Edit tour

Linux Analysis Report
x-3.2-.Sakura.elf

Overview

General Information

Sample name:	x-3.2-.Sakura.elf
Analysis ID:	1641242
MD5:	11db83b944cdb0af582b34829c935488
SHA1:	2ea10ebd17d94d07ba46c6cecdb941d6c76df6be
SHA256:	493921834c54a76b9b0ed969a840e30b322f30f4e275525ac5fc14971d2ccaad
Tags:	user-elfdigest
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641242
Start date and time:	2025-03-18 04:43:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	x-3.2-.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/0@0/0

Warnings

VT rate limit hit for: 103.77.246.204:55555

Runtime Messages

Command:	/tmp/x-3.2-.Sakura.elf
PID:	6284
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

x-3.2-.Sakura.elf (PID: 6284, Parent: 6207, MD5: 11db83b944cdb0af582b34829c935488) Arguments: /tmp/x-3.2-.Sakura.elf

x-3.2-.Sakura.elf New Fork (PID: 6285, Parent: 6284)

x-3.2-.Sakura.elf New Fork (PID: 6286, Parent: 6285)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
x-3.2-.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
x-3.2-.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x591:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_1b2e2a3a	unknown	unknown	0x81e:$a: 83 7D 18 00 74 25 8B 45 1C 83 E0 02 85 C0 74 1B C7 44 24 04 2D 00
x-3.2-.Sakura.elf	Linux_Trojan_Gafgyt_9127f7be	unknown	unknown	0xc7b:$a: E4 F7 E1 89 D0 C1 E8 03 89 45 E8 8B 45 E8 01 C0 03 45 E8 C1
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6285.1.0000000008048000.0000000008057000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6285.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6285.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x591:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
6284.1.0000000008048000.0000000008057000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6284.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc48c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc4f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc504:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc518:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc52c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc540:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc554:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc568:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc57c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc590:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc5f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc608:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc61c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6284.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_6122acdf	unknown	unknown	0x591:$a: E8 B0 00 FC 8B 7D E8 F2 AE 89 C8 F7 D0 48 48 89 45 F8 EB 03 FF
6284.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_1b2e2a3a	unknown	unknown	0x81e:$a: 83 7D 18 00 74 25 8B 45 1C 83 E0 02 85 C0 74 1B C7 44 24 04 2D 00
6285.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_1b2e2a3a	unknown	unknown	0x81e:$a: 83 7D 18 00 74 25 8B 45 1C 83 E0 02 85 C0 74 1B C7 44 24 04 2D 00
6285.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_9127f7be	unknown	unknown	0xc7b:$a: E4 F7 E1 89 D0 C1 E8 03 89 45 E8 8B 45 E8 01 C0 03 45 E8 C1
6284.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Gafgyt_9127f7be	unknown	unknown	0xc7b:$a: E4 F7 E1 89 D0 C1 E8 03 89 45 E8 8B 45 E8 01 C0 03 45 E8 C1
Process Memory Space: x-3.2-.Sakura.elf PID: 6284	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf2f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf43:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf57:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf6b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf7f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf93:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfa7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfbb:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfcf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfe3:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xff7:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x100b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x101f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1033:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1047:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x105b:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x106f:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1083:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1097:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ab:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10bf:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: x-3.2-.Sakura.elf PID: 6285	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xf35:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf49:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf5d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf71:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf85:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xf99:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfc1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfd5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xfe9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xffd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1011:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1025:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1039:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x104d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1061:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1075:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1089:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x109d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 7 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-18T04:44:45.717721+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49946	103.77.246.204	55555	TCP
