Create Interactive Tour

Linux Analysis Report
x-8.6-.Sakura.elf

Overview

General Information

Sample name:	x-8.6-.Sakura.elf
Analysis ID:	1641240
MD5:	3d6de6672f0ca032fa88da31f004bc45
SHA1:	1e99937485d19a79ca8fd971780a34920e40a7d9
SHA256:	233ccbf69af361849f7b6bc4dc55909d3565fc2825960b2527820b0040bf459c
Tags:	user-elfdigest
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample contains strings that are user agent strings indicative of HTTP manipulation

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641240
Start date and time:	2025-03-18 04:39:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x-8.6-.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@2/0

Warnings

VT rate limit hit for: 103.77.246.204:55555

Runtime Messages

Command:	/tmp/x-8.6-.Sakura.elf
PID:	5507
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

x-8.6-.Sakura.elf (PID: 5507, Parent: 5429, MD5: 3d6de6672f0ca032fa88da31f004bc45) Arguments: /tmp/x-8.6-.Sakura.elf

x-8.6-.Sakura.elf New Fork (PID: 5510, Parent: 5507)

x-8.6-.Sakura.elf New Fork (PID: 5511, Parent: 5510)

dash New Fork (PID: 5542, Parent: 3633)

rm (PID: 5542, Parent: 3633, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.oES6j5IUxA /tmp/tmp.yzSniEXAW6 /tmp/tmp.mWD5EgkZnS

dash New Fork (PID: 5543, Parent: 3633)

cat (PID: 5543, Parent: 3633, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.oES6j5IUxA

dash New Fork (PID: 5544, Parent: 3633)

head (PID: 5544, Parent: 3633, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5545, Parent: 3633)

tr (PID: 5545, Parent: 3633, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5546, Parent: 3633)

cut (PID: 5546, Parent: 3633, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5547, Parent: 3633)

cat (PID: 5547, Parent: 3633, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.oES6j5IUxA

dash New Fork (PID: 5548, Parent: 3633)

head (PID: 5548, Parent: 3633, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5549, Parent: 3633)

tr (PID: 5549, Parent: 3633, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5550, Parent: 3633)

cut (PID: 5550, Parent: 3633, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5551, Parent: 3633)

rm (PID: 5551, Parent: 3633, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.oES6j5IUxA /tmp/tmp.yzSniEXAW6 /tmp/tmp.mWD5EgkZnS

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x-8.6-.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
x-8.6-.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd894:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd90c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd920:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd934:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd948:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd95c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd970:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd984:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd998:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x682c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x6fe3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88 0x355f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x5b16:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x5c7c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xcd0e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xa83e:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6ba3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x8896:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e6e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
x-8.6-.Sakura.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x8a8f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Click to see the 16 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5507.1.0000000000400000.0000000000410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5510.1.0000000000400000.0000000000410000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd894:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd90c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd920:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd934:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd948:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd95c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd970:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd984:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd998:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x682c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x6fe3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88 0x355f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x5b16:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x5c7c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xcd0e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xa83e:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6ba3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x8896:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xd830:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd844:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd858:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd86c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd880:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd894:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd8f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd90c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd920:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd934:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd948:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd95c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd970:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd984:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd998:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd9c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a6a2adb9	unknown	unknown	0x8af:$a: CC 01 C2 89 55 B4 8B 45 B4 C9 C3 55 48 89 E5 48 81 EC 90 00
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x682c:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_f3d83a74	unknown	unknown	0x7d6:$a: DC 00 74 1B 83 7D E0 0A 75 15 83 7D E4 00 79 0F C7 45 C8 01 00
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x6fe3:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a0a4de11	unknown	unknown	0x1c03:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88 0x355f:$a: 42 0D 83 C8 10 88 42 0D 48 8B 55 D8 0F B6 42 0D 83 C8 08 88
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x5b16:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x5c7c:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_09c3070e	unknown	unknown	0xfdd:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x1090:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83 0x12c3:$a: 48 C1 E8 06 48 89 C6 48 8B 94 C5 50 FF FF FF 8B 8D 2C FF FF FF 83
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xcd0e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0xa83e:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x6ba3:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_dd0d6173	unknown	unknown	0x164b:$a: 55 F8 8B 45 F0 89 42 0C 48 8B 55 F8 8B 45 F4 89 42 10 C9 C3 55 48
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_779e142f	unknown	unknown	0x6fe:$a: EC 8B 45 E8 83 E0 02 85 C0 74 07 C7 45 D8 30 00 00 00 8B 45 E8 83
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_cf84c9f2	unknown	unknown	0x31f:$a: 55 48 89 E5 48 83 EC 30 48 89 7D E8 89 75 E4 89 55 E0 C7 45 F8 01 00
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x8896:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e6e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5510.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x8a8f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x6e6e:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_e4a1982b	unknown	unknown	0x313:$a: 8B 45 EC F7 D0 21 D0 33 45 FC C9 C3 55 48 89 E5 48 83 EC 30 48 89
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_32eb0c81	unknown	unknown	0x74b:$a: D4 48 FF 45 F0 48 8B 45 F0 0F B6 00 84 C0 75 DB EB 12 48 8B
5507.1.0000000000400000.0000000000410000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x8a8f:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Process Memory Space: x-8.6-.Sakura.elf PID: 5507	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x-8.6-.Sakura.elf PID: 5507	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x241e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2432:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2446:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x245a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x246e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2482:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2496:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x250e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2522:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2536:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x254a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x255e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2572:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2586:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x259a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x25ae:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: x-8.6-.Sakura.elf PID: 5510	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: x-8.6-.Sakura.elf PID: 5510	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf8d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfb5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfdd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xff1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1005:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1019:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x102d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1041:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1055:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1069:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x107d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1091:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1109:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x111d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 39 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-18T04:39:56.151507+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60792	103.77.246.204	55555	TCP
2025-03-18T04:39:56.981759+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60794	103.77.246.204	55555	TCP
2025-03-18T04:39:57.831375+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60796	103.77.246.204	55555	TCP
2025-03-18T04:39:58.666962+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60798	103.77.246.204	55555	TCP
2025-03-18T04:39:59.507299+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60800	103.77.246.204	55555	TCP
2025-03-18T04:40:00.351001+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60802	103.77.246.204	55555	TCP
2025-03-18T04:40:01.201504+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60804	103.77.246.204	55555	TCP
2025-03-18T04:40:02.042427+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60806	103.77.246.204	55555	TCP
2025-03-18T04:40:02.885138+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60808	103.77.246.204	55555	TCP
2025-03-18T04:40:03.719034+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60810	103.77.246.204	55555	TCP
2025-03-18T04:40:04.564911+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60812	103.77.246.204	55555	TCP
2025-03-18T04:40:05.417391+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60814	103.77.246.204	55555	TCP
2025-03-18T04:40:06.305643+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60816	103.77.246.204	55555	TCP
2025-03-18T04:40:07.147512+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60818	103.77.246.204	55555	TCP
2025-03-18T04:40:07.981137+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60820	103.77.246.204	55555	TCP
2025-03-18T04:40:08.820214+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60822	103.77.246.204	55555	TCP
2025-03-18T04:40:09.651938+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60824	103.77.246.204	55555	TCP
2025-03-18T04:40:10.498617+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60826	103.77.246.204	55555	TCP
2025-03-18T04:40:11.486352+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60828	103.77.246.204	55555	TCP
2025-03-18T04:40:12.321829+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60830	103.77.246.204	55555	TCP
2025-03-18T04:40:13.153175+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60832	103.77.246.204	55555	TCP
2025-03-18T04:40:14.009010+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60834	103.77.246.204	55555	TCP
2025-03-18T04:40:14.866512+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60836	103.77.246.204	55555	TCP
2025-03-18T04:40:15.716831+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60838	103.77.246.204	55555	TCP
2025-03-18T04:40:16.559879+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60840	103.77.246.204	55555	TCP
2025-03-18T04:40:17.403815+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60842	103.77.246.204	55555	TCP
2025-03-18T04:40:18.251092+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60844	103.77.246.204	55555	TCP
2025-03-18T04:40:19.102924+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60846	103.77.246.204	55555	TCP
2025-03-18T04:40:19.952929+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60848	103.77.246.204	55555	TCP
2025-03-18T04:40:20.789216+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60850	103.77.246.204	55555	TCP
2025-03-18T04:40:21.636389+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60852	103.77.246.204	55555	TCP
2025-03-18T04:40:22.466816+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60854	103.77.246.204	55555	TCP
2025-03-18T04:40:23.317235+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60856	103.77.246.204	55555	TCP
2025-03-18T04:40:24.168006+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60858	103.77.246.204	55555	TCP
2025-03-18T04:40:25.000811+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60860	103.77.246.204	55555	TCP
2025-03-18T04:40:25.867939+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60862	103.77.246.204	55555	TCP
2025-03-18T04:40:26.701104+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60864	103.77.246.204	55555	TCP
2025-03-18T04:40:27.534327+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60866	103.77.246.204	55555	TCP
2025-03-18T04:40:28.367827+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60868	103.77.246.204	55555	TCP
2025-03-18T04:40:29.203382+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60870	103.77.246.204	55555	TCP
2025-03-18T04:40:30.058379+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60872	103.77.246.204	55555	TCP
2025-03-18T04:40:30.895188+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60874	103.77.246.204	55555	TCP
2025-03-18T04:40:31.726175+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60876	103.77.246.204	55555	TCP
2025-03-18T04:40:32.566162+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60878	103.77.246.204	55555	TCP
2025-03-18T04:40:33.440857+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60880	103.77.246.204	55555	TCP
2025-03-18T04:40:34.298512+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60882	103.77.246.204	55555	TCP
2025-03-18T04:40:35.150121+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60884	103.77.246.204	55555	TCP
2025-03-18T04:40:35.995330+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60886	103.77.246.204	55555	TCP
2025-03-18T04:40:36.829074+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60888	103.77.246.204	55555	TCP
2025-03-18T04:40:37.678845+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60890	103.77.246.204	55555	TCP
2025-03-18T04:40:38.516521+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60892	103.77.246.204	55555	TCP
2025-03-18T04:40:39.363911+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60894	103.77.246.204	55555	TCP
2025-03-18T04:40:40.193376+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60896	103.77.246.204	55555	TCP
2025-03-18T04:40:41.043245+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60898	103.77.246.204	55555	TCP
2025-03-18T04:40:41.875714+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60900	103.77.246.204	55555	TCP
2025-03-18T04:40:42.709548+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60902	103.77.246.204	55555	TCP
2025-03-18T04:40:43.578592+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60904	103.77.246.204	55555	TCP
2025-03-18T04:40:44.433498+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60906	103.77.246.204	55555	TCP
2025-03-18T04:40:45.266305+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60908	103.77.246.204	55555	TCP
2025-03-18T04:40:46.124851+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60910	103.77.246.204	55555	TCP
2025-03-18T04:40:46.963119+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60912	103.77.246.204	55555	TCP
2025-03-18T04:40:47.812423+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60914	103.77.246.204	55555	TCP
2025-03-18T04:40:48.687604+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60916	103.77.246.204	55555	TCP
2025-03-18T04:40:49.519004+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60918	103.77.246.204	55555	TCP
2025-03-18T04:40:50.357166+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60920	103.77.246.204	55555	TCP
2025-03-18T04:40:51.192353+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60922	103.77.246.204	55555	TCP
2025-03-18T04:40:52.091611+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60924	103.77.246.204	55555	TCP
2025-03-18T04:40:52.930783+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60926	103.77.246.204	55555	TCP
2025-03-18T04:40:53.768852+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60928	103.77.246.204	55555	TCP
2025-03-18T04:40:54.599082+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60930	103.77.246.204	55555	TCP
2025-03-18T04:40:55.434936+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60932	103.77.246.204	55555	TCP
2025-03-18T04:40:56.283009+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60934	103.77.246.204	55555	TCP
2025-03-18T04:40:57.124902+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60936	103.77.246.204	55555	TCP
2025-03-18T04:40:57.964719+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60938	103.77.246.204	55555	TCP
2025-03-18T04:40:58.796882+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60940	103.77.246.204	55555	TCP
2025-03-18T04:40:59.648835+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60942	103.77.246.204	55555	TCP
2025-03-18T04:41:00.516255+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60944	103.77.246.204	55555	TCP
2025-03-18T04:41:01.352549+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60946	103.77.246.204	55555	TCP
2025-03-18T04:41:02.205151+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60948	103.77.246.204	55555	TCP
2025-03-18T04:41:03.054327+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60950	103.77.246.204	55555	TCP
2025-03-18T04:41:03.900010+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60952	103.77.246.204	55555	TCP
2025-03-18T04:41:04.739360+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60954	103.77.246.204	55555	TCP
2025-03-18T04:41:05.572352+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60956	103.77.246.204	55555	TCP
2025-03-18T04:41:06.616963+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60958	103.77.246.204	55555	TCP
2025-03-18T04:41:07.468606+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60960	103.77.246.204	55555	TCP
2025-03-18T04:41:08.317138+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60962	103.77.246.204	55555	TCP
2025-03-18T04:41:09.169294+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60964	103.77.246.204	55555	TCP
2025-03-18T04:41:10.030901+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60966	103.77.246.204	55555	TCP
2025-03-18T04:41:10.864313+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60968	103.77.246.204	55555	TCP
2025-03-18T04:41:11.721624+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60970	103.77.246.204	55555	TCP
2025-03-18T04:41:12.552032+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60972	103.77.246.204	55555	TCP
2025-03-18T04:41:13.401936+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60974	103.77.246.204	55555	TCP
2025-03-18T04:41:14.236791+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60976	103.77.246.204	55555	TCP
2025-03-18T04:41:15.071668+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60978	103.77.246.204	55555	TCP
2025-03-18T04:41:15.918277+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60980	103.77.246.204	55555	TCP
2025-03-18T04:41:16.749387+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60982	103.77.246.204	55555	TCP
2025-03-18T04:41:17.598028+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60984	103.77.246.204	55555	TCP
2025-03-18T04:41:18.434577+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60986	103.77.246.204	55555	TCP
2025-03-18T04:41:19.277163+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60988	103.77.246.204	55555	TCP
2025-03-18T04:41:20.120291+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60990	103.77.246.204	55555	TCP
2025-03-18T04:41:20.986623+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60992	103.77.246.204	55555	TCP
2025-03-18T04:41:21.822629+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60994	103.77.246.204	55555	TCP
2025-03-18T04:41:22.666997+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60996	103.77.246.204	55555	TCP
2025-03-18T04:41:24.184163+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60998	103.77.246.204	55555	TCP
2025-03-18T04:41:25.050554+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32768	103.77.246.204	55555	TCP
2025-03-18T04:41:25.907821+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32770	103.77.246.204	55555	TCP
2025-03-18T04:41:26.751676+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32772	103.77.246.204	55555	TCP
2025-03-18T04:41:27.587710+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32774	103.77.246.204	55555	TCP
2025-03-18T04:41:28.430064+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32776	103.77.246.204	55555	TCP
2025-03-18T04:41:29.261354+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32778	103.77.246.204	55555	TCP
2025-03-18T04:41:30.099124+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32780	103.77.246.204	55555	TCP
2025-03-18T04:41:30.942765+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32782	103.77.246.204	55555	TCP
2025-03-18T04:41:31.781364+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32784	103.77.246.204	55555	TCP
2025-03-18T04:41:32.615051+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32786	103.77.246.204	55555	TCP
2025-03-18T04:41:33.469889+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32788	103.77.246.204	55555	TCP
2025-03-18T04:41:34.344121+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32790	103.77.246.204	55555	TCP
2025-03-18T04:41:35.180568+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32792	103.77.246.204	55555	TCP
2025-03-18T04:41:36.012748+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32794	103.77.246.204	55555	TCP
2025-03-18T04:41:36.867881+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32796	103.77.246.204	55555	TCP
2025-03-18T04:41:37.698787+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32798	103.77.246.204	55555	TCP
2025-03-18T04:41:38.542228+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32800	103.77.246.204	55555	TCP
2025-03-18T04:41:39.397905+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32802	103.77.246.204	55555	TCP
2025-03-18T04:41:40.243039+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32804	103.77.246.204	55555	TCP
2025-03-18T04:41:41.083841+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32806	103.77.246.204	55555	TCP
2025-03-18T04:41:41.922347+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32808	103.77.246.204	55555	TCP
2025-03-18T04:41:42.770941+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32810	103.77.246.204	55555	TCP
2025-03-18T04:41:43.639656+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32812	103.77.246.204	55555	TCP
2025-03-18T04:41:44.529706+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32814	103.77.246.204	55555	TCP
2025-03-18T04:41:45.375012+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32816	103.77.246.204	55555	TCP
2025-03-18T04:41:46.230422+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32818	103.77.246.204	55555	TCP
2025-03-18T04:41:47.083424+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32820	103.77.246.204	55555	TCP
2025-03-18T04:41:47.915082+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32822	103.77.246.204	55555	TCP
2025-03-18T04:41:48.842594+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32824	103.77.246.204	55555	TCP
2025-03-18T04:41:49.690122+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32826	103.77.246.204	55555	TCP
2025-03-18T04:41:50.522300+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32828	103.77.246.204	55555	TCP
2025-03-18T04:41:51.363443+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32830	103.77.246.204	55555	TCP
2025-03-18T04:41:52.200038+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32832	103.77.246.204	55555	TCP
2025-03-18T04:41:53.040358+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32834	103.77.246.204	55555	TCP
2025-03-18T04:41:53.888287+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32836	103.77.246.204	55555	TCP
2025-03-18T04:41:54.749611+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32838	103.77.246.204	55555	TCP
2025-03-18T04:41:55.593880+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32840	103.77.246.204	55555	TCP
2025-03-18T04:41:56.436184+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32842	103.77.246.204	55555	TCP
2025-03-18T04:41:57.295768+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32844	103.77.246.204	55555	TCP
2025-03-18T04:41:58.185780+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32846	103.77.246.204	55555	TCP
2025-03-18T04:41:59.021879+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32848	103.77.246.204	55555	TCP
2025-03-18T04:41:59.932741+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32850	103.77.246.204	55555	TCP
2025-03-18T04:42:00.791610+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32852	103.77.246.204	55555	TCP
2025-03-18T04:42:01.633390+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32854	103.77.246.204	55555	TCP
2025-03-18T04:42:02.466855+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32856	103.77.246.204	55555	TCP
2025-03-18T04:42:03.300896+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32858	103.77.246.204	55555	TCP
2025-03-18T04:42:04.157380+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32860	103.77.246.204	55555	TCP
2025-03-18T04:42:04.998295+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32862	103.77.246.204	55555	TCP
2025-03-18T04:42:05.839165+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32864	103.77.246.204	55555	TCP
2025-03-18T04:42:06.716750+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32866	103.77.246.204	55555	TCP
2025-03-18T04:42:07.606749+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32868	103.77.246.204	55555	TCP
2025-03-18T04:42:08.449509+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32870	103.77.246.204	55555	TCP
2025-03-18T04:42:09.309361+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32872	103.77.246.204	55555	TCP
2025-03-18T04:42:10.167759+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32874	103.77.246.204	55555	TCP
2025-03-18T04:42:11.018539+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32876	103.77.246.204	55555	TCP
2025-03-18T04:42:11.896510+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32878	103.77.246.204	55555	TCP
2025-03-18T04:42:12.753727+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32880	103.77.246.204	55555	TCP
2025-03-18T04:42:13.593819+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32882	103.77.246.204	55555	TCP
2025-03-18T04:42:14.445319+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32884	103.77.246.204	55555	TCP
2025-03-18T04:42:15.286030+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32886	103.77.246.204	55555	TCP
2025-03-18T04:42:16.119848+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32888	103.77.246.204	55555	TCP
2025-03-18T04:42:16.974167+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32890	103.77.246.204	55555	TCP
2025-03-18T04:42:17.807467+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32892	103.77.246.204	55555	TCP
2025-03-18T04:42:18.639848+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32894	103.77.246.204	55555	TCP
2025-03-18T04:42:19.494688+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32896	103.77.246.204	55555	TCP
2025-03-18T04:42:20.348417+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32898	103.77.246.204	55555	TCP
2025-03-18T04:42:21.202117+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32900	103.77.246.204	55555	TCP
2025-03-18T04:42:22.029929+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32902	103.77.246.204	55555	TCP
2025-03-18T04:42:22.867435+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32904	103.77.246.204	55555	TCP
2025-03-18T04:42:23.702259+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32906	103.77.246.204	55555	TCP
2025-03-18T04:42:24.537422+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32908	103.77.246.204	55555	TCP
2025-03-18T04:42:25.394511+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32910	103.77.246.204	55555	TCP
2025-03-18T04:42:26.224118+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32912	103.77.246.204	55555	TCP
2025-03-18T04:42:27.070054+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32914	103.77.246.204	55555	TCP
2025-03-18T04:42:27.901517+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32916	103.77.246.204	55555	TCP
2025-03-18T04:42:28.748754+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32918	103.77.246.204	55555	TCP
2025-03-18T04:42:29.579810+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32920	103.77.246.204	55555	TCP
2025-03-18T04:42:30.419440+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32922	103.77.246.204	55555	TCP
2025-03-18T04:42:31.273492+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32924	103.77.246.204	55555	TCP
2025-03-18T04:42:32.141288+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32926	103.77.246.204	55555	TCP
2025-03-18T04:42:32.975116+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32928	103.77.246.204	55555	TCP
2025-03-18T04:42:33.818549+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32930	103.77.246.204	55555	TCP
2025-03-18T04:42:34.675284+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32932	103.77.246.204	55555	TCP
2025-03-18T04:42:35.516923+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32934	103.77.246.204	55555	TCP
2025-03-18T04:42:36.359416+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32936	103.77.246.204	55555	TCP
2025-03-18T04:42:37.197169+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32938	103.77.246.204	55555	TCP
2025-03-18T04:42:38.047742+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32940	103.77.246.204	55555	TCP
2025-03-18T04:42:38.880427+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32942	103.77.246.204	55555	TCP
2025-03-18T04:42:39.713573+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32944	103.77.246.204	55555	TCP
2025-03-18T04:42:40.562449+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32946	103.77.246.204	55555	TCP
2025-03-18T04:42:41.395174+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32948	103.77.246.204	55555	TCP
2025-03-18T04:42:42.226057+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32950	103.77.246.204	55555	TCP
2025-03-18T04:42:43.056121+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32952	103.77.246.204	55555	TCP
2025-03-18T04:42:43.904875+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32954	103.77.246.204	55555	TCP
2025-03-18T04:42:44.753846+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32956	103.77.246.204	55555	TCP
2025-03-18T04:42:45.606124+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32958	103.77.246.204	55555	TCP
2025-03-18T04:42:46.459061+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32960	103.77.246.204	55555	TCP
2025-03-18T04:42:47.313649+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32962	103.77.246.204	55555	TCP
2025-03-18T04:42:48.147591+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32964	103.77.246.204	55555	TCP
2025-03-18T04:42:48.979398+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32966	103.77.246.204	55555	TCP
2025-03-18T04:42:49.814256+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32968	103.77.246.204	55555	TCP
2025-03-18T04:42:50.661581+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32970	103.77.246.204	55555	TCP
2025-03-18T04:42:51.510505+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32972	103.77.246.204	55555	TCP
2025-03-18T04:42:52.353538+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32974	103.77.246.204	55555	TCP
2025-03-18T04:42:53.197004+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32976	103.77.246.204	55555	TCP
2025-03-18T04:42:54.030317+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32978	103.77.246.204	55555	TCP
2025-03-18T04:42:54.862630+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32980	103.77.246.204	55555	TCP
2025-03-18T04:42:55.711747+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32982	103.77.246.204	55555	TCP
2025-03-18T04:42:56.568185+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32984	103.77.246.204	55555	TCP
2025-03-18T04:42:57.404233+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32986	103.77.246.204	55555	TCP
2025-03-18T04:42:58.241862+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32988	103.77.246.204	55555	TCP
2025-03-18T04:42:59.073544+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32990	103.77.246.204	55555	TCP
2025-03-18T04:42:59.926288+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32992	103.77.246.204	55555	TCP
2025-03-18T04:43:00.767514+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32994	103.77.246.204	55555	TCP
2025-03-18T04:43:01.618699+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32996	103.77.246.204	55555	TCP
2025-03-18T04:43:02.478923+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32998	103.77.246.204	55555	TCP
2025-03-18T04:43:03.330495+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33000	103.77.246.204	55555	TCP
2025-03-18T04:43:04.179767+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33002	103.77.246.204	55555	TCP
2025-03-18T04:43:05.013072+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33004	103.77.246.204	55555	TCP
2025-03-18T04:43:05.867679+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33006	103.77.246.204	55555	TCP
2025-03-18T04:43:06.712965+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33008	103.77.246.204	55555	TCP
2025-03-18T04:43:07.551991+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33010	103.77.246.204	55555	TCP
2025-03-18T04:43:08.398625+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33012	103.77.246.204	55555	TCP
2025-03-18T04:43:09.235769+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33014	103.77.246.204	55555	TCP
2025-03-18T04:43:10.074094+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33016	103.77.246.204	55555	TCP
2025-03-18T04:43:10.904394+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33018	103.77.246.204	55555	TCP
2025-03-18T04:43:11.753517+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33020	103.77.246.204	55555	TCP
2025-03-18T04:43:12.587057+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33022	103.77.246.204	55555	TCP
2025-03-18T04:43:13.575968+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33024	103.77.246.204	55555	TCP
2025-03-18T04:43:14.410039+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33026	103.77.246.204	55555	TCP
2025-03-18T04:43:15.252865+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33028	103.77.246.204	55555	TCP
2025-03-18T04:43:16.091854+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33030	103.77.246.204	55555	TCP
2025-03-18T04:43:16.940265+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33032	103.77.246.204	55555	TCP
2025-03-18T04:43:17.773659+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33034	103.77.246.204	55555	TCP
2025-03-18T04:43:18.608757+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33036	103.77.246.204	55555	TCP
2025-03-18T04:43:19.465804+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33038	103.77.246.204	55555	TCP
2025-03-18T04:43:20.346332+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33040	103.77.246.204	55555	TCP
2025-03-18T04:43:21.187421+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33042	103.77.246.204	55555	TCP
2025-03-18T04:43:22.028227+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33044	103.77.246.204	55555	TCP
2025-03-18T04:43:22.886623+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33046	103.77.246.204	55555	TCP
2025-03-18T04:43:23.720490+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33048	103.77.246.204	55555	TCP
2025-03-18T04:43:24.568948+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33050	103.77.246.204	55555	TCP
2025-03-18T04:43:25.421505+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33052	103.77.246.204	55555	TCP
2025-03-18T04:43:26.270058+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33054	103.77.246.204	55555	TCP
2025-03-18T04:43:27.107199+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33056	103.77.246.204	55555	TCP
2025-03-18T04:43:27.945213+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33058	103.77.246.204	55555	TCP
2025-03-18T04:43:28.777911+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33060	103.77.246.204	55555	TCP
2025-03-18T04:43:29.612547+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33062	103.77.246.204	55555	TCP
2025-03-18T04:43:30.445033+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33064	103.77.246.204	55555	TCP

