:13.800003052 CET	12345	54062	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:13.800210953 CET	54062	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:13.800379038 CET	54062	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:13.800492048 CET	54064	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:13.920291901 CET	12345	54062	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:13.920311928 CET	12345	54064	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:13.920512915 CET	54064	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:13.920619965 CET	54064	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:14.041879892 CET	12345	54064	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:14.973243952 CET	12345	54064	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:14.973315954 CET	12345	54064	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:14.973429918 CET	54064	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:14.973483086 CET	54064	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:14.973542929 CET	54066	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:15.093514919 CET	12345	54064	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:15.093533993 CET	12345	54066	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:15.093661070 CET	54066	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:15.093713999 CET	54066	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:15.213493109 CET	12345	54066	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:16.146399021 CET	12345	54066	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:16.146414042 CET	12345	54066	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:16.146785021 CET	54068	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:16.146800041 CET	54066	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:16.146800041 CET	54066	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:16.266668081 CET	12345	54068	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:16.266748905 CET	12345	54066	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:16.266823053 CET	54068	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:16.266910076 CET	54068	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:16.386693954 CET	12345	54068	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:17.318938017 CET	12345	54068	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:17.319046021 CET	12345	54068	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:17.319073915 CET	54068	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:17.319117069 CET	54068	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:17.319166899 CET	54070	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:17.438900948 CET	12345	54068	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:17.438922882 CET	12345	54070	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:17.439023018 CET	54070	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:17.439054966 CET	54070	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:17.558799028 CET	12345	54070	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:18.492790937 CET	12345	54070	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:18.492808104 CET	12345	54070	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:18.492940903 CET	54070	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:18.493110895 CET	54070	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:18.493213892 CET	54072	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:18.613003969 CET	12345	54070	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:18.613028049 CET	12345	54072	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:18.613265038 CET	54072	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:18.613447905 CET	54072	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:18.733154058 CET	12345	54072	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:19.670949936 CET	12345	54072	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:19.671077013 CET	12345	54072	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:19.671117067 CET	54072	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:19.671293020 CET	54072	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:19.671359062 CET	54074	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:19.791554928 CET	12345	54072	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:19.791573048 CET	12345	54074	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:19.791697025 CET	54074	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:19.791764021 CET	54074	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:19.912102938 CET	12345	54074	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:20.847012997 CET	12345	54074	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:20.847037077 CET	12345	54074	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:20.847146988 CET	54074	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:20.847196102 CET	54074	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:20.847240925 CET	54076	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:20.966983080 CET	12345	54074	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:20.967011929 CET	12345	54076	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:20.967123985 CET	54076	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:20.967241049 CET	54076	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:21.086919069 CET	12345	54076	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:22.020397902 CET	12345	54076	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:22.020454884 CET	12345	54076	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:22.020626068 CET	54076	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:22.020709991 CET	54076	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:22.020731926 CET	54078	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:22.140614033 CET	12345	54076	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:22.140645981 CET	12345	54078	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:22.140918970 CET	54078	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:22.140976906 CET	54078	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:22.260719061 CET	12345	54078	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:23.192538977 CET	12345	54078	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:23.192670107 CET	12345	54078	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:23.192751884 CET	54078	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:23.192858934 CET	54078	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:23.192928076 CET	54080	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:23.313343048 CET	12345	54078	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:23.313357115 CET	12345	54080	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:23.313447952 CET	54080	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:23.313489914 CET	54080	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:23.434461117 CET	12345	54080	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:24.367352962 CET	12345	54080	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:24.367391109 CET	12345	54080	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:24.367608070 CET	54080	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:24.367732048 CET	54080	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:24.367789030 CET	54082	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:24.487452030 CET	12345	54080	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:24.487538099 CET	12345	54082	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:24.487710953 CET	54082	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:24.487766027 CET	54082	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:24.607651949 CET	12345	54082	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:25.539726019 CET	12345	54082	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:25.539750099 CET	12345	54082	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:25.539906025 CET	54082	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:25.539951086 CET	54082	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:25.540014982 CET	54084	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:25.659939051 CET	12345	54082	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:25.659960985 CET	12345	54084	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:25.660131931 CET	54084	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:25.660218954 CET	54084	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:25.780134916 CET	12345	54084	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:26.711935043 CET	12345	54084	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:26.712127924 CET	54084	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:26.712183952 CET	12345	54084	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:26.712277889 CET	54084	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:26.712356091 CET	54086	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:26.832102060 CET	12345	54084	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:26.832190990 CET	12345	54086	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:26.832395077 CET	54086	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:26.832395077 CET	54086	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:26.953088045 CET	12345	54086	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:27.892831087 CET	12345	54086	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:27.892915010 CET	12345	54086	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:27.892981052 CET	54086	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:27.893196106 CET	54086	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:27.893260002 CET	54088	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:28.013051033 CET	12345	54086	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:28.013087034 CET	12345	54088	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:28.013211012 CET	54088	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:28.013338089 CET	54088	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:28.133215904 CET	12345	54088	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:29.065424919 CET	12345	54088	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:29.065440893 CET	12345	54088	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:29.065534115 CET	54088	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:29.065721035 CET	54088	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:29.065782070 CET	54090	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:29.185611010 CET	12345	54088	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:29.185626030 CET	12345	54090	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:29.185890913 CET	54090	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:29.185986042 CET	54090	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:29.305803061 