Edit tour

Linux Analysis Report
p-p.c-.Sakura.elf

Overview

General Information

Sample name:	p-p.c-.Sakura.elf
Analysis ID:	1585118
MD5:	930016afe6330d9d180f68daecf2911c
SHA1:	d6a3ad7fda3b36d560ebf5f9e7e249298ad97f2c
SHA256:	f2940ca1d83c6bfa0b94d9158a79abaffa74a86c78165d4dff6166776a95c97e
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1585118
Start date and time:	2025-01-07 05:16:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	p-p.c-.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Runtime Messages

Command:	/tmp/p-p.c-.Sakura.elf
PID:	5632
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

p-p.c-.Sakura.elf (PID: 5632, Parent: 5551, MD5: 5ebfcae4fe2471fcc5695c2394773ff1) Arguments: /tmp/p-p.c-.Sakura.elf

p-p.c-.Sakura.elf New Fork (PID: 5634, Parent: 5632)

p-p.c-.Sakura.elf New Fork (PID: 5636, Parent: 5634)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
p-p.c-.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
p-p.c-.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
p-p.c-.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5632.1.00007f4024017000.00007f4024029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5632.1.00007f4024017000.00007f4024029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5634.1.00007f4024017000.00007f4024029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5634.1.00007f4024017000.00007f4024029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xfbd4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbe8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbfc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc10:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc24:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc38:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc4c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc60:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc74:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc88:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcb0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcc4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcd8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: p-p.c-.Sakura.elf PID: 5632	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: p-p.c-.Sakura.elf PID: 5632	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xb23:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb37:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb4b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb5f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb73:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb87:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xb9b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbaf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbc3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbd7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbeb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xbff:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc13:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc27:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc3b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc63:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc77:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc8b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc9f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: p-p.c-.Sakura.elf PID: 5634	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: p-p.c-.Sakura.elf PID: 5634	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x12cca:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12cde:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12cf2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d06:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d1a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d2e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d42:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d56:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d6a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d7e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12d92:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12da6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12dba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12dce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12de2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12df6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e0a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e1e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e32:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e46:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x12e5a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-07T05:17:13.810266+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36008	38.134.189.10	12345	TCP
2025-01-07T05:17:14.653486+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36010	38.134.189.10	12345	TCP
2025-01-07T05:17:15.479713+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36012	38.134.189.10	12345	TCP
2025-01-07T05:17:19.332214+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36014	38.134.189.10	12345	TCP
2025-01-07T05:17:20.180141+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36016	38.134.189.10	12345	TCP
2025-01-07T05:17:21.015650+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36018	38.134.189.10	12345	TCP
2025-01-07T05:17:21.931390+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36020	38.134.189.10	12345	TCP
2025-01-07T05:17:22.781462+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36022	38.134.189.10	12345	TCP
2025-01-07T05:17:23.642696+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36024	38.134.189.10	12345	TCP
2025-01-07T05:17:24.509794+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36026	38.134.189.10	12345	TCP
2025-01-07T05:17:28.337036+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36028	38.134.189.10	12345	TCP
2025-01-07T05:17:29.177421+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36030	38.134.189.10	12345	TCP
2025-01-07T05:17:30.029352+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36032	38.134.189.10	12345	TCP
2025-01-07T05:17:30.889635+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36034	38.134.189.10	12345	TCP
2025-01-07T05:17:31.734136+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36036	38.134.189.10	12345	TCP
2025-01-07T05:17:32.571691+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36038	38.134.189.10	12345	TCP
2025-01-07T05:17:33.415618+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36040	38.134.189.10	12345	TCP
2025-01-07T05:17:34.256777+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36042	38.134.189.10	12345	TCP
2025-01-07T05:17:35.192248+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36044	38.134.189.10	12345	TCP
2025-01-07T05:17:36.045073+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36046	38.134.189.10	12345	TCP
2025-01-07T05:17:36.895527+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36048	38.134.189.10	12345	TCP
2025-01-07T05:17:37.748784+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36050	38.134.189.10	12345	TCP
2025-01-07T05:17:38.601243+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36052	38.134.189.10	12345	TCP
2025-01-07T05:17:42.521395+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36054	38.134.189.10	12345	TCP
2025-01-07T05:17:43.358946+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36056	38.134.189.10	12345	TCP
2025-01-07T05:17:44.195601+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36058	38.134.189.10	12345	TCP
2025-01-07T05:17:45.049462+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36060	38.134.189.10	12345	TCP
2025-01-07T05:17:45.884906+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36062	38.134.189.10	12345	TCP
2025-01-07T05:17:46.728968+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36064	38.134.189.10	12345	TCP
2025-01-07T05:17:47.663943+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36066	38.134.189.10	12345	TCP
2025-01-07T05:17:48.502980+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36068	38.134.189.10	12345	TCP
2025-01-07T05:17:49.359796+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36070	38.134.189.10	12345	TCP
2025-01-07T05:17:50.205334+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36072	38.134.189.10	12345	TCP
2025-01-07T05:17:54.057974+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36074	38.134.189.10	12345	TCP
2025-01-07T05:17:54.896525+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36076	38.134.189.10	12345	TCP
2025-01-07T05:17:55.734543+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36078	38.134.189.10	12345	TCP
2025-01-07T05:17:56.587608+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36080	38.134.189.10	12345	TCP
2025-01-07T05:17:57.432038+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36082	38.134.189.10	12345	TCP
2025-01-07T05:17:58.280086+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36084	38.134.189.10	12345	TCP
2025-01-07T05:17:59.107639+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36086	38.134.189.10	12345	TCP
2025-01-07T05:18:02.961887+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36088	38.134.189.10	12345	TCP
2025-01-07T05:18:03.823625+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36090	38.134.189.10	12345	TCP
2025-01-07T05:18:04.657110+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36092	38.134.189.10	12345	TCP
2025-01-07T05:18:05.525109+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36094	38.134.189.10	12345	TCP
2025-01-07T05:18:06.362900+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36096	38.134.189.10	12345	TCP
2025-01-07T05:18:07.324608+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36098	38.134.189.10	12345	TCP
2025-01-07T05:18:11.187525+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36100	38.134.189.10	12345	TCP
2025-01-07T05:18:15.008334+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36102	38.134.189.10	12345	TCP
2025-01-07T05:18:15.836083+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36104	38.134.189.10	12345	TCP
2025-01-07T05:18:16.688553+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36106	38.134.189.10	12345	TCP
2025-01-07T05:18:17.527540+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36108	38.134.189.10	12345	TCP
2025-01-07T05:18:18.420850+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36110	38.134.189.10	12345	TCP
2025-01-07T05:18:19.279797+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36112	38.134.189.10	12345	TCP
2025-01-07T05:18:20.161809+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36114	38.134.189.10	12345	TCP
2025-01-07T05:18:21.012962+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36116	38.134.189.10	12345	TCP
2025-01-07T05:18:24.957150+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36118	38.134.189.10	12345	TCP
2025-01-07T05:18:25.800651+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36120	38.134.189.10	12345	TCP
2025-01-07T05:18:26.638646+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36122	38.134.189.10	12345	TCP
2025-01-07T05:18:27.498143+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36124	38.134.189.10	12345	TCP
2025-01-07T05:18:31.358489+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36126	38.134.189.10	12345	TCP
2025-01-07T05:18:32.318544+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36128	38.134.189.10	12345	TCP
2025-01-07T05:18:33.156601+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36130	38.134.189.10	12345	TCP
2025-01-07T05:18:34.010751+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36132	38.134.189.10	12345	TCP
2025-01-07T05:18:37.873454+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36134	38.134.189.10	12345	TCP
2025-01-07T05:18:38.740287+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36136	38.134.189.10	12345	TCP
2025-01-07T05:18:39.599989+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36138	38.134.189.10	12345	TCP
2025-01-07T05:18:40.449435+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36140	38.134.189.10	12345	TCP
2025-01-07T05:18:41.293529+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36142	38.134.189.10	12345	TCP
2025-01-07T05:18:45.112852+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36144	38.134.189.10	12345	TCP
2025-01-07T05:18:45.952910+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36146	38.134.189.10	12345	TCP
2025-01-07T05:18:46.774080+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36148	38.134.189.10	12345	TCP
2025-01-07T05:18:47.586916+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36150	38.134.189.10	12345	TCP
2025-01-07T05:18:48.413079+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36152	38.134.189.10	12345	TCP
2025-01-07T05:18:49.232222+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36154	38.134.189.10	12345	TCP
2025-01-07T05:18:50.079040+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36156	38.134.189.10	12345	TCP
2025-01-07T05:18:50.916423+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36158	38.134.189.10	12345	TCP
2025-01-07T05:18:51.867057+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36160	38.134.189.10	12345	TCP
2025-01-07T05:18:52.726929+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36162	38.134.189.10	12345	TCP
2025-01-07T05:18:53.568995+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36164	38.134.189.10	12345	TCP
2025-01-07T05:18:54.454269+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36166	38.134.189.10	12345	TCP
2025-01-07T05:18:58.299140+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36168	38.134.189.10	12345	TCP
2025-01-07T05:18:59.133688+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36170	38.134.189.10	12345	TCP
2025-01-07T05:18:59.971204+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36172	38.134.189.10	12345	TCP
2025-01-07T05:19:00.814608+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36174	38.134.189.10	12345	TCP
2025-01-07T05:19:01.636163+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36176	38.134.189.10	12345	TCP
2025-01-07T05:19:02.447883+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36178	38.134.189.10	12345	TCP
2025-01-07T05:19:03.291625+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36180	38.134.189.10	12345	TCP
2025-01-07T05:19:04.120697+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36182	38.134.189.10	12345	TCP
2025-01-07T05:19:04.972788+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36184	38.134.189.10	12345	TCP
2025-01-07T05:19:05.799531+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36186	38.134.189.10	12345	TCP
2025-01-07T05:19:06.645173+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36188	38.134.189.10	12345	TCP
2025-01-07T05:19:28.057294+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36190	38.134.189.10	12345	TCP
2025-01-07T05:19:28.917732+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36192	38.134.189.10	12345	TCP
2025-01-07T05:19:29.755601+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36194	38.134.189.10	12345	TCP
2025-01-07T05:19:30.681327+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36196	38.134.189.10	12345	TCP
2025-01-07T05:19:31.520902+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36198	38.134.189.10	12345	TCP
2025-01-07T05:19:32.380514+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36200	38.134.189.10	12345	TCP
2025-01-07T05:19:33.317006+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36202	38.134.189.10	12345	TCP
2025-01-07T05:19:34.261282+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36204	38.134.189.10	12345	TCP
2025-01-07T05:19:35.124776+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36206	38.134.189.10	12345	TCP
2025-01-07T05:19:35.991450+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36208	38.134.189.10	12345	TCP
2025-01-07T05:19:36.832270+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36210	38.134.189.10	12345	TCP
2025-01-07T05:19:37.788212+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36212	38.134.189.10	12345	TCP
2025-01-07T05:19:38.658366+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36214	38.134.189.10	12345	TCP
2025-01-07T05:19:39.511348+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36216	38.134.189.10	12345	TCP
2025-01-07T05:19:40.357248+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36218	38.134.189.10	12345	TCP
2025-01-07T05:19:41.186302+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36220	38.134.189.10	12345	TCP
2025-01-07T05:19:42.024025+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36222	38.134.189.10	12345	TCP
2025-01-07T05:19:42.844876+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36224	38.134.189.10	12345	TCP
2025-01-07T05:19:43.856858+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36226	38.134.189.10	12345	TCP
2025-01-07T05:19:44.826717+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36228	38.134.189.10	12345	TCP
2025-01-07T05:19:45.648481+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36230	38.134.189.10	12345	TCP
2025-01-07T05:19:46.484925+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36232	38.134.189.10	12345	TCP
2025-01-07T05:19:50.331339+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36234	38.134.189.10	12345	TCP
2025-01-07T05:19:51.176666+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36236	38.134.189.10	12345	TCP
2025-01-07T05:19:52.020143+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36238	38.134.189.10	12345	TCP
2025-01-07T05:19:52.857040+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36240	38.134.189.10	12345	TCP
2025-01-07T05:19:53.685941+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36242	38.134.189.10	12345	TCP
2025-01-07T05:19:54.521809+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36244	38.134.189.10	12345	TCP
2025-01-07T05:19:55.363490+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36246	38.134.189.10	12345	TCP
2025-01-07T05:19:56.209142+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36248	38.134.189.10	12345	TCP
2025-01-07T05:19:57.044659+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36250	38.134.189.10	12345	TCP
2025-01-07T05:19:57.867758+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36252	38.134.189.10	12345	TCP
2025-01-07T05:19:58.717686+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36254	38.134.189.10	12345	TCP
2025-01-07T05:19:59.563205+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36256	38.134.189.10	12345	TCP
2025-01-07T05:20:00.385913+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36260	38.134.189.10	12345	TCP
2025-01-07T05:20:01.222774+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36262	38.134.189.10	12345	TCP
2025-01-07T05:20:02.068311+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36264	38.134.189.10	12345	TCP
2025-01-07T05:20:03.029004+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36266	38.134.189.10	12345	TCP
2025-01-07T05:20:03.857798+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36268	38.134.189.10	12345	TCP
2025-01-07T05:20:04.723408+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36270	38.134.189.10	12345	TCP
2025-01-07T05:20:05.568913+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36272	38.134.189.10	12345	TCP
2025-01-07T05:20:06.455300+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36274	38.134.189.10	12345	TCP
2025-01-07T05:20:07.381944+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36276	38.134.189.10	12345	TCP
2025-01-07T05:20:17.213333+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36278	38.134.189.10	12345	TCP
2025-01-07T05:20:18.068633+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36280	38.134.189.10	12345	TCP
2025-01-07T05:20:18.908803+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36282	38.134.189.10	12345	TCP
2025-01-07T05:20:19.735034+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36284	38.134.189.10	12345	TCP
2025-01-07T05:20:20.573837+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36286	38.134.189.10	12345	TCP
2025-01-07T05:20:21.415080+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36288	38.134.189.10	12345	TCP
2025-01-07T05:20:22.284003+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36290	38.134.189.10	12345	TCP
2025-01-07T05:20:23.138709+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36292	38.134.189.10	12345	TCP
2025-01-07T05:20:23.975609+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36294	38.134.189.10	12345	TCP
2025-01-07T05:20:24.827085+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36296	38.134.189.10	12345	TCP
2025-01-07T05:20:25.691595+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36298	38.134.189.10	12345	TCP
2025-01-07T05:20:26.549138+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36300	38.134.189.10	12345	TCP
2025-01-07T05:20:27.379254+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36302	38.134.189.10	12345	TCP
2025-01-07T05:20:28.234070+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36304	38.134.189.10	12345	TCP
2025-01-07T05:20:29.074014+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36306	38.134.189.10	12345	TCP
2025-01-07T05:20:29.918528+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36308	38.134.189.10	12345	TCP
2025-01-07T05:20:30.765850+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36310	38.134.189.10	12345	TCP
2025-01-07T05:20:34.604341+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36312	38.134.189.10	12345	TCP
2025-01-07T05:20:35.566779+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36314	38.134.189.10	12345	TCP
2025-01-07T05:20:36.402963+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36316	38.134.189.10	12345	TCP
2025-01-07T05:20:37.241684+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36318	38.134.189.10	12345	TCP
2025-01-07T05:20:38.080076+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36320	38.134.189.10	12345	TCP
2025-01-07T05:20:38.941259+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36322	38.134.189.10	12345	TCP
2025-01-07T05:20:39.764180+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36324	38.134.189.10	12345	TCP
2025-01-07T05:20:40.615774+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36326	38.134.189.10	12345	TCP
2025-01-07T05:20:41.451879+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36328	38.134.189.10	12345	TCP
2025-01-07T05:20:42.273264+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36330	38.134.189.10	12345	TCP
2025-01-07T05:20:43.102902+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36332	38.134.189.10	12345	TCP
2025-01-07T05:20:43.926259+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36334	38.134.189.10	12345	TCP
2025-01-07T05:20:44.756824+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36336	38.134.189.10	12345	TCP
2025-01-07T05:20:45.570366+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36338	38.134.189.10	12345	TCP
2025-01-07T05:20:46.399631+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36340	38.134.189.10	12345	TCP
2025-01-07T05:20:47.211268+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36342	38.134.189.10	12345	TCP
2025-01-07T05:20:48.039931+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36344	38.134.189.10	12345	TCP
2025-01-07T05:20:48.871669+0100	2846526	1	A Network Trojan was detected	192.168.2.14	36346	38.134.189.10	12345	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: p-p.c-.Sakura.elf