Joe Sandbox Signatures

• AV Detection
• Compliance
• Spreading
• Networking
• System Summary
• Persistence and Installation Behavior
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x-8.6-.Sakura.elf

Avira: detected

Found malware configuration

Source: x-8.6-.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "103.77.246.204:55555"}

Multi AV Scanner detection for submitted file

Source: x-8.6-.Sakura.elf

ReversingLabs: Detection: 69%

Source: unknown

HTTPS traffic detected: 34.254.182.186:443 -> 192.168.2.14:59320 version: TLS 1.2

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/x-8.6-.Sakura.elf (PID: 5507)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60826 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60890 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60798 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60800 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60822 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60816 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60860 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60828 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60796 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60894 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60820 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60802 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60806 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60838 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60824 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60842 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60840 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60854 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60908 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60864 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60846 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60932 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60814 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60880 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60892 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60852 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60878 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60958 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60926 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60946 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60910 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60844 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60970 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60976 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60836 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60978 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60904 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32774 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60818 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32770 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60794 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60808 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60792 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60920 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60874 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32790 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32812 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32806 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60922 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32822 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32824 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32800 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60832 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60848 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32826 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32818 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32810 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60914 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32804 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32832 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60940 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60942 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60906 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60884 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60830 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60956 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60974 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60986 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60952 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60868 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32780 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32792 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60898 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60886 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60872 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60944 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60900 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60912 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32840 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60924 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60988 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60850 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32848 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60968 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60856 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60954 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60810 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60972 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60888 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60984 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60962 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32784 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60858 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60980 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60938 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60930 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60998 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60928 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60994 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60902 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32828 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60990 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32786 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60934 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60916 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60966 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32794 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32782 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32814 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32844 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60964 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60918 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32842 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32788 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32820 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32838 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60812 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60870 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32850 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60866 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60876 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32854 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32860 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60896 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32768 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32798 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32880 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32816 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32870 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32888 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32878 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32884 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32896 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32902 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32890 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60882 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32862 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32776 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32898 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32906 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32778 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32900 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32892 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32886 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60992 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60950 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32852 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32918 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60948 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60982 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32936 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32934 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32932 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32942 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32940 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32830 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32922 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32924 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32808 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32928 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32960 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32894 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32976 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32772 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32982 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32980 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32802 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32876 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32836 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32912 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32978 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33006 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32858 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32956 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32984 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32938 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32926 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32974 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32986 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32874 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33026 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33004 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32856 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32962 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33030 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33044 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33028 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33046 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32866 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33012 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32988 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32908 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32834 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32882 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33060 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33010 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32910 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32958 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32904 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33002 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32968 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32996 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33056 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33058 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33038 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32920 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33052 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33008 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32916 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32990 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32966 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33022 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33000 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32952 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33032 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32930 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60804 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32992 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32964 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33054 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33036 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33014 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32944 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33034 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32846 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33018 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33064 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33042 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32872 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33016 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33050 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32864 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33062 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32970 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33048 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32950 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32914 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33024 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32994 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60834 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60862 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60936 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60960 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32954 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60996 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32972 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32998 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32796 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33020 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32868 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33040 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32946 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32948 -> 103.77.246.204:55555

Source: global traffic

TCP traffic: 192.168.2.14:60792 -> 103.77.246.204:55555

Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59320
Source: unknown	Network traffic detected: HTTP traffic on port 59320 -> 443

Source: unknown

HTTPS traffic detected: 34.254.182.186:443 -> 192.168.2.14:59320 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 Author: unknown
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: Process Memory Space: x-8.6-.Sakura.elf PID: 5507, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: x-8.6-.Sakura.elf PID: 5510, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: x-8.6-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a6a2adb9 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = cdd0bb9ce40a000bb86b0c76616fe71fb7dbb87a044ddd778b7a07fdf804b877, id = a6a2adb9-9d54-42d4-abed-5b30d8062e97, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_f3d83a74 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 1c5df68501b688905484ed47dc588306828aa7c114644428e22e5021bb39bd4a, id = f3d83a74-2888-435a-9a3c-b7de25084e9a, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a0a4de11 reference_sample = cf1ca1d824c8687e87a5b0275a0e39fa101442b4bbf470859ddda9982f9b3417, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 891cfc6a4c38fb257ada29050e0047bd1301e8f0a6a1a919685b1fcc2960b047, id = a0a4de11-fe65-449f-a990-ad5f18ac66f0, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_09c3070e reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 84fad96b60b297736c149e14de12671ff778bff427ab7684df2c541a6f6d7e7d, id = 09c3070e-4b71-45a0-aa62-0cc6e496644a, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_dd0d6173 reference_sample = c5a317d0d8470814ff343ce78ad2428ebb3f036763fcf703a589b6c4d33a3ec6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 5e2cb111c2b712951b71166111d339724b4f52b93f90cb474f1e67598212605f, id = dd0d6173-b863-45cf-9348-3375a4e624cf, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_779e142f reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 83377b6fa77fda4544c409487d2d2c1ddcef8f7d4120f49a18888c7536f3969f, id = 779e142f-b867-46e6-b1fb-9105976f42fd, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_cf84c9f2 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = bb766b356c3e8706740e3bb9b4a7171d8eb5137e09fc7ab6952412fa55e2dcfc, id = cf84c9f2-7435-4faf-8c5f-d14945ffad7a, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_e4a1982b os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d9f852c28433128b0fd330bee35f7bd4aada5226e9ca865fe5cd8cca52b2a622, id = e4a1982b-928a-4da5-b497-cedc1d26e845, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_32eb0c81 reference_sample = 275cbd5d3b3d8c521649b95122d90d1ca9b7ae1958b721bdc158aaa2d31d49df, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 7c50ed29e2dd75a6a85afc43f8452794cb787ecd2061f4bf415d7038c14c523f, id = 32eb0c81-25af-4670-ab77-07ea7ce1874a, last_modified = 2021-09-16
Source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: Process Memory Space: x-8.6-.Sakura.elf PID: 5507, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: x-8.6-.Sakura.elf PID: 5510, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@2/0

Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/memcpy.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/mempcpy.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/memset.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/strchr.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcmp.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/strcpy.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/strlen.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/strpbrk.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/string/x86_64/strspn.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crt1.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crti.S
Source: x-8.6-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/x86_64/crtn.S

Source: /usr/bin/dash (PID: 5542)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.oES6j5IUxA /tmp/tmp.yzSniEXAW6 /tmp/tmp.mWD5EgkZnS			Jump to behavior
Source: /usr/bin/dash (PID: 5551)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.oES6j5IUxA /tmp/tmp.yzSniEXAW6 /tmp/tmp.mWD5EgkZnS			Jump to behavior

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: x-8.6-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-8.6-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x-8.6-.Sakura.elf PID: 5507, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x-8.6-.Sakura.elf PID: 5510, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: x-8.6-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-8.6-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5507.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5510.1.0000000000400000.0000000000410000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: x-8.6-.Sakura.elf PID: 5507, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: x-8.6-.Sakura.elf PID: 5510, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 File Deletion	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	2 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{
  "C2 url": "103.77.246.204:55555"
}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
x-8.6-.Sakura.elf	69%	ReversingLabs	Linux.Trojan.Mirai
x-8.6-.Sakura.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
103.77.246.204:55555	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.125.190.26	unknown	United Kingdom	41231	CANONICAL-ASGB	false
34.254.182.186	unknown	United States	16509	AMAZON-02US	false
103.77.246.204	unknown	India	136165	X4B-AS-APX4BDDoSProtectedAnnouncementsAU	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
185.125.190.26	na.elf	Get hash	malicious	Prometei	Browse
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	sync.sparc.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	sync.superh.elf	Get hash	malicious	Unknown	Browse
34.254.182.186	8893Xmi39S.arm5.elf	Get hash	malicious	Unknown	Browse
	sparc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	rebirth.ppc.elf	Get hash	malicious	Gafgyt	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	jackmyi686.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	EdiAf.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	EdiAf.arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	EdiAf.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	EdiAf.spc.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	debug.dbg.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	EdiAf.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	EdiAf.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	EdiAf.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	sshd.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	hgfs.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	Gbbv8zRYvxcgBHP.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	PT CPI Vendor quotation request.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
	na.elf	Get hash	malicious	Prometei	Browse	52.43.119.120
X4B-AS-APX4BDDoSProtectedAnnouncementsAU	smbhost.exe	Get hash	malicious	Xmrig	Browse	103.249.70.7
	http://ff.members.gerane.vn/	Get hash	malicious	Unknown	Browse	103.77.241.200
	Address_verification_form_awb_shipping_documents_Invoice_Billof lading000000000000000000000.vbs	Get hash	malicious	GuLoader	Browse	103.77.246.15
	Tracking_Invoice_Awb_BL_00340434757340073972.vbs	Get hash	malicious	Remcos, GuLoader	Browse	103.77.246.15
	Invoice_Awb_BL_238415455_01408202_pdf.vbs	Get hash	malicious	GuLoader	Browse	103.77.246.15
	7PY33AaMqH.elf	Get hash	malicious	Mirai, Okiru	Browse	103.77.246.53
	aFPlFda1sB.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	103.77.246.53
	leKBCSdWnE.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	103.77.246.53
	fHaEG1nZHb.elf	Get hash	malicious	Mirai, Okiru	Browse	103.77.246.53
	fSRhZKnZEu.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	103.77.246.53
CANONICAL-ASGB	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	main_arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	EdiAf.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	EdiAf.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	185.125.190.26

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.026740377249827
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	x-8.6-.Sakura.elf
File size:	94'679 bytes
MD5:	3d6de6672f0ca032fa88da31f004bc45
SHA1:	1e99937485d19a79ca8fd971780a34920e40a7d9
SHA256:	233ccbf69af361849f7b6bc4dc55909d3565fc2825960b2527820b0040bf459c
SHA512:	bdee079d4c9dd77d1f9f8493a365b56918d11e66b009e5f54fb6d01fd8c8638e5b9366f657410d4678ab2e4aebec0aee2de65af78f1f2f703a6a4d70ff1fe8b0
SSDEEP:	1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK37yPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKrifUm/KWOXFE
TLSH:	DA935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB01
File Content Preview:	.ELF..............>.......@.....@...................@.8...@.......................@.......@...............................................P.......P.....8........p..............Q.td....................................................H...._........H........

Static ELF Info

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	68992
Section Header Size:	64
Number of Section Headers:	15
Header String Table Index:	12