CET	12345	54090	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:30.239345074 CET	12345	54090	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:30.239531994 CET	12345	54090	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:30.239608049 CET	54090	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:30.239665031 CET	54090	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:30.239706993 CET	54092	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:30.359590054 CET	12345	54090	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:30.359605074 CET	12345	54092	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:30.359726906 CET	54092	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:30.359762907 CET	54092	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:30.479760885 CET	12345	54092	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:31.411798954 CET	12345	54092	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:31.411927938 CET	54092	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:31.412028074 CET	12345	54092	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:31.412134886 CET	54092	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:31.412183046 CET	54094	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:31.533054113 CET	12345	54092	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:31.533077002 CET	12345	54094	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:31.533232927 CET	54094	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:31.533288002 CET	54094	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:31.653089046 CET	12345	54094	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:32.588942051 CET	12345	54094	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:32.588958979 CET	12345	54094	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:32.589237928 CET	54094	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:32.589343071 CET	54094	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:32.589430094 CET	54096	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:32.710218906 CET	12345	54094	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:32.710359097 CET	12345	54096	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:32.710493088 CET	54096	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:32.710654020 CET	54096	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:32.832150936 CET	12345	54096	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:33.765430927 CET	12345	54096	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:33.765443087 CET	12345	54096	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:33.765543938 CET	54096	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:33.765583038 CET	54096	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:33.765651941 CET	54098	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:33.885305882 CET	12345	54096	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:33.885376930 CET	12345	54098	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:33.885543108 CET	54098	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:33.885543108 CET	54098	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:34.006532907 CET	12345	54098	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:34.940093994 CET	12345	54098	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:34.940109968 CET	12345	54098	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:34.940392971 CET	54098	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:34.940474033 CET	54098	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:34.940474987 CET	54100	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:35.060996056 CET	12345	54098	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:35.061012030 CET	12345	54100	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:35.061121941 CET	54100	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:35.061175108 CET	54100	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:35.180972099 CET	12345	54100	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:36.113241911 CET	12345	54100	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:36.113359928 CET	54100	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:36.113365889 CET	12345	54100	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:36.113424063 CET	54100	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:36.113466978 CET	54102	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:36.233169079 CET	12345	54100	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:36.233181953 CET	12345	54102	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:36.233350039 CET	54102	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:36.233381987 CET	54102	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:36.353209019 CET	12345	54102	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:37.285336018 CET	12345	54102	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:37.285398006 CET	12345	54102	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:37.285562992 CET	54102	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:37.285636902 CET	54104	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:37.285649061 CET	54102	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:37.405675888 CET	12345	54102	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:37.405710936 CET	12345	54104	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:37.405893087 CET	54104	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:37.405972004 CET	54104	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:37.526146889 CET	12345	54104	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:38.458606958 CET	12345	54104	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:38.458697081 CET	12345	54104	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:38.458731890 CET	54104	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:38.458771944 CET	54104	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:38.458808899 CET	54106	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:38.579085112 CET	12345	54104	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:38.579112053 CET	12345	54106	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:38.579243898 CET	54106	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:38.579358101 CET	54106	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:38.699064016 CET	12345	54106	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:39.632368088 CET	12345	54106	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:39.632424116 CET	12345	54106	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:39.632591963 CET	54106	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:39.632591963 CET	54106	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:39.632621050 CET	54108	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:39.752485991 CET	12345	54108	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:39.752504110 CET	12345	54106	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:39.752645016 CET	54108	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:39.752748966 CET	54108	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:39.872721910 CET	12345	54108	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:40.808506012 CET	12345	54108	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:40.808636904 CET	12345	54108	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:40.808706045 CET	54108	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:40.808933973 CET	54108	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:40.809025049 CET	54110	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:40.928693056 CET	12345	54108	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:40.928750038 CET	12345	54110	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:40.929050922 CET	54110	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:40.929147005 CET	54110	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:41.049021006 CET	12345	54110	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:41.981724024 CET	12345	54110	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:41.981750011 CET	12345	54110	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:41.982043982 CET	54110	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:41.982141972 CET	54110	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:41.982227087 CET	54112	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:42.102072954 CET	12345	54110	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:42.102129936 CET	12345	54112	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:42.102394104 CET	54112	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:42.102590084 CET	54112	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:42.222578049 CET	12345	54112	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:43.160095930 CET	12345	54112	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:43.160116911 CET	12345	54112	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:43.160295963 CET	54112	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:43.160387993 CET	54112	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:43.160480976 CET	54114	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:43.280097961 CET	12345	54112	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:43.280131102 CET	12345	54114	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:43.280401945 CET	54114	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:43.280422926 CET	54114	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:43.400348902 CET	12345	54114	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:44.332675934 CET	12345	54114	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:44.332950115 CET	12345	54114	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:44.333015919 CET	54114	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:44.333091974 CET	54114	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:44.333144903 CET	54116	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:44.457776070 CET	12345	54114	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:44.457789898 CET	12345	54116	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:44.457920074 CET	54116	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:44.457921028 CET	54116	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:44.577696085 CET	12345	54116	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:45.509489059 CET	12345	54116	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:45.509530067 CET	12345	54116	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:45.509624004 CET	54116	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:45.509681940 CET	54116	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:45.509740114 CET	54118	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:45.629473925 CET	12345	54116	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:45.629508018 CET	12345	54118	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:45.629697084 