Avira: detected

Found malware configuration

Source: p-p.c-.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "38.134.189.10:12345"}

Multi AV Scanner detection for submitted file

Source: p-p.c-.Sakura.elf	Virustotal: Detection: 67%			Perma Link
Source: p-p.c-.Sakura.elf	ReversingLabs: Detection: 65%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/p-p.c-.Sakura.elf (PID: 5632)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36078 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36040 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36064 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36026 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36042 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36054 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36142 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36152 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36074 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36050 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36092 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36162 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36068 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36112 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36210 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36212 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36202 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36100 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36220 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36128 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36108 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36204 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36120 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36084 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36288 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36010 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36154 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36052 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36136 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36020 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36056 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36008 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36232 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36022 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36058 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36070 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36260 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36250 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36018 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36106 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36180 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36116 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36030 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36016 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36148 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36060 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36240 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36082 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36072 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36088 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36014 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36248 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36104 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36190 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36094 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36276 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36140 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36246 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36086 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36282 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36164 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36166 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36178 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36048 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36198 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36268 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36294 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36336 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36272 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36174 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36130 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36318 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36028 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36234 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36230 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36098 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36310 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36238 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36096 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36124 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36114 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36256 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36146 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36296 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36150 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36302 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36182 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36170 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36188 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36344 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36208 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36036 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36184 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36186 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36066 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36242 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36236 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36290 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36224 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36298 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36196 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36322 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36324 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36226 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36292 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36044 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36144 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36244 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36286 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36080 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36284 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36132 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36262 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36314 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36300 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36192 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36332 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36172 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36076 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36024 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36330 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36214 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36200 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36252 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36266 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36326 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36228 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36222 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36032 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36274 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36306 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36320 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36034 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36338 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36308 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36346 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36280 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36328 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36312 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36216 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36046 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36316 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36126 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36038 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36138 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36194 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36254 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36102 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36304 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36156 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36168 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36118 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36218 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36158 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36270 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36342 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36012 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36110 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36334 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36090 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36122 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36160 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36176 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36062 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36134 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36206 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36264 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36278 -> 38.134.189.10:12345
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:36340 -> 38.134.189.10:12345

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 38.134.189.10 ports 1,2,3,4,5,12345

Source: global traffic

TCP traffic: 192.168.2.14:36008 -> 38.134.189.10:12345

Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.134.189.10

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: p-p.c-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5632.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5634.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: p-p.c-.Sakura.elf PID: 5632, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: p-p.c-.Sakura.elf PID: 5634, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: p-p.c-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5632.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5634.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: p-p.c-.Sakura.elf PID: 5632, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: p-p.c-.Sakura.elf PID: 5634, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: /home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/_memcpy.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/bcopy.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/memcpy.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/memmove.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/memset.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/strcmp.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/string/arm/strlen.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crt1.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crti.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/crtn.S
Source: p-p.c-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/arm/sigrestorer.S

Source: /tmp/p-p.c-.Sakura.elf (PID: 5632)

Queries kernel information via 'uname':

Jump to behavior

Source: p-p.c-.Sakura.elf, 5632.1.00005595a972c000.00005595a985a000.rw-.sdmp, p-p.c-.Sakura.elf, 5634.1.00005595a972c000.00005595a985a000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/arm
Source: p-p.c-.Sakura.elf, 5632.1.00007ffeefa13000.00007ffeefa34000.rw-.sdmp, p-p.c-.Sakura.elf, 5634.1.00007ffeefa13000.00007ffeefa34000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-arm/tmp/p-p.c-.Sakura.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/p-p.c-.Sakura.elf
Source: p-p.c-.Sakura.elf, 5632.1.00005595a972c000.00005595a985a000.rw-.sdmp, p-p.c-.Sakura.elf, 5634.1.00005595a972c000.00005595a985a000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/arm
Source: p-p.c-.Sakura.elf, 5632.1.00007ffeefa13000.00007ffeefa34000.rw-.sdmp, p-p.c-.Sakura.elf, 5634.1.00007ffeefa13000.00007ffeefa34000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-arm

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: p-p.c-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: p-p.c-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5632.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5634.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: p-p.c-.Sakura.elf PID: 5632, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: p-p.c-.Sakura.elf PID: 5634, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: p-p.c-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: p-p.c-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5632.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5634.1.00007f4024017000.00007f4024029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: p-p.c-.Sakura.elf PID: 5632, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: p-p.c-.Sakura.elf PID: 5634, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{"C2 url": "38.134.189.10:12345"}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
p-p.c-.Sakura.elf	68%	Virustotal		Browse
p-p.c-.Sakura.elf	66%	ReversingLabs	Linux.Backdoor.Gafgyt
p-p.c-.Sakura.elf	100%	Avira	LINUX/Gafgyt.opnd

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
38.134.189.10:12345	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
38.134.189.10	unknown	United States		174	COGENT-174US	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
38.134.189.10	x-3.2-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	s-h.4-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-7.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	mips.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	s-h.4-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	a-r.m-7.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
COGENT-174US	x-3.2-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	s-h.4-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	i-5.8-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	m-i.p-s.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	a-r.m-7.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	38.134.189.10
	x86_64.elf	Get hash	malicious	Mirai	Browse	38.178.146.107
	arm5.elf	Get hash	malicious	Mirai	Browse	38.250.206.23

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped
Entropy (8bit):	5.95686565430975
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	p-p.c-.Sakura.elf
File size:	108'417 bytes
MD5:	930016afe6330d9d180f68daecf2911c
SHA1:	d6a3ad7fda3b36d560ebf5f9e7e249298ad97f2c
SHA256:	f2940ca1d83c6bfa0b94d9158a79abaffa74a86c78165d4dff6166776a95c97e
SHA512:	ffabbfc674cd57af3619867d3ec9265a909b9f04ab0c789e8122ff0a06590b0b06f9efa86a09814daef815b675f6bc601c92b6912b636330545e47d20a863742
SSDEEP:	3072:MSY+46m1qOzss+FPPKNy+AmkZrQAhPDCXFke:06mgOzJ+FPzmkZrQAhPDCXFke
TLSH:	0DB31845F8408727C2D327BAE78F479D3B36579467DB33116A38BEB42BC17892E29520
File Content Preview:	.ELF...a..........(.........4....?......4. ...(.....................P...P................ ... ... .......g..........Q.td..................................-...L."....<..........0@-.\P...0....S.0...P@...0... ....R......0...0...........0... ....R..... 0....S

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	ARM
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	ARM - ABI
ABI Version:	0
Entry Point Address:	0x8190
Flags:	0x202
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	81820
Section Header Size:	40
Number of Section Headers:	20
Header String Table Index:	17