2025-03-18T04:44:46.552292+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49948	103.77.246.204	55555	TCP
2025-03-18T04:44:47.392737+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49950	103.77.246.204	55555	TCP
2025-03-18T04:44:48.241986+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49952	103.77.246.204	55555	TCP
2025-03-18T04:44:49.083118+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49954	103.77.246.204	55555	TCP
2025-03-18T04:44:49.927420+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49956	103.77.246.204	55555	TCP
2025-03-18T04:44:50.774630+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49958	103.77.246.204	55555	TCP
2025-03-18T04:44:51.632267+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49960	103.77.246.204	55555	TCP
2025-03-18T04:44:52.469466+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49962	103.77.246.204	55555	TCP
2025-03-18T04:44:53.313754+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49964	103.77.246.204	55555	TCP
2025-03-18T04:44:54.151233+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49966	103.77.246.204	55555	TCP
2025-03-18T04:44:54.981391+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49968	103.77.246.204	55555	TCP
2025-03-18T04:44:55.820076+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49970	103.77.246.204	55555	TCP
2025-03-18T04:44:56.653571+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49972	103.77.246.204	55555	TCP
2025-03-18T04:44:57.489996+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49974	103.77.246.204	55555	TCP
2025-03-18T04:44:58.421109+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49976	103.77.246.204	55555	TCP
2025-03-18T04:44:59.384592+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49978	103.77.246.204	55555	TCP
2025-03-18T04:45:00.214543+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49980	103.77.246.204	55555	TCP
2025-03-18T04:45:01.040829+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49982	103.77.246.204	55555	TCP
2025-03-18T04:45:01.875460+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49984	103.77.246.204	55555	TCP
2025-03-18T04:45:02.718657+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49986	103.77.246.204	55555	TCP
2025-03-18T04:45:03.560327+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49988	103.77.246.204	55555	TCP
2025-03-18T04:45:04.392632+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49990	103.77.246.204	55555	TCP
2025-03-18T04:45:05.223279+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49992	103.77.246.204	55555	TCP
2025-03-18T04:45:06.080177+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49994	103.77.246.204	55555	TCP
2025-03-18T04:45:06.956117+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49996	103.77.246.204	55555	TCP
2025-03-18T04:45:07.810323+0100	2846526	1	A Network Trojan was detected	192.168.2.23	49998	103.77.246.204	55555	TCP
2025-03-18T04:45:08.649033+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50000	103.77.246.204	55555	TCP
2025-03-18T04:45:09.485845+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50002	103.77.246.204	55555	TCP
2025-03-18T04:45:10.323817+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50004	103.77.246.204	55555	TCP
2025-03-18T04:45:11.164995+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50006	103.77.246.204	55555	TCP
2025-03-18T04:45:11.999324+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50008	103.77.246.204	55555	TCP
2025-03-18T04:45:12.848140+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50010	103.77.246.204	55555	TCP
2025-03-18T04:45:13.687043+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50012	103.77.246.204	55555	TCP
2025-03-18T04:45:14.520144+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50014	103.77.246.204	55555	TCP
2025-03-18T04:45:15.371762+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50016	103.77.246.204	55555	TCP
2025-03-18T04:45:16.205120+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50018	103.77.246.204	55555	TCP
2025-03-18T04:45:17.058780+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50020	103.77.246.204	55555	TCP
2025-03-18T04:45:17.918020+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50022	103.77.246.204	55555	TCP
2025-03-18T04:45:18.769567+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50024	103.77.246.204	55555	TCP
2025-03-18T04:45:19.732916+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50026	103.77.246.204	55555	TCP
2025-03-18T04:45:20.569033+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50028	103.77.246.204	55555	TCP
2025-03-18T04:45:21.402764+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50030	103.77.246.204	55555	TCP
2025-03-18T04:45:22.234525+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50032	103.77.246.204	55555	TCP
2025-03-18T04:45:23.087093+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50034	103.77.246.204	55555	TCP
2025-03-18T04:45:23.918925+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50036	103.77.246.204	55555	TCP
2025-03-18T04:45:24.751760+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50038	103.77.246.204	55555	TCP
2025-03-18T04:45:25.587500+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50040	103.77.246.204	55555	TCP