CET	54118	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:45.629697084 CET	54118	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:45.749670982 CET	12345	54118	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:46.873871088 CET	12345	54118	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:46.874188900 CET	54118	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:46.874237061 CET	54120	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:46.994158030 CET	12345	54118	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:46.994178057 CET	12345	54120	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:46.994447947 CET	54120	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:46.994498014 CET	54120	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:47.114473104 CET	12345	54120	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:48.046880007 CET	12345	54120	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:48.047022104 CET	12345	54120	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:48.047184944 CET	54120	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:48.047374964 CET	54120	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:48.047473907 CET	54122	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:48.167104959 CET	12345	54120	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:48.167149067 CET	12345	54122	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:48.167275906 CET	54122	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:48.167361975 CET	54122	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:48.287122011 CET	12345	54122	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:49.221847057 CET	12345	54122	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:49.221956968 CET	12345	54122	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:49.221998930 CET	54122	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:49.222079039 CET	54124	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:49.222099066 CET	54122	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:49.342056990 CET	12345	54122	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:49.342102051 CET	12345	54124	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:49.342221975 CET	54124	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:49.342293024 CET	54124	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:49.462340117 CET	12345	54124	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:50.396341085 CET	12345	54124	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:50.396516085 CET	12345	54124	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:50.396538019 CET	54124	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:50.396616936 CET	54124	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:50.396661043 CET	54126	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:50.516459942 CET	12345	54124	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:50.516473055 CET	12345	54126	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:50.516582966 CET	54126	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:50.516628027 CET	54126	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:50.636420012 CET	12345	54126	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:51.573601007 CET	12345	54126	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:51.573668003 CET	12345	54126	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:51.573785067 CET	54126	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:51.573785067 CET	54126	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:51.573863029 CET	54128	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:51.693698883 CET	12345	54126	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:51.693722010 CET	12345	54128	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:51.693886995 CET	54128	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:51.693914890 CET	54128	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:51.813853025 CET	12345	54128	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:52.747632027 CET	12345	54128	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:52.747808933 CET	54128	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:52.747883081 CET	12345	54128	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:52.747976065 CET	54128	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:52.748047113 CET	54130	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:52.869014978 CET	12345	54128	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:52.869034052 CET	12345	54130	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:52.869230032 CET	54130	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:52.869410992 CET	54130	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:52.989639997 CET	12345	54130	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:53.921566010 CET	12345	54130	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:53.921592951 CET	12345	54130	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:53.921781063 CET	54130	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:53.921977043 CET	54130	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:53.922069073 CET	54132	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:54.041902065 CET	12345	54130	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:54.041924000 CET	12345	54132	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:54.042015076 CET	54132	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:54.042054892 CET	54132	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:54.161863089 CET	12345	54132	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:55.126307964 CET	12345	54132	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:55.126351118 CET	12345	54132	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:55.126466990 CET	54132	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:55.126518965 CET	54132	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:55.126585960 CET	54134	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:55.246546984 CET	12345	54132	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:55.246597052 CET	12345	54134	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:55.246701956 CET	54134	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:55.246804953 CET	54134	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:55.366595984 CET	12345	54134	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:56.338464975 CET	12345	54134	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:56.338542938 CET	12345	54134	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:56.338886976 CET	54134	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:56.338886976 CET	54134	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:56.338964939 CET	54136	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:56.458986044 CET	12345	54134	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:56.459032059 CET	12345	54136	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:56.459297895 CET	54136	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:56.459297895 CET	54136	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:56.579261065 CET	12345	54136	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:57.514125109 CET	12345	54136	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:57.514137030 CET	12345	54136	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:57.514468908 CET	54136	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:57.514468908 CET	54136	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:57.514468908 CET	54138	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:57.636101007 CET	12345	54136	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:57.636111021 CET	12345	54138	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:57.636461973 CET	54138	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:57.636461973 CET	54138	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:57.757384062 CET	12345	54138	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:59.830828905 CET	12345	54138	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:59.830915928 CET	12345	54138	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:59.831043959 CET	54138	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:59.831140041 CET	54138	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:59.831222057 CET	54140	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:59.950933933 CET	12345	54138	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:59.951025963 CET	12345	54140	93.123.85.8	192.168.2.13
Dec 16, 2024 11:51:59.951297045 CET	54140	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:51:59.951385021 CET	54140	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:00.071170092 CET	12345	54140	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:01.004798889 CET	12345	54140	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:01.005042076 CET	12345	54140	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:01.005196095 CET	54142	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:01.005196095 CET	54140	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:01.005196095 CET	54140	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:01.125128984 CET	12345	54142	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:01.125155926 CET	12345	54140	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:01.125350952 CET	54142	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:01.125421047 CET	54142	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:01.245157003 CET	12345	54142	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:02.179246902 CET	12345	54142	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:02.179414034 CET	54142	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:02.274800062 CET	12345	54142	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:02.274970055 CET	54142	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:02.275010109 CET	54144	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:02.394923925 CET	12345	54142	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:02.394951105 CET	12345	54144	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:02.395092010 CET	54144	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:02.395129919 CET	54144	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:02.515002966 CET	12345	54144	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:03.446643114 CET	12345	54144	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:03.446842909 CET	54144	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:03.447063923 CET	12345	54144	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:03.447151899 CET	54144	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:03.447185993 CET	54146	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:03.566934109 CET	12345	54144	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:03.566950083 CET	12345	54146	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:03.567233086 CET	