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8094	0x94	0x18	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x80b0	0xb0	0xf3f8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x174a8	0xf4a8	0x14	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x174bc	0xf4bc	0x2690	0x0	0x2	A	0	0	4
.eh_frame	PROGBITS	0x19b4c	0x11b4c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x22000	0x12000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x22008	0x12008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x22010	0x12010	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x22014	0x12014	0x3a0	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x223b4	0x123b4	0x635c	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0x123b4	0xa90	0x0	0x0		0	0	1
.debug_aranges	PROGBITS	0x0	0x12e48	0x120	0x0	0x0		0	0	8
.debug_info	PROGBITS	0x0	0x12f68	0x578	0x0	0x0		0	0	1
.debug_abbrev	PROGBITS	0x0	0x134e0	0xb4	0x0	0x0		0	0	1
.debug_line	PROGBITS	0x0	0x13594	0x8bd	0x0	0x0		0	0	1
.debug_frame	PROGBITS	0x0	0x13e54	0xa0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x13ef4	0xa8	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x142bc	0x41c0	0x10	0x0		19	579	4
.strtab	STRTAB	0x0	0x1847c	0x2305	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8000	0x8000	0x11b50	0x11b50	6.1090	0x5	R E	0x8000	.init .text .fini .rodata .eh_frame
LOAD	0x12000	0x22000	0x22000	0x3b4	0x6710	2.7254	0x6	RW	0x8000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x174a8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x174bc	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x19b4c	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x22000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x22008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x22010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x22014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x223b4	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
$a	.symtab	0x8094	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x174a8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x80b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8128	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174b4	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a0	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x1746c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x174a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x80a4	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x80a8	0	NOTYPE	<unknown>	DEFAULT	1
$a	.symtab	0x174b8	0	NOTYPE	<unknown>	DEFAULT	3
$a	.symtab	0x8190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x81cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x82a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x83d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x8438	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x87ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x90e4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x956c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x9984	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa83c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xa9a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xac2c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb328	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb47c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb5e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xb758	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xc8e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xca68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xcb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xdb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xe400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xec14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xed24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xedf4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xee44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xeeb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef30	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xef88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefb4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xefe0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf00c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf05c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf088	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf0f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf120	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf150	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf17c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf1f4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf228	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf240	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf250	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf300	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf320	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf380	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf488	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf4a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf59c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf5a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf618	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6a4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf6c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xf70c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfa80	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfaac	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb34	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb60	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfb94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfbf0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfca8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfd14	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xfe68	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xff58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0xffec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10114	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1025c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10260	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x102dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10368	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10400	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1047c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1053c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x105cc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10698	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1076c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10774	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1090c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x109a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b44	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10bfc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c40	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10c9c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10ee8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fcc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x10fd4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11000	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1102c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11058	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11084	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x110dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11134	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11188	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x111c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11310	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x117b0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11868	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x118dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1191c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x11a08	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12214	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x124e8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12530	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12548	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1256c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x125d4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12754	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12a58	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ac8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12ad8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12b90	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12bc0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12c54	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12d94	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x12f78	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13010	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x130c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13190	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x131e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13210	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13230	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1329c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13578	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x136dc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1393c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13a24	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13adc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b38	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13b4c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13c5c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13f84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fb8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x13fec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1409c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14158	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1481c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x148ec	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14a88	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14ad4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x14f98	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150c8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x150fc	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151a8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x151c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x152b4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1539c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x154c0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1558c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x155d8	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15628	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15648	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15704	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15760	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15898	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x158c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15980	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15a84	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15af4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x15b28	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1631c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16418	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16504	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16510	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16640	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1670c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x1673c	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x167a0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x168e0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x169c4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x16dc4	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x172f0	0	NOTYPE	<unknown>	DEFAULT	2
$a	.symtab	0x17418	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22000	0	NOTYPE	<unknown>	DEFAULT	6
$d	.symtab	0x22008	0	NOTYPE	<unknown>	DEFAULT	7
$d	.symtab	0x2201c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8118	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8174	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1749c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22020	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x81c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22024	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x8298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x83cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x8434	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x87d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x90e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x9568	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x997c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xa820	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x17970	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0xa9a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xac28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb324	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb478	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb5dc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xb754	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xc8cc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca48	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xca64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xcb1c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xdb24	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xe3f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xebf8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf0f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf1f0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf224	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22050	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x22058	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xf230	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf480	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf5a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf6a0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xf704	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfa64	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfca4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0xfe50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22060	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0xff40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1024c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22168	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x102c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10350	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x103e8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10464	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22180	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10538	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x105c8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1068c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x1075c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x18af4	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x10908	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10984	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22234	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10b40	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10b8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10bec	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c3c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10c8c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x10eb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2224c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x10fc4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11130	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x26614	0	NOTYPE	<unknown>	DEFAULT	10
$d	.symtab	0x111bc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x11a04	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x121e0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x124a8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x22254	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x12564	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x125a4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12738	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12a28	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ac4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12ad4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12b80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x2226c	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x18b78	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x12c44	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12d6c	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x12f54	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x130c0	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13574	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x136d8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13934	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13c50	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13f80	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x13fb4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x223a8	0	NOTYPE	<unknown>	DEFAULT	9
$d	.symtab	0x14808	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14a84	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14ac8	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x14f74	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x150c4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15298	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15394	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x15414	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x162f4	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x19b04	0	NOTYPE	<unknown>	DEFAULT	4
$d	.symtab	0x16410	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x164fc	0	NOTYPE	<unknown>	DEFAULT	2
$d	.symtab	0x16630	0	NOTYPE	<unknown>	DEFAULT	2
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
/home/firmware/build/temp-armv4l/gcc-core/gcc/config/arm/lib1funcs.asm	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
C.111.5062	.symtab	0x17970	8	OBJECT	<unknown>	DEFAULT	4
C.148.5389	.symtab	0x182ec	24	OBJECT	<unknown>	DEFAULT	4
Laligned	.symtab	0xf348	0	NOTYPE	<unknown>	DEFAULT	2
Llastword	.symtab	0xf364	0	NOTYPE	<unknown>	DEFAULT	2
Q	.symtab	0x223e8	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0xb328	340	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0xa83c	364	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0xb5e0	376	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x9d00	1228	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x22004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x22000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x22050	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x184f4	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x223a8	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x18bda	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x22058	4	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x187f4	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x2200c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x22008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x19b4c	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x19b4c	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x22050	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x184f4	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x223a8	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x18bda	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x22058	4	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x187f4	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x22054	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x223ac	4	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x2205c	4	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0xf228	12	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0xef08	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x10114	328	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x10760	12	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x1256c	60	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0xef5c	44	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0xef88	44	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0xfa80	44	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x26614	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x1090c	148	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x125d4	384	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0xee44	116	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x12bc0	148	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x12754	12	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0xefb4	44	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x16504	12	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x16510	304	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x11000	44	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x1102c	44	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x11058	44	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0xefe0	44	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0xfaac	44	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x11084	44	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x26618	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x13368	528	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x10698	200	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0xf00c	80	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x13210	32	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0xf05c	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x1673c	100	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x1631c	252	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0xf250	4	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x117a0	4	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x16418	236	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0xf260	156	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0xf088	92	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x125a8	44	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x10260	124	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x1053c	144	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0xf0f4	44	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0xfb08	44	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x110dc	88	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0xf120	48	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0xfb34	44	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0xfb60	52	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0xf150	44	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x109a0	420	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0xfbc4	44	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0xf380	264	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0xf300	28	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0xf488	28	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x131e0	48	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0xf320	96	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x130c8	200	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x117b0	184	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x151c0	224	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x13190	80	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0xf4a4	248	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0xf59c	12	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x11868	116	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x1076c	8	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0xf17c	44	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x13f84	52	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0xf1f4	52	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x13fec	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x11188	44	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x155d8	80	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x15648	188	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x15628	32	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0xf1b0	44	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x22010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x22010	0	OBJECT	<unknown>	DEFAULT	8
__adddf3	.symtab	0x169d0	736	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmpeq	.symtab	0x173a0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdcmple	.symtab	0x173a0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_cdrcmple	.symtab	0x17384	48	FUNC	<unknown>	DEFAULT	2
__aeabi_d2uiz	.symtab	0x17418	84	FUNC	<unknown>	DEFAULT	2
__aeabi_dadd	.symtab	0x169d0	736	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpeq	.symtab	0x173b4	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpge	.symtab	0x173f0	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmpgt	.symtab	0x17404	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmple	.symtab	0x173dc	20	FUNC	<unknown>	DEFAULT	2
__aeabi_dcmplt	.symtab	0x173c8	20	FUNC	<unknown>	DEFAULT	2
__aeabi_ddiv	.symtab	0x170ec	516	FUNC	<unknown>	DEFAULT	2
__aeabi_dmul	.symtab	0x16dc4	808	FUNC	<unknown>	DEFAULT	2
__aeabi_drsub	.symtab	0x169c4	0	FUNC	<unknown>	DEFAULT	2
__aeabi_dsub	.symtab	0x169cc	740	FUNC	<unknown>	DEFAULT	2
__aeabi_f2d	.symtab	0x16d04	64	FUNC	<unknown>	DEFAULT	2
__aeabi_i2d	.symtab	0x16cd8	44	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv	.symtab	0x167a0	0	FUNC	<unknown>	DEFAULT	2
__aeabi_idiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_idivmod	.symtab	0x168c8	24	FUNC	<unknown>	DEFAULT	2
__aeabi_l2d	.symtab	0x16d58	108	FUNC	<unknown>	DEFAULT	2
__aeabi_ldiv0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__aeabi_ui2d	.symtab	0x16cb0	40	FUNC	<unknown>	DEFAULT	2
__aeabi_uidiv	.symtab	0xec14	0	FUNC	<unknown>	DEFAULT	2
__aeabi_uidivmod	.symtab	0xed0c	24	FUNC	<unknown>	DEFAULT	2
__aeabi_ul2d	.symtab	0x16d44	128	FUNC	<unknown>	DEFAULT	2
__app_fini	.symtab	0x26608	4	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x22234	24	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	HIDDEN	2
__bss_end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__bss_start__	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x10c08	56	FUNC	<unknown>	DEFAULT	2
__cmpdf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x22054	4	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x223ac	4	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x2205c	4	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x26638	4	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x22014	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x13b4c	220	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x154c0	204	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x13a24	184	FUNC	<unknown>	HIDDEN	2
__default_rt_sa_restorer	.symtab	0x10fd0	0	FUNC	<unknown>	DEFAULT	2
__default_sa_restorer	.symtab	0x10fcc	0	FUNC	<unknown>	DEFAULT	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__div0	.symtab	0xedf0	4	FUNC	<unknown>	DEFAULT	2
__divdf3	.symtab	0x170ec	516	FUNC	<unknown>	DEFAULT	2
__divsi3	.symtab	0x167a0	296	FUNC	<unknown>	DEFAULT	2
__dns_lookup	.symtab	0x11a08	2060	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x1746c	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80b0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x22018	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x15418	168	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x1393c	232	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x13adc	92	FUNC	<unknown>	HIDDEN	2
__end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__environ	.symtab	0x26600	4	OBJECT	<unknown>	DEFAULT	10
__eqdf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__errno_location	.symtab	0xf228	12	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x265f8	4	OBJECT	<unknown>	HIDDEN	10
__extendsfdf2	.symtab	0x16d04	64	FUNC	<unknown>	DEFAULT	2
__fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fixunsdfsi	.symtab	0x17418	84	FUNC	<unknown>	DEFAULT	2
__floatdidf	.symtab	0x16d58	108	FUNC	<unknown>	DEFAULT	2
__floatsidf	.symtab	0x16cd8	44	FUNC	<unknown>	DEFAULT	2
__floatundidf	.symtab	0x16d44	128	FUNC	<unknown>	DEFAULT	2
__floatunsidf	.symtab	0x16cb0	40	FUNC	<unknown>	DEFAULT	2
__gedf2	.symtab	0x172f0	148	FUNC	<unknown>	DEFAULT	2
__get_hosts_byname_r	.symtab	0x124e8	72	FUNC	<unknown>	HIDDEN	2
__glibc_strerror_r	.symtab	0x152a0	20	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__gtdf2	.symtab	0x172f0	148	FUNC	<unknown>	DEFAULT	2
__h_errno_location	.symtab	0x111b4	12	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0xff58	148	FUNC	<unknown>	DEFAULT	2
__heap_free	.symtab	0x10020	244	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area	.symtab	0xffec	32	FUNC	<unknown>	DEFAULT	2
__heap_link_free_area_after	.symtab	0x1000c	20	FUNC	<unknown>	DEFAULT	2
__init_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__ledf2	.symtab	0x172f8	140	FUNC	<unknown>	DEFAULT	2
__length_dotted	.symtab	0x1558c	76	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x13b38	20	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x1673c	100	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x265fc	4	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0xf1a8	8	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0xf1b0	44	FUNC	<unknown>	DEFAULT	2
__ltdf2	.symtab	0x172f8	140	FUNC	<unknown>	DEFAULT	2
__malloc_heap	.symtab	0x22060	4	OBJECT	<unknown>	DEFAULT	9
__malloc_heap_lock	.symtab	0x265dc	24	OBJECT	<unknown>	DEFAULT	10
__malloc_sbrk_lock	.symtab	0x286cc	24	OBJECT	<unknown>	DEFAULT	10
__modsi3	.symtab	0x168e0	228	FUNC	<unknown>	DEFAULT	2
__muldf3	.symtab	0x16dc4	808	FUNC	<unknown>	DEFAULT	2
__muldi3	.symtab	0xedf4	80	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x286f4	12	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x28700	4	OBJECT	<unknown>	HIDDEN	10
__nedf2	.symtab	0x17300	132	FUNC	<unknown>	DEFAULT	2
__open_etc_hosts	.symtab	0x13c28	52	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x12214	724	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x26604	4	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x22000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x10bfc	8	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x12530	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x13c5c	808	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x22254	24	OBJECT	<unknown>	DEFAULT	9
__rtld_fini	.symtab	0x2660c	4	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x286e4	16	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x28704	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0xfccc	36	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0xfcf0	36	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0xfca8	36	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x22278	4	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x15704	92	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x1409c	188	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x16640	204	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x15760	312	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x12ac8	16	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.3929	.symtab	0x18b78	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x15898	44	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x1670c	48	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x158c4	188	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x15980	260	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x12b90	48	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x2227c	4	OBJECT	<unknown>	DEFAULT	9
__subdf3	.symtab	0x169cc	740	FUNC	<unknown>	DEFAULT	2
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x10fd4	44	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x10b90	108	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x10c40	92	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x10c9c	588	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x2224c	4	OBJECT	<unknown>	HIDDEN	9