2025-03-18T04:45:26.419186+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50042	103.77.246.204	55555	TCP
2025-03-18T04:45:27.267070+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50044	103.77.246.204	55555	TCP
2025-03-18T04:45:28.106271+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50046	103.77.246.204	55555	TCP
2025-03-18T04:45:28.958329+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50048	103.77.246.204	55555	TCP
2025-03-18T04:45:29.790930+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50050	103.77.246.204	55555	TCP
2025-03-18T04:45:30.622627+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50052	103.77.246.204	55555	TCP
2025-03-18T04:45:31.454387+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50054	103.77.246.204	55555	TCP
2025-03-18T04:45:32.288873+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50056	103.77.246.204	55555	TCP
2025-03-18T04:45:33.123207+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50058	103.77.246.204	55555	TCP
2025-03-18T04:45:33.956372+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50060	103.77.246.204	55555	TCP
2025-03-18T04:45:34.796584+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50062	103.77.246.204	55555	TCP
2025-03-18T04:45:35.647110+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50064	103.77.246.204	55555	TCP
2025-03-18T04:45:36.479399+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50066	103.77.246.204	55555	TCP
2025-03-18T04:45:37.331480+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50068	103.77.246.204	55555	TCP
2025-03-18T04:45:38.172612+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50070	103.77.246.204	55555	TCP
2025-03-18T04:45:39.012860+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50072	103.77.246.204	55555	TCP
2025-03-18T04:45:39.871078+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50074	103.77.246.204	55555	TCP
2025-03-18T04:45:40.718252+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50076	103.77.246.204	55555	TCP
2025-03-18T04:45:41.561795+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50078	103.77.246.204	55555	TCP
2025-03-18T04:45:42.401063+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50080	103.77.246.204	55555	TCP
2025-03-18T04:45:43.232046+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50082	103.77.246.204	55555	TCP
2025-03-18T04:45:44.068657+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50084	103.77.246.204	55555	TCP
2025-03-18T04:45:44.897927+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50086	103.77.246.204	55555	TCP
2025-03-18T04:45:45.771107+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50088	103.77.246.204	55555	TCP
2025-03-18T04:45:46.623818+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50090	103.77.246.204	55555	TCP
2025-03-18T04:45:47.454962+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50092	103.77.246.204	55555	TCP
2025-03-18T04:45:48.303793+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50094	103.77.246.204	55555	TCP
2025-03-18T04:45:49.132986+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50096	103.77.246.204	55555	TCP
2025-03-18T04:45:49.970345+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50098	103.77.246.204	55555	TCP
2025-03-18T04:45:50.804017+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50100	103.77.246.204	55555	TCP
2025-03-18T04:45:51.633582+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50102	103.77.246.204	55555	TCP
2025-03-18T04:45:52.489987+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50104	103.77.246.204	55555	TCP
2025-03-18T04:45:53.326238+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50106	103.77.246.204	55555	TCP
2025-03-18T04:45:54.162010+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50108	103.77.246.204	55555	TCP
2025-03-18T04:45:55.009990+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50110	103.77.246.204	55555	TCP
2025-03-18T04:45:55.858651+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50112	103.77.246.204	55555	TCP
2025-03-18T04:45:56.689251+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50114	103.77.246.204	55555	TCP
2025-03-18T04:45:57.523300+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50116	103.77.246.204	55555	TCP
2025-03-18T04:45:58.359051+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50118	103.77.246.204	55555	TCP
2025-03-18T04:45:59.203563+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50120	103.77.246.204	55555	TCP
2025-03-18T04:46:00.037055+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50122	103.77.246.204	55555	TCP
2025-03-18T04:46:00.866583+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50124	103.77.246.204	55555	TCP
2025-03-18T04:46:01.698599+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50126	103.77.246.204	55555	TCP
2025-03-18T04:46:02.552854+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50128	103.77.246.204	55555	TCP
2025-03-18T04:46:03.383765+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50130	103.77.246.204	55555	TCP
2025-03-18T04:46:04.236327+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50132	103.77.246.204	55555	TCP
2025-03-18T04:46:05.070857+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50134	103.77.246.204	55555	TCP
2025-03-18T04:46:05.924375+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50136	103.77.246.204	55555	TCP
2025-03-18T04:46:09.791162+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50138	103.77.246.204	55555	TCP
2025-03-18T04:46:10.629306+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50140	103.77.246.204	55555	TCP