54146	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:03.567233086 CET	54146	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:03.687191963 CET	12345	54146	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:04.619580984 CET	12345	54146	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:04.619736910 CET	54146	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:04.619765997 CET	12345	54146	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:04.619839907 CET	54146	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:04.619925022 CET	54148	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:04.739569902 CET	12345	54146	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:04.739629984 CET	12345	54148	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:04.739837885 CET	54148	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:04.739837885 CET	54148	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:04.859687090 CET	12345	54148	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:05.792676926 CET	12345	54148	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:05.792844057 CET	12345	54148	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:05.793015003 CET	54148	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:05.793226957 CET	54148	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:05.793306112 CET	54150	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:05.912928104 CET	12345	54148	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:05.912982941 CET	12345	54150	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:05.913239002 CET	54150	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:05.913330078 CET	54150	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:06.033302069 CET	12345	54150	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:06.969880104 CET	12345	54150	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:06.969978094 CET	12345	54150	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:06.970242977 CET	54150	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:06.970268011 CET	54150	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:06.970313072 CET	54152	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:07.090280056 CET	12345	54150	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:07.090368032 CET	12345	54152	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:07.090542078 CET	54152	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:07.090601921 CET	54152	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:07.210516930 CET	12345	54152	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:08.143052101 CET	12345	54152	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:08.143197060 CET	12345	54152	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:08.143419027 CET	54152	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:08.143521070 CET	54152	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:08.143599987 CET	54154	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:08.263401985 CET	12345	54152	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:08.263464928 CET	12345	54154	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:08.263632059 CET	54154	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:08.263705969 CET	54154	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:08.384212017 CET	12345	54154	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:09.316781998 CET	12345	54154	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:09.316827059 CET	12345	54154	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:09.316973925 CET	54154	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:09.317184925 CET	54154	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:09.317286015 CET	54156	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:09.437576056 CET	12345	54154	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:09.437640905 CET	12345	54156	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:09.437804937 CET	54156	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:09.437927008 CET	54156	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:09.557612896 CET	12345	54156	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:10.490384102 CET	12345	54156	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:10.490425110 CET	12345	54156	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:10.490597010 CET	54156	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:10.490745068 CET	54156	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:10.490834951 CET	54158	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:10.611151934 CET	12345	54156	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:10.611191034 CET	12345	54158	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:10.611341000 CET	54158	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:10.611406088 CET	54158	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:10.731745005 CET	12345	54158	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:11.663002014 CET	12345	54158	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:11.663068056 CET	12345	54158	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:11.663353920 CET	54158	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:11.663475990 CET	54158	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:11.663563967 CET	54160	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:11.783425093 CET	12345	54158	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:11.783498049 CET	12345	54160	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:11.783730030 CET	54160	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:11.783865929 CET	54160	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:11.904536963 CET	12345	54160	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:12.835396051 CET	12345	54160	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:12.835494995 CET	12345	54160	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:12.835556984 CET	54160	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:12.835673094 CET	54160	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:12.835772038 CET	54162	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:12.955421925 CET	12345	54160	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:12.955482960 CET	12345	54162	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:12.955666065 CET	54162	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:12.955791950 CET	54162	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:13.075947046 CET	12345	54162	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:14.013362885 CET	12345	54162	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:14.013428926 CET	12345	54162	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:14.013600111 CET	54162	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:14.013716936 CET	54162	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:14.013817072 CET	54164	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:14.133655071 CET	12345	54162	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:14.133691072 CET	12345	54164	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:14.133970976 CET	54164	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:14.134036064 CET	54164	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:14.253978968 CET	12345	54164	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:15.186785936 CET	12345	54164	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:15.186862946 CET	12345	54164	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:15.187055111 CET	54164	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:15.187143087 CET	54164	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:15.187232018 CET	54166	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:15.306981087 CET	12345	54164	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:15.307039022 CET	12345	54166	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:15.307265997 CET	54166	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:15.307265997 CET	54166	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:15.427860022 CET	12345	54166	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:16.361922979 CET	12345	54166	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:16.361963034 CET	12345	54166	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:16.362112999 CET	54166	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:16.362159014 CET	54166	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:16.362214088 CET	54168	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:16.481935978 CET	12345	54166	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:16.482007027 CET	12345	54168	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:16.482261896 CET	54168	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:16.482263088 CET	54168	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:16.602359056 CET	12345	54168	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:17.546567917 CET	12345	54168	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:17.546585083 CET	12345	54168	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:17.546722889 CET	54168	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:17.546768904 CET	54168	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:17.546812057 CET	54170	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:17.666662931 CET	12345	54168	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:17.666695118 CET	12345	54170	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:17.666810036 CET	54170	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:17.666846037 CET	54170	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:17.786595106 CET	12345	54170	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:18.722908020 CET	12345	54170	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:18.723072052 CET	12345	54170	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:18.723287106 CET	54170	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:18.723288059 CET	54170	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:18.723359108 CET	54172	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:18.844243050 CET	12345	54170	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:18.844260931 CET	12345	54172	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:18.844651937 CET	54172	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:18.844748020 CET	54172	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:18.964617014 CET	12345	54172	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:19.896483898 CET	12345	54172	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:19.896584988 CET	12345	54172	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:19.896637917 CET	54172	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:19.896733046 CET	54172	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:19.896733046 CET	54174	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:20.016510010 CET	12345	