__udivsi3	.symtab	0xec14	248	FUNC	<unknown>	DEFAULT	2
__umodsi3	.symtab	0xed24	204	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_bss_end__	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x14158	76	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x12548	36	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x28708	4	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x2870c	4	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x223b4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x28710	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x26614	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0xef08	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x174a8	4	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x26644	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x141a4	132	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x15b28	2036	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x26618	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x8094	4	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x15a84	112	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_memcpy	.symtab	0x11310	0	FUNC	<unknown>	HIDDEN	2
_ppfs_init	.symtab	0x1481c	152	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x14ad4	1220	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x148b4	56	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x148ec	412	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x14a88	76	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x10c04	4	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x2864c	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x8190	0	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x12760	760	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x12a58	112	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x22280	4	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x22284	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x12c54	320	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x26640	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x2229c	24	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x2663c	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x222b8	240	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x12ad8	184	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x222b4	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x10774	408	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x15af4	52	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x18f94	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x111c0	336	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x14228	1524	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x10114	328	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0xef30	44	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0xc8e8	356	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0xc278	1648	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x10760	12	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0xbc64	1556	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0xf240	16	FUNC	<unknown>	DEFAULT	2
been_there_done_that	.symtab	0x265f4	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.2789	.symtab	0x26610	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x1256c	60	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
buf.2613	.symtab	0x263ec	16	OBJECT	<unknown>	DEFAULT	10
buf.4901	.symtab	0x263fc	460	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x22048	4	OBJECT	<unknown>	DEFAULT	9
call___do_global_ctors_aux	.symtab	0x174a0	0	FUNC	<unknown>	DEFAULT	2
call___do_global_dtors_aux	.symtab	0x8128	0	FUNC	<unknown>	DEFAULT	2
call_frame_dummy	.symtab	0x8188	0	FUNC	<unknown>	DEFAULT	2
chdir	.symtab	0xef5c	44	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0xef88	44	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x22024	4	OBJECT	<unknown>	DEFAULT	9
completed.2555	.symtab	0x223b4	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0xfa80	44	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x956c	640	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0xf0e4	16	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x9984	344	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x22044	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x22020	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x26600	4	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x26614	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x1090c	148	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x19b04	72	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x125d4	384	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0xee44	116	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0xeeb8	80	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x8438	208	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x12d94	484	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x12bc0	148	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x12f78	152	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x19af0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x12754	12	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
force_to_data	.symtab	0x22014	0	OBJECT	<unknown>	DEFAULT	9
force_to_data	.symtab	0x223b0	0	OBJECT	<unknown>	DEFAULT	9
fork	.symtab	0xefb4	44	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x150c8	52	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8130	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0xfe68	240	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x16504	12	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x16504	12	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x16510	304	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0xa1cc	1648	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x150fc	172	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0xca4c	28	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x91ac	100	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8508	740	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0xca68	204	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x83d8	96	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x14f98	304	FUNC	<unknown>	DEFAULT	2
getegid	.symtab	0x11000	44	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x1102c	44	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x11058	44	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0xf6c8	68	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0xf70c	884	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0xefe0	44	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0xfaac	44	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0xfad8	48	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x11084	44	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x223d4	4	OBJECT	<unknown>	DEFAULT	10
h.4900	.symtab	0x265c8	20	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x26618	4	OBJECT	<unknown>	DEFAULT	10
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
htonl	.symtab	0xf5e0	36	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0xf604	20	FUNC	<unknown>	DEFAULT	2
i.4126	.symtab	0x2204c	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0xf6a4	36	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x1191c	236	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0xf698	12	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0xf618	128	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x136dc	608	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x13578	356	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x13368	528	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x1329c	204	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0xe274	396	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x81cc	212	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x22064	260	OBJECT	<unknown>	DEFAULT	9
initstate	.symtab	0x10368	152	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x10698	200	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0xf00c	80	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x13210	32	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0xf1dc	24	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0xf05c	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/_memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/bcopy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memmove.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/arm/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/arm/sigrestorer.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libgcc2.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x97ec	408	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x1673c	100	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x223e0	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0xe400	2068	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x223d0	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x9bec	276	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x9210	136	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0xaaf4	312	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0xfd14	340	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x1631c	252	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0xf250	4	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x117a0	4	FUNC	<unknown>	DEFAULT	2
mempcpy	.symtab	0x151a8	24	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x16418	236	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0xf260	156	FUNC	<unknown>	DEFAULT	2
mylock	.symtab	0x22168	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x22180	24	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x2661c	24	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x110b0	44	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1066	.symtab	0x263e8	4	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0xf5a8	36	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0xf5cc	20	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x223d8	8	OBJECT	<unknown>	DEFAULT	10
object.2636	.symtab	0x223b8	24	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0xf088	92	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x28644	4	OBJECT	<unknown>	DEFAULT	10
p.2553	.symtab	0x2201c	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x28648	4	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x125a8	44	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4141	.symtab	0x18eec	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x8cf4	1008	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x891c	108	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8b0c	488	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8988	388	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0xcb34	5952	FUNC	<unknown>	DEFAULT	2
qual_chars.4147	.symtab	0x18f00	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x12530	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x1025c	4	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x82a0	312	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x10260	124	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x18af4	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x1053c	144	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x221b4	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x13010	184	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0xf0f4	44	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0xfb08	44	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x9298	724	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0xb758	1292	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x110dc	88	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0xf120	48	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0xfb34	44	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0xfb60	52	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0xf150	44	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0xfb94	48	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x102dc	140	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x1047c	192	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x10ee8	228	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0xfbf0	184	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x11134	84	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x109a0	420	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0xfbc4	44	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0xa9a8	332	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x90e4	200	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4146	.symtab	0x18f14	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4140	.symtab	0x18ef8	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4143	.symtab	0x18f40	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4142	.symtab	0x18f58	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4145	.symtab	0x18f24	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4144	.symtab	0x18f34	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x13fb8	52	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x10400	124	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x105cc	204	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x22250	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x26634	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x22274	4	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0xb47c	356	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x2226c	4	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x22270	4	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x1539c	124	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0xf380	264	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0xf300	28	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0xf488	28	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x131e0	48	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x152b4	232	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0xf320	96	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x130c8	200	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x117b0	184	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x151c0	224	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x118dc	64	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x13190	80	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0xf4a4	248	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0xf59c	12	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x11868	116	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x1076c	8	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x13230	108	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x9adc	272	FUNC	<unknown>	DEFAULT	2
time	.symtab	0xf17c	44	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-07T05:17:13.810266+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36008	38.134.189.10	12345	TCP
2025-01-07T05:17:14.653486+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36010	38.134.189.10	12345	TCP
2025-01-07T05:17:15.479713+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36012	38.134.189.10	12345	TCP
2025-01-07T05:17:19.332214+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36014	38.134.189.10	12345	TCP
2025-01-07T05:17:20.180141+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36016	38.134.189.10	12345	TCP
2025-01-07T05:17:21.015650+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36018	38.134.189.10	12345	TCP
2025-01-07T05:17:21.931390+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36020	38.134.189.10	12345	TCP
2025-01-07T05:17:22.781462+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36022	38.134.189.10	12345	TCP
2025-01-07T05:17:23.642696+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36024	38.134.189.10	12345	TCP
2025-01-07T05:17:24.509794+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36026	38.134.189.10	12345	TCP
2025-01-07T05:17:28.337036+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36028	38.134.189.10	12345	TCP
2025-01-07T05:17:29.177421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36030	38.134.189.10	12345	TCP
2025-01-07T05:17:30.029352+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36032	38.134.189.10	12345	TCP
2025-01-07T05:17:30.889635+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36034	38.134.189.10	12345	TCP
2025-01-07T05:17:31.734136+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36036	38.134.189.10	12345	TCP
2025-01-07T05:17:32.571691+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36038	38.134.189.10	12345	TCP
2025-01-07T05:17:33.415618+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36040	38.134.189.10	12345	TCP
2025-01-07T05:17:34.256777+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36042	38.134.189.10	12345	TCP
2025-01-07T05:17:35.192248+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36044	38.134.189.10	12345	TCP
2025-01-07T05:17:36.045073+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36046	38.134.189.10	12345	TCP
2025-01-07T05:17:36.895527+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36048	38.134.189.10	12345	TCP
2025-01-07T05:17:37.748784+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36050	38.134.189.10	12345	TCP
2025-01-07T05:17:38.601243+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36052	38.134.189.10	12345	TCP
2025-01-07T05:17:42.521395+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36054	38.134.189.10	12345	TCP
2025-01-07T05:17:43.358946+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36056	38.134.189.10	12345	TCP
2025-01-07T05:17:44.195601+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36058	38.134.189.10	12345	TCP
2025-01-07T05:17:45.049462+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36060	38.134.189.10	12345	TCP
2025-01-07T05:17:45.884906+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36062	38.134.189.10	12345	TCP
2025-01-07T05:17:46.728968+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36064	38.134.189.10	12345	TCP
2025-01-07T05:17:47.663943+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36066	38.134.189.10	12345	TCP
2025-01-07T05:17:48.502980+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36068	38.134.189.10	12345	TCP
2025-01-07T05:17:49.359796+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36070	38.134.189.10	12345	TCP
2025-01-07T05:17:50.205334+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36072	38.134.189.10	12345	TCP
2025-01-07T05:17:54.057974+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36074	38.134.189.10	12345	TCP
2025-01-07T05:17:54.896525+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36076	38.134.189.10	12345	TCP
2025-01-07T05:17:55.734543+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36078	38.134.189.10	12345	TCP
2025-01-07T05:17:56.587608+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36080	38.134.189.10	12345	TCP
2025-01-07T05:17:57.432038+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36082	38.134.189.10	12345	TCP
2025-01-07T05:17:58.280086+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36084	38.134.189.10	12345	TCP
2025-01-07T05:17:59.107639+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36086	38.134.189.10	12345	TCP
2025-01-07T05:18:02.961887+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36088	38.134.189.10	12345	TCP
2025-01-07T05:18:03.823625+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36090	38.134.189.10	12345	TCP
2025-01-07T05:18:04.657110+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36092	38.134.189.10	12345	TCP
2025-01-07T05:18:05.525109+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36094	38.134.189.10	12345	TCP
2025-01-07T05:18:06.362900+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36096	38.134.189.10	12345	TCP
2025-01-07T05:18:07.324608+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36098	38.134.189.10	12345	TCP
2025-01-07T05:18:11.187525+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36100	38.134.189.10	12345	TCP
2025-01-07T05:18:15.008334+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36102	38.134.189.10	12345	TCP
2025-01-07T05:18:15.836083+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36104	38.134.189.10	12345	TCP
2025-01-07T05:18:16.688553+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36106	38.134.189.10	12345	TCP
2025-01-07T05:18:17.527540+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36108	38.134.189.10	12345	TCP
2025-01-07T05:18:18.420850+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36110	38.134.189.10	12345	TCP
2025-01-07T05:18:19.279797+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36112	38.134.189.10	12345	TCP
2025-01-07T05:18:20.161809+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36114	38.134.189.10	12345	TCP
2025-01-07T05:18:21.012962+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36116	38.134.189.10	12345	TCP
2025-01-07T05:18:24.957150+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36118	38.134.189.10	12345	TCP
2025-01-07T05:18:25.800651+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36120	38.134.189.10	12345	TCP
2025-01-07T05:18:26.638646+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36122	38.134.189.10	12345	TCP
2025-01-07T05:18:27.498143+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36124	38.134.189.10	12345	TCP
2025-01-07T05:18:31.358489+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36126	38.134.189.10	12345	TCP
2025-01-07T05:18:32.318544+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36128	38.134.189.10	12345	TCP
2025-01-07T05:18:33.156601+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36130	38.134.189.10	12345	TCP
2025-01-07T05:18:34.010751+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36132	38.134.189.10	12345	TCP
2025-01-07T05:18:37.873454+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36134	38.134.189.10	12345	TCP
2025-01-07T05:18:38.740287+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36136	38.134.189.10	12345	TCP
2025-01-07T05:18:39.599989+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36138	38.134.189.10	12345	TCP
2025-01-07T05:18:40.449435+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36140	38.134.189.10	12345	TCP
2025-01-07T05:18:41.293529+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36142	38.134.189.10	12345	TCP
2025-01-07T05:18:45.112852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36144	38.134.189.10	12345	TCP
2025-01-07T05:18:45.952910+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36146	38.134.189.10	12345	TCP
2025-01-07T05:18:46.774080+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36148	38.134.189.10	12345	TCP
2025-01-07T05:18:47.586916+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36150	38.134.189.10	12345	TCP
2025-01-07T05:18:48.413079+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36152	38.134.189.10	12345	TCP
2025-01-07T05:18:49.232222+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36154	38.134.189.10	12345	TCP
2025-01-07T05:18:50.079040+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36156	38.134.189.10	12345	TCP
2025-01-07T05:18:50.916423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36158	38.134.189.10	12345	TCP
2025-01-07T05:18:51.867057+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36160	38.134.189.10	12345	TCP
2025-01-07T05:18:52.726929+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36162	38.134.189.10	12345	TCP
2025-01-07T05:18:53.568995+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36164	38.134.189.10	12345	TCP
2025-01-07T05:18:54.454269+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36166	38.134.189.10	12345	TCP
2025-01-07T05:18:58.299140+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36168	38.134.189.10	12345	TCP
2025-01-07T05:18:59.133688+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36170	38.134.189.10	12345	TCP
2025-01-07T05:18:59.971204+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36172	38.134.189.10	12345	TCP
2025-01-07T05:19:00.814608+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36174	38.134.189.10	12345	TCP
2025-01-07T05:19:01.636163+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36176	38.134.189.10	12345	TCP
2025-01-07T05:19:02.447883+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36178	38.134.189.10	12345	TCP
2025-01-07T05:19:03.291625+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36180	38.134.189.10	12345	TCP
2025-01-07T05:19:04.120697+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36182	38.134.189.10	12345	TCP
2025-01-07T05:19:04.972788+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36184	38.134.189.10	12345	TCP
2025-01-07T05:19:05.799531+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36186	38.134.189.10	12345	TCP
2025-01-07T05:19:06.645173+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36188	38.134.189.10	12345	TCP
2025-01-07T05:19:28.057294+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36190	38.134.189.10	12345	TCP
2025-01-07T05:19:28.917732+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36192	38.134.189.10	12345	TCP
2025-01-07T05:19:29.755601+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36194	38.134.189.10	12345	TCP
2025-01-07T05:19:30.681327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36196	38.134.189.10	12345	TCP
2025-01-07T05:19:31.520902+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36198	38.134.189.10	12345	TCP
2025-01-07T05:19:32.380514+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36200	38.134.189.10	12345	TCP
2025-01-07T05:19:33.317006+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36202	38.134.189.10	12345	TCP
2025-01-07T05:19:34.261282+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36204	38.134.189.10	12345	TCP
2025-01-07T05:19:35.124776+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36206	38.134.189.10	12345	TCP
2025-01-07T05:19:35.991450+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36208	38.134.189.10	12345	TCP
2025-01-07T05:19:36.832270+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36210	38.134.189.10	12345	TCP
2025-01-07T05:19:37.788212+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36212	38.134.189.10	12345	TCP
2025-01-07T05:19:38.658366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36214	38.134.189.10	12345	TCP
2025-01-07T05:19:39.511348+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36216	38.134.189.10	12345	TCP
2025-01-07T05:19:40.357248+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36218	38.134.189.10	12345	TCP
2025-01-07T05:19:41.186302+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36220	38.134.189.10	12345	TCP
2025-01-07T05:19:42.024025+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36222	38.134.189.10	12345	TCP
2025-01-07T05:19:42.844876+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36224	38.134.189.10	12345	TCP
2025-01-07T05:19:43.856858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36226	38.134.189.10	12345	TCP
2025-01-07T05:19:44.826717+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36228	38.134.189.10	12345	TCP
2025-01-07T05:19:45.648481+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36230	38.134.189.10	12345	TCP
2025-01-07T05:19:46.484925+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36232	38.134.189.10	12345	TCP
2025-01-07T05:19:50.331339+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36234	38.134.189.10	12345	TCP
2025-01-07T05:19:51.176666+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36236	38.134.189.10	12345	TCP
2025-01-07T05:19:52.020143+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36238	38.134.189.10	12345	TCP
2025-01-07T05:19:52.857040+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36240	38.134.189.10	12345	TCP
2025-01-07T05:19:53.685941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36242	38.134.189.10	12345	TCP
2025-01-07T05:19:54.521809+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36244	38.134.189.10	12345	TCP
2025-01-07T05:19:55.363490+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36246	38.134.189.10	12345	TCP
2025-01-07T05:19:56.209142+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36248	38.134.189.10	12345	TCP
2025-01-07T05:19:57.044659+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36250	38.134.189.10	12345	TCP
2025-01-07T05:19:57.867758+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36252	38.134.189.10	12345	TCP
2025-01-07T05:19:58.717686+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36254	38.134.189.10	12345	TCP
2025-01-07T05:19:59.563205+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36256	38.134.189.10	12345	TCP
2025-01-07T05:20:00.385913+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36260	38.134.189.10	12345	TCP
2025-01-07T05:20:01.222774+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36262	38.134.189.10	12345	TCP
2025-01-07T05:20:02.068311+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36264	38.134.189.10	12345	TCP
2025-01-07T05:20:03.029004+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36266	38.134.189.10	12345	TCP
2025-01-07T05:20:03.857798+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36268	38.134.189.10	12345	TCP
2025-01-07T05:20:04.723408+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36270	38.134.189.10	12345	TCP
2025-01-07T05:20:05.568913+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36272	38.134.189.10	12345	TCP
2025-01-07T05:20:06.455300+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36274	38.134.189.10	12345	TCP
2025-01-07T05:20:07.381944+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36276	38.134.189.10	12345	TCP
2025-01-07T05:20:17.213333+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36278	38.134.189.10	12345	TCP
2025-01-07T05:20:18.068633+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36280	38.134.189.10	12345	TCP
2025-01-07T05:20:18.908803+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36282	38.134.189.10	12345	TCP
2025-01-07T05:20:19.735034+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36284	38.134.189.10	12345	TCP
2025-01-07T05:20:20.573837+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36286	38.134.189.10	12345	TCP
2025-01-07T05:20:21.415080+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36288	38.134.189.10	12345	TCP
2025-01-07T05:20:22.284003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36290	38.134.189.10	12345	TCP
2025-01-07T05:20:23.138709+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36292	38.134.189.10	12345	TCP
2025-01-07T05:20:23.975609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36294	38.134.189.10	12345	TCP
2025-01-07T05:20:24.827085+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36296	38.134.189.10	12345	TCP
2025-01-07T05:20:25.691595+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36298	38.134.189.10	12345	TCP
2025-01-07T05:20:26.549138+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36300	38.134.189.10	12345	TCP
2025-01-07T05:20:27.379254+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36302	38.134.189.10	12345	TCP
2025-01-07T05:20:28.234070+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36304	38.134.189.10	12345	TCP
2025-01-07T05:20:29.074014+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36306	38.134.189.10	12345	TCP
2025-01-07T05:20:29.918528+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36308	38.134.189.10	12345	TCP
2025-01-07T05:20:30.765850+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36310	38.134.189.10	12345	TCP
2025-01-07T05:20:34.604341+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36312	38.134.189.10	12345	TCP
2025-01-07T05:20:35.566779+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36314	38.134.189.10	12345	TCP
2025-01-07T05:20:36.402963+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36316	38.134.189.10	12345	TCP
2025-01-07T05:20:37.241684+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36318	38.134.189.10	12345	TCP
2025-01-07T05:20:38.080076+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36320	38.134.189.10	12345	TCP
2025-01-07T05:20:38.941259+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36322	38.134.189.10	12345	TCP
2025-01-07T05:20:39.764180+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36324	38.134.189.10	12345	TCP
2025-01-07T05:20:40.615774+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36326	38.134.189.10	12345	TCP
2025-01-07T05:20:41.451879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36328	38.134.189.10	12345	TCP
2025-01-07T05:20:42.273264+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36330	38.134.189.10	12345	TCP
2025-01-07T05:20:43.102902+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36332	38.134.189.10	12345	TCP
2025-01-07T05:20:43.926259+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36334	38.134.189.10	12345	TCP
2025-01-07T05:20:44.756824+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36336	38.134.189.10	12345	TCP
2025-01-07T05:20:45.570366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36338	38.134.189.10	12345	TCP
2025-01-07T05:20:46.399631+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36340	38.134.189.10	12345	TCP
2025-01-07T05:20:47.211268+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36342	38.134.189.10	12345	TCP
2025-01-07T05:20:48.039931+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36344	38.134.189.10	12345	TCP