2025-03-18T04:46:11.459545+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50142	103.77.246.204	55555	TCP
2025-03-18T04:46:12.297724+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50144	103.77.246.204	55555	TCP
2025-03-18T04:46:13.147068+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50146	103.77.246.204	55555	TCP
2025-03-18T04:46:14.178780+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50148	103.77.246.204	55555	TCP
2025-03-18T04:46:15.012638+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50150	103.77.246.204	55555	TCP
2025-03-18T04:46:15.852551+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50152	103.77.246.204	55555	TCP
2025-03-18T04:46:16.700980+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50154	103.77.246.204	55555	TCP
2025-03-18T04:46:17.535173+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50156	103.77.246.204	55555	TCP
2025-03-18T04:46:18.370911+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50158	103.77.246.204	55555	TCP
2025-03-18T04:46:19.212449+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50160	103.77.246.204	55555	TCP
2025-03-18T04:46:20.082421+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50162	103.77.246.204	55555	TCP
2025-03-18T04:46:20.928576+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50164	103.77.246.204	55555	TCP
2025-03-18T04:46:21.765904+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50166	103.77.246.204	55555	TCP
2025-03-18T04:46:22.626925+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50168	103.77.246.204	55555	TCP
2025-03-18T04:46:23.477310+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50170	103.77.246.204	55555	TCP
2025-03-18T04:46:24.322275+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50172	103.77.246.204	55555	TCP
2025-03-18T04:46:25.153980+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50174	103.77.246.204	55555	TCP
2025-03-18T04:46:25.983730+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50176	103.77.246.204	55555	TCP
2025-03-18T04:46:26.832766+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50178	103.77.246.204	55555	TCP
2025-03-18T04:46:27.666434+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50180	103.77.246.204	55555	TCP
2025-03-18T04:46:28.499167+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50182	103.77.246.204	55555	TCP
2025-03-18T04:46:29.338570+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50184	103.77.246.204	55555	TCP
2025-03-18T04:46:30.192763+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50186	103.77.246.204	55555	TCP
2025-03-18T04:46:31.029640+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50188	103.77.246.204	55555	TCP
2025-03-18T04:46:31.871423+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50190	103.77.246.204	55555	TCP
2025-03-18T04:46:32.726858+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50192	103.77.246.204	55555	TCP
2025-03-18T04:46:33.557344+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50194	103.77.246.204	55555	TCP
2025-03-18T04:46:34.392874+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50196	103.77.246.204	55555	TCP
2025-03-18T04:46:35.228585+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50198	103.77.246.204	55555	TCP
2025-03-18T04:46:36.108651+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50200	103.77.246.204	55555	TCP
2025-03-18T04:46:36.946080+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50202	103.77.246.204	55555	TCP
2025-03-18T04:46:37.790506+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50204	103.77.246.204	55555	TCP
2025-03-18T04:46:38.630070+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50206	103.77.246.204	55555	TCP
2025-03-18T04:46:39.484716+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50208	103.77.246.204	55555	TCP
2025-03-18T04:46:40.327834+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50210	103.77.246.204	55555	TCP
2025-03-18T04:46:41.180644+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50212	103.77.246.204	55555	TCP
2025-03-18T04:46:42.033356+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50214	103.77.246.204	55555	TCP
2025-03-18T04:46:42.867751+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50216	103.77.246.204	55555	TCP
2025-03-18T04:46:43.717906+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50218	103.77.246.204	55555	TCP
2025-03-18T04:46:44.558798+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50220	103.77.246.204	55555	TCP
2025-03-18T04:46:45.410636+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50222	103.77.246.204	55555	TCP
2025-03-18T04:46:46.246781+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50224	103.77.246.204	55555	TCP
2025-03-18T04:46:47.082827+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50226	103.77.246.204	55555	TCP
2025-03-18T04:46:47.913672+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50228	103.77.246.204	55555	TCP
2025-03-18T04:46:48.747124+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50230	103.77.246.204	55555	TCP
2025-03-18T04:46:49.582818+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50232	103.77.246.204	55555	TCP
2025-03-18T04:46:50.414264+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50234	103.77.246.204	55555	TCP
2025-03-18T04:46:51.261876+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50236	103.77.246.204	55555	TCP
2025-03-18T04:46:52.119865+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50238	103.77.246.204	55555	TCP
2025-03-18T04:46:52.977281+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50240	103.77.246.204	55555	TCP