54172	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:20.016546965 CET	12345	54174	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:20.016716003 CET	54174	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:20.016716003 CET	54174	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:20.136563063 CET	12345	54174	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:21.070209980 CET	12345	54174	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:21.070223093 CET	12345	54174	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:21.070422888 CET	54174	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:21.070453882 CET	54174	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:21.070496082 CET	54176	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:21.190237999 CET	12345	54174	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:21.190249920 CET	12345	54176	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:21.190546989 CET	54176	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:21.190602064 CET	54176	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:21.310431957 CET	12345	54176	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:22.243498087 CET	12345	54176	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:22.243638039 CET	12345	54176	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:22.243676901 CET	54176	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:22.243719101 CET	54176	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:22.243757963 CET	54178	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:22.363594055 CET	12345	54176	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:22.363614082 CET	12345	54178	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:22.363763094 CET	54178	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:22.363800049 CET	54178	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:22.484096050 CET	12345	54178	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:23.417196035 CET	12345	54178	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:23.417283058 CET	12345	54178	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:23.417393923 CET	54178	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:23.417435884 CET	54178	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:23.417474031 CET	54180	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:23.537446022 CET	12345	54178	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:23.537484884 CET	12345	54180	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:23.537610054 CET	54180	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:23.537662983 CET	54180	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:23.657526970 CET	12345	54180	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:24.589623928 CET	12345	54180	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:24.589720964 CET	54180	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:24.589735031 CET	12345	54180	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:24.589832067 CET	54180	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:24.589832067 CET	54182	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:24.709654093 CET	12345	54180	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:24.709724903 CET	12345	54182	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:24.709793091 CET	54182	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:24.709850073 CET	54182	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:24.829622984 CET	12345	54182	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:25.784008026 CET	12345	54182	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:25.784132957 CET	12345	54182	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:25.784176111 CET	54182	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:25.784245968 CET	54182	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:25.784248114 CET	54184	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:25.904377937 CET	12345	54182	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:25.904401064 CET	12345	54184	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:25.904486895 CET	54184	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:25.904562950 CET	54184	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:26.024271011 CET	12345	54184	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:26.956141949 CET	12345	54184	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:26.956209898 CET	12345	54184	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:26.956285954 CET	54184	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:26.956341028 CET	54184	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:26.956409931 CET	54186	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:27.076108932 CET	12345	54184	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:27.076128960 CET	12345	54186	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:27.076227903 CET	54186	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:27.076292992 CET	54186	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:27.196158886 CET	12345	54186	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:28.144485950 CET	12345	54186	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:28.144578934 CET	12345	54186	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:28.144714117 CET	54186	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:28.144821882 CET	54186	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:28.144869089 CET	54188	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:28.265353918 CET	12345	54186	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:28.265402079 CET	12345	54188	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:28.265569925 CET	54188	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:28.265655041 CET	54188	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:28.385762930 CET	12345	54188	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:29.318352938 CET	12345	54188	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:29.318384886 CET	12345	54188	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:29.318712950 CET	54188	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:29.318712950 CET	54188	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:29.318712950 CET	54190	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:29.438601017 CET	12345	54188	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:29.438644886 CET	12345	54190	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:29.438838005 CET	54190	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:29.439009905 CET	54190	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:29.558723927 CET	12345	54190	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:30.491626024 CET	12345	54190	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:30.491669893 CET	12345	54190	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:30.491890907 CET	54192	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:30.491920948 CET	54190	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:30.491921902 CET	54190	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:30.611773014 CET	12345	54192	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:30.611814976 CET	12345	54190	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:30.611916065 CET	54192	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:30.611916065 CET	54192	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:30.731708050 CET	12345	54192	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:31.663790941 CET	12345	54192	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:31.663830996 CET	12345	54192	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:31.663994074 CET	54192	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:31.663994074 CET	54192	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:31.664045095 CET	54194	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:31.783957005 CET	12345	54192	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:31.783991098 CET	12345	54194	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:31.784193039 CET	54194	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:31.784193039 CET	54194	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:31.904211998 CET	12345	54194	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:32.840186119 CET	12345	54194	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:32.840275049 CET	12345	54194	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:32.840420961 CET	54194	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:32.840477943 CET	54196	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:32.840491056 CET	54194	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:32.960262060 CET	12345	54194	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:32.960303068 CET	12345	54196	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:32.960570097 CET	54196	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:32.960570097 CET	54196	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:33.080493927 CET	12345	54196	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:34.022682905 CET	12345	54196	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:34.022840023 CET	54196	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:34.022861004 CET	12345	54196	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:34.022948980 CET	54196	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:34.022984982 CET	54198	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:34.142977953 CET	12345	54196	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:34.143048048 CET	12345	54198	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:34.143157959 CET	54198	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:34.143198967 CET	54198	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:34.263134003 CET	12345	54198	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:35.198427916 CET	12345	54198	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:35.198538065 CET	12345	54198	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:35.198586941 CET	54198	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:35.198638916 CET	54198	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:35.198659897 CET	54200	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:35.318532944 CET	12345	54198	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:35.318581104 CET	12345	54200	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:35.318837881 CET	54200	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:35.318872929 CET	54200	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:35.438771009 CET	12345	54200	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:36.370877028 CET	12345	54200	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:36.371092081 CET	12345	54200	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:36.371093035 CET	54200	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:36.371186018 CET	54200	