2025-01-07T05:20:48.871669+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	36346	38.134.189.10	12345	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 7, 2025 05:17:13.804163933 CET	36008	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:13.809104919 CET	12345	36008	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:13.809185982 CET	36008	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:13.810266018 CET	36008	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:13.816555977 CET	12345	36008	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:14.647308111 CET	12345	36008	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:14.647407055 CET	12345	36008	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:14.647478104 CET	36008	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:14.648093939 CET	36008	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:14.648606062 CET	36010	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:14.652915955 CET	12345	36008	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:14.653379917 CET	12345	36010	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:14.653434992 CET	36010	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:14.653486013 CET	36010	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:14.658289909 CET	12345	36010	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:15.474006891 CET	12345	36010	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:15.474134922 CET	36010	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:15.474258900 CET	12345	36010	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:15.474337101 CET	36010	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:15.474772930 CET	36012	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:15.479108095 CET	12345	36010	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:15.479588032 CET	12345	36012	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:15.479666948 CET	36012	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:15.479712963 CET	36012	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:15.484488010 CET	12345	36012	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:19.326495886 CET	12345	36012	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:19.326622963 CET	12345	36012	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:19.326896906 CET	36012	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:19.326896906 CET	36012	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:19.327311039 CET	36014	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:19.331753969 CET	12345	36012	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:19.332114935 CET	12345	36014	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:19.332163095 CET	36014	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:19.332214117 CET	36014	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:19.337404013 CET	12345	36014	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:20.172565937 CET	12345	36014	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:20.172729969 CET	12345	36014	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:20.172868013 CET	36014	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:20.172920942 CET	36014	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:20.173557997 CET	36016	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:20.179243088 CET	12345	36014	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:20.180039883 CET	12345	36016	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:20.180097103 CET	36016	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:20.180140972 CET	36016	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:20.186655045 CET	12345	36016	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.010085106 CET	12345	36016	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.010168076 CET	12345	36016	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.010226965 CET	36016	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.010267973 CET	36016	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.010718107 CET	36018	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.015028000 CET	12345	36016	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.015532970 CET	12345	36018	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.015613079 CET	36018	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.015650034 CET	36018	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.020402908 CET	12345	36018	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.925473928 CET	12345	36018	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.926045895 CET	36018	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.926462889 CET	36020	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.930857897 CET	12345	36018	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.931271076 CET	12345	36020	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:21.931332111 CET	36020	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.931390047 CET	36020	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:21.936144114 CET	12345	36020	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:22.775883913 CET	12345	36020	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:22.776005030 CET	36020	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:22.776038885 CET	12345	36020	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:22.776099920 CET	36020	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:22.776494980 CET	36022	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:22.780900955 CET	12345	36020	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:22.781332016 CET	12345	36022	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:22.781419992 CET	36022	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:22.781461954 CET	36022	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:22.786228895 CET	12345	36022	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:23.636924028 CET	12345	36022	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:23.637022018 CET	12345	36022	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:23.637393951 CET	36022	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:23.637393951 CET	36022	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:23.637787104 CET	36024	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:23.642206907 CET	12345	36022	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:23.642551899 CET	12345	36024	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:23.642607927 CET	36024	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:23.642695904 CET	36024	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:23.647460938 CET	12345	36024	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:24.504064083 CET	12345	36024	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:24.504168987 CET	12345	36024	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:24.504265070 CET	36024	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:24.504337072 CET	36024	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:24.504777908 CET	36026	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:24.509100914 CET	12345	36024	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:24.509625912 CET	12345	36026	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:24.509754896 CET	36026	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:24.509793997 CET	36026	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:24.514605045 CET	12345	36026	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:28.331429958 CET	12345	36026	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:28.331532955 CET	12345	36026	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:28.331609011 CET	36026	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:28.331650972 CET	36026	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:28.332144022 CET	36028	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:28.336438894 CET	12345	36026	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:28.336937904 CET	12345	36028	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:28.336987972 CET	36028	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:28.337035894 CET	36028	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:28.344400883 CET	12345	36028	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:29.171619892 CET	12345	36028	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:29.171785116 CET	36028	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:29.171806097 CET	12345	36028	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:29.171885014 CET	36028	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:29.172432899 CET	36030	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:29.176654100 CET	12345	36028	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:29.177232027 CET	12345	36030	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:29.177315950 CET	36030	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:29.177421093 CET	36030	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:29.182183027 CET	12345	36030	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.023355961 CET	12345	36030	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.023471117 CET	12345	36030	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.023552895 CET	36030	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.023613930 CET	36030	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.024331093 CET	36032	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.028399944 CET	12345	36030	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.029164076 CET	12345	36032	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.029220104 CET	36032	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.029351950 CET	36032	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.034176111 CET	12345	36032	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.883917093 CET	12345	36032	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.883940935 CET	12345	36032	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.884157896 CET	36032	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.884195089 CET	36032	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.884720087 CET	36034	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.889004946 CET	12345	36032	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.889532089 CET	12345	36034	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:30.889588118 CET	36034	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.889635086 CET	36034	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:30.894454002 CET	12345	36034	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:31.728027105 CET	12345	36034	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:31.728147984 CET	36034	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:31.728182077 CET	12345	36034	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:31.728243113 CET	36034	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:31.728703022 CET	36036	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:31.733705044 CET	12345	36034	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:31.733990908 CET	12345	36036	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:31.734102964 CET	36036	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:31.734136105 CET	36036	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:31.740262032 CET	12345	36036	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:32.566032887 CET	12345	36036	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:32.566212893 CET	36036	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:32.566278934 CET	12345	36036	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:32.566366911 CET	36036	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:32.566812038 CET	36038	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:32.571132898 CET	12345	36036	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:32.571604013 CET	12345	36038	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:32.571646929 CET	36038	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:32.571691036 CET	36038	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:32.576447964 CET	12345	36038	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:33.409307003 CET	12345	36038	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:33.409427881 CET	36038	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:33.409600019 CET	12345	36038	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:33.409657001 CET	36038	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:33.410078049 CET	36040	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:33.414892912 CET	12345	36038	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:33.415432930 CET	12345	36040	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:33.415518999 CET	36040	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:33.415617943 CET	36040	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:33.420892000 CET	12345	36040	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:34.250823975 CET	12345	36040	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:34.250906944 CET	12345	36040	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:34.251138926 CET	36040	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:34.251192093 CET	36040	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:34.251828909 CET	36042	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:34.255950928 CET	12345	36040	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:34.256599903 CET	12345	36042	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:34.256671906 CET	36042	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:34.256777048 CET	36042	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:34.261535883 CET	12345	36042	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:35.185576916 CET	12345	36042	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:35.185765982 CET	36042	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:35.186247110 CET	36044	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:35.191499949 CET	12345	36042	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:35.192089081 CET	12345	36044	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:35.192214966 CET	36044	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:35.192248106 CET	36044	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:35.197006941 CET	12345	36044	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.039275885 CET	12345	36044	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.039365053 CET	12345	36044	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.039577007 CET	36044	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.039638996 CET	36044	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.040069103 CET	36046	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.044377089 CET	12345	36044	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.044889927 CET	12345	36046	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.044964075 CET	36046	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.045073032 CET	36046	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.049791098 CET	12345	36046	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.889784098 CET	12345	36046	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.889906883 CET	12345	36046	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.889925957 CET	36046	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.890000105 CET	36046	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.890512943 CET	36048	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.894795895 CET	12345	36046	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.895349026 CET	12345	36048	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:36.895414114 CET	36048	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.895526886 CET	36048	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:36.900240898 CET	12345	36048	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:37.742491007 CET	12345	36048	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:37.742641926 CET	12345	36048	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:37.742646933 CET	36048	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:37.742834091 CET	36048	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:37.743840933 CET	36050	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:37.747620106 CET	12345	36048	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:37.748635054 CET	12345	36050	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:37.748752117 CET	36050	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:37.748784065 CET	36050	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:37.753568888 CET	12345	36050	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:38.595098972 CET	12345	36050	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:38.595227003 CET	12345	36050	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:38.595236063 CET	36050	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:38.595485926 CET	36050	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:38.596278906 CET	36052	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:38.600359917 CET	12345	36050	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:38.601044893 CET	12345	36052	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:38.601124048 CET	36052	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:38.601243019 CET	36052	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:38.606040955 CET	12345	36052	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:42.515027046 CET	12345	36052	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:42.515033007 CET	12345	36052	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:42.515036106 CET	12345	36052	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:42.515459061 CET	36052	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:42.515480995 CET	36052	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:42.515652895 CET	36052	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:42.516402006 CET	36054	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:42.520536900 CET	12345	36052	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:42.521188021 CET	12345	36054	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:42.521313906 CET	36054	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:42.521394968 CET	36054	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:42.526186943 CET	12345	36054	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:43.353001118 CET	12345	36054	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:43.353115082 CET	12345	36054	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:43.353123903 CET	36054	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:43.353261948 CET	36054	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:43.353914976 CET	36056	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:43.358067989 CET	12345	36054	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:43.358768940 CET	12345	36056	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:43.358843088 CET	36056	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:43.358946085 CET	36056	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:43.363802910 CET	12345	36056	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:44.189893007 CET	12345	36056	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:44.189965963 CET	36056	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:44.190105915 CET	12345	36056	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:44.190188885 CET	36056	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:44.190679073 CET	36058	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:44.194972038 CET	12345	36056	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:44.195436001 CET	12345	36058	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:44.195511103 CET	36058	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:44.195600986 CET	36058	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:44.200356007 CET	12345	36058	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.043359995 CET	12345	36058	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.043554068 CET	36058	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.043590069 CET	12345	36058	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.043819904 CET	36058	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.044501066 CET	36060	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.048634052 CET	12345	36058	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.049372911 CET	12345	36060	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.049420118 CET	36060	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.049462080 CET	36060	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.054297924 CET	12345	36060	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.877702951 CET	12345	36060	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.877830982 CET	12345	36060	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.877868891 CET	36060	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.878021002 CET	36060	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.878696918 CET	36062	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.883989096 CET	12345	36060	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.884701967 CET	12345	36062	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:45.884794950 CET	36062	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.884906054 CET	36062	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:45.890965939 CET	12345	36062	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:46.722547054 CET	12345	36062	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:46.722660065 CET	12345	36062	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:46.722892046 CET	36062	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:46.722996950 CET	36062	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:46.723664045 CET	36064	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:46.728178978 CET	12345	36062	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:46.728781939 CET	12345	36064	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:46.728863955 CET	36064	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:46.728967905 CET	36064	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:46.733772993 CET	12345	36064	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:47.657782078 CET	12345	36064	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:47.658150911 CET	36064	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:47.658873081 CET	36066	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:47.662934065 CET	12345	36064	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:47.663718939 CET	12345	36066	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:47.663791895 CET	36066	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:47.663943052 CET	36066	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:47.668756962 CET	12345	36066	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:48.496761084 CET	12345	36066	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:48.496911049 CET	12345	36066	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:48.497080088 CET	36066	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:48.497236013 CET	36066	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:48.497909069 CET	36068	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:48.501996040 CET	12345	36066	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:48.502742052 CET	12345	36068	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:48.502887011 CET	36068	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:48.502979994 CET	36068	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:48.507798910 CET	12345	36068	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:49.353951931 CET	12345	36068	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:49.354120016 CET	12345	36068	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:49.354131937 CET	36068	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:49.354295969 CET	36068	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:49.354839087 CET	36070	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:49.359112024 CET	12345	36068	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:49.359683037 CET	12345	36070	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:49.359740973 CET	36070	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:49.359796047 CET	36070	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:49.364514112 CET	12345	36070	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:50.199179888 CET	12345	36070	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:50.199304104 CET	12345	36070	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:50.199465036 CET	36070	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:50.199630976 CET	36070	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:50.200355053 CET	36072	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:50.204365015 CET	12345	36070	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:50.205115080 CET	12345	36072	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:50.205240965 CET	36072	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:50.205333948 CET	36072	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:50.210073948 CET	12345	36072	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.051764965 CET	12345	36072	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.051925898 CET	12345	36072	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.051948071 CET	36072	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.052220106 CET	36072	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.052975893 CET	36074	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.057029009 CET	12345	36072	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.057791948 CET	12345	36074	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.057862997 CET	36074	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.057974100 CET	36074	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.062747955 CET	12345	36074	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.890424967 CET	12345	36074	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.890556097 CET	12345	36074	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.890574932 CET	36074	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.890733004 CET	36074	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.891478062 CET	36076	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.895541906 CET	12345	36074	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.896320105 CET	12345	36076	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:54.896444082 CET	36076	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.896524906 CET	36076	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:54.901340961 CET	12345	36076	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:55.728557110 CET	12345	36076	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:55.728688955 CET	36076	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:55.728694916 CET	12345	36076	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:55.728840113 CET	36076	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:55.729460001 CET	36078	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:55.733643055 CET	12345	36076	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:55.734359026 CET	12345	36078	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:55.734435081 CET	36078	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:55.734543085 CET	36078	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:55.739386082 CET	12345	36078	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:56.581513882 CET	12345	36078	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:56.581526041 CET	12345	36078	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:56.581754923 CET	36078	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:56.581912994 CET	36078	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:56.582566023 CET	36080	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:56.586711884 CET	12345	36078	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:56.587416887 CET	12345	36080	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:56.587485075 CET	36080	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:56.587608099 CET	36080	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:56.592413902 CET	12345	36080	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:57.426126957 CET	12345	36080	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:57.426201105 CET	12345	36080	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:57.426280975 CET	36080	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:57.426429987 CET	36080	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:57.427052975 CET	36082	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:57.431302071 CET	12345	36080	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:57.431843996 CET	12345	36082	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:57.431958914 CET	36082	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:57.432038069 CET	36082	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:57.436851978 CET	12345	36082	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:58.273953915 CET	12345	36082	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:58.273973942 CET	12345	36082	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:58.274130106 CET	36082	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:58.274290085 CET	36082	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:58.275046110 CET	36084	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:58.279129982 CET	12345	36082	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:58.279903889 CET	12345	36084	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:58.279973030 CET	36084	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:58.280086040 CET	36084	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:58.284833908 CET	12345	36084	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:59.101632118 CET	12345	36084	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:59.101768017 CET	36084	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:59.101777077 CET	12345	36084	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:59.101942062 CET	36084	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:59.102642059 CET	36086	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:59.106767893 CET	12345	36084	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:59.107410908 CET	12345	36086	38.134.189.10	192.168.2.14