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x400100	0x100	0xcfe8	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x40d0e8	0xd0e8	0xe	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x40d100	0xd100	0x2c90	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x40fd90	0xfd90	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x50fd98	0xfd98	0x10	0x0	0x3	WA	0	0	8
.dtors	PROGBITS	0x50fda8	0xfda8	0x10	0x0	0x3	WA	0	0	8
.jcr	PROGBITS	0x50fdb8	0xfdb8	0x8	0x0	0x3	WA	0	0	8
.data	PROGBITS	0x50fdc0	0xfdc0	0x510	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x5102e0	0x102d0	0x6b50	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0x102d0	0xa44	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x10d14	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x11140	0x3ff0	0x18	0x0		14	243	8
.strtab	STRTAB	0x0	0x15130	0x20a7	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0xfd94	0xfd94	6.3995	0x5	R E	0x100000	.init .text .fini .rodata .eh_frame
LOAD	0xfd98	0x50fd98	0x50fd98	0x538	0x7098	2.0632	0x6	RW	0x100000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000e8	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x400100	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x40d0e8	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x40d100	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x40fd90	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x50fd98	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x50fda8	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x50fdb8	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x50fdc0	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x5102e0	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
Q	.symtab	0x510360	16384	OBJECT	<unknown>	DEFAULT	10
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x4027ae	249	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x401fcb	264	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x4029a7	299	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x40165f	858	FUNC	<unknown>	DEFAULT	2
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x50fda0	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x50fd98	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x50fe48	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x40e120	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x5102c0	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x40ed40	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x50fe58	8	OBJECT	<unknown>	DEFAULT	9
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x40e420	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x50fdb0	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x50fda8	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x40fd90	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x40fd90	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x50fe48	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_b_data	.symtab	0x40e120	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x5102c0	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_tolower_data	.symtab	0x40ed40	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x50fe58	8	OBJECT	<unknown>	HIDDEN	9
__GI___C_ctype_toupper_data	.symtab	0x40e420	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x50fe50	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_tolower	.symtab	0x5102c8	8	OBJECT	<unknown>	HIDDEN	9
__GI___ctype_toupper	.symtab	0x50fe60	8	OBJECT	<unknown>	HIDDEN	9
__GI___errno_location	.symtab	0x405e88	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x40c02c	14	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x408694	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x405b10	100	FUNC	<unknown>	HIDDEN	2
__GI___libc_lseek	.symtab	0x40d080	45	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x405d04	106	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x408068	70	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x4080e7	67	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x40c03c	194	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x405b74	42	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x407668	276	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x407b4c	18	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x409614	43	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x405bcc	38	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x408444	41	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x405bf4	41	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x40671c	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x5145dc	4	OBJECT	<unknown>	HIDDEN	10
__GI_exit	.symtab	0x407cd8	92	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x40966c	259	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x405b10	100	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x405b10	100	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x409c18	329	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x409ad0	109	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x409d64	116	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x409770	10	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x405c20	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x40be3c	56	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x40ceec	5	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x40cef4	218	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x40be74	134	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x408470	35	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x408494	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x4084bc	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x4084e4	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x406360	53	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x406398	897	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x40850c	19	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x405c48	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x408520	40	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x406748	41	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x408548	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x5145e0	4	OBJECT	<unknown>	HIDDEN	10
__GI_inet_addr	.symtab	0x406344	28	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x408b8c	137	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x406339	10	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x4062ec	77	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x40a588	527	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x40a283	493	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x407a93	185	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x405c70	104	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x40a170	25	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x405cd8	44	FUNC	<unknown>	HIDDEN	2
__GI_lseek	.symtab	0x40d080	45	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x40d078	5	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x40cd0c	240	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x408760	102	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x4087c8	734	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x40bf00	90	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x40cdfc	237	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x405e90	210	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x408414	48	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x408570	38	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x408598	38	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x405d04	106	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x409640	41	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x4095e8	18	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x407788	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x407990	90	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x40a000	190	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x405d7c	39	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x4067a8	11	FUNC	<unknown>	HIDDEN	2
__GI_recvfrom	.symtab	0x4067b4	45	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x4085c0	74	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x405da4	44	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x4067e4	11	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x4067f0	48	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x405dd0	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x406820	53	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x4078e8	168	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x40831d	247	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x406888	168	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x40860c	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x407d34	415	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x406858	47	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x40adc0	149	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x4079ea	169	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x40c100	48	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x405f70	417	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x409dd8	33	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x409dd8	33	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x406120	213	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x40a138	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x409e00	225	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x40a0c0	119	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x408aa8	131	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x40bf5c	206	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x409ee8	140	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x409f78	135	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x4061f8	187	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x4062c4	10	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x408b2c	94	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x407b60	10	FUNC	<unknown>	HIDDEN	2
__GI_strtoll	.symtab	0x407b60	10	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x407ed4	351	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x40a18c	110	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x405df8	39	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x40ada0	30	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x405e68	30	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x40ae58	199	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x408664	47	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x405e20	7	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x40c304	68	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x40c358	140	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x40c348	15	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x405e28	42	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x50fdb8	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x50fdb8	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x5145c8	8	OBJECT	<unknown>	HIDDEN	10
__atexit_lock	.symtab	0x510000	40	OBJECT	<unknown>	DEFAULT	9
__bsd_signal	.symtab	0x406888	168	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x5102d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x4080b2	53	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x50fe50	8	OBJECT	<unknown>	DEFAULT	9
__ctype_tolower	.symtab	0x5102c8	8	OBJECT	<unknown>	DEFAULT	9
__ctype_toupper	.symtab	0x50fe60	8	OBJECT	<unknown>	DEFAULT	9
__curbrk	.symtab	0x514630	8	OBJECT	<unknown>	HIDDEN	10
__data_start	.symtab	0x50fdd0	0	NOTYPE	<unknown>	DEFAULT	9
__decode_answer	.symtab	0x40a944	242	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x40c1d0	246	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x40a83c	161	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x408c18	1862	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x40d0b0	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x400100	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x50fdc0	0	OBJECT	<unknown>	HIDDEN	9
__encode_dotted	.symtab	0x40c130	160	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x40a798	163	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x40a8e0	80	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x5145b8	8	OBJECT	<unknown>	DEFAULT	10
__errno_location	.symtab	0x405e88	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x5145a8	8	OBJECT	<unknown>	HIDDEN	10
__fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x4095b8	48	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x40850c	19	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x40c02c	14	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x408694	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x40c2c8	59	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x40a930	19	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x405bf4	41	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x40671c	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x405d6e	14	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x405c20	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x405c48	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek	.symtab	0x40d080	45	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x40d078	5	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x408598	38	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x405d04	106	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x409640	41	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x405d7c	39	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x4067a8	11	FUNC	<unknown>	DEFAULT	2
__libc_recvfrom	.symtab	0x4067b4	45	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x405da4	44	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x4067e4	11	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x4067f0	48	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x40831d	247	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x5145b0	8	OBJECT	<unknown>	DEFAULT	10
__libc_waitpid	.symtab	0x405e20	7	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x405e28	42	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x4072ed	410	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x40698c	96	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x50fe80	40	OBJECT	<unknown>	DEFAULT	9
__malloc_state	.symtab	0x516700	1752	OBJECT	<unknown>	DEFAULT	10
__malloc_trim	.symtab	0x407254	153	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x516e00	24	OBJECT	<unknown>	HIDDEN	10
__nameservers	.symtab	0x516e18	4	OBJECT	<unknown>	HIDDEN	10
__open_etc_hosts	.symtab	0x40aa38	42	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x409360	597	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x5145c0	8	OBJECT	<unknown>	DEFAULT	10
__preinit_array_end	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x50fd94	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x4080ae	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x4080b1	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x4095e8	18	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x40aa62	830	FUNC	<unknown>	HIDDEN	2
__register_frame_info	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x510040	40	OBJECT	<unknown>	DEFAULT	9
__restore_rt	.symtab	0x408314	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x5145d0	8	OBJECT	<unknown>	HIDDEN	10
__searchdomain	.symtab	0x516de0	32	OBJECT	<unknown>	HIDDEN	10
__searchdomains	.symtab	0x516e1c	4	OBJECT	<unknown>	HIDDEN	10
__sigaddset	.symtab	0x406950	28	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x40696c	30	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x406930	32	FUNC	<unknown>	DEFAULT	2
__stdin	.symtab	0x510098	8	OBJECT	<unknown>	DEFAULT	9
__stdio_READ	.symtab	0x40c3e4	58	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x40af20	147	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x40cfd0	133	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x40c420	259	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x409a0f	15	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4280	.symtab	0x40eca0	40	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x40c524	37	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x40d058	31	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x40c54c	90	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x40c5a8	148	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x409aa8	39	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x5100a0	8	OBJECT	<unknown>	DEFAULT	9
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x408068	70	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x4080e7	67	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x40812a	489	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x510028	8	OBJECT	<unknown>	HIDDEN	9
__xpg_strerror_r	.symtab	0x40c03c	194	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x40afb4	68	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x4095fc	23	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x516e20	8	OBJECT	<unknown>	DEFAULT	10
_dl_phnum	.symtab	0x516e28	8	OBJECT	<unknown>	DEFAULT	10
_edata	.symtab	0x5102d0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x516e30	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x5145dc	4	OBJECT	<unknown>	DEFAULT	10
_exit	.symtab	0x405b74	42	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x40d0e8	5	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x514660	8192	OBJECT	<unknown>	DEFAULT	10
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x40aff8	120	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x40c6c4	1608	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x5145e0	4	OBJECT	<unknown>	DEFAULT	10
_init	.symtab	0x4000e8	5	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x40c63c	85	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x40b6ac	114	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x40b95e	1022	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x40b720	67	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x40b764	457	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x40b930	46	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x4080b1	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x4080b1	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x516680	128	OBJECT	<unknown>	HIDDEN	10
_start	.symtab	0x400194	42	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40977c	551	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x4099a4	107	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x5100a8	8	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_add_lock	.symtab	0x5100c0	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_dec_use	.symtab	0x409b40	216	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x514644	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_del_lock	.symtab	0x510100	40	OBJECT	<unknown>	DEFAULT	9
_stdio_openlist_use_count	.symtab	0x514640	4	OBJECT	<unknown>	DEFAULT	10
_stdio_streams	.symtab	0x510140	384	OBJECT	<unknown>	DEFAULT	9
_stdio_term	.symtab	0x409a1e	135	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x510128	4	OBJECT	<unknown>	DEFAULT	9
_stdlib_strto_l	.symtab	0x407b6c	362	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x40c694	46	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x40f120	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40869c	187	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x40b070	1595	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x407668	276	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x405ba0	41	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x403927	260	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x403315	1554	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x407b4c	18	FUNC	<unknown>	DEFAULT	2
atoi.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x402e76	1183	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x4062b4	14	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x5145a0	4	OBJECT	<unknown>	DEFAULT	10
been_there_done_that.3160	.symtab	0x5145d8	4	OBJECT	<unknown>	DEFAULT	10
brk	.symtab	0x409614	43	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x406888	168	FUNC	<unknown>	DEFAULT	2
buf.2989	.symtab	0x514370	16	OBJECT	<unknown>	DEFAULT	10
buf.5285	.symtab	0x514380	500	OBJECT	<unknown>	DEFAULT	10
c	.symtab	0x50fe3c	4	OBJECT	<unknown>	DEFAULT	9
chdir	.symtab	0x405bcc	38	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x408444	41	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x405bf4	41	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x50fde0	8	OBJECT	<unknown>	DEFAULT	9
completed.2761	.symtab	0x5102e0	1	OBJECT	<unknown>	DEFAULT	10
connect	.symtab	0x40671c	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x40118f	572	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x405d6e	14	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x401494	115	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x50fe38	4	OBJECT	<unknown>	DEFAULT	9
data_start	.symtab	0x50fdd0	0	NOTYPE	<unknown>	DEFAULT	9
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x5145b8	8	OBJECT	<unknown>	DEFAULT	10
errno	.symtab	0x5145dc	4	OBJECT	<unknown>	DEFAULT	10
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x407cd8	92	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x40fcc0	208	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x40966c	259	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x405b10	100	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x40031f	128	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x409c18	329	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x409ad0	109	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x409d64	116	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x40fca0	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x409770	10	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x405c20	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x40be3c	56	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x400150	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x407487	452	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x40ceec	5	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x40ceec	5	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x40cef4	218	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x4019b9	1554	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x40be74	134	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x403a2b	11	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x400ea7	65	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x40039f	484	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x403a36	142	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x4002f0	47	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x40bd5c	222	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x408470	35	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x408494	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x4084bc	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x4084e4	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x406360	53	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x406398	897	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x40850c	19	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x405c48	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x408520	40	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit64	.symtab	0x408520	40	FUNC	<unknown>	DEFAULT	2
getsockname	.symtab	0x406748	41	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x406774	50	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x408548	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x510344	4	OBJECT	<unknown>	DEFAULT	10
h.5284	.symtab	0x514580	32	OBJECT	<unknown>	DEFAULT	10
h_errno	.symtab	0x5145e0	4	OBJECT	<unknown>	DEFAULT	10
htonl	.symtab	0x4062d8	5	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x4062d0	8	FUNC	<unknown>	DEFAULT	2
i.4528	.symtab	0x50fe40	4	OBJECT	<unknown>	DEFAULT	9
index	.symtab	0x405f70	417	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x406344	28	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x408b8c	137	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x406339	10	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x4062ec	77	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x40a588	527	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x40a470	280	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x40a283	493	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x40a1fc	135	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x405444	298	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x4001c0	125	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x407832	110	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x407a93	185	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x405c70	104	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40a170	25	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x405e54	18	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x405cd8	44	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/mempcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strchr.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcmp.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strlen.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strpbrk.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/x86_64/strspn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/x86_64/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x4013cb	201	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek	.symtab	0x40d080	45	FUNC	<unknown>	DEFAULT	2
lseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x40d078	5	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x510350	6	OBJECT	<unknown>	DEFAULT	10
main	.symtab	0x40556e	1439	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x510340	4	OBJECT	<unknown>	DEFAULT	10
makeIPPacket	.symtab	0x4015c6	153	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x400ee8	109	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x4021ab	169	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x4069ec	2149	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x40764b	28	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x40cd0c	240	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x408760	102	FUNC	<unknown>	DEFAULT	2
memmove	.symtab	0x4087c8	734	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x40bf00	90	FUNC	<unknown>	DEFAULT	2
memrchr	.symtab	0x40cdfc	237	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x405e90	210	FUNC	<unknown>	DEFAULT	2
mmap	.symtab	0x408414	48	FUNC	<unknown>	DEFAULT	2
mmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
munmap	.symtab	0x408570	38	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x50fec0	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x50ff00	40	OBJECT	<unknown>	DEFAULT	9
mylock	.symtab	0x514600	40	OBJECT	<unknown>	DEFAULT	10
nanosleep	.symtab	0x408598	38	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1440	.symtab	0x514360	8	OBJECT	<unknown>	DEFAULT	10
ntohl	.symtab	0x4062e5	5	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x4062dd	8	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x510348	8	OBJECT	<unknown>	DEFAULT	10
object.2814	.symtab	0x510300	48	OBJECT	<unknown>	DEFAULT	10
open	.symtab	0x405d04	106	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x516660	4	OBJECT	<unknown>	DEFAULT	10
p.2759	.symtab	0x50fdc8	0	OBJECT	<unknown>	DEFAULT	9
pids	.symtab	0x516668	8	OBJECT	<unknown>	DEFAULT	10
poll	.symtab	0x409640	41	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4494	.symtab	0x40f04d	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x4008ba	1085	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x400650	75	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x40077a	320	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x40069b	223	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x403ac4	6528	FUNC	<unknown>	DEFAULT	2
qual_chars.4498	.symtab	0x40f060	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x4095e8	18	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40777c	11	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40023d	179	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x407788	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x40e720	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x407990	90	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x50ff80	128	OBJECT	<unknown>	DEFAULT	9
rawmemchr	.symtab	0x40a000	190	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x405d7c	39	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x4067a8	11	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x400f55	570	FUNC	<unknown>	DEFAULT	2
recvfrom	.symtab	0x4067b4	45	FUNC	<unknown>	DEFAULT	2
recvfrom.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rtcp	.symtab	0x402ad2	932	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x4085c0	74	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x405da4	44	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x4067e4	11	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x4067f0	48	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x405dd0	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x406820	53	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x4077d0	98	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x4078e8	168	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x40831d	247	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x406888	168	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40860c	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x407d34	415	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x406858	47	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x4020d3	216	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x400cf7	432	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4497	.symtab	0x40f080	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4493	.symtab	0x40f059	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4494	.symtab	0x40f0b0	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4493	.symtab	0x40f0c5	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4496	.symtab	0x40f090	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4495	.symtab	0x40f0a0	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x40adc0	149	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x4078a0	72	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x4078a0	72	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x4079ea	169	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x510030	2	OBJECT	<unknown>	DEFAULT	9
static_ns	.symtab	0x514628	4	OBJECT	<unknown>	DEFAULT	10
stderr	.symtab	0x510090	8	OBJECT	<unknown>	DEFAULT	9
stdhexflood	.symtab	0x4028a7	256	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x510080	8	OBJECT	<unknown>	DEFAULT	9