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:36.371205091 CET	54202	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:36.491020918 CET	12345	54200	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:36.491085052 CET	12345	54202	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:36.491424084 CET	54202	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:36.491466045 CET	54202	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:36.611622095 CET	12345	54202	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:37.546922922 CET	12345	54202	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:37.547069073 CET	12345	54202	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:37.547271967 CET	54204	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:37.547307968 CET	54202	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:37.547307968 CET	54202	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:37.667277098 CET	12345	54204	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:37.667294979 CET	12345	54202	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:37.667547941 CET	54204	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:37.667572975 CET	54204	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:37.787477016 CET	12345	54204	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:38.719155073 CET	12345	54204	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:38.719281912 CET	12345	54204	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:38.719521999 CET	54204	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:38.719561100 CET	54204	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:38.719657898 CET	54206	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:38.839530945 CET	12345	54204	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:38.839641094 CET	12345	54206	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:38.839853048 CET	54206	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:38.839961052 CET	54206	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:38.959728956 CET	12345	54206	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:39.891052008 CET	12345	54206	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:39.891129017 CET	12345	54206	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:39.891321898 CET	54206	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:39.891321898 CET	54206	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:39.891427040 CET	54208	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:40.011253119 CET	12345	54206	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:40.011293888 CET	12345	54208	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:40.011549950 CET	54208	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:40.011677980 CET	54208	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:40.131997108 CET	12345	54208	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:41.062606096 CET	12345	54208	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:41.062643051 CET	12345	54208	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:41.062901020 CET	54208	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:41.062962055 CET	54208	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:41.063049078 CET	54210	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:41.182684898 CET	12345	54208	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:41.182801962 CET	12345	54210	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:41.183182001 CET	54210	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:41.183232069 CET	54210	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:41.302998066 CET	12345	54210	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:42.238924026 CET	12345	54210	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:42.239123106 CET	12345	54210	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:42.239186049 CET	54210	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:42.239187002 CET	54210	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:42.239269018 CET	54212	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:42.359019995 CET	12345	54210	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:42.359036922 CET	12345	54212	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:42.359303951 CET	54212	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:42.359425068 CET	54212	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:42.479265928 CET	12345	54212	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:43.410973072 CET	12345	54212	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:43.411159992 CET	12345	54212	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:43.411154985 CET	54212	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:43.411426067 CET	54212	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:43.411531925 CET	54214	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:43.531153917 CET	12345	54212	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:43.531248093 CET	12345	54214	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:43.531688929 CET	54214	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:43.531688929 CET	54214	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:43.651607037 CET	12345	54214	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:44.583991051 CET	12345	54214	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:44.584127903 CET	12345	54214	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:44.584300041 CET	54214	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:44.584526062 CET	54214	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:44.584542036 CET	54216	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:44.704277039 CET	12345	54214	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:44.704384089 CET	12345	54216	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:44.704592943 CET	54216	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:44.704592943 CET	54216	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:44.824433088 CET	12345	54216	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:45.759442091 CET	12345	54216	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:45.759514093 CET	12345	54216	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:45.759710073 CET	54216	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:45.759886026 CET	54216	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:45.760010004 CET	54218	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:45.879606009 CET	12345	54216	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:45.879683018 CET	12345	54218	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:45.879928112 CET	54218	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:45.879929066 CET	54218	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:46.000077009 CET	12345	54218	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:46.932372093 CET	12345	54218	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:46.932454109 CET	12345	54218	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:46.932672977 CET	54218	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:46.932672977 CET	54218	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:46.932719946 CET	54220	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:47.052731991 CET	12345	54218	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:47.052761078 CET	12345	54220	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:47.053004980 CET	54220	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:47.053097963 CET	54220	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:47.172928095 CET	12345	54220	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:48.104949951 CET	12345	54220	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:48.105065107 CET	54220	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:48.105175018 CET	12345	54220	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:48.105217934 CET	54220	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:48.105274916 CET	54222	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:48.224951029 CET	12345	54220	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:48.224967003 CET	12345	54222	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:48.225090981 CET	54222	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:48.225117922 CET	54222	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:48.344928980 CET	12345	54222	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:49.278990984 CET	12345	54222	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:49.279006958 CET	12345	54222	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:49.279251099 CET	54222	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:49.279372931 CET	54222	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:49.279464006 CET	54224	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:49.399271965 CET	12345	54222	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:49.399292946 CET	12345	54224	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:49.399478912 CET	54224	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:49.399713039 CET	54224	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:49.519475937 CET	12345	54224	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:50.451941013 CET	12345	54224	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:50.452092886 CET	12345	54224	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:50.452100039 CET	54224	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:50.452197075 CET	54224	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:50.452254057 CET	54226	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:50.572151899 CET	12345	54224	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:50.572173119 CET	12345	54226	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:50.572380066 CET	54226	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:50.572474957 CET	54226	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:50.692948103 CET	12345	54226	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:51.629731894 CET	12345	54226	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:51.629889965 CET	54226	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:51.629908085 CET	12345	54226	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:51.630004883 CET	54226	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:51.630100965 CET	54228	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:51.749742985 CET	12345	54226	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:51.749838114 CET	12345	54228	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:51.749969006 CET	54228	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:51.750013113 CET	54228	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:51.869944096 CET	12345	54228	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:52.802292109 CET	12345	54228	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:52.802398920 CET	12345	