Jan 7, 2025 05:17:59.107544899 CET	36086	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:59.107639074 CET	36086	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:17:59.112451077 CET	12345	36086	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:02.955914021 CET	12345	36086	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:02.956033945 CET	12345	36086	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:02.956110001 CET	36086	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:02.956271887 CET	36086	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:02.956922054 CET	36088	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:02.961024046 CET	12345	36086	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:02.961720943 CET	12345	36088	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:02.961788893 CET	36088	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:02.961886883 CET	36088	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:02.966638088 CET	12345	36088	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:03.816082001 CET	12345	36088	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:03.816097021 CET	12345	36088	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:03.816157103 CET	36088	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:03.816209078 CET	36088	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:03.816601992 CET	36090	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:03.822932005 CET	12345	36088	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:03.823494911 CET	12345	36090	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:03.823601007 CET	36090	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:03.823625088 CET	36090	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:03.830219984 CET	12345	36090	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:04.651124954 CET	12345	36090	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:04.651223898 CET	36090	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:04.651227951 CET	12345	36090	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:04.651487112 CET	36090	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:04.652146101 CET	36092	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:04.656250000 CET	12345	36090	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:04.656941891 CET	12345	36092	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:04.657013893 CET	36092	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:04.657109976 CET	36092	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:04.661971092 CET	12345	36092	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:05.519236088 CET	12345	36092	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:05.519364119 CET	36092	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:05.519381046 CET	12345	36092	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:05.519520998 CET	36092	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:05.520162106 CET	36094	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:05.524280071 CET	12345	36092	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:05.524924040 CET	12345	36094	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:05.525002956 CET	36094	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:05.525109053 CET	36094	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:05.529866934 CET	12345	36094	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:06.356882095 CET	12345	36094	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:06.356969118 CET	12345	36094	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:06.357038975 CET	36094	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:06.357191086 CET	36094	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:06.357839108 CET	36096	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:06.362011909 CET	12345	36094	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:06.362740993 CET	12345	36096	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:06.362793922 CET	36096	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:06.362900019 CET	36096	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:06.367697001 CET	12345	36096	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:07.318639994 CET	12345	36096	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:07.319027901 CET	36096	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:07.319686890 CET	36098	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:07.323790073 CET	12345	36096	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:07.324521065 CET	12345	36098	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:07.324565887 CET	36098	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:07.324608088 CET	36098	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:07.329319954 CET	12345	36098	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:11.181381941 CET	12345	36098	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:11.181437969 CET	12345	36098	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:11.181561947 CET	36098	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:11.181695938 CET	36098	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:11.182440042 CET	36100	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:11.186511040 CET	12345	36098	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:11.187331915 CET	12345	36100	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:11.187411070 CET	36100	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:11.187525034 CET	36100	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:11.193681955 CET	12345	36100	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.002182007 CET	12345	36100	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.002350092 CET	12345	36100	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.002393961 CET	36100	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.002439022 CET	36100	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.003422976 CET	36102	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.007139921 CET	12345	36100	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.008232117 CET	12345	36102	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.008286953 CET	36102	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.008333921 CET	36102	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.013068914 CET	12345	36102	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.830403090 CET	12345	36102	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.830424070 CET	12345	36102	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.830544949 CET	36102	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.830605984 CET	36102	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.831079006 CET	36104	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.835365057 CET	12345	36102	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.835928917 CET	12345	36104	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:15.836002111 CET	36104	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.836082935 CET	36104	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:15.840872049 CET	12345	36104	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:16.682826042 CET	12345	36104	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:16.682863951 CET	12345	36104	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:16.682981014 CET	36104	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:16.683090925 CET	36104	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:16.683655024 CET	36106	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:16.688116074 CET	12345	36104	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:16.688462019 CET	12345	36106	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:16.688518047 CET	36106	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:16.688553095 CET	36106	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:16.693367958 CET	12345	36106	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:17.521629095 CET	12345	36106	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:17.521642923 CET	12345	36106	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:17.521775961 CET	36106	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:17.521936893 CET	36106	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:17.522566080 CET	36108	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:17.526720047 CET	12345	36106	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:17.527340889 CET	12345	36108	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:17.527462006 CET	36108	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:17.527539968 CET	36108	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:17.532320023 CET	12345	36108	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:18.414920092 CET	12345	36108	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:18.415010929 CET	12345	36108	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:18.415035009 CET	36108	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:18.415107965 CET	36108	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:18.415925980 CET	36110	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:18.419861078 CET	12345	36108	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:18.420727968 CET	12345	36110	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:18.420809984 CET	36110	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:18.420850039 CET	36110	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:18.425620079 CET	12345	36110	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:19.273710012 CET	12345	36110	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:19.273821115 CET	12345	36110	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:19.273933887 CET	36110	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:19.274085045 CET	36110	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:19.274766922 CET	36112	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:19.278858900 CET	12345	36110	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:19.279624939 CET	12345	36112	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:19.279691935 CET	36112	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:19.279797077 CET	36112	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:19.284617901 CET	12345	36112	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:20.155237913 CET	12345	36112	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:20.155441046 CET	12345	36112	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:20.155606985 CET	36112	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:20.155929089 CET	36112	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:20.156822920 CET	36114	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:20.160733938 CET	12345	36112	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:20.161597967 CET	12345	36114	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:20.161696911 CET	36114	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:20.161808968 CET	36114	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:20.166603088 CET	12345	36114	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:21.007128000 CET	12345	36114	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:21.007258892 CET	36114	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:21.007319927 CET	12345	36114	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:21.007452965 CET	36114	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:21.007919073 CET	36116	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:21.012198925 CET	12345	36114	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:21.012774944 CET	12345	36116	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:21.012846947 CET	36116	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:21.012962103 CET	36116	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:21.017762899 CET	12345	36116	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:24.951098919 CET	12345	36116	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:24.951416016 CET	36116	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:24.952136040 CET	36118	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:24.956280947 CET	12345	36116	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:24.956942081 CET	12345	36118	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:24.957067013 CET	36118	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:24.957149982 CET	36118	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:24.961858988 CET	12345	36118	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:25.794555902 CET	12345	36118	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:25.794680119 CET	36118	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:25.794718981 CET	12345	36118	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:25.794811010 CET	36118	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:25.795747042 CET	36120	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:25.799606085 CET	12345	36118	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:25.800556898 CET	12345	36120	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:25.800604105 CET	36120	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:25.800651073 CET	36120	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:25.805391073 CET	12345	36120	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:26.632981062 CET	12345	36120	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:26.633023024 CET	12345	36120	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:26.633193970 CET	36120	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:26.633249044 CET	36120	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:26.633666992 CET	36122	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:26.638056040 CET	12345	36120	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:26.638451099 CET	12345	36122	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:26.638536930 CET	36122	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:26.638645887 CET	36122	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:26.643472910 CET	12345	36122	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:27.492413044 CET	12345	36122	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:27.492554903 CET	36122	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:27.492589951 CET	12345	36122	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:27.492790937 CET	36122	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:27.493216991 CET	36124	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:27.497589111 CET	12345	36122	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:27.498047113 CET	12345	36124	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:27.498095989 CET	36124	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:27.498142958 CET	36124	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:27.502918005 CET	12345	36124	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:31.352642059 CET	12345	36124	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:31.352785110 CET	36124	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:31.352859974 CET	12345	36124	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:31.352915049 CET	36124	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:31.353504896 CET	36126	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:31.357723951 CET	12345	36124	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:31.358375072 CET	12345	36126	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:31.358458042 CET	36126	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:31.358489037 CET	36126	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:31.363281965 CET	12345	36126	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:32.313062906 CET	12345	36126	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:32.313251019 CET	36126	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:32.313637018 CET	36128	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:32.318044901 CET	12345	36126	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:32.318448067 CET	12345	36128	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:32.318530083 CET	36128	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:32.318543911 CET	36128	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:32.323332071 CET	12345	36128	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:33.151086092 CET	12345	36128	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:33.151217937 CET	36128	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:33.151226997 CET	12345	36128	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:33.151329041 CET	36128	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:33.151737928 CET	36130	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:33.156130075 CET	12345	36128	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:33.156507969 CET	12345	36130	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:33.156553984 CET	36130	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:33.156600952 CET	36130	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:33.161385059 CET	12345	36130	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:34.004462957 CET	12345	36130	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:34.004482985 CET	12345	36130	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:34.004869938 CET	36130	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:34.004930019 CET	36130	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:34.005714893 CET	36132	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:34.010000944 CET	12345	36130	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:34.010540009 CET	12345	36132	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:34.010638952 CET	36132	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:34.010751009 CET	36132	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:34.015486002 CET	12345	36132	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:37.867330074 CET	12345	36132	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:37.867428064 CET	12345	36132	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:37.867558002 CET	36132	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:37.867667913 CET	36132	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:37.868439913 CET	36134	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:37.872471094 CET	12345	36132	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:37.873267889 CET	12345	36134	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:37.873342991 CET	36134	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:37.873454094 CET	36134	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:37.878221989 CET	12345	36134	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:38.734283924 CET	12345	36134	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:38.734385967 CET	12345	36134	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:38.734678984 CET	36134	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:38.734730005 CET	36134	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:38.735352993 CET	36136	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:38.739505053 CET	12345	36134	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:38.740140915 CET	12345	36136	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:38.740262032 CET	36136	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:38.740287066 CET	36136	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:38.745060921 CET	12345	36136	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:39.594182968 CET	12345	36136	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:39.594295025 CET	12345	36136	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:39.594295979 CET	36136	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:39.594573021 CET	36136	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:39.595132113 CET	36138	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:39.599375963 CET	12345	36136	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:39.599901915 CET	12345	36138	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:39.599941969 CET	36138	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:39.599988937 CET	36138	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:39.604758978 CET	12345	36138	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:40.443429947 CET	12345	36138	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:40.443531990 CET	12345	36138	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:40.443623066 CET	36138	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:40.443780899 CET	36138	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:40.444492102 CET	36140	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:40.448510885 CET	12345	36138	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:40.449242115 CET	12345	36140	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:40.449327946 CET	36140	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:40.449434996 CET	36140	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:40.454204082 CET	12345	36140	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:41.288038015 CET	12345	36140	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:41.288099051 CET	12345	36140	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:41.288172960 CET	36140	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:41.288238049 CET	36140	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:41.288598061 CET	36142	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:41.293005943 CET	12345	36140	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:41.293430090 CET	12345	36142	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:41.293478012 CET	36142	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:41.293529034 CET	36142	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:41.298873901 CET	12345	36142	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.106703043 CET	12345	36142	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.106815100 CET	12345	36142	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.107004881 CET	36142	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.107178926 CET	36142	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.107892036 CET	36144	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.111984015 CET	12345	36142	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.112673044 CET	12345	36144	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.112741947 CET	36144	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.112852097 CET	36144	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.117652893 CET	12345	36144	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.946644068 CET	12345	36144	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.946655989 CET	12345	36144	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.947057009 CET	36144	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.947253942 CET	36144	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.947881937 CET	36146	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.952055931 CET	12345	36144	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.952729940 CET	12345	36146	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:45.952811003 CET	36146	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.952909946 CET	36146	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:45.957648993 CET	12345	36146	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:46.768142939 CET	12345	36146	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:46.768156052 CET	12345	36146	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:46.768254995 CET	36146	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:46.768383026 CET	36146	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:46.769052029 CET	36148	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:46.773171902 CET	12345	36146	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:46.773905993 CET	12345	36148	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:46.773981094 CET	36148	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:46.774080038 CET	36148	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:46.778860092 CET	12345	36148	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:47.580869913 CET	12345	36148	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:47.581067085 CET	12345	36148	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:47.581129074 CET	36148	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:47.581300974 CET	36148	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:47.581969023 CET	36150	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:47.586107969 CET	12345	36148	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:47.586747885 CET	12345	36150	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:47.586815119 CET	36150	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:47.586915970 CET	36150	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:47.591722012 CET	12345	36150	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:48.406888962 CET	12345	36150	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:48.407002926 CET	12345	36150	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:48.407026052 CET	36150	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:48.407310963 CET	36150	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:48.408091068 CET	36152	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:48.412117004 CET	12345	36150	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:48.412878990 CET	12345	36152	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:48.412959099 CET	36152	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:48.413079023 CET	36152	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:48.417908907 CET	12345	36152	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:49.226039886 CET	12345	36152	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:49.226186037 CET	12345	36152	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:49.226413965 CET	36152	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:49.226623058 CET	36152	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:49.227128029 CET	36154	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:49.231352091 CET	12345	36152	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:49.232014894 CET	12345	36154	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:49.232129097 CET	36154	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:49.232222080 CET	36154	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:49.237049103 CET	12345	36154	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.073462009 CET	12345	36154	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.073596001 CET	12345	36154	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.073671103 CET	36154	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.073719025 CET	36154	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.074163914 CET	36156	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.078484058 CET	12345	36154	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.078934908 CET	12345	36156	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.078988075 CET	36156	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.079040051 CET	36156	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.083811998 CET	12345	36156	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.910466909 CET	12345	36156	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.910480976 CET	12345	36156	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.910686970 CET	36156	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.910769939 CET	36156	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.911370039 CET	36158	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.915539980 CET	12345	36156	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.916213989 CET	12345	36158	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:50.916342974 CET	36158	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.916423082 CET	36158	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:50.921166897 CET	12345	36158	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:51.861076117 CET	12345	36158	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:51.861392975 CET	36158	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:51.862050056 CET	36160	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:51.866148949 CET	12345	36158	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:51.866931915 CET	12345	36160	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:51.867022038 CET	36160	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:51.867057085 CET	36160	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:51.871826887 CET	12345	36160	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:52.721225023 CET	12345	36160	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:52.721494913 CET	12345	36160	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:52.721682072 CET	36160	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:52.721682072 CET	36160	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:52.722074032 CET	36162	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:52.726522923 CET	12345	36160	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:52.726836920 CET	12345	36162	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:52.726887941 CET	36162	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:52.726928949 CET	36162	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:52.731736898 CET	12345	36162	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:53.563240051 CET	12345	36162	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:53.563338995 CET	12345	36162	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:53.563411951 CET	36162	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:53.563442945 CET	36162	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:53.563978910 CET	36164	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:53.568253994 CET	12345	36162	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:53.568866014 CET	12345	36164	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:53.568953037 CET	36164	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:53.568994999 CET	36164	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:53.573749065 CET	12345	36164	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:54.448703051 CET	12345	36164	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:54.448901892 CET	36164	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:54.448926926 CET	12345	36164	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:54.449018955 CET	36164	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:54.449457884 CET	36166	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:54.453768015 CET	12345	36164	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:54.454179049 CET	12345	36166	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:54.454227924 CET	36166	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:54.454268932 CET	36166	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:54.459037066 CET	12345	36166	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:58.293648958 CET	12345	36166	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:58.293670893 CET	12345	36166	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:58.293776989 CET	36166	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:58.293828011 CET	36166	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:58.294281006 CET	36168	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:58.298600912 CET	12345	36166	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:58.299034119 CET	12345	36168	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:58.299109936 CET	36168	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:58.299139977 CET	36168	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:58.303910971 CET	12345	36168	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.128094912 CET	12345	36168	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.128319025 CET	12345	36168	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.128376007 CET	36168	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.128433943 CET	36168	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.128838062 CET	36170	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.133215904 CET	12345	36168	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.133578062 CET	12345	36170	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.133632898 CET	36170	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.133687973 CET	36170	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.138433933 CET	12345	36170	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.965198994 CET	12345	36170	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.965337992 CET	12345	36170	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.965367079 CET	36170	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.965507984 CET	36170	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.966165066 CET	36172	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.970328093 CET	12345	36170	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.971036911 CET	12345	36172	38.134.189.10	192.168.2.14