stdout	.symtab	0x510088	8	OBJECT	<unknown>	DEFAULT	9
strcasecmp	.symtab	0x40c100	48	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x405f70	417	FUNC	<unknown>	DEFAULT	2
strcmp	.symtab	0x409dd8	33	FUNC	<unknown>	DEFAULT	2
strcoll	.symtab	0x409dd8	33	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x406120	213	FUNC	<unknown>	DEFAULT	2
strdup	.symtab	0x40a138	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x40c03c	194	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x409e00	225	FUNC	<unknown>	DEFAULT	2
strncat	.symtab	0x40a0c0	119	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x408aa8	131	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x40bf5c	206	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x409ee8	140	FUNC	<unknown>	DEFAULT	2
strspn	.symtab	0x409f78	135	FUNC	<unknown>	DEFAULT	2
strstr	.symtab	0x4061f8	187	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoimax	.symtab	0x407b60	10	FUNC	<unknown>	DEFAULT	2
strtok	.symtab	0x4062c4	10	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x408b2c	94	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x407b60	10	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtoll	.symtab	0x407b60	10	FUNC	<unknown>	DEFAULT	2
sysconf	.symtab	0x407ed4	351	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x40a18c	110	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x401507	191	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x405df8	39	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x40ada0	30	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x405e68	30	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400583	205	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x40f0d0	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x40f0e8	12	OBJECT	<unknown>	DEFAULT	4
unknown.2050	.symtab	0x40f0f4	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x50ff40	48	OBJECT	<unknown>	DEFAULT	9
useragents	.symtab	0x50fe00	56	OBJECT	<unknown>	DEFAULT	9
usleep	.symtab	0x408034	52	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x402254	1370	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x40ae58	199	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x408664	47	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x405e20	7	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x40c304	68	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x40c358	140	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x40c348	15	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x405e28	42	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3747	.symtab	0x40ecf0	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-18T04:39:56.151507+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60792	103.77.246.204	55555	TCP
2025-03-18T04:39:56.981759+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60794	103.77.246.204	55555	TCP
2025-03-18T04:39:57.831375+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60796	103.77.246.204	55555	TCP
2025-03-18T04:39:58.666962+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60798	103.77.246.204	55555	TCP
2025-03-18T04:39:59.507299+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60800	103.77.246.204	55555	TCP
2025-03-18T04:40:00.351001+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60802	103.77.246.204	55555	TCP
2025-03-18T04:40:01.201504+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60804	103.77.246.204	55555	TCP
2025-03-18T04:40:02.042427+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60806	103.77.246.204	55555	TCP
2025-03-18T04:40:02.885138+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60808	103.77.246.204	55555	TCP
2025-03-18T04:40:03.719034+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60810	103.77.246.204	55555	TCP
2025-03-18T04:40:04.564911+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60812	103.77.246.204	55555	TCP
2025-03-18T04:40:05.417391+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60814	103.77.246.204	55555	TCP
2025-03-18T04:40:06.305643+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60816	103.77.246.204	55555	TCP
2025-03-18T04:40:07.147512+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60818	103.77.246.204	55555	TCP
2025-03-18T04:40:07.981137+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60820	103.77.246.204	55555	TCP
2025-03-18T04:40:08.820214+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60822	103.77.246.204	55555	TCP
2025-03-18T04:40:09.651938+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60824	103.77.246.204	55555	TCP
2025-03-18T04:40:10.498617+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60826	103.77.246.204	55555	TCP
2025-03-18T04:40:11.486352+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60828	103.77.246.204	55555	TCP
2025-03-18T04:40:12.321829+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60830	103.77.246.204	55555	TCP
2025-03-18T04:40:13.153175+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60832	103.77.246.204	55555	TCP
2025-03-18T04:40:14.009010+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60834	103.77.246.204	55555	TCP
2025-03-18T04:40:14.866512+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60836	103.77.246.204	55555	TCP
2025-03-18T04:40:15.716831+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60838	103.77.246.204	55555	TCP
2025-03-18T04:40:16.559879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60840	103.77.246.204	55555	TCP
2025-03-18T04:40:17.403815+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60842	103.77.246.204	55555	TCP
2025-03-18T04:40:18.251092+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60844	103.77.246.204	55555	TCP
2025-03-18T04:40:19.102924+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60846	103.77.246.204	55555	TCP
2025-03-18T04:40:19.952929+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60848	103.77.246.204	55555	TCP
2025-03-18T04:40:20.789216+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60850	103.77.246.204	55555	TCP
2025-03-18T04:40:21.636389+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60852	103.77.246.204	55555	TCP
2025-03-18T04:40:22.466816+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60854	103.77.246.204	55555	TCP
2025-03-18T04:40:23.317235+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60856	103.77.246.204	55555	TCP
2025-03-18T04:40:24.168006+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60858	103.77.246.204	55555	TCP
2025-03-18T04:40:25.000811+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60860	103.77.246.204	55555	TCP
2025-03-18T04:40:25.867939+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60862	103.77.246.204	55555	TCP
2025-03-18T04:40:26.701104+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60864	103.77.246.204	55555	TCP
2025-03-18T04:40:27.534327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60866	103.77.246.204	55555	TCP
2025-03-18T04:40:28.367827+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60868	103.77.246.204	55555	TCP
2025-03-18T04:40:29.203382+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60870	103.77.246.204	55555	TCP
2025-03-18T04:40:30.058379+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60872	103.77.246.204	55555	TCP
2025-03-18T04:40:30.895188+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60874	103.77.246.204	55555	TCP
2025-03-18T04:40:31.726175+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60876	103.77.246.204	55555	TCP
2025-03-18T04:40:32.566162+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60878	103.77.246.204	55555	TCP
2025-03-18T04:40:33.440857+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60880	103.77.246.204	55555	TCP
2025-03-18T04:40:34.298512+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60882	103.77.246.204	55555	TCP
2025-03-18T04:40:35.150121+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60884	103.77.246.204	55555	TCP
2025-03-18T04:40:35.995330+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60886	103.77.246.204	55555	TCP
2025-03-18T04:40:36.829074+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60888	103.77.246.204	55555	TCP
2025-03-18T04:40:37.678845+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60890	103.77.246.204	55555	TCP
2025-03-18T04:40:38.516521+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60892	103.77.246.204	55555	TCP
2025-03-18T04:40:39.363911+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60894	103.77.246.204	55555	TCP
2025-03-18T04:40:40.193376+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60896	103.77.246.204	55555	TCP
2025-03-18T04:40:41.043245+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60898	103.77.246.204	55555	TCP
2025-03-18T04:40:41.875714+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60900	103.77.246.204	55555	TCP
2025-03-18T04:40:42.709548+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60902	103.77.246.204	55555	TCP
2025-03-18T04:40:43.578592+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60904	103.77.246.204	55555	TCP
2025-03-18T04:40:44.433498+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60906	103.77.246.204	55555	TCP
2025-03-18T04:40:45.266305+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60908	103.77.246.204	55555	TCP
2025-03-18T04:40:46.124851+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60910	103.77.246.204	55555	TCP
2025-03-18T04:40:46.963119+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60912	103.77.246.204	55555	TCP
2025-03-18T04:40:47.812423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60914	103.77.246.204	55555	TCP
2025-03-18T04:40:48.687604+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60916	103.77.246.204	55555	TCP
2025-03-18T04:40:49.519004+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60918	103.77.246.204	55555	TCP
2025-03-18T04:40:50.357166+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60920	103.77.246.204	55555	TCP
2025-03-18T04:40:51.192353+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60922	103.77.246.204	55555	TCP
2025-03-18T04:40:52.091611+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60924	103.77.246.204	55555	TCP
2025-03-18T04:40:52.930783+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60926	103.77.246.204	55555	TCP
2025-03-18T04:40:53.768852+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60928	103.77.246.204	55555	TCP
2025-03-18T04:40:54.599082+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60930	103.77.246.204	55555	TCP
2025-03-18T04:40:55.434936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60932	103.77.246.204	55555	TCP
2025-03-18T04:40:56.283009+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60934	103.77.246.204	55555	TCP
2025-03-18T04:40:57.124902+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60936	103.77.246.204	55555	TCP
2025-03-18T04:40:57.964719+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60938	103.77.246.204	55555	TCP
2025-03-18T04:40:58.796882+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60940	103.77.246.204	55555	TCP
2025-03-18T04:40:59.648835+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60942	103.77.246.204	55555	TCP
2025-03-18T04:41:00.516255+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60944	103.77.246.204	55555	TCP
2025-03-18T04:41:01.352549+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60946	103.77.246.204	55555	TCP
2025-03-18T04:41:02.205151+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60948	103.77.246.204	55555	TCP
2025-03-18T04:41:03.054327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60950	103.77.246.204	55555	TCP
2025-03-18T04:41:03.900010+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60952	103.77.246.204	55555	TCP
2025-03-18T04:41:04.739360+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60954	103.77.246.204	55555	TCP
2025-03-18T04:41:05.572352+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60956	103.77.246.204	55555	TCP
2025-03-18T04:41:06.616963+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60958	103.77.246.204	55555	TCP
2025-03-18T04:41:07.468606+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60960	103.77.246.204	55555	TCP
2025-03-18T04:41:08.317138+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60962	103.77.246.204	55555	TCP
2025-03-18T04:41:09.169294+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60964	103.77.246.204	55555	TCP
2025-03-18T04:41:10.030901+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60966	103.77.246.204	55555	TCP
2025-03-18T04:41:10.864313+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60968	103.77.246.204	55555	TCP
2025-03-18T04:41:11.721624+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60970	103.77.246.204	55555	TCP
2025-03-18T04:41:12.552032+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60972	103.77.246.204	55555	TCP
2025-03-18T04:41:13.401936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60974	103.77.246.204	55555	TCP
2025-03-18T04:41:14.236791+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60976	103.77.246.204	55555	TCP
2025-03-18T04:41:15.071668+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60978	103.77.246.204	55555	TCP
2025-03-18T04:41:15.918277+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60980	103.77.246.204	55555	TCP
2025-03-18T04:41:16.749387+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60982	103.77.246.204	55555	TCP
2025-03-18T04:41:17.598028+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60984	103.77.246.204	55555	TCP
2025-03-18T04:41:18.434577+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60986	103.77.246.204	55555	TCP
2025-03-18T04:41:19.277163+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60988	103.77.246.204	55555	TCP
2025-03-18T04:41:20.120291+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60990	103.77.246.204	55555	TCP
2025-03-18T04:41:20.986623+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60992	103.77.246.204	55555	TCP
2025-03-18T04:41:21.822629+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60994	103.77.246.204	55555	TCP
2025-03-18T04:41:22.666997+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60996	103.77.246.204	55555	TCP
2025-03-18T04:41:24.184163+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60998	103.77.246.204	55555	TCP
2025-03-18T04:41:25.050554+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32768	103.77.246.204	55555	TCP
2025-03-18T04:41:25.907821+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32770	103.77.246.204	55555	TCP
2025-03-18T04:41:26.751676+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32772	103.77.246.204	55555	TCP
2025-03-18T04:41:27.587710+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32774	103.77.246.204	55555	TCP
2025-03-18T04:41:28.430064+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32776	103.77.246.204	55555	TCP
2025-03-18T04:41:29.261354+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32778	103.77.246.204	55555	TCP
2025-03-18T04:41:30.099124+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32780	103.77.246.204	55555	TCP
2025-03-18T04:41:30.942765+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32782	103.77.246.204	55555	TCP
2025-03-18T04:41:31.781364+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32784	103.77.246.204	55555	TCP
2025-03-18T04:41:32.615051+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32786	103.77.246.204	55555	TCP
2025-03-18T04:41:33.469889+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32788	103.77.246.204	55555	TCP
2025-03-18T04:41:34.344121+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32790	103.77.246.204	55555	TCP
2025-03-18T04:41:35.180568+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32792	103.77.246.204	55555	TCP
2025-03-18T04:41:36.012748+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32794	103.77.246.204	55555	TCP
2025-03-18T04:41:36.867881+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32796	103.77.246.204	55555	TCP
2025-03-18T04:41:37.698787+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32798	103.77.246.204	55555	TCP
2025-03-18T04:41:38.542228+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32800	103.77.246.204	55555	TCP
2025-03-18T04:41:39.397905+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32802	103.77.246.204	55555	TCP
2025-03-18T04:41:40.243039+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32804	103.77.246.204	55555	TCP
2025-03-18T04:41:41.083841+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32806	103.77.246.204	55555	TCP
2025-03-18T04:41:41.922347+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32808	103.77.246.204	55555	TCP
2025-03-18T04:41:42.770941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32810	103.77.246.204	55555	TCP
2025-03-18T04:41:43.639656+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32812	103.77.246.204	55555	TCP
2025-03-18T04:41:44.529706+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32814	103.77.246.204	55555	TCP
2025-03-18T04:41:45.375012+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32816	103.77.246.204	55555	TCP
2025-03-18T04:41:46.230422+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32818	103.77.246.204	55555	TCP
2025-03-18T04:41:47.083424+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32820	103.77.246.204	55555	TCP
2025-03-18T04:41:47.915082+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32822	103.77.246.204	55555	TCP
2025-03-18T04:41:48.842594+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32824	103.77.246.204	55555	TCP
2025-03-18T04:41:49.690122+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32826	103.77.246.204	55555	TCP
2025-03-18T04:41:50.522300+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32828	103.77.246.204	55555	TCP
2025-03-18T04:41:51.363443+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32830	103.77.246.204	55555	TCP
2025-03-18T04:41:52.200038+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32832	103.77.246.204	55555	TCP
2025-03-18T04:41:53.040358+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32834	103.77.246.204	55555	TCP
2025-03-18T04:41:53.888287+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32836	103.77.246.204	55555	TCP
2025-03-18T04:41:54.749611+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32838	103.77.246.204	55555	TCP
2025-03-18T04:41:55.593880+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32840	103.77.246.204	55555	TCP
2025-03-18T04:41:56.436184+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32842	103.77.246.204	55555	TCP
2025-03-18T04:41:57.295768+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32844	103.77.246.204	55555	TCP
2025-03-18T04:41:58.185780+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32846	103.77.246.204	55555	TCP
2025-03-18T04:41:59.021879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32848	103.77.246.204	55555	TCP
2025-03-18T04:41:59.932741+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32850	103.77.246.204	55555	TCP
2025-03-18T04:42:00.791610+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32852	103.77.246.204	55555	TCP
2025-03-18T04:42:01.633390+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32854	103.77.246.204	55555	TCP
2025-03-18T04:42:02.466855+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32856	103.77.246.204	55555	TCP
2025-03-18T04:42:03.300896+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32858	103.77.246.204	55555	TCP
2025-03-18T04:42:04.157380+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32860	103.77.246.204	55555	TCP
2025-03-18T04:42:04.998295+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32862	103.77.246.204	55555	TCP
2025-03-18T04:42:05.839165+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32864	103.77.246.204	55555	TCP
2025-03-18T04:42:06.716750+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32866	103.77.246.204	55555	TCP
2025-03-18T04:42:07.606749+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32868	103.77.246.204	55555	TCP
2025-03-18T04:42:08.449509+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32870	103.77.246.204	55555	TCP
2025-03-18T04:42:09.309361+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32872	103.77.246.204	55555	TCP
2025-03-18T04:42:10.167759+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32874	103.77.246.204	55555	TCP
2025-03-18T04:42:11.018539+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32876	103.77.246.204	55555	TCP
2025-03-18T04:42:11.896510+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32878	103.77.246.204	55555	TCP
2025-03-18T04:42:12.753727+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32880	103.77.246.204	55555	TCP
2025-03-18T04:42:13.593819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32882	103.77.246.204	55555	TCP
2025-03-18T04:42:14.445319+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32884	103.77.246.204	55555	TCP
2025-03-18T04:42:15.286030+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32886	103.77.246.204	55555	TCP
2025-03-18T04:42:16.119848+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32888	103.77.246.204	55555	TCP
2025-03-18T04:42:16.974167+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32890	103.77.246.204	55555	TCP
2025-03-18T04:42:17.807467+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32892	103.77.246.204	55555	TCP
2025-03-18T04:42:18.639848+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32894	103.77.246.204	55555	TCP
2025-03-18T04:42:19.494688+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32896	103.77.246.204	55555	TCP
2025-03-18T04:42:20.348417+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32898	103.77.246.204	55555	TCP
2025-03-18T04:42:21.202117+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32900	103.77.246.204	55555	TCP
2025-03-18T04:42:22.029929+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32902	103.77.246.204	55555	TCP
2025-03-18T04:42:22.867435+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32904	103.77.246.204	55555	TCP
2025-03-18T04:42:23.702259+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32906	103.77.246.204	55555	TCP
2025-03-18T04:42:24.537422+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32908	103.77.246.204	55555	TCP
2025-03-18T04:42:25.394511+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32910	103.77.246.204	55555	TCP
2025-03-18T04:42:26.224118+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32912	103.77.246.204	55555	TCP
2025-03-18T04:42:27.070054+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32914	103.77.246.204	55555	TCP
2025-03-18T04:42:27.901517+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32916	103.77.246.204	55555	TCP
2025-03-18T04:42:28.748754+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32918	103.77.246.204	55555	TCP
2025-03-18T04:42:29.579810+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32920	103.77.246.204	55555	TCP
2025-03-18T04:42:30.419440+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32922	103.77.246.204	55555	TCP
2025-03-18T04:42:31.273492+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32924	103.77.246.204	55555	TCP
2025-03-18T04:42:32.141288+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32926	103.77.246.204	55555	TCP
2025-03-18T04:42:32.975116+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32928	103.77.246.204	55555	TCP
2025-03-18T04:42:33.818549+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32930	103.77.246.204	55555	TCP
2025-03-18T04:42:34.675284+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32932	103.77.246.204	55555	TCP
2025-03-18T04:42:35.516923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32934	103.77.246.204	55555	TCP
2025-03-18T04:42:36.359416+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32936	103.77.246.204	55555	TCP
2025-03-18T04:42:37.197169+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32938	103.77.246.204	55555	TCP
2025-03-18T04:42:38.047742+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32940	103.77.246.204	55555	TCP
2025-03-18T04:42:38.880427+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32942	103.77.246.204	55555	TCP
2025-03-18T04:42:39.713573+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32944	103.77.246.204	55555	TCP
2025-03-18T04:42:40.562449+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32946	103.77.246.204	55555	TCP
2025-03-18T04:42:41.395174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32948	103.77.246.204	55555	TCP
2025-03-18T04:42:42.226057+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32950	103.77.246.204	55555	TCP
2025-03-18T04:42:43.056121+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32952	103.77.246.204	55555	TCP
2025-03-18T04:42:43.904875+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32954	103.77.246.204	55555	TCP
2025-03-18T04:42:44.753846+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32956	103.77.246.204	55555	TCP
2025-03-18T04:42:45.606124+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32958	103.77.246.204	55555	TCP
2025-03-18T04:42:46.459061+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32960	103.77.246.204	55555	TCP
2025-03-18T04:42:47.313649+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32962	103.77.246.204	55555	TCP
2025-03-18T04:42:48.147591+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32964	103.77.246.204	55555	TCP
2025-03-18T04:42:48.979398+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32966	103.77.246.204	55555	TCP
2025-03-18T04:42:49.814256+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32968	103.77.246.204	55555	TCP
2025-03-18T04:42:50.661581+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32970	103.77.246.204	55555	TCP
2025-03-18T04:42:51.510505+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32972	103.77.246.204	55555	TCP
2025-03-18T04:42:52.353538+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32974	103.77.246.204	55555	TCP
2025-03-18T04:42:53.197004+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32976	103.77.246.204	55555	TCP
2025-03-18T04:42:54.030317+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32978	103.77.246.204	55555	TCP
2025-03-18T04:42:54.862630+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32980	103.77.246.204	55555	TCP
2025-03-18T04:42:55.711747+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32982	103.77.246.204	55555	TCP
2025-03-18T04:42:56.568185+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32984	103.77.246.204	55555	TCP
2025-03-18T04:42:57.404233+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32986	103.77.246.204	55555	TCP
2025-03-18T04:42:58.241862+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32988	103.77.246.204	55555	TCP
2025-03-18T04:42:59.073544+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32990	103.77.246.204	55555	TCP
2025-03-18T04:42:59.926288+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32992	103.77.246.204	55555	TCP
2025-03-18T04:43:00.767514+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32994	103.77.246.204	55555	TCP
2025-03-18T04:43:01.618699+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32996	103.77.246.204	55555	TCP
2025-03-18T04:43:02.478923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32998	103.77.246.204	55555	TCP
2025-03-18T04:43:03.330495+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33000	103.77.246.204	55555	TCP
2025-03-18T04:43:04.179767+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33002	103.77.246.204	55555	TCP
2025-03-18T04:43:05.013072+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33004	103.77.246.204	55555	TCP
2025-03-18T04:43:05.867679+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33006	103.77.246.204	55555	TCP
2025-03-18T04:43:06.712965+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33008	103.77.246.204	55555	TCP
2025-03-18T04:43:07.551991+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33010	103.77.246.204	55555	TCP
2025-03-18T04:43:08.398625+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33012	103.77.246.204	55555	TCP
2025-03-18T04:43:09.235769+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33014	103.77.246.204	55555	TCP
2025-03-18T04:43:10.074094+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33016	103.77.246.204	55555	TCP
2025-03-18T04:43:10.904394+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33018	103.77.246.204	55555	TCP
2025-03-18T04:43:11.753517+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33020	103.77.246.204	55555	TCP
2025-03-18T04:43:12.587057+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33022	103.77.246.204	55555	TCP
2025-03-18T04:43:13.575968+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33024	103.77.246.204	55555	TCP
2025-03-18T04:43:14.410039+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33026	103.77.246.204	55555	TCP
2025-03-18T04:43:15.252865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33028	103.77.246.204	55555	TCP
2025-03-18T04:43:16.091854+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33030	103.77.246.204	55555	TCP
2025-03-18T04:43:16.940265+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33032	103.77.246.204	55555	TCP
2025-03-18T04:43:17.773659+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33034	103.77.246.204	55555	TCP
2025-03-18T04:43:18.608757+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33036	103.77.246.204	55555	TCP
2025-03-18T04:43:19.465804+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33038	103.77.246.204	55555	TCP
2025-03-18T04:43:20.346332+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33040	103.77.246.204	55555	TCP
2025-03-18T04:43:21.187421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33042	103.77.246.204	55555	TCP
2025-03-18T04:43:22.028227+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33044	103.77.246.204	55555	TCP
2025-03-18T04:43:22.886623+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33046	103.77.246.204	55555	TCP
2025-03-18T04:43:23.720490+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33048	103.77.246.204	55555	TCP
2025-03-18T04:43:24.568948+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33050	103.77.246.204	55555	TCP
2025-03-18T04:43:25.421505+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33052	103.77.246.204	55555	TCP
2025-03-18T04:43:26.270058+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33054	103.77.246.204	55555	TCP
2025-03-18T04:43:27.107199+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33056	103.77.246.204	55555	TCP
2025-03-18T04:43:27.945213+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33058	103.77.246.204	55555	TCP
2025-03-18T04:43:28.777911+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33060	103.77.246.204	55555	TCP
2025-03-18T04:43:29.612547+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33062	103.77.246.204	55555	TCP
2025-03-18T04:43:30.445033+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33064	103.77.246.204	55555	TCP