54228	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:52.802449942 CET	54228	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:52.802675009 CET	54228	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:52.802773952 CET	54230	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:52.922511101 CET	12345	54228	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:52.922569036 CET	12345	54230	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:52.922769070 CET	54230	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:52.922887087 CET	54230	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:53.042946100 CET	12345	54230	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:53.976053953 CET	12345	54230	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:53.976250887 CET	12345	54230	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:53.976291895 CET	54230	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:53.976413965 CET	54230	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:53.976538897 CET	54232	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:54.096414089 CET	12345	54230	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:54.096431971 CET	12345	54232	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:54.096784115 CET	54232	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:54.097018003 CET	54232	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:54.216799974 CET	12345	54232	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:55.150778055 CET	12345	54232	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:55.151025057 CET	12345	54232	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:55.151184082 CET	54232	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:55.151251078 CET	54232	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:55.151364088 CET	54234	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:55.271141052 CET	12345	54232	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:55.271162987 CET	12345	54234	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:55.271348000 CET	54234	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:55.271415949 CET	54234	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:55.392261028 CET	12345	54234	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:56.328677893 CET	12345	54234	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:56.328865051 CET	54234	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:56.328891039 CET	12345	54234	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:56.329130888 CET	54234	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:56.329171896 CET	54236	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:56.449017048 CET	12345	54234	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:56.449043989 CET	12345	54236	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:56.449356079 CET	54236	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:56.449356079 CET	54236	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:56.569531918 CET	12345	54236	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:57.504075050 CET	12345	54236	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:57.504091024 CET	12345	54236	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:57.504319906 CET	54236	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:57.504375935 CET	54236	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:57.504441977 CET	54238	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:57.624233007 CET	12345	54236	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:57.624253035 CET	12345	54238	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:57.624392986 CET	54238	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:57.624548912 CET	54238	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:57.745986938 CET	12345	54238	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:58.684540987 CET	12345	54238	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:58.684552908 CET	12345	54238	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:58.684775114 CET	54238	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:58.684880018 CET	54238	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:58.685072899 CET	54240	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:58.804655075 CET	12345	54238	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:58.804747105 CET	12345	54240	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:58.805000067 CET	54240	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:58.805077076 CET	54240	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:58.924942970 CET	12345	54240	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:59.857300043 CET	12345	54240	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:59.857387066 CET	12345	54240	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:59.857551098 CET	54240	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:59.857594013 CET	54240	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:59.857649088 CET	54242	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:59.977468967 CET	12345	54240	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:59.977483034 CET	12345	54242	93.123.85.8	192.168.2.13
Dec 16, 2024 11:52:59.977818966 CET	54242	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:52:59.977818966 CET	54242	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:00.097749949 CET	12345	54242	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:01.055603981 CET	12345	54242	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:01.055794954 CET	54242	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:01.055823088 CET	12345	54242	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:01.055937052 CET	54242	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:01.056020021 CET	54244	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:01.176115990 CET	12345	54242	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:01.176136017 CET	12345	54244	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:01.176240921 CET	54244	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:01.176361084 CET	54244	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:01.296078920 CET	12345	54244	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:02.231553078 CET	12345	54244	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:02.231570959 CET	12345	54244	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:02.231796980 CET	54244	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:02.231849909 CET	54244	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:02.231944084 CET	54246	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:02.351773977 CET	12345	54244	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:02.351790905 CET	12345	54246	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:02.351991892 CET	54246	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:02.352129936 CET	54246	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:02.471967936 CET	12345	54246	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:03.407099009 CET	12345	54246	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:03.407114983 CET	12345	54246	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:03.407298088 CET	54246	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:03.407402039 CET	54246	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:03.407511950 CET	54248	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:03.527687073 CET	12345	54246	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:03.527721882 CET	12345	54248	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:03.527961969 CET	54248	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:03.528029919 CET	54248	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:03.647788048 CET	12345	54248	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:04.581562042 CET	12345	54248	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:04.581583023 CET	12345	54248	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:04.582043886 CET	54248	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:04.582128048 CET	54248	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:04.582320929 CET	54250	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:04.702295065 CET	12345	54248	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:04.703202009 CET	12345	54250	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:04.703630924 CET	54250	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:04.703630924 CET	54250	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:04.823698044 CET	12345	54250	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:05.759681940 CET	12345	54250	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:05.759759903 CET	12345	54250	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:05.759958029 CET	54250	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:05.760054111 CET	54250	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:05.760116100 CET	54252	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:05.880019903 CET	12345	54250	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:05.880037069 CET	12345	54252	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:05.880364895 CET	54252	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:05.880494118 CET	54252	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:06.000488043 CET	12345	54252	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:06.932605982 CET	12345	54252	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:06.932657003 CET	12345	54252	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:06.932802916 CET	54252	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:06.932889938 CET	54252	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:06.932965040 CET	54254	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:07.052823067 CET	12345	54252	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:07.052867889 CET	12345	54254	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:07.053016901 CET	54254	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:07.053113937 CET	54254	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:07.172970057 CET	12345	54254	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:08.111337900 CET	12345	54254	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:08.111356974 CET	12345	54254	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:08.111527920 CET	54254	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:08.111706972 CET	54254	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:08.111793995 CET	54256	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:08.231398106 CET	12345	54254	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:08.231513023 CET	12345	54256	93.123.85.8	192.168.2.13
Dec 16, 2024 11:53:08.231606007 CET	54256	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:08.231764078 CET	54256	12345	192.168.2.13	93.123.85.8
Dec 16, 2024 11:53:08.351398945 CET	12345	54256	93.123.85.8	192.168.2.13