Jan 7, 2025 05:18:59.971112967 CET	36172	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.971204042 CET	36172	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:18:59.976017952 CET	12345	36172	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:00.809112072 CET	12345	36172	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:00.809197903 CET	36172	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:00.809259892 CET	12345	36172	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:00.809333086 CET	36172	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:00.809689045 CET	36174	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:00.814132929 CET	12345	36172	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:00.814524889 CET	12345	36174	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:00.814569950 CET	36174	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:00.814608097 CET	36174	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:00.819401026 CET	12345	36174	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:01.629971981 CET	12345	36174	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:01.630054951 CET	12345	36174	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:01.630279064 CET	36174	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:01.630435944 CET	36174	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:01.631148100 CET	36176	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:01.635216951 CET	12345	36174	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:01.635993958 CET	12345	36176	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:01.636063099 CET	36176	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:01.636162996 CET	36176	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:01.640975952 CET	12345	36176	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:02.442236900 CET	12345	36176	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:02.442353964 CET	36176	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:02.442390919 CET	12345	36176	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:02.442449093 CET	36176	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:02.442925930 CET	36178	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:02.447211027 CET	12345	36176	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:02.447722912 CET	12345	36178	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:02.447799921 CET	36178	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:02.447882891 CET	36178	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:02.452610970 CET	12345	36178	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:03.285492897 CET	12345	36178	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:03.285568953 CET	12345	36178	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:03.285595894 CET	36178	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:03.285866022 CET	36178	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:03.286603928 CET	36180	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:03.290611982 CET	12345	36178	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:03.291449070 CET	12345	36180	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:03.291521072 CET	36180	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:03.291625023 CET	36180	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:03.296377897 CET	12345	36180	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.114751101 CET	12345	36180	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.114855051 CET	12345	36180	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.114892960 CET	36180	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.115057945 CET	36180	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.115693092 CET	36182	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.119848013 CET	12345	36180	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.120524883 CET	12345	36182	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.120615959 CET	36182	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.120697021 CET	36182	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.125519037 CET	12345	36182	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.966617107 CET	12345	36182	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.966731071 CET	12345	36182	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.966732979 CET	36182	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.967016935 CET	36182	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.967751026 CET	36184	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.971884012 CET	12345	36182	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.972595930 CET	12345	36184	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:04.972671986 CET	36184	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.972788095 CET	36184	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:04.977585077 CET	12345	36184	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:05.793529034 CET	12345	36184	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:05.793637991 CET	12345	36184	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:05.793819904 CET	36184	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:05.793994904 CET	36184	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:05.794642925 CET	36186	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:05.798760891 CET	12345	36184	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:05.799418926 CET	12345	36186	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:05.799489975 CET	36186	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:05.799530983 CET	36186	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:05.804255009 CET	12345	36186	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:06.638940096 CET	12345	36186	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:06.639022112 CET	12345	36186	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:06.639218092 CET	36186	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:06.639440060 CET	36186	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:06.640153885 CET	36188	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:06.644182920 CET	12345	36186	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:06.644993067 CET	12345	36188	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:06.645066023 CET	36188	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:06.645173073 CET	36188	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:06.649971962 CET	12345	36188	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.051050901 CET	12345	36188	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.051424980 CET	36188	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.052211046 CET	36190	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.056348085 CET	12345	36188	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.057063103 CET	12345	36190	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.057188988 CET	36190	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.057293892 CET	36190	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.062105894 CET	12345	36190	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.911644936 CET	12345	36190	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.911756039 CET	12345	36190	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.911798954 CET	36190	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.911963940 CET	36190	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.912694931 CET	36192	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.916783094 CET	12345	36190	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.917546034 CET	12345	36192	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:28.917623043 CET	36192	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.917732000 CET	36192	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:28.922537088 CET	12345	36192	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:29.749341011 CET	12345	36192	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:29.749517918 CET	36192	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:29.749541998 CET	12345	36192	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:29.749788046 CET	36192	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:29.750530958 CET	36194	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:29.754626989 CET	12345	36192	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:29.755425930 CET	12345	36194	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:29.755496025 CET	36194	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:29.755600929 CET	36194	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:29.760401011 CET	12345	36194	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:30.675581932 CET	12345	36194	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:30.675753117 CET	36194	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:30.676264048 CET	36196	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:30.680629969 CET	12345	36194	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:30.681129932 CET	12345	36196	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:30.681199074 CET	36196	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:30.681327105 CET	36196	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:30.686182976 CET	12345	36196	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:31.514748096 CET	12345	36196	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:31.514878988 CET	12345	36196	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:31.515002012 CET	36196	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:31.515160084 CET	36196	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:31.515882969 CET	36198	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:31.519972086 CET	12345	36196	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:31.520730019 CET	12345	36198	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:31.520800114 CET	36198	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:31.520901918 CET	36198	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:31.525773048 CET	12345	36198	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:32.374411106 CET	12345	36198	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:32.374561071 CET	36198	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:32.374581099 CET	12345	36198	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:32.374711037 CET	36198	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:32.375472069 CET	36200	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:32.379537106 CET	12345	36198	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:32.380352974 CET	12345	36200	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:32.380469084 CET	36200	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:32.380513906 CET	36200	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:32.385288954 CET	12345	36200	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:33.310853004 CET	12345	36200	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:33.311146021 CET	36200	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:33.311980009 CET	36202	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:33.316009045 CET	12345	36200	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:33.316833973 CET	12345	36202	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:33.316905022 CET	36202	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:33.317006111 CET	36202	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:33.321809053 CET	12345	36202	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:34.255625963 CET	12345	36202	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:34.255799055 CET	36202	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:34.256295919 CET	36204	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:34.260646105 CET	12345	36202	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:34.261125088 CET	12345	36204	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:34.261241913 CET	36204	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:34.261281967 CET	36204	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:34.266062021 CET	12345	36204	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.119214058 CET	12345	36204	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.119224072 CET	12345	36204	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.119326115 CET	36204	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.119359016 CET	36204	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.119851112 CET	36206	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.124186039 CET	12345	36204	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.124680996 CET	12345	36206	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.124731064 CET	36206	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.124775887 CET	36206	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.129554033 CET	12345	36206	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.985855103 CET	12345	36206	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.986001968 CET	36206	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.986006021 CET	12345	36206	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.986069918 CET	36206	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.986543894 CET	36208	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.990859985 CET	12345	36206	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.991355896 CET	12345	36208	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:35.991401911 CET	36208	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.991450071 CET	36208	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:35.996340036 CET	12345	36208	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:36.826340914 CET	12345	36208	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:36.826438904 CET	12345	36208	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:36.826453924 CET	36208	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:36.826517105 CET	36208	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:36.827233076 CET	36210	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:36.831281900 CET	12345	36208	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:36.832015038 CET	12345	36210	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:36.832168102 CET	36210	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:36.832269907 CET	36210	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:36.837064028 CET	12345	36210	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:37.782589912 CET	12345	36210	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:37.782777071 CET	36210	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:37.783351898 CET	36212	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:37.787548065 CET	12345	36210	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:37.788122892 CET	12345	36212	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:37.788172007 CET	36212	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:37.788212061 CET	36212	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:37.793011904 CET	12345	36212	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:38.652720928 CET	12345	36212	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:38.652825117 CET	36212	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:38.652872086 CET	12345	36212	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:38.652932882 CET	36212	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:38.653388977 CET	36214	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:38.657783031 CET	12345	36212	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:38.658227921 CET	12345	36214	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:38.658345938 CET	36214	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:38.658365965 CET	36214	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:38.663135052 CET	12345	36214	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:39.505748034 CET	12345	36214	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:39.505882978 CET	12345	36214	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:39.505934000 CET	36214	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:39.505985975 CET	36214	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:39.506424904 CET	36216	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:39.510771036 CET	12345	36214	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:39.511254072 CET	12345	36216	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:39.511303902 CET	36216	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:39.511348009 CET	36216	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:39.516138077 CET	12345	36216	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:40.351618052 CET	12345	36216	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:40.351732969 CET	36216	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:40.351752043 CET	12345	36216	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:40.351813078 CET	36216	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:40.352237940 CET	36218	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:40.356630087 CET	12345	36216	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:40.357110023 CET	12345	36218	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:40.357228994 CET	36218	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:40.357248068 CET	36218	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:40.362052917 CET	12345	36218	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:41.180272102 CET	12345	36218	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:41.180442095 CET	36218	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:41.180596113 CET	12345	36218	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:41.180694103 CET	36218	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:41.181389093 CET	36220	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:41.185472965 CET	12345	36218	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:41.186208963 CET	12345	36220	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:41.186260939 CET	36220	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:41.186301947 CET	36220	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:41.191042900 CET	12345	36220	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.018384933 CET	12345	36220	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.018482924 CET	12345	36220	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.018655062 CET	36220	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.018656015 CET	36220	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.019053936 CET	36222	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.023492098 CET	12345	36220	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.023811102 CET	12345	36222	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.023931980 CET	36222	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.024024963 CET	36222	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.028814077 CET	12345	36222	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.839145899 CET	12345	36222	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.839365005 CET	12345	36222	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.839466095 CET	36222	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.839494944 CET	36222	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.839940071 CET	36224	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.844309092 CET	12345	36222	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.844778061 CET	12345	36224	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:42.844834089 CET	36224	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.844876051 CET	36224	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:42.849611044 CET	12345	36224	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:43.851300001 CET	12345	36224	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:43.851443052 CET	36224	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:43.851887941 CET	36226	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:43.856312037 CET	12345	36224	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:43.856724024 CET	12345	36226	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:43.856816053 CET	36226	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:43.856858015 CET	36226	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:43.861609936 CET	12345	36226	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:44.821074009 CET	12345	36226	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:44.821185112 CET	12345	36226	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:44.821255922 CET	36226	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:44.821309090 CET	36226	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:44.821844101 CET	36228	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:44.826077938 CET	12345	36226	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:44.826631069 CET	12345	36228	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:44.826690912 CET	36228	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:44.826716900 CET	36228	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:44.831461906 CET	12345	36228	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:45.642818928 CET	12345	36228	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:45.642946959 CET	12345	36228	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:45.642963886 CET	36228	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:45.643007994 CET	36228	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:45.643464088 CET	36230	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:45.647762060 CET	12345	36228	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:45.648320913 CET	12345	36230	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:45.648480892 CET	36230	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:45.648480892 CET	36230	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:45.653264999 CET	12345	36230	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:46.479283094 CET	12345	36230	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:46.479406118 CET	12345	36230	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:46.479468107 CET	36230	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:46.479522943 CET	36230	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:46.479958057 CET	36232	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:46.484312057 CET	12345	36230	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:46.484832048 CET	12345	36232	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:46.484879971 CET	36232	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:46.484925032 CET	36232	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:46.489670992 CET	12345	36232	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:50.325723886 CET	12345	36232	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:50.325743914 CET	12345	36232	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:50.326009989 CET	36232	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:50.326009989 CET	36232	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:50.326407909 CET	36234	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:50.330849886 CET	12345	36232	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:50.331197977 CET	12345	36234	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:50.331315994 CET	36234	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:50.331338882 CET	36234	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:50.336103916 CET	12345	36234	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:51.170442104 CET	12345	36234	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:51.170573950 CET	36234	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:51.170728922 CET	12345	36234	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:51.170869112 CET	36234	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:51.171618938 CET	36236	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:51.175710917 CET	12345	36234	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:51.176467896 CET	12345	36236	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:51.176542997 CET	36236	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:51.176666021 CET	36236	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:51.181464911 CET	12345	36236	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.014183044 CET	12345	36236	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.014197111 CET	12345	36236	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.014333010 CET	36236	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.014488935 CET	36236	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.015115976 CET	36238	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.019203901 CET	12345	36236	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.019915104 CET	12345	36238	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.020042896 CET	36238	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.020143032 CET	36238	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.024929047 CET	12345	36238	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.850851059 CET	12345	36238	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.850941896 CET	12345	36238	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.851030111 CET	36238	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.851192951 CET	36238	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.852032900 CET	36240	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.855981112 CET	12345	36238	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.856858969 CET	12345	36240	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:52.856925964 CET	36240	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.857039928 CET	36240	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:52.861783981 CET	12345	36240	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:53.680166006 CET	12345	36240	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:53.680289030 CET	36240	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:53.680325985 CET	12345	36240	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:53.680387974 CET	36240	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:53.680978060 CET	36242	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:53.685214996 CET	12345	36240	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:53.685842991 CET	12345	36242	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:53.685900927 CET	36242	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:53.685940981 CET	36242	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:53.690673113 CET	12345	36242	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:54.515163898 CET	12345	36242	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:54.515304089 CET	36242	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:54.515379906 CET	12345	36242	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:54.515502930 CET	36242	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:54.516148090 CET	36244	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:54.520356894 CET	12345	36242	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:54.521610975 CET	12345	36244	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:54.521703959 CET	36244	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:54.521809101 CET	36244	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:54.526566982 CET	12345	36244	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:55.356955051 CET	12345	36244	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:55.357004881 CET	12345	36244	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:55.357242107 CET	36244	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:55.357398987 CET	36244	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:55.358506918 CET	36246	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:55.362211943 CET	12345	36244	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:55.363336086 CET	12345	36246	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:55.363387108 CET	36246	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:55.363490105 CET	36246	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:55.368318081 CET	12345	36246	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:56.203141928 CET	12345	36246	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:56.203238964 CET	36246	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:56.203371048 CET	12345	36246	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:56.203480005 CET	36246	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:56.204118967 CET	36248	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:56.208283901 CET	12345	36246	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:56.208951950 CET	12345	36248	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:56.209043026 CET	36248	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:56.209141970 CET	36248	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:56.213924885 CET	12345	36248	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.038656950 CET	12345	36248	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.038772106 CET	12345	36248	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.038820982 CET	36248	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.038983107 CET	36248	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.039648056 CET	36250	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.043730021 CET	12345	36248	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.044486046 CET	12345	36250	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.044540882 CET	36250	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.044658899 CET	36250	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.049396992 CET	12345	36250	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.862066031 CET	12345	36250	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.862169981 CET	36250	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.862207890 CET	12345	36250	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.862271070 CET	36250	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.862711906 CET	36252	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.867177963 CET	12345	36250	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.867561102 CET	12345	36252	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:57.867688894 CET	36252	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.867758036 CET	36252	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:57.872549057 CET	12345	36252	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:58.711769104 CET	12345	36252	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:58.711811066 CET	12345	36252	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:58.712001085 CET	36252	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:58.712054014 CET	36252	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:58.712783098 CET	36254	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:58.716856956 CET	12345	36252	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:58.717581987 CET	12345	36254	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:58.717638016 CET	36254	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:58.717685938 CET	36254	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:58.722456932 CET	12345	36254	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:59.556134939 CET	12345	36254	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:59.556281090 CET	12345	36254	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:59.556329012 CET	36254	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:59.556329966 CET	36254	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:59.556781054 CET	36256	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:59.562572002 CET	12345	36254	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:59.563093901 CET	12345	36256	38.134.189.10	192.168.2.14
Jan 7, 2025 05:19:59.563148022 CET	36256	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:59.563205004 CET	36256	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:19:59.569355965 CET	12345	36256	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:00.126399040 CET	45410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 05:20:00.131182909 CET	53	45410	8.8.8.8	192.168.2.14
Jan 7, 2025 05:20:00.131234884 CET	45410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 05:20:00.131249905 CET	45410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 05:20:00.131257057 CET	45410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 05:20:00.136082888 CET	53	45410	8.8.8.8	192.168.2.14
Jan 7, 2025 05:20:00.136092901 CET	53	45410	8.8.8.8	192.168.2.14
Jan 7, 2025 05:20:00.380157948 CET	12345	36256	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:00.380208015 CET	36256	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:00.380295992 CET	12345	36256	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:00.380348921 CET	36256	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:00.380981922 CET	36260	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:00.385171890 CET	12345	36256	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:00.385809898 CET	12345	36260	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:00.385860920 CET	36260	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:00.385912895 CET	36260	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:00.390702963 CET	12345	36260	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:00.582664967 CET	53	45410	8.8.8.8	192.168.2.14
Jan 7, 2025 05:20:00.582732916 CET	45410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 05:20:01.216679096 CET	12345	36260	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:01.216732979 CET	36260	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:01.216806889 CET	12345	36260	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:01.216859102 CET	36260	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:01.217623949 CET	36262	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:01.221957922 CET	12345	36260	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:01.222672939 CET	12345	36262	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:01.222726107 CET	36262	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:01.222774029 CET	36262	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:01.227659941 CET	12345	36262	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:02.062645912 CET	12345	36262	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:02.062766075 CET	12345	36262	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:02.062762022 CET	36262	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:02.062926054 CET	36262	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:02.063406944 CET	36264	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:02.067651987 CET	12345	36262	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:02.068222046 CET	12345	36264	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:02.068310976 CET	36264	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:02.068310976 CET	36264	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:02.073110104 CET	12345	36264	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:02.582668066 CET	53	45410	8.8.8.8	192.168.2.14
Jan 7, 2025 05:20:02.582943916 CET	45410	53	192.168.2.14	8.8.8.8
Jan 7, 2025 05:20:02.587770939 CET	53	45410	8.8.8.8	192.168.2.14