2025-03-18T04:46:53.818998+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50242	103.77.246.204	55555	TCP
2025-03-18T04:46:54.667819+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50244	103.77.246.204	55555	TCP
2025-03-18T04:46:55.523185+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50246	103.77.246.204	55555	TCP
2025-03-18T04:46:56.380936+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50248	103.77.246.204	55555	TCP
2025-03-18T04:46:57.240433+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50250	103.77.246.204	55555	TCP
2025-03-18T04:46:58.077587+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50252	103.77.246.204	55555	TCP
2025-03-18T04:46:58.929412+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50254	103.77.246.204	55555	TCP
2025-03-18T04:46:59.766018+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50256	103.77.246.204	55555	TCP
2025-03-18T04:47:00.598336+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50258	103.77.246.204	55555	TCP
2025-03-18T04:47:01.439622+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50260	103.77.246.204	55555	TCP
2025-03-18T04:47:02.278071+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50262	103.77.246.204	55555	TCP
2025-03-18T04:47:03.115301+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50264	103.77.246.204	55555	TCP
2025-03-18T04:47:03.965652+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50266	103.77.246.204	55555	TCP
2025-03-18T04:47:04.806174+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50268	103.77.246.204	55555	TCP
2025-03-18T04:47:05.643196+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50270	103.77.246.204	55555	TCP
2025-03-18T04:47:06.479424+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50272	103.77.246.204	55555	TCP
2025-03-18T04:47:07.338072+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50274	103.77.246.204	55555	TCP
2025-03-18T04:47:08.189397+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50276	103.77.246.204	55555	TCP
2025-03-18T04:47:09.044251+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50278	103.77.246.204	55555	TCP
2025-03-18T04:47:09.885942+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50280	103.77.246.204	55555	TCP
2025-03-18T04:47:10.732240+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50282	103.77.246.204	55555	TCP
2025-03-18T04:47:11.575550+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50284	103.77.246.204	55555	TCP
2025-03-18T04:47:12.430811+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50286	103.77.246.204	55555	TCP
2025-03-18T04:47:13.283609+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50288	103.77.246.204	55555	TCP
2025-03-18T04:47:14.137024+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50290	103.77.246.204	55555	TCP
2025-03-18T04:47:14.976937+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50292	103.77.246.204	55555	TCP
2025-03-18T04:47:15.819744+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50294	103.77.246.204	55555	TCP
2025-03-18T04:47:16.655327+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50296	103.77.246.204	55555	TCP
2025-03-18T04:47:17.487476+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50298	103.77.246.204	55555	TCP
2025-03-18T04:47:18.321716+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50300	103.77.246.204	55555	TCP
2025-03-18T04:47:19.181201+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50302	103.77.246.204	55555	TCP
2025-03-18T04:47:20.018320+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50304	103.77.246.204	55555	TCP
2025-03-18T04:47:20.857073+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50306	103.77.246.204	55555	TCP
2025-03-18T04:47:21.689159+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50308	103.77.246.204	55555	TCP
2025-03-18T04:47:22.533426+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50310	103.77.246.204	55555	TCP
2025-03-18T04:47:23.369462+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50312	103.77.246.204	55555	TCP
2025-03-18T04:47:24.208205+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50314	103.77.246.204	55555	TCP
2025-03-18T04:47:25.057319+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50316	103.77.246.204	55555	TCP
2025-03-18T04:47:25.902339+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50318	103.77.246.204	55555	TCP
2025-03-18T04:47:26.748184+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50320	103.77.246.204	55555	TCP
2025-03-18T04:47:27.660347+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50322	103.77.246.204	55555	TCP
2025-03-18T04:47:28.512842+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50324	103.77.246.204	55555	TCP
2025-03-18T04:47:29.352304+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50326	103.77.246.204	55555	TCP
2025-03-18T04:47:30.195616+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50328	103.77.246.204	55555	TCP
2025-03-18T04:47:31.032795+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50330	103.77.246.204	55555	TCP
2025-03-18T04:47:31.859524+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50332	103.77.246.204	55555	TCP
2025-03-18T04:47:32.713216+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50334	103.77.246.204	55555	TCP
2025-03-18T04:47:33.567060+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50336	103.77.246.204	55555	TCP
2025-03-18T04:47:34.399342+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50338	103.77.246.204	55555	TCP
2025-03-18T04:47:35.233499+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50340	103.77.246.204	55555	TCP
2025-03-18T04:47:36.070987+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50342	103.77.246.204	55555	TCP