Network Port Distribution

Total Packets: 1283
• 55555 undefined
• 443 (HTTPS)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 04:39:56.104042053 CET	60792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.151307106 CET	55555	60792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:56.151470900 CET	60792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.151506901 CET	60792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.156177998 CET	55555	60792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:56.976119041 CET	55555	60792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:56.976243019 CET	55555	60792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:56.976398945 CET	60792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.976430893 CET	60792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.977008104 CET	60794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.981095076 CET	55555	60792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:56.981668949 CET	55555	60794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:56.981743097 CET	60794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.981759071 CET	60794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:56.986474991 CET	55555	60794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:57.825871944 CET	55555	60794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:57.825958014 CET	60794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:57.826019049 CET	55555	60794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:57.826070070 CET	60794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:57.826560974 CET	60796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:57.830729008 CET	55555	60794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:57.831293106 CET	55555	60796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:57.831351995 CET	60796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:57.831374884 CET	60796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:57.835974932 CET	55555	60796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:58.661382914 CET	55555	60796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:58.661449909 CET	55555	60796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:58.661523104 CET	60796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:58.661571026 CET	60796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:58.662156105 CET	60798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:58.666255951 CET	55555	60796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:58.666874886 CET	55555	60798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:58.666929007 CET	60798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:58.666961908 CET	60798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:58.671658993 CET	55555	60798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:59.501612902 CET	55555	60798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:59.501806021 CET	60798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:59.501832008 CET	55555	60798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:59.501882076 CET	60798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:59.502518892 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:59.506520987 CET	55555	60798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:59.507230043 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:39:59.507281065 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:59.507298946 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:39:59.511976004 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:00.345437050 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:00.345664024 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:00.345731020 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:00.345767975 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:00.346256971 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:00.350441933 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:00.350929022 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:00.350984097 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:00.351001024 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:00.355679035 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:01.195923090 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:01.195940018 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:01.196012974 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:01.196052074 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:01.196751118 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:01.200692892 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:01.201411963 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:01.201478004 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:01.201503992 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:01.206152916 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.034117937 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.034240007 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.034420013 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.034599066 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.035187006 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.041802883 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.042339087 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.042393923 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.042427063 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.049885035 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.879285097 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.879378080 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.879406929 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.879458904 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.880258083 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.884140968 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.885036945 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:02.885123968 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.885138035 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:02.889858007 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:03.713159084 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:03.713336945 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:03.713476896 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:03.713520050 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:03.714242935 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:03.718194008 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:03.718952894 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:03.719021082 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:03.719033957 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:03.723752022 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:04.558331013 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:04.558459044 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:04.558465004 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:04.558536053 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:04.559257030 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:04.564801931 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:04.564814091 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:04.564892054 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:04.564910889 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:04.570496082 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:05.411669970 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:05.411778927 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:05.411817074 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:05.411925077 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:05.412590027 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:05.416585922 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:05.417248011 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:05.417332888 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:05.417391062 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:05.422027111 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:06.299951077 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:06.300069094 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:06.300126076 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:06.300280094 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:06.300847054 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:06.304970980 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:06.305516958 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:06.305583000 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:06.305643082 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:06.310275078 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.141699076 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.141863108 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.141887903 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.141988039 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.142671108 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.146667004 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.147356033 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.147448063 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.147511959 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.152151108 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.975255966 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.975399017 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.975425005 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.975611925 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.976325035 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.980235100 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.981003046 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:07.981086969 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.981137037 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:07.985800028 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:08.404195070 CET	46540	443	192.168.2.14	185.125.190.26
Mar 18, 2025 04:40:08.814434052 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:08.814486980 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:08.814632893 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:08.814708948 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:08.815330982 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:08.819385052 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:08.820053101 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:08.820174932 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:08.820214033 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:08.824903011 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:09.646174908 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:09.646291971 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:09.646296024 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:09.646466970 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:09.647068977 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:09.651055098 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:09.651840925 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:09.651918888 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:09.651937962 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:09.656595945 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:10.492901087 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:10.493031979 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:10.493076086 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:10.493146896 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:10.493793011 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:10.497759104 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:10.498486042 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:10.498574018 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:10.498616934 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:10.503257990 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:11.480808020 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:11.480818987 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:11.481023073 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:11.481025934 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:11.481051922 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:11.481093884 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:11.481656075 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:11.485749960 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:11.486268044 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:11.486339092 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:11.486351967 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:11.491075993 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:12.315830946 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:12.315871000 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:12.316129923 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:12.316129923 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:12.316963911 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:12.320923090 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:12.321712971 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:12.321794987 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:12.321829081 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:12.326442957 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:13.147496939 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:13.147631884 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:13.147710085 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:13.147735119 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:13.148381948 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:13.152398109 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:13.153081894 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:13.153135061 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:13.153175116 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:13.157836914 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.003243923 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.003331900 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.003556013 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.003592968 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.004259109 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.008219957 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.008922100 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.008980036 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.009010077 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.013626099 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.860800982 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.860876083 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.860964060 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.860980034 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.861715078 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.865612030 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.866414070 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:14.866498947 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.866512060 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:14.871190071 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:15.710689068 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:15.710720062 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:15.711034060 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:15.711141109 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:15.711893082 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:15.715847969 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:15.716690063 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:15.716783047 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:15.716830969 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:15.721489906 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:16.553725958 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:16.553877115 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:16.553940058 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:16.554224968 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:16.554997921 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:16.558835983 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:16.559740067 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:16.559824944 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:16.559879065 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:16.564512968 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:17.397701025 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:17.397713900 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:17.397916079 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:17.398155928 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:17.398977041 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:17.402821064 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:17.403649092 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:17.403733969 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:17.403815031 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:17.408436060 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:18.245516062 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:18.245547056 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:18.245661020 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:18.245661020 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:18.246301889 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:18.250433922 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:18.250986099 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:18.251075983 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:18.251091957 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:18.255739927 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.097091913 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.097285986 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.097413063 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.097459078 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.098134041 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.102089882 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.102850914 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.102910995 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.102924109 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.107501984 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.946382046 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.946491003 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.946497917 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.946549892 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.947262049 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.952088118 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.952860117 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:19.952905893 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.952929020 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:19.958456039 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:20.380525112 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.380564928 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.380577087 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.380834103 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.380834103 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.380861998 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.382221937 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.386925936 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.556171894 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.556380987 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.556489944 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.561120033 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.728286028 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.728379011 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.729178905 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.734083891 CET	443	59320	34.254.182.186	192.168.2.14
Mar 18, 2025 04:40:20.734144926 CET	59320	443	192.168.2.14	34.254.182.186
Mar 18, 2025 04:40:20.782788992 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:20.782864094 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:20.782879114 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:20.782946110 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:20.784444094 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:20.787610054 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:20.789113045 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:20.789158106 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:20.789216042 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:20.793853998 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:21.630865097 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:21.631030083 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:21.631066084 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:21.631098032 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:21.631611109 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:21.635828018 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:21.636295080 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:21.636358976 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:21.636389017 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:21.641021013 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:22.461241007 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:22.461363077 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:22.461360931 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:22.461422920 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:22.462076902 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:22.466054916 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:22.466738939 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:22.466792107 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:22.466815948 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:22.471482038 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:23.311499119 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:23.311512947 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:23.311638117 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:23.311697006 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:23.312359095 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:23.316278934 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:23.317073107 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:23.317152977 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:23.317234993 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:23.321866989 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.161147118 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.161231995 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.161290884 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.161350965 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.162024021 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.166529894 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.167887926 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.167947054 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.168005943 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.173295021 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.995229959 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.995240927 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:24.995337963 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.995404959 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:24.996041059 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.000005007 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.000644922 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.000732899 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.000811100 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.005525112 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.862168074 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.862216949 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.862298965 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.862369061 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.863149881 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.867002010 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.867831945 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:25.867918015 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.867938995 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:25.872586966 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:26.695013046 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:26.695154905 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:26.695352077 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:26.695452929 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:26.696290970 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:26.700088978 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:26.700934887 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:26.701009989 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:26.701103926 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:26.705748081 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:27.528351068 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:27.528362036 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:27.528579950 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:27.528729916 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:27.529469013 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:27.533444881 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:27.534136057 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:27.534255028 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:27.534327030 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:27.538933039 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:28.362008095 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:28.362020016 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:28.362152100 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:28.362241030 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:28.363001108 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:28.366822958 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:28.367672920 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:28.367758036 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:28.367826939 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:28.372476101 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:29.197537899 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:29.197679996 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:29.197719097 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:29.197799921 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:29.198517084 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:29.202394009 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:29.203183889 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:29.203280926 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:29.203382015 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:29.208018064 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.052807093 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.052846909 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.052979946 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.052979946 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.053610086 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.057610989 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.058281898 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.058365107 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.058378935 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.063112974 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.889426947 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.889519930 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.889703989 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.889703989 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.890346050 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.894454956 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.895072937 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:30.895140886 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.895188093 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:30.899863005 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:31.720582962 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:31.720693111 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:31.720736027 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:31.720792055 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:31.721385002 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:31.725409985 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:31.726066113 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:31.726155043 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:31.726175070 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:31.730812073 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:32.560631037 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:32.560642958 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:32.560782909 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:32.560812950 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:32.561371088 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:32.565445900 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:32.566063881 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:32.566123962 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:32.566162109 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:32.570818901 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:33.435245037 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:33.435369968 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:33.435370922 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:33.435425997 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:33.436021090 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:33.440028906 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:33.440773010 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:33.440821886 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:33.440856934 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:33.445498943 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:34.293109894 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:34.293236971 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:34.293246031 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:34.293286085 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:34.293715000 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:34.297935963 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:34.298419952 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:34.298500061 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:34.298511982 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:34.303164959 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.144686937 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.144785881 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.144815922 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.145004988 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.145407915 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.149641037 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.150026083 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.150089979 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.150120974 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.154766083 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.989620924 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.989773989 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.989799976 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.989995003 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.990539074 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.994647026 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.995233059 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:35.995286942 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.995330095 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:35.999963999 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:36.823327065 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:36.823402882 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:36.823627949 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:36.823659897 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:36.824289083 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:36.828264952 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:36.828998089 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:36.829056025 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:36.829073906 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:36.833761930 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:37.673389912 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:37.673470974 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:37.673515081 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:37.673546076 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:37.674074888 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:37.678296089 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:37.678747892 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:37.678832054 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:37.678844929 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:37.683507919 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:38.511048079 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:38.511164904 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:38.511177063 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:38.511248112 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:38.511753082 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:38.515911102 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:38.516422987 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:38.516489983 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:38.516520977 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:38.521158934 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:38.866910934 CET	46540	443	192.168.2.14	185.125.190.26
Mar 18, 2025 04:40:39.357574940 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:39.357592106 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:39.357981920 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:39.358175039 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:39.359034061 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:39.362915993 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:39.363785982 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:39.363858938 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:39.363910913 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:39.368545055 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:40.187438965 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:40.187598944 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:40.187740088 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:40.187843084 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:40.188544989 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:40.192466974 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:40.193242073 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:40.193324089 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:40.193376064 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:40.198050022 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.037511110 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.037653923 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.037700891 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.037760019 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.038383007 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.042426109 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.043055058 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.043245077 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.043245077 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.047904015 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.870192051 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.870244980 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.870397091 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.870445013 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.870975971 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.875073910 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.875633001 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:41.875691891 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.875714064 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:41.880350113 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:42.703850031 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:42.703995943 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:42.704022884 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:42.704082012 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:42.704791069 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:42.708791971 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:42.709451914 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:42.709511995 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:42.709547997 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:42.714150906 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:43.572817087 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:43.572961092 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:43.573019028 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:43.573095083 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:43.573781013 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:43.577763081 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:43.578437090 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:43.578521013 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:43.578592062 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:43.583244085 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:44.427860022 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:44.427982092 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:44.428008080 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:44.428030014 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:44.428617954 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:44.432651997 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:44.433327913 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:44.433446884 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:44.433497906 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:44.438204050 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:45.260426998 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:45.260560989 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:45.260591984 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:45.260627985 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:45.261467934 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:45.265283108 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:45.266117096 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:45.266207933 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:45.266304970 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:45.270981073 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.119276047 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.119342089 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.119401932 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.119472027 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.119983912 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.124125004 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.124695063 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.124799013 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.124850988 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.129504919 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.957328081 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.957448006 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.957540035 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.957639933 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.958307028 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.962316990 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.963009119 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:46.963066101 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.963119030 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:46.967806101 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:47.806507111 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:47.806794882 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:47.807049990 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:47.807154894 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:47.807605028 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:47.811889887 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:47.812341928 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:47.812397957 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:47.812422991 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:47.817082882 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:48.682224989 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:48.682320118 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:48.682341099 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:48.682368994 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:48.682811975 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:48.686976910 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:48.687463045 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:48.687582016 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:48.687603951 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:48.692257881 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:49.513432980 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:49.513648987 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:49.513689995 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:49.513786077 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:49.514272928 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:49.518436909 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:49.518918991 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:49.518975019 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:49.519004107 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:49.523653984 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:50.351582050 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:50.351665974 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:50.351851940 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:50.351852894 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:50.352324963 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:50.356565952 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:50.356991053 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:50.357114077 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:50.357166052 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:50.361861944 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:51.186853886 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:51.186948061 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:51.186985016 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:51.187051058 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:51.187602043 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:51.191735029 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:51.192224026 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:51.192317009 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:51.192353010 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:51.197052002 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.085418940 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.085544109 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.085643053 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.085724115 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.086430073 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.090564013 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.091310978 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.091415882 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.091610909 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.096254110 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.925364017 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.925503016 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.925542116 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.925611973 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.926074028 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.930236101 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.930706978 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:52.930763006 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.930783033 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:52.935503960 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:53.761545897 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:53.761681080 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:53.761708975 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:53.761889935 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:53.762464046 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:53.768662930 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:53.768673897 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:53.768791914 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:53.768851995 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:53.774689913 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:54.593580008 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:54.593693018 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:54.593794107 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:54.593794107 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:54.594311953 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:54.598472118 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:54.599006891 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:54.599062920 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:54.599081993 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:54.604167938 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:55.428759098 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:55.428860903 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:55.429013968 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:55.429045916 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:55.429655075 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:55.434763908 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:55.434786081 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:55.434884071 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:55.434936047 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:55.439511061 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:56.277143002 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:56.277276993 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:56.277317047 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:56.277401924 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:56.278115034 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:56.281992912 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:56.282867908 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:56.282939911 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:56.283009052 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:56.287894011 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.119350910 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.119448900 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.119636059 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.119636059 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.120075941 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.124331951 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.124756098 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.124887943 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.124902010 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.129559040 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.958537102 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.958559036 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.958687067 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.958687067 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.959331036 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.964627028 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.964642048 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:57.964690924 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.964719057 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:57.969413996 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:58.791413069 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:58.791573048 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:58.791583061 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:58.791650057 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:58.792119026 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:58.796278000 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:58.796772957 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:58.796857119 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:58.796881914 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:58.801527977 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:59.643153906 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:59.643273115 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:59.643558979 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:59.643558979 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:59.644052982 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:59.648258924 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:59.648760080 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:40:59.648813009 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:59.648834944 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:40:59.653570890 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:00.510974884 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:00.511023998 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:00.511094093 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:00.511116982 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:00.511502981 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:00.515837908 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:00.516191006 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:00.516231060 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:00.516254902 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:00.520915031 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:01.345333099 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:01.345424891 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:01.345596075 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:01.345653057 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:01.346004009 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:01.352371931 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:01.352381945 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:01.352529049 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:01.352549076 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:01.357167006 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:02.199634075 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:02.199759007 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:02.199785948 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:02.199846029 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:02.200325966 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:02.204468966 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:02.205075979 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:02.205128908 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:02.205151081 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:02.209794044 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.048485994 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.048496962 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.048672915 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.048815012 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.049520016 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.053433895 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.054168940 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.054249048 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.054327011 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.058943987 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.894576073 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.894686937 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.894773006 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.894860983 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.895298004 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.899542093 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.899939060 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:03.899992943 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.900010109 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:03.904629946 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:04.733619928 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:04.733764887 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:04.734070063 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:04.734132051 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:04.734554052 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:04.738818884 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:04.739262104 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:04.739343882 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:04.739360094 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:04.744055033 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:05.566735029 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:05.566871881 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:05.566904068 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:05.567070961 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:05.567554951 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:05.571732998 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:05.572268963 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:05.572331905 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:05.572351933 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:05.577043056 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:06.415817976 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:06.415961027 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:06.415963888 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:06.416023016 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:06.416451931 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:06.614775896 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:06.614878893 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:06.616812944 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:06.616825104 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:06.616935968 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:06.616962910 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:06.621681929 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:07.463237047 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:07.463360071 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:07.463380098 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:07.463468075 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:07.463896990 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:07.468097925 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:07.468518019 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:07.468575954 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:07.468605995 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:07.473257065 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:08.311333895 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:08.311434984 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:08.311477900 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:08.311592102 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:08.312247038 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:08.316279888 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:08.317035913 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:08.317104101 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:08.317137957 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:08.321769953 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:09.163845062 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:09.163969994 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:09.164069891 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:09.164129972 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:09.164557934 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:09.168766022 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:09.169188976 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:09.169272900 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:09.169294119 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:09.174156904 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.025187969 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.025403023 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.025419950 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.025619984 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.026125908 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.030256033 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.030824900 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.030880928 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.030900955 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.035521984 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.858891964 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.858905077 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.859005928 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.859044075 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.859455109 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.863688946 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.864176035 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:10.864250898 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.864312887 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:10.868973017 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:11.711616039 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:11.711637020 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:11.711800098 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:11.711993933 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:11.712702990 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:11.720940113 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:11.721479893 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:11.721556902 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:11.721623898 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:11.726237059 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:12.546034098 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:12.546169043 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:12.546293974 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:12.546371937 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:12.547255039 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:12.551084042 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:12.551903963 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:12.552017927 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:12.552031994 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:12.556695938 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:13.396136045 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:13.396178961 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:13.396330118 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:13.396421909 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:13.397087097 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:13.401014090 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:13.401801109 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:13.401875019 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:13.401936054 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:13.406620979 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:14.231070042 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:14.231185913 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:14.231275082 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:14.231350899 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:14.231978893 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:14.235987902 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:14.236654043 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:14.236742973 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:14.236790895 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:14.241477966 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.065728903 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.065761089 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.065917015 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.066010952 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.066694021 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.070648909 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.071499109 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.071616888 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.071667910 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.076360941 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.912368059 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.912446976 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.912499905 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.912671089 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.913436890 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.917378902 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.918150902 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:15.918229103 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.918277025 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:15.922904968 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:16.743402004 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:16.743741035 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:16.743794918 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:16.743890047 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:16.744553089 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:16.748528004 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:16.749258995 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:16.749334097 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:16.749387026 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:16.754035950 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:17.591511011 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:17.591644049 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:17.592367887 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:17.592503071 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:17.593183994 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:17.597131968 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:17.597877979 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:17.597963095 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:17.598027945 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:17.602628946 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:18.428983927 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:18.429162025 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:18.429188967 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:18.429240942 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:18.429635048 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:18.434053898 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:18.434432983 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:18.434557915 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:18.434576988 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:18.439223051 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:19.271275043 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:19.271294117 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:19.271451950 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:19.271495104 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:19.271903038 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:19.276989937 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:19.277090073 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:19.277144909 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:19.277163029 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:19.282665014 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.114917994 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.114984989 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.115067959 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.115067959 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.115444899 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.119782925 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.120163918 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.120290995 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.120290995 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.124994993 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.981115103 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.981261015 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.981420040 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.981460094 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.981852055 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.986069918 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.986525059 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:20.986604929 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.986623049 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:20.991265059 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:21.816997051 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:21.817183971 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:21.817194939 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:21.817420006 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:21.817872047 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:21.822114944 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:21.822549105 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:21.822607040 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:21.822628975 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:21.827281952 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:22.660712957 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:22.660834074 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:22.660856962 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:22.660918951 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:22.661343098 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:22.666841984 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:22.666853905 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:22.666930914 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:22.666996956 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:22.672312021 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.174581051 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.174593925 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.174657106 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.174698114 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.174698114 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.174783945 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.175328016 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.175365925 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.175374985 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.179860115 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.184076071 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:24.184127092 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.184163094 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:24.189162016 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.044079065 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.044118881 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.044256926 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.044290066 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.044744015 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.049854040 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.050446987 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.050534964 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.050554037 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.055553913 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.902292967 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.902396917 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.902475119 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.902539968 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.902981997 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.907169104 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.907735109 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:25.907788038 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.907820940 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:25.912470102 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:26.745944023 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:26.746067047 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:26.746072054 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:26.746191025 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:26.746850014 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:26.750860929 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:26.751550913 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:26.751657963 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:26.751676083 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:26.756284952 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:27.582277060 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:27.582374096 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:27.582434893 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:27.582521915 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:27.582896948 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:27.587330103 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:27.587625980 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:27.587680101 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:27.587709904 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:27.594125986 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:28.424701929 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:28.424782038 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:28.424801111 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:28.424849987 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:28.425271034 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:28.429616928 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:28.429928064 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:28.430046082 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:28.430063963 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:28.434910059 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:29.255888939 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:29.256005049 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:29.256004095 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:29.256074905 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:29.256545067 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:29.260704994 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:29.261246920 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:29.261318922 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:29.261353970 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:29.265955925 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.092972040 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.092993021 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.093099117 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.093138933 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.093570948 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.098975897 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.098989010 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.099103928 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.099123955 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.103777885 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.937263012 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.937359095 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.937431097 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.937478065 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.937942982 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.942253113 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.942683935 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:30.942737103 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.942764997 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:30.947443008 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:31.775432110 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:31.775532007 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:31.775652885 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:31.775696039 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:31.776225090 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:31.780374050 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:31.781287909 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:31.781341076 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:31.781363964 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:31.786047935 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:32.609570980 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:32.609723091 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:32.609752893 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:32.609811068 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:32.610277891 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:32.614471912 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:32.614948988 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:32.615036964 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:32.615051031 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:32.619669914 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:33.464423895 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:33.464535952 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:33.464617014 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:33.464700937 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:33.465125084 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:33.469352007 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:33.469821930 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:33.469867945 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:33.469888926 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:33.474534988 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:34.338489056 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:34.338515997 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:34.338526011 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:34.338615894 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:34.338615894 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:34.338649035 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:34.339297056 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:34.343380928 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:34.343986988 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:34.344105959 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:34.344120979 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:34.349288940 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:35.174974918 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:35.175070047 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:35.175226927 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:35.175257921 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:35.175755024 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:35.179980993 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:35.180460930 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:35.180519104 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:35.180567980 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:35.185235977 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.007158041 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.007263899 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.007340908 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.007397890 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.007915974 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.012099981 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.012614012 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.012721062 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.012748003 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.017405033 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.861591101 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.861742020 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.861809969 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.861849070 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.862482071 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.866992950 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.867727995 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:36.867825031 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.867881060 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:36.872579098 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:37.693381071 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:37.693392038 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:37.693523884 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:37.693557024 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:37.693989038 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:37.698251963 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:37.698653936 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:37.698765039 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:37.698786974 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:37.703479052 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:38.534982920 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:38.535083055 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:38.535202026 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:38.535254002 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:38.535715103 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:38.542089939 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:38.542103052 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:38.542212963 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:38.542227983 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:38.546885014 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:39.392179966 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:39.392218113 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:39.392313957 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:39.392462969 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:39.393127918 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:39.397222996 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:39.397758007 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:39.397830963 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:39.397905111 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:39.402566910 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:40.237204075 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:40.237348080 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:40.237485886 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:40.237591982 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:40.238223076 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:40.242217064 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:40.242907047 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:40.242986917 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:40.243038893 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:40.247692108 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.078486919 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.078541040 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.078608036 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.078608036 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.079068899 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.083235979 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.083766937 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.083822966 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.083841085 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.088521004 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.917004108 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.917053938 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.917131901 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.917175055 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.917565107 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.921819925 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.922247887 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:41.922333002 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.922347069 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:41.926980972 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:42.765486956 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:42.765609980 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:42.765630960 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:42.765671015 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:42.766130924 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:42.770374060 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:42.770870924 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:42.770920992 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:42.770941019 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:42.775554895 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:43.634331942 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:43.634432077 