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 11:52:24.497576952 CET	53916	53	192.168.2.13	1.1.1.1
Dec 16, 2024 11:52:24.497665882 CET	44696	53	192.168.2.13	1.1.1.1
Dec 16, 2024 11:52:24.635765076 CET	53	44696	1.1.1.1	192.168.2.13
Dec 16, 2024 11:52:24.721725941 CET	53	53916	1.1.1.1	192.168.2.13

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 16, 2024 11:52:24.497576952 CET	192.168.2.13	1.1.1.1	0xc653	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 11:52:24.497665882 CET	192.168.2.13	1.1.1.1	0xa9b9	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 16, 2024 11:52:24.721725941 CET	1.1.1.1	192.168.2.13	0xc653	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 16, 2024 11:52:24.721725941 CET	1.1.1.1	192.168.2.13	0xc653	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: x-3.2-.Sakura.elf PID: 5435, Parent PID: 5356

General

Start time (UTC):	10:49:41
Start date (UTC):	16/12/2024
Path:	/tmp/x-3.2-.Sakura.elf
Arguments:	/tmp/x-3.2-.Sakura.elf
File size:	84999 bytes
MD5 hash:	727ccd2f0f69eaa2f5d6914f9b3db4b2

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 5438, Parent PID: 5435

General

Start time (UTC):	10:49:42
Start date (UTC):	16/12/2024
Path:	/tmp/x-3.2-.Sakura.elf
Arguments:	-
File size:	84999 bytes
MD5 hash:	727ccd2f0f69eaa2f5d6914f9b3db4b2

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 5439, Parent PID: 5438

General

Start time (UTC):	10:49:42
Start date (UTC):	16/12/2024
Path:	/tmp/x-3.2-.Sakura.elf
Arguments:	-
File size:	84999 bytes
MD5 hash:	727ccd2f0f69eaa2f5d6914f9b3db4b2

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x-3.2-.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: x-3.2-.Sakura.elf PID: 5435, Parent PID: 5356

General

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 5438, Parent PID: 5435

General

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 5439, Parent PID: 5438

General

Linux Analysis Report
x-3.2-.Sakura.elf