2025-03-18T04:47:36.936805+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50344	103.77.246.204	55555	TCP
2025-03-18T04:47:37.785172+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50346	103.77.246.204	55555	TCP
2025-03-18T04:47:38.620447+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50348	103.77.246.204	55555	TCP
2025-03-18T04:47:39.451714+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50350	103.77.246.204	55555	TCP
2025-03-18T04:47:40.295590+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50352	103.77.246.204	55555	TCP
2025-03-18T04:47:41.148331+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50354	103.77.246.204	55555	TCP
2025-03-18T04:47:41.991278+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50356	103.77.246.204	55555	TCP
2025-03-18T04:47:42.823955+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50358	103.77.246.204	55555	TCP
2025-03-18T04:47:43.656630+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50360	103.77.246.204	55555	TCP
2025-03-18T04:47:44.502388+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50362	103.77.246.204	55555	TCP
2025-03-18T04:47:45.337003+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50364	103.77.246.204	55555	TCP
2025-03-18T04:47:46.166591+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50366	103.77.246.204	55555	TCP
2025-03-18T04:47:47.012898+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50368	103.77.246.204	55555	TCP
2025-03-18T04:47:47.858036+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50370	103.77.246.204	55555	TCP
2025-03-18T04:47:48.692891+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50372	103.77.246.204	55555	TCP
2025-03-18T04:47:49.545554+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50374	103.77.246.204	55555	TCP
2025-03-18T04:47:50.393435+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50376	103.77.246.204	55555	TCP
2025-03-18T04:47:51.259435+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50378	103.77.246.204	55555	TCP
2025-03-18T04:47:52.120380+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50380	103.77.246.204	55555	TCP
2025-03-18T04:47:52.969276+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50382	103.77.246.204	55555	TCP
2025-03-18T04:47:53.817122+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50384	103.77.246.204	55555	TCP
2025-03-18T04:47:54.660211+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50386	103.77.246.204	55555	TCP
2025-03-18T04:47:55.504821+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50388	103.77.246.204	55555	TCP
2025-03-18T04:47:56.339080+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50390	103.77.246.204	55555	TCP
2025-03-18T04:47:57.186278+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50392	103.77.246.204	55555	TCP
2025-03-18T04:47:58.019458+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50394	103.77.246.204	55555	TCP
2025-03-18T04:47:58.855891+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50396	103.77.246.204	55555	TCP
2025-03-18T04:47:59.700200+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50398	103.77.246.204	55555	TCP
2025-03-18T04:48:00.564145+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50400	103.77.246.204	55555	TCP
2025-03-18T04:48:01.403623+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50402	103.77.246.204	55555	TCP
2025-03-18T04:48:02.249821+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50404	103.77.246.204	55555	TCP
2025-03-18T04:48:03.091599+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50406	103.77.246.204	55555	TCP
2025-03-18T04:48:03.927263+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50408	103.77.246.204	55555	TCP
2025-03-18T04:48:04.760159+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50410	103.77.246.204	55555	TCP
2025-03-18T04:48:05.604804+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50412	103.77.246.204	55555	TCP
2025-03-18T04:48:06.546124+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50414	103.77.246.204	55555	TCP
2025-03-18T04:48:07.387781+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50416	103.77.246.204	55555	TCP
2025-03-18T04:48:08.254953+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50418	103.77.246.204	55555	TCP
2025-03-18T04:48:09.091878+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50420	103.77.246.204	55555	TCP
2025-03-18T04:48:09.930936+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50422	103.77.246.204	55555	TCP
2025-03-18T04:48:10.785806+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50424	103.77.246.204	55555	TCP
2025-03-18T04:48:11.642422+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50426	103.77.246.204	55555	TCP
2025-03-18T04:48:12.483928+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50428	103.77.246.204	55555	TCP
2025-03-18T04:48:13.330089+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50430	103.77.246.204	55555	TCP
2025-03-18T04:48:14.179563+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50432	103.77.246.204	55555	TCP
2025-03-18T04:48:15.029733+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50434	103.77.246.204	55555	TCP
2025-03-18T04:48:15.865232+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50436	103.77.246.204	55555	TCP
2025-03-18T04:48:16.712156+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50438	103.77.246.204	55555	TCP
2025-03-18T04:48:17.544874+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50440	103.77.246.204	55555	TCP
2025-03-18T04:48:18.391822+0100	2846526	1	A Network Trojan was detected	192.168.2.23	50442	103.77.246.204	55555	TCP