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:43.634465933 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:43.634529114 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:43.634845972 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:43.639143944 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:43.639533043 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:43.639656067 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:43.639656067 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:43.644314051 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:44.524291992 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:44.524451971 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:44.524518967 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:44.524540901 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:44.524941921 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:44.529223919 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:44.529628992 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:44.529684067 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:44.529706001 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:44.534341097 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:45.369564056 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:45.369712114 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:45.369725943 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:45.369771957 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:45.370174885 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:45.374475956 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:45.374916077 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:45.374964952 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:45.375011921 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:45.379683018 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:46.225079060 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:46.225152016 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:46.225183964 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:46.225238085 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:46.225665092 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:46.229865074 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:46.230334997 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:46.230391979 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:46.230422020 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:46.235141993 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.077807903 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.077927113 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.077992916 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.078090906 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.078617096 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.082760096 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.083302021 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.083381891 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.083424091 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.088064909 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.909704924 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.909809113 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.909827948 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.909873962 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.910315990 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.914524078 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.914983988 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:47.915067911 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.915081978 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:47.919708967 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:48.837230921 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:48.837326050 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:48.837351084 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:48.837441921 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:48.837896109 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:48.842083931 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:48.842519045 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:48.842567921 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:48.842593908 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:48.847280979 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:49.684626102 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:49.684755087 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:49.684842110 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:49.684904099 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:49.685359955 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:49.689544916 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:49.690016985 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:49.690100908 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:49.690121889 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:49.694818974 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:50.516915083 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:50.516927004 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:50.517021894 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:50.517052889 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:50.517524004 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:50.521707058 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:50.522213936 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:50.522272110 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:50.522300005 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:50.526972055 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:51.357737064 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:51.357857943 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:51.357919931 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:51.357980013 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:51.358607054 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:51.362639904 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:51.363310099 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:51.363425970 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:51.363442898 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:51.368099928 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:52.194431067 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:52.194606066 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:52.194715977 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:52.194750071 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:52.195239067 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:52.199481964 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:52.199944019 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:52.200026035 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:52.200037956 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:52.204741001 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.034842014 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.034986973 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.035058975 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.035087109 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.035507917 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.039763927 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.040268898 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.040335894 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.040358067 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.045032024 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.882658005 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.882810116 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.882836103 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.882929087 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.883558989 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.887623072 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.888190985 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:53.888263941 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.888287067 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:53.892923117 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:54.744038105 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:54.744065046 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:54.744158983 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:54.744299889 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:54.744767904 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:54.749003887 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:54.749469995 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:54.749542952 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:54.749610901 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:54.754211903 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:55.587151051 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:55.587166071 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:55.587302923 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:55.587352991 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:55.587933064 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:55.593362093 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:55.593786001 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:55.593853951 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:55.593879938 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:55.598680973 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:56.430579901 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:56.430706024 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:56.430753946 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:56.430799007 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:56.431408882 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:56.435436964 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:56.436064959 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:56.436140060 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:56.436183929 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:56.440834999 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:57.290338993 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:57.290457010 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:57.290457010 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:57.290518045 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:57.290929079 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:57.295167923 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:57.295622110 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:57.295748949 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:57.295768023 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:57.300420046 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:58.180274010 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:58.180351973 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:58.180380106 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:58.180422068 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:58.181049109 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:58.185102940 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:58.185697079 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:58.185745955 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:58.185780048 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:58.190431118 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.016429901 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.016578913 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.016602993 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.016659021 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.017163038 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.021469116 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.021810055 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.021852970 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.021878958 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.026530027 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.926536083 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.926556110 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.926570892 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.926666021 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.926666021 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.926709890 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.927144051 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.932240963 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.932636976 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:41:59.932740927 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.932740927 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:41:59.938134909 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:00.785024881 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:00.785042048 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:00.785193920 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:00.785228968 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:00.785692930 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:00.790874004 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:00.791538954 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:00.791588068 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:00.791610003 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:00.796231031 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:01.627912045 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:01.628046036 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:01.628082037 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:01.628139019 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:01.628607988 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:01.632774115 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:01.633241892 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:01.633373022 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:01.633389950 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:01.638014078 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:02.461435080 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:02.461556911 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:02.461610079 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:02.461680889 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:02.462127924 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:02.466348886 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:02.466784000 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:02.466835976 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:02.466855049 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:02.471525908 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:03.295425892 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:03.295550108 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:03.295572042 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:03.295627117 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:03.296061039 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:03.300297022 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:03.300760031 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:03.300880909 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:03.300895929 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:03.305510044 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.151928902 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.152055025 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.152077913 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.152156115 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.152604103 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.156805992 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.157305002 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.157355070 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.157380104 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.162009001 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.991759062 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.991910934 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.992046118 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.992101908 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.992572069 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.996994019 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.998178959 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:04.998274088 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:04.998295069 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:05.002962112 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:05.833112955 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:05.833267927 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:05.833339930 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:05.833515882 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:05.834273100 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:05.838160038 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:05.839025021 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:05.839111090 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:05.839164972 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:05.843825102 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:06.711174011 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:06.711280107 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:06.711400986 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:06.711469889 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:06.711960077 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:06.716120005 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:06.716680050 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:06.716727018 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:06.716749907 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:06.721457005 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:07.599945068 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:07.600097895 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:07.600188971 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:07.600234985 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:07.600761890 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:07.606602907 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:07.606616020 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:07.606693983 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:07.606749058 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:07.611373901 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:08.443737984 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:08.443871021 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:08.443917036 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:08.443986893 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:08.444633007 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:08.448609114 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:08.449379921 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:08.449455976 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:08.449508905 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:08.454108000 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:09.303807020 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:09.303926945 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:09.303975105 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:09.304024935 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:09.304558992 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:09.308654070 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:09.309246063 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:09.309331894 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:09.309360981 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:09.314074993 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:10.161921978 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:10.162069082 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:10.162154913 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:10.162369013 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:10.162919998 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:10.167001963 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:10.167612076 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:10.167690039 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:10.167758942 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:10.172420025 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.013124943 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.013164043 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.013248920 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.013302088 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.013748884 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.018002987 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.018438101 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.018512011 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.018538952 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.023180008 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.890990019 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.891006947 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.891127110 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.891158104 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.891700983 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.895912886 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.896378994 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:11.896437883 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.896509886 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:11.901206970 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:12.747961044 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:12.748100042 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:12.748145103 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:12.748243093 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:12.748928070 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:12.752901077 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:12.753645897 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:12.753694057 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:12.753726959 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:12.758407116 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:13.588054895 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:13.588119030 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:13.588229895 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:13.588335991 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:13.589036942 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:13.593007088 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:13.593674898 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:13.593760967 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:13.593818903 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:13.598428965 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:14.439516068 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:14.439631939 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:14.439722061 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:14.439778090 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:14.440511942 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:14.444374084 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:14.445214987 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:14.445303917 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:14.445318937 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:14.449992895 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:15.279378891 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:15.279397011 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:15.279488087 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:15.279553890 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:15.280108929 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:15.285886049 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:15.285900116 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:15.285983086 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:15.286030054 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:15.291392088 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.114058971 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.114171028 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.114212036 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.114264011 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.114969015 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.118983030 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.119744062 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.119828939 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.119848013 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.124504089 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.968401909 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.968552113 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.968760967 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.968832016 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.969304085 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.973510027 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.974011898 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:16.974097967 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.974167109 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:16.979015112 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:17.802002907 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:17.802109003 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:17.802114964 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:17.802220106 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:17.802685022 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:17.806865931 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:17.807394028 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:17.807446003 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:17.807466984 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:17.812170982 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:18.634440899 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:18.634548903 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:18.634566069 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:18.634619951 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:18.635034084 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:18.639384031 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:18.639736891 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:18.639834881 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:18.639847994 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:18.644635916 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:19.488992929 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:19.489104033 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:19.489162922 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:19.489226103 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:19.489830017 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:19.493865013 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:19.494565010 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:19.494630098 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:19.494688034 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:19.499393940 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:20.342905998 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:20.343013048 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:20.343096972 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:20.343153000 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:20.343584061 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:20.347846985 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:20.348268032 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:20.348371983 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:20.348417044 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:20.353108883 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:21.196738958 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:21.196814060 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:21.196849108 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:21.196887970 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:21.197362900 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:21.201505899 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:21.202037096 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:21.202102900 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:21.202116966 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:21.206721067 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.024286032 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.024347067 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.024458885 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.024507999 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.025121927 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.029195070 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.029824972 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.029894114 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.029928923 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.034589052 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.861826897 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.861841917 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.861949921 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.861991882 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.862627029 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.866609097 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.867331028 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:22.867422104 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.867434978 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:22.872137070 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:23.696547031 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:23.696631908 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:23.696657896 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:23.696692944 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:23.697299004 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:23.701383114 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:23.702100039 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:23.702214003 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:23.702259064 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:23.706911087 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:24.531188965 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:24.531306028 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:24.531514883 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:24.531608105 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:24.532632113 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:24.536283016 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:24.537276983 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:24.537368059 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:24.537421942 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:24.542077065 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:25.388350964 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:25.388365984 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:25.388644934 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:25.388696909 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:25.389415979 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:25.393465042 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:25.394433022 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:25.394493103 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:25.394510984 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:25.399406910 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:26.217864990 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:26.217878103 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:26.218059063 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:26.218103886 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:26.218698978 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:26.223020077 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:26.223995924 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:26.224067926 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:26.224117994 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:26.229115009 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.064407110 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.064543962 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.064599037 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.064660072 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.065191031 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.069353104 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.069951057 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.070019960 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.070054054 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.074733019 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.895513058 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.895682096 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.895788908 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.895903111 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.896661997 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.900621891 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.901359081 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:27.901456118 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.901516914 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:27.906246901 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:28.743067026 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:28.743211985 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:28.743272066 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:28.743315935 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:28.743880987 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:28.747977972 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:28.748624086 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:28.748682022 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:28.748754025 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:28.753385067 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:29.574418068 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:29.574520111 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:29.574577093 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:29.574623108 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:29.575047016 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:29.579246998 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:29.579705954 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:29.579794884 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:29.579809904 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:29.584511995 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:30.413938999 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:30.414043903 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:30.414081097 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:30.414132118 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:30.414684057 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:30.418746948 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:30.419353008 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:30.419405937 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:30.419440031 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:30.424158096 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:31.267797947 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:31.267884016 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:31.267966986 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:31.268064976 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:31.268707037 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:31.272648096 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:31.273356915 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:31.273447037 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:31.273492098 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:31.278175116 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.135452032 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.135639906 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.135646105 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.135720968 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.136455059 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.140389919 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.141169071 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.141262054 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.141288042 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.145881891 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.969429016 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.969595909 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.969645977 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.969707012 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.970364094 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.974313021 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.975028992 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:32.975099087 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.975116014 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:32.979759932 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:33.812747002 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:33.812794924 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:33.812874079 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:33.812958956 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:33.813767910 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:33.817598104 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:33.818413019 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:33.818494081 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:33.818548918 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:33.823169947 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:34.668740034 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:34.668945074 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:34.669058084 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:34.669173002 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:34.670054913 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:34.673768997 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:34.675160885 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:34.675224066 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:34.675283909 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:34.679914951 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:35.511420965 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:35.511432886 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:35.511538982 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:35.511576891 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:35.512150049 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:35.516261101 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:35.516787052 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:35.516871929 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:35.516922951 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:35.521552086 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:36.353877068 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:36.353990078 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:36.354175091 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:36.354232073 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:36.354708910 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:36.358849049 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:36.359339952 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:36.359400034 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:36.359416008 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:36.364026070 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:37.191490889 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:37.191585064 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:37.191613913 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:37.191760063 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:37.192323923 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:37.196382046 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:37.197015047 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:37.197093964 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:37.197169065 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:37.201849937 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.041693926 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.041815996 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.041986942 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.042094946 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.042932034 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.046796083 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.047606945 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.047678947 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.047741890 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.052393913 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.874743938 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.874869108 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.874952078 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.875036001 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.875658035 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.879643917 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.880347967 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:38.880408049 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.880426884 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:38.885068893 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:39.707875967 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:39.708002090 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:39.708024979 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:39.708079100 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:39.708801985 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:39.712687969 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:39.713495016 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:39.713558912 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:39.713572979 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:39.718161106 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:40.554359913 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:40.554518938 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:40.554555893 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:40.554613113 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:40.555131912 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:40.562330008 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:40.562346935 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:40.562432051 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:40.562448978 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:40.567133904 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:41.389424086 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:41.389585972 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:41.389666080 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:41.389738083 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:41.390362978 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:41.394392967 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:41.395003080 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:41.395123005 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:41.395174026 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:41.399832964 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:42.220325947 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:42.220412970 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:42.220489979 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:42.220580101 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:42.221246004 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:42.225186110 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:42.225909948 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:42.226007938 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:42.226057053 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:42.230671883 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.050694942 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.050755024 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.050838947 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.050900936 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.051254034 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.055531979 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.055993080 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.056073904 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.056121111 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.060827017 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.897308111 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.897378922 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.897563934 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.897591114 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.900055885 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.902268887 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.904792070 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:43.904874086 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.904875040 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:43.909501076 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:44.748266935 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:44.748414040 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:44.748591900 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:44.748591900 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:44.749010086 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:44.753293037 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:44.753722906 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:44.753845930 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:44.753845930 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:44.758613110 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:45.599642992 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:45.599653959 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:45.599781036 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:45.599827051 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:45.600327015 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:45.605535984 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:45.606034994 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:45.606093884 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:45.606123924 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:45.612191916 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:46.453588963 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:46.453797102 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:46.453937054 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:46.453937054 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:46.454354048 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:46.458698034 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:46.458997011 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:46.459043026 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:46.459060907 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:46.463732004 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:47.308116913 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:47.308242083 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:47.308248043 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:47.308310032 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:47.308793068 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:47.313014030 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:47.313540936 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:47.313617945 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:47.313648939 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:47.318589926 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.142018080 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.142124891 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.142151117 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.142240047 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.142755985 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.146958113 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.147454977 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.147537947 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.147591114 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.152241945 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.973865032 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.973984003 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.974009991 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.974045038 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.974574089 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.978672028 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.979288101 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:48.979376078 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.979398012 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:48.984016895 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:49.808785915 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:49.808800936 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:49.808912992 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:49.808980942 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:49.809453011 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:49.813611984 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:49.814173937 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:49.814255953 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:49.814255953 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:49.818914890 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:50.656027079 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:50.656192064 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:50.656275034 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:50.656332016 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:50.656806946 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:50.660954952 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:50.661468029 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:50.661554098 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:50.661581039 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:50.666279078 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:51.504935026 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:51.504946947 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:51.505186081 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:51.505186081 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:51.505675077 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:51.509888887 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:51.510426044 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:51.510504961 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:51.510504961 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:51.515221119 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:52.345375061 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:52.345679998 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:52.345973015 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:52.346035004 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:52.346539974 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:52.352657080 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:52.353429079 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:52.353518009 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:52.353538036 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:52.360498905 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:53.191042900 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:53.191199064 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:53.191206932 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:53.191406965 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:53.192162037 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:53.196125984 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:53.196825027 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:53.196887970 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:53.197004080 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:53.201695919 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.024883986 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.025001049 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.025043964 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.025110960 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.025618076 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.030030966 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.030241013 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.030291080 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.030317068 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.035056114 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.856937885 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.856950045 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.857242107 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.857242107 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.857752085 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.861962080 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.862493992 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:54.862575054 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.862629890 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:54.867302895 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:55.705248117 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:55.705256939 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:55.705554008 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:55.705554008 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:55.706012011 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:55.711165905 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:55.711576939 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:55.711690903 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:55.711746931 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:55.717752934 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:56.560292006 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:56.560303926 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:56.560507059 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:56.560507059 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:56.560981035 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:56.568078995 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:56.568089962 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:56.568161011 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:56.568185091 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:56.572971106 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:57.398649931 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:57.398773909 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:57.398803949 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:57.398894072 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:57.399447918 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:57.403556108 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:57.404156923 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:57.404211998 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:57.404232979 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:57.408900976 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:58.236268997 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:58.236368895 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:58.236494064 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:58.236494064 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:58.237008095 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:58.241234064 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:58.241750002 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:58.241847038 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:58.241862059 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:58.246589899 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.067903996 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.068111897 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.068118095 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.068214893 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.068736076 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.072952032 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.073462963 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.073517084 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.073544025 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.078416109 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.920315981 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.920484066 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.920614004 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.920651913 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.921490908 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.925323963 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.926158905 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:42:59.926228046 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.926287889 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:42:59.930880070 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:00.761435986 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:00.761544943 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:00.761634111 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:00.761634111 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:00.762064934 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:00.767384052 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:00.767395020 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:00.767498016 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:00.767513990 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:00.772660017 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:01.612838030 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:01.612936020 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:01.613040924 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:01.613116980 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:01.613918066 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:01.617742062 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:01.618556976 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:01.618628025 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:01.618699074 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:01.623332977 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:02.472826004 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:02.472898006 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:02.473212004 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:02.473212004 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:02.474035978 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:02.477921009 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:02.478770018 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:02.478859901 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:02.478923082 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:02.483617067 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:03.324532986 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:03.324656010 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:03.324736118 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:03.324897051 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:03.325644016 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:03.329596996 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:03.330355883 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:03.330423117 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:03.330495119 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:03.335113049 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:04.174048901 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:04.174246073 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:04.174299002 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:04.174345970 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:04.174866915 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:04.179016113 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:04.179528952 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:04.179753065 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:04.179766893 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:04.184429884 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.007574081 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.007702112 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.007767916 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.007792950 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.008322001 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.012489080 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.012995958 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.013048887 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.013072014 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.017651081 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.862226009 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.862268925 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.862366915 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.862396955 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.862922907 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.867048979 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.867551088 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:05.867657900 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.867679119 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:05.872349024 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:06.707212925 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:06.707381964 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:06.707432985 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:06.707494974 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:06.708144903 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:06.712198019 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:06.712810040 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:06.712913990 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:06.712965012 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:06.717621088 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:07.546387911 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:07.546477079 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:07.546602964 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:07.546664000 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:07.547163010 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:07.551301956 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:07.551867962 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:07.551944971 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:07.551990986 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:07.556896925 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:08.393150091 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:08.393244028 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:08.393317938 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:08.393346071 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:08.393811941 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:08.397969961 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:08.398507118 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:08.398597002 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:08.398624897 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:08.403255939 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:09.230278015 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:09.230390072 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:09.230448961 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:09.230510950 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:09.230983019 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:09.235135078 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:09.235687971 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:09.235745907 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:09.235769033 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:09.240398884 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.068422079 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.068552017 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.068593025 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.068654060 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.069257021 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.073329926 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.073985100 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.074079990 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.074094057 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.078874111 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.898792028 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.898919106 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.899034023 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.899152040 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.899638891 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.903768063 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.904320002 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:10.904369116 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.904393911 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:10.909073114 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:11.747451067 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:11.747592926 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:11.748157024 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:11.748219013 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:11.748703003 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:11.752831936 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:11.753412008 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:11.753482103 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:11.753516912 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:11.758569956 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:12.581468105 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:12.581599951 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:12.581660986 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:12.581729889 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:12.582205057 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:12.586376905 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:12.586985111 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:12.587029934 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:12.587057114 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:12.591720104 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:13.567368031 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:13.567378044 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:13.567389965 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:13.567471027 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:13.567471027 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:13.567518950 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:13.568017960 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:13.575757027 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:13.575766087 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:13.575923920 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:13.575968027 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:13.582954884 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:14.404370070 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:14.404417038 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:14.404535055 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:14.404597998 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:14.405119896 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:14.409219027 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:14.409859896 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:14.410021067 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:14.410038948 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:14.414685965 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:15.247373104 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:15.247495890 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:15.247529984 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:15.247600079 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:15.248083115 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:15.252310991 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:15.252794981 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:15.252842903 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:15.252865076 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:15.257576942 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.086427927 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.086539984 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.086549997 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.086595058 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.087075949 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.091279984 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.091754913 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.091831923 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.091854095 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.096478939 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.934572935 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.934709072 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.934720993 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.934866905 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.935400009 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.939587116 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.940150023 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:16.940241098 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.940264940 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:16.944906950 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:17.768045902 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:17.768129110 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:17.768290997 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:17.768290997 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:17.768814087 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:17.773127079 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:17.773508072 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:17.773614883 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:17.773658991 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:17.778356075 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:18.603120089 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:18.603209972 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:18.603337049 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:18.603384972 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:18.603892088 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:18.608001947 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:18.608659983 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:18.608716011 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:18.608757019 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:18.613415003 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:19.459633112 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:19.459779024 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:19.459800959 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:19.459861994 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:19.460410118 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:19.464771032 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:19.465658903 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:19.465789080 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:19.465804100 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:19.470596075 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:20.340909958 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:20.340925932 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:20.341016054 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:20.341079950 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:20.341588974 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:20.345731974 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:20.346245050 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:20.346297026 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:20.346332073 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:20.350990057 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:21.180732965 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:21.180746078 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:21.181052923 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:21.181106091 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:21.181881905 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:21.186690092 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:21.187330008 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:21.187400103 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:21.187421083 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:21.192850113 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.021450043 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.021471024 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.021605015 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.021640062 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.022138119 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.027431965 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.028086901 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.028192043 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.028227091 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.034035921 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.881119967 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.881294966 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.881330967 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.881406069 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.881856918 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.886086941 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.886548042 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:22.886593103 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.886622906 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:22.891340017 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:23.715056896 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:23.715166092 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:23.715189934 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:23.715245008 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:23.715657949 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:23.719950914 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:23.720387936 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:23.720457077 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:23.720489979 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:23.725122929 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:24.563437939 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:24.563586950 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:24.563587904 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:24.563671112 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:24.564219952 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:24.568365097 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:24.568881989 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:24.568927050 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:24.568948030 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:24.573653936 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:25.415433884 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:25.415715933 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:25.415755987 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:25.415858984 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:25.416590929 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:25.420536041 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:25.421329975 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:25.421469927 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:25.421504974 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:25.426182985 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:26.263818979 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:26.263839960 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:26.263972044 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:26.264010906 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:26.264602900 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:26.269309998 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:26.269898891 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:26.270021915 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:26.270057917 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:26.275481939 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.101032019 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.101052046 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.101197004 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.101280928 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.101900101 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.106590986 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.107069969 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.107127905 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.107198954 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.111913919 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.938337088 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.938652039 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.938657999 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.938807011 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.939730883 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.943943977 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.945024014 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:27.945132017 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.945213079 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:27.949886084 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:28.771924973 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:28.772028923 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:28.772079945 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:28.772226095 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:28.773087025 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:28.776900053 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:28.777750015 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:28.777842999 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:28.777910948 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:28.782502890 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:29.607011080 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:29.607096910 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:29.607239008 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:29.607279062 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:29.607757092 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:29.611960888 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:29.612435102 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:29.612520933 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:29.612546921 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:29.617211103 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:30.439070940 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:30.439090014 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:30.439280033 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:30.439320087 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:30.439964056 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:30.444077015 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:30.444796085 CET	55555	33064	103.77.246.204	192.168.2.14
Mar 18, 2025 04:43:30.444998026 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:30.445033073 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:43:30.449801922 CET	55555	33064	103.77.246.204	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 04:42:42.837177038 CET	38171	53	192.168.2.14	1.1.1.1
Mar 18, 2025 04:42:42.837248087 CET	56494	53	192.168.2.14	1.1.1.1
Mar 18, 2025 04:42:42.845403910 CET	53	56494	1.1.1.1	192.168.2.14
Mar 18, 2025 04:42:42.845736980 CET	53	38171	1.1.1.1	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 18, 2025 04:42:42.837177038 CET	192.168.2.14	1.1.1.1	0xee69	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Mar 18, 2025 04:42:42.837248087 CET	192.168.2.14	1.1.1.1	0xc989	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 18, 2025 04:42:42.845736980 CET	1.1.1.1	192.168.2.14	0xee69	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Mar 18, 2025 04:42:42.845736980 CET	1.1.1.1	192.168.2.14	0xee69	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Mar 18, 2025 04:40:20.380577087 CET	34.254.182.186	443	192.168.2.14	59320	CN=motd.ubuntu.com CN=R11, O=Let's Encrypt, C=US	CN=R11, O=Let's Encrypt, C=US CN=ISRG Root X1, O=Internet Security Research Group, C=US	Sun Jan 05 09:21:36 CET 2025 Wed Mar 13 01:00:00 CET 2024	Sat Apr 05 10:21:35 CEST 2025 Sat Mar 13 00:59:59 CET 2027
Mar 18, 2025 04:40:20.380577087 CET	34.254.182.186	443	192.168.2.14	59320	CN=R11, O=Let's Encrypt, C=US	CN=ISRG Root X1, O=Internet Security Research Group, C=US	Wed Mar 13 01:00:00 CET 2024	Sat Mar 13 00:59:59 CET 2027