Jan 7, 2025 05:20:03.023322105 CET	12345	36264	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.023546934 CET	36264	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.023982048 CET	36266	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.028419971 CET	12345	36264	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.028764009 CET	12345	36266	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.028960943 CET	36266	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.029004097 CET	36266	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.033777952 CET	12345	36266	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.852282047 CET	12345	36266	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.852300882 CET	12345	36266	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.852359056 CET	36266	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.852446079 CET	36266	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.852885962 CET	36268	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.857316971 CET	12345	36266	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.857706070 CET	12345	36268	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:03.857753992 CET	36268	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.857798100 CET	36268	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:03.862617016 CET	12345	36268	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:04.717874050 CET	12345	36268	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:04.717924118 CET	12345	36268	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:04.717964888 CET	36268	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:04.718033075 CET	36268	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:04.718430996 CET	36270	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:04.722873926 CET	12345	36268	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:04.723303080 CET	12345	36270	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:04.723373890 CET	36270	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:04.723407984 CET	36270	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:04.728250027 CET	12345	36270	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:05.563258886 CET	12345	36270	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:05.563359022 CET	36270	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:05.563370943 CET	12345	36270	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:05.563492060 CET	36270	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:05.563965082 CET	36272	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:05.568296909 CET	12345	36270	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:05.568818092 CET	12345	36272	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:05.568870068 CET	36272	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:05.568912983 CET	36272	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:05.573754072 CET	12345	36272	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:06.449677944 CET	12345	36272	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:06.449773073 CET	12345	36272	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:06.449779987 CET	36272	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:06.449845076 CET	36272	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:06.450337887 CET	36274	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:06.454660892 CET	12345	36272	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:06.455199957 CET	12345	36274	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:06.455255032 CET	36274	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:06.455300093 CET	36274	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:06.460052013 CET	12345	36274	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:07.376508951 CET	12345	36274	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:07.376647949 CET	36274	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:07.377083063 CET	36276	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:07.381496906 CET	12345	36274	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:07.381827116 CET	12345	36276	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:07.381905079 CET	36276	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:07.381943941 CET	36276	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:07.387276888 CET	12345	36276	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:17.207535028 CET	12345	36276	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:17.207660913 CET	12345	36276	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:17.207803965 CET	36276	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:17.207918882 CET	36276	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:17.208421946 CET	36278	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:17.212708950 CET	12345	36276	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:17.213233948 CET	12345	36278	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:17.213283062 CET	36278	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:17.213332891 CET	36278	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:17.218101025 CET	12345	36278	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.062597036 CET	12345	36278	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.062741041 CET	12345	36278	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.062747002 CET	36278	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.062913895 CET	36278	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.063575029 CET	36280	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.067725897 CET	12345	36278	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.068393946 CET	12345	36280	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.068515062 CET	36280	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.068633080 CET	36280	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.073406935 CET	12345	36280	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.902338028 CET	12345	36280	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.902467966 CET	12345	36280	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.902647018 CET	36280	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.902942896 CET	36280	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.903780937 CET	36282	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.907763958 CET	12345	36280	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.908621073 CET	12345	36282	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:18.908689022 CET	36282	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.908802986 CET	36282	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:18.913563013 CET	12345	36282	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:19.728980064 CET	12345	36282	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:19.728997946 CET	12345	36282	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:19.729161024 CET	36282	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:19.729301929 CET	36282	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:19.730057001 CET	36284	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:19.734046936 CET	12345	36282	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:19.734819889 CET	12345	36284	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:19.734946966 CET	36284	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:19.735033989 CET	36284	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:19.739830017 CET	12345	36284	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:20.568157911 CET	12345	36284	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:20.568317890 CET	12345	36284	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:20.568342924 CET	36284	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:20.568398952 CET	36284	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:20.568877935 CET	36286	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:20.573180914 CET	12345	36284	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:20.573729038 CET	12345	36286	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:20.573779106 CET	36286	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:20.573837042 CET	36286	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:20.578612089 CET	12345	36286	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:21.408669949 CET	12345	36286	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:21.408797026 CET	12345	36286	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:21.408917904 CET	36286	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:21.409193039 CET	36286	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:21.410095930 CET	36288	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:21.413918018 CET	12345	36286	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:21.414901972 CET	12345	36288	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:21.414969921 CET	36288	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:21.415080070 CET	36288	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:21.419894934 CET	12345	36288	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:22.277780056 CET	12345	36288	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:22.277838945 CET	12345	36288	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:22.277960062 CET	36288	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:22.278130054 CET	36288	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:22.278954983 CET	36290	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:22.282932043 CET	12345	36288	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:22.283773899 CET	12345	36290	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:22.283907890 CET	36290	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:22.284003019 CET	36290	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:22.288831949 CET	12345	36290	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.132534981 CET	12345	36290	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.132656097 CET	12345	36290	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.132823944 CET	36290	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.132915020 CET	36290	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.133661985 CET	36292	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.137664080 CET	12345	36290	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.138520002 CET	12345	36292	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.138592005 CET	36292	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.138709068 CET	36292	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.143507004 CET	12345	36292	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.970040083 CET	12345	36292	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.970113039 CET	36292	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.970156908 CET	12345	36292	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.970206976 CET	36292	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.970603943 CET	36294	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.975032091 CET	12345	36292	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.975445032 CET	12345	36294	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:23.975580931 CET	36294	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.975609064 CET	36294	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:23.980418921 CET	12345	36294	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:24.821475983 CET	12345	36294	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:24.821486950 CET	12345	36294	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:24.821755886 CET	36294	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:24.821821928 CET	36294	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:24.822225094 CET	36296	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:24.826590061 CET	12345	36294	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:24.826994896 CET	12345	36296	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:24.827039957 CET	36296	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:24.827085018 CET	36296	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:24.831855059 CET	12345	36296	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:25.685880899 CET	12345	36296	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:25.686032057 CET	12345	36296	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:25.686065912 CET	36296	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:25.686116934 CET	36296	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:25.686578035 CET	36298	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:25.690954924 CET	12345	36296	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:25.691437960 CET	12345	36298	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:25.691560984 CET	36298	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:25.691595078 CET	36298	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:25.696374893 CET	12345	36298	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:26.542248964 CET	12345	36298	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:26.542422056 CET	36298	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:26.542582989 CET	12345	36298	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:26.542682886 CET	36298	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:26.543382883 CET	36300	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:26.548371077 CET	12345	36298	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:26.548949003 CET	12345	36300	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:26.549019098 CET	36300	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:26.549138069 CET	36300	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:26.554526091 CET	12345	36300	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:27.373663902 CET	12345	36300	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:27.373771906 CET	36300	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:27.373797894 CET	12345	36300	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:27.373843908 CET	36300	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:27.374301910 CET	36302	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:27.378739119 CET	12345	36300	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:27.379102945 CET	12345	36302	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:27.379229069 CET	36302	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:27.379254103 CET	36302	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:27.384036064 CET	12345	36302	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:28.228312969 CET	12345	36302	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:28.228353977 CET	12345	36302	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:28.228674889 CET	36302	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:28.228674889 CET	36302	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:28.229065895 CET	36304	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:28.233494043 CET	12345	36302	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:28.233943939 CET	12345	36304	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:28.234018087 CET	36304	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:28.234070063 CET	36304	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:28.238917112 CET	12345	36304	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.068377018 CET	12345	36304	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.068478107 CET	36304	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.068523884 CET	12345	36304	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.068598986 CET	36304	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.069088936 CET	36306	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.073379993 CET	12345	36304	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.073914051 CET	12345	36306	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.073970079 CET	36306	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.074013948 CET	36306	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.078811884 CET	12345	36306	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.912869930 CET	12345	36306	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.912972927 CET	12345	36306	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.912988901 CET	36306	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.913062096 CET	36306	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.913520098 CET	36308	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.917855024 CET	12345	36306	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.918395996 CET	12345	36308	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:29.918500900 CET	36308	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.918528080 CET	36308	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:29.923340082 CET	12345	36308	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:30.759882927 CET	12345	36308	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:30.759960890 CET	12345	36308	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:30.760063887 CET	36308	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:30.760171890 CET	36308	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:30.760848999 CET	36310	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:30.764911890 CET	12345	36308	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:30.765672922 CET	12345	36310	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:30.765748024 CET	36310	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:30.765850067 CET	36310	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:30.770668030 CET	12345	36310	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:34.598731995 CET	12345	36310	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:34.598819017 CET	12345	36310	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:34.598848104 CET	36310	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:34.598911047 CET	36310	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:34.599380970 CET	36312	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:34.603770971 CET	12345	36310	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:34.604188919 CET	12345	36312	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:34.604315042 CET	36312	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:34.604341030 CET	36312	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:34.609184980 CET	12345	36312	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:35.561105013 CET	12345	36312	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:35.561283112 CET	36312	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:35.561842918 CET	36314	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:35.566168070 CET	12345	36312	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:35.566684008 CET	12345	36314	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:35.566734076 CET	36314	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:35.566778898 CET	36314	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:35.571585894 CET	12345	36314	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:36.396996975 CET	12345	36314	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:36.397037029 CET	12345	36314	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:36.397133112 CET	36314	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:36.397196054 CET	36314	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:36.397845984 CET	36316	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:36.402023077 CET	12345	36314	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:36.402714014 CET	12345	36316	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:36.402857065 CET	36316	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:36.402962923 CET	36316	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:36.407788992 CET	12345	36316	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:37.233681917 CET	12345	36316	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:37.233710051 CET	12345	36316	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:37.233814955 CET	36316	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:37.233889103 CET	36316	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:37.234569073 CET	36318	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:37.240909100 CET	12345	36316	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:37.241575956 CET	12345	36318	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:37.241633892 CET	36318	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:37.241683960 CET	36318	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:37.246536970 CET	12345	36318	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.072632074 CET	12345	36318	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.072690964 CET	12345	36318	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.072793961 CET	36318	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.072886944 CET	36318	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.073723078 CET	36320	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.078964949 CET	12345	36318	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.079931021 CET	12345	36320	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.080010891 CET	36320	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.080075979 CET	36320	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.084836960 CET	12345	36320	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.935441971 CET	12345	36320	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.935522079 CET	12345	36320	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.935595989 CET	36320	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.935669899 CET	36320	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.936253071 CET	36322	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.940459967 CET	12345	36320	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.941133976 CET	12345	36322	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:38.941217899 CET	36322	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.941258907 CET	36322	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:38.946075916 CET	12345	36322	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:39.758356094 CET	12345	36322	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:39.758462906 CET	12345	36322	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:39.758492947 CET	36322	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:39.758548021 CET	36322	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:39.759227991 CET	36324	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:39.763365030 CET	12345	36322	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:39.764084101 CET	12345	36324	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:39.764141083 CET	36324	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:39.764179945 CET	36324	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:39.769031048 CET	12345	36324	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:40.609797001 CET	12345	36324	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:40.609841108 CET	12345	36324	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:40.609929085 CET	36324	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:40.609987974 CET	36324	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:40.610682011 CET	36326	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:40.614794016 CET	12345	36324	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:40.615550995 CET	12345	36326	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:40.615663052 CET	36326	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:40.615773916 CET	36326	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:40.620517015 CET	12345	36326	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:41.446017027 CET	12345	36326	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:41.446111917 CET	12345	36326	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:41.446206093 CET	36326	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:41.446273088 CET	36326	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:41.446842909 CET	36328	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:41.451107979 CET	12345	36326	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:41.451770067 CET	12345	36328	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:41.451833963 CET	36328	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:41.451879025 CET	36328	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:41.456634998 CET	12345	36328	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:42.267371893 CET	12345	36328	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:42.267400980 CET	12345	36328	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:42.267564058 CET	36328	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:42.267599106 CET	36328	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:42.268156052 CET	36330	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:42.272480965 CET	12345	36328	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:42.273025036 CET	12345	36330	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:42.273145914 CET	36330	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:42.273263931 CET	36330	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:42.278112888 CET	12345	36330	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.097131968 CET	12345	36330	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.097193003 CET	12345	36330	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.097265959 CET	36330	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.097318888 CET	36330	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.097918987 CET	36332	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.102137089 CET	12345	36330	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.102787971 CET	12345	36332	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.102859020 CET	36332	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.102901936 CET	36332	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.107698917 CET	12345	36332	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.920650005 CET	12345	36332	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.920696974 CET	12345	36332	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.920762062 CET	36332	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.920840979 CET	36332	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.921372890 CET	36334	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.925679922 CET	12345	36332	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.926131964 CET	12345	36334	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:43.926234007 CET	36334	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.926259041 CET	36334	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:43.931021929 CET	12345	36334	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:44.751094103 CET	12345	36334	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:44.751116991 CET	12345	36334	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:44.751322985 CET	36334	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:44.751386881 CET	36334	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:44.751939058 CET	36336	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:44.756211996 CET	12345	36334	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:44.756726980 CET	12345	36336	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:44.756778002 CET	36336	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:44.756824017 CET	36336	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:44.761657953 CET	12345	36336	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:45.564627886 CET	12345	36336	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:45.564685106 CET	12345	36336	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:45.564793110 CET	36336	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:45.564836025 CET	36336	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:45.565386057 CET	36338	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:45.569644928 CET	12345	36336	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:45.570230961 CET	12345	36338	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:45.570282936 CET	36338	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:45.570365906 CET	36338	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:45.575143099 CET	12345	36338	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:46.393718004 CET	12345	36338	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:46.393739939 CET	12345	36338	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:46.393965006 CET	36338	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:46.393965960 CET	36338	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:46.394604921 CET	36340	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:46.398840904 CET	12345	36338	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:46.399491072 CET	12345	36340	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:46.399607897 CET	36340	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:46.399631023 CET	36340	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:46.404433012 CET	12345	36340	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:47.205104113 CET	12345	36340	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:47.205164909 CET	12345	36340	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:47.205311060 CET	36340	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:47.205455065 CET	36340	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:47.206286907 CET	36342	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:47.210269928 CET	12345	36340	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:47.211061001 CET	12345	36342	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:47.211162090 CET	36342	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:47.211267948 CET	36342	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:47.216085911 CET	12345	36342	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.033751011 CET	12345	36342	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.033843040 CET	12345	36342	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.033967972 CET	36342	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.034117937 CET	36342	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.034849882 CET	36344	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.038955927 CET	12345	36342	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.039742947 CET	12345	36344	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.039829969 CET	36344	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.039931059 CET	36344	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.044771910 CET	12345	36344	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.865910053 CET	12345	36344	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.865969896 CET	12345	36344	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.866030931 CET	36344	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.866080046 CET	36344	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.866725922 CET	36346	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.871073008 CET	12345	36344	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.871546030 CET	12345	36346	38.134.189.10	192.168.2.14
Jan 7, 2025 05:20:48.871629953 CET	36346	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.871669054 CET	36346	12345	192.168.2.14	38.134.189.10
Jan 7, 2025 05:20:48.876445055 CET	12345	36346	38.134.189.10	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 7, 2025 05:20:00.131249905 CET	192.168.2.14	8.8.8.8	0x7406	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Jan 7, 2025 05:20:00.131257057 CET	192.168.2.14	8.8.8.8	0x5f89	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 7, 2025 05:20:00.582664967 CET	8.8.8.8	192.168.2.14	0x7406	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Jan 7, 2025 05:20:00.582664967 CET	8.8.8.8	192.168.2.14	0x7406	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: p-p.c-.Sakura.elf PID: 5632, Parent PID: 5551

General

Start time (UTC):	04:17:13
Start date (UTC):	07/01/2025
Path:	/tmp/p-p.c-.Sakura.elf
Arguments:	/tmp/p-p.c-.Sakura.elf
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: p-p.c-.Sakura.elf PID: 5634, Parent PID: 5632

General

Start time (UTC):	04:17:13
Start date (UTC):	07/01/2025
Path:	/tmp/p-p.c-.Sakura.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Chronological Activities

Analysis Process: p-p.c-.Sakura.elf PID: 5636, Parent PID: 5634

General

Start time (UTC):	04:17:13
Start date (UTC):	07/01/2025
Path:	/tmp/p-p.c-.Sakura.elf
Arguments:	-
File size:	4956856 bytes
MD5 hash:	5ebfcae4fe2471fcc5695c2394773ff1

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report p-p.c-.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: p-p.c-.Sakura.elf PID: 5632, Parent PID: 5551

General

Chronological Activities

Analysis Process: p-p.c-.Sakura.elf PID: 5634, Parent PID: 5632

General

Chronological Activities

Analysis Process: p-p.c-.Sakura.elf PID: 5636, Parent PID: 5634

General

Chronological Activities

Linux Analysis Report
p-p.c-.Sakura.elf