System Behavior

Analysis Process: x-8.6-.Sakura.elf PID: 5507, Parent PID: 5429

General

Start time (UTC):	03:39:55
Start date (UTC):	18/03/2025
Path:	/tmp/x-8.6-.Sakura.elf
Arguments:	/tmp/x-8.6-.Sakura.elf
File size:	94679 bytes
MD5 hash:	3d6de6672f0ca032fa88da31f004bc45

File Activities

File Opened

File Read

Process Activities

Process Forked

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: x-8.6-.Sakura.elf PID: 5510, Parent PID: 5507

General

Start time (UTC):	03:39:55
Start date (UTC):	18/03/2025
Path:	/tmp/x-8.6-.Sakura.elf
Arguments:	-
File size:	94679 bytes
MD5 hash:	3d6de6672f0ca032fa88da31f004bc45

Process Activities

Process Forked

Chronological Activities

Analysis Process: x-8.6-.Sakura.elf PID: 5511, Parent PID: 5510

General

Start time (UTC):	03:39:55
Start date (UTC):	18/03/2025
Path:	/tmp/x-8.6-.Sakura.elf
Arguments:	-
File size:	94679 bytes
MD5 hash:	3d6de6672f0ca032fa88da31f004bc45

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: dash PID: 5542, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rm PID: 5542, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.oES6j5IUxA /tmp/tmp.yzSniEXAW6 /tmp/tmp.mWD5EgkZnS
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

File Activities

File Opened

File Deleted

File Read

Chronological Activities

Analysis Process: dash PID: 5543, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: cat PID: 5543, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.oES6j5IUxA
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5544, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: head PID: 5544, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5545, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: tr PID: 5545, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5546, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: cut PID: 5546, Parent PID: 3633

General

Start time (UTC):	03:40:19
Start date (UTC):	18/03/2025
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5547, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: cat PID: 5547, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/cat
Arguments:	cat /tmp/tmp.oES6j5IUxA
File size:	43416 bytes
MD5 hash:	7e9d213e404ad3bb82e4ebb2e1f2c1b3

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5548, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: head PID: 5548, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/head
Arguments:	head -n 10
File size:	47480 bytes
MD5 hash:	fd96a67145172477dd57131396fc9608

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5549, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: tr PID: 5549, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/tr
Arguments:	tr -d \\000-\\011\\013\\014\\016-\\037
File size:	51544 bytes
MD5 hash:	fbd1402dd9f72d8ebfff00ce7c3a7bb5

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5550, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: cut PID: 5550, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/cut
Arguments:	cut -c -80
File size:	47480 bytes
MD5 hash:	d8ed0ea8f22c0de0f8692d4d9f1759d3

File Activities

File Opened

File Read

Chronological Activities

Analysis Process: dash PID: 5551, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Process Activities

Process Overlayed (Exec)

Chronological Activities

Analysis Process: rm PID: 5551, Parent PID: 3633

General

Start time (UTC):	03:40:20
Start date (UTC):	18/03/2025
Path:	/usr/bin/rm
Arguments:	rm -f /tmp/tmp.oES6j5IUxA /tmp/tmp.yzSniEXAW6 /tmp/tmp.mWD5EgkZnS
File size:	72056 bytes
MD5 hash:	aa2b5496fdbfd88e38791ab81f90b95b

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x-8.6-.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Persistence and Installation Behavior

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Connections

System Behavior

Analysis Process: x-8.6-.Sakura.elf PID: 5507, Parent PID: 5429

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Network Activities

Socket Connecting

Chronological Activities

Linux Analysis Report
x-8.6-.Sakura.elf