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: x-3.2-.Sakura.elf

Avira: detected

Found malware configuration

Source: x-3.2-.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "103.77.246.204:55555"}

Multi AV Scanner detection for submitted file

Source: x-3.2-.Sakura.elf	Virustotal: Detection: 62%			Perma Link
Source: x-3.2-.Sakura.elf	ReversingLabs: Detection: 66%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/x-3.2-.Sakura.elf (PID: 6284)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49970 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49952 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49956 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50020 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50092 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50106 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49948 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50012 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50008 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50030 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50004 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50040 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50014 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50046 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50022 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50032 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49960 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49982 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49958 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50034 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50010 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50052 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49966 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50066 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49964 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50166 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49976 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49998 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50082 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50154 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50128 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49992 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50060 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50074 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50076 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49962 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50172 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49996 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50120 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50016 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50200 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50002 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49946 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50024 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49968 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50134 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49972 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50112 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50058 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50156 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50000 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50068 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50108 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50078 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50028 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50158 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49990 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50190 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50160 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50254 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50162 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50264 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50080 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50308 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50314 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49950 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50320 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49954 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50192 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50038 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49974 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50096 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50336 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50114 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50338 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50198 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49986 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50044 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50064 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50098 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50174 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50142 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50150 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50246 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50170 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49978 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50370 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50306 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50382 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50202 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50278 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50332 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50006 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50204 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50396 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50126 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50362 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50194 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50144 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50260 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50208 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50072 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50418 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50270 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50276 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50262 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50426 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50180 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50288 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50090 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50070 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50104 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50324 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50086 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50118 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50300 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50102 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50138 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50312 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50140 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50340 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50220 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50182 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50084 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50342 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50124 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50188 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50094 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50232 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50148 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49988 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50130 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50356 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50230 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50164 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50222 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50430 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50212 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50152 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50186 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49994 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50292 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50392 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50244 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50272 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50266 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50354 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50366 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50428 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50432 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50298 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50402 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50422 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50344 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50062 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50242 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50414 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50438 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50224 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50226 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49984 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50122 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50100 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50176 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50216 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50210 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50294 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50248 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50240 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50388 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50322 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50250 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50440 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50018 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50364 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50282 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:49980 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50408 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50252 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50218 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50036 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50328 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50302 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50042 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50054 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50424 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50056 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50374 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50234 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50214 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50088 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50310 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50404 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50304 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50346 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50358 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50360 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50116 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50256 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50236 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50390 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50378 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50026 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50400 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50258 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50132 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50286 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50316 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50110 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50412 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50318 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50290 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50384 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50206 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50348 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50350 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50398 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50196 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50416 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50228 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50368 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50442 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50280 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50268 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50406 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50284 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50296 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50274 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50420 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50380 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50146 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50386 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50330 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50334 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50410 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50168 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50048 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50184 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50238 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50394 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50050 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50326 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50352 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50372 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50434 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50136 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50178 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50376 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.23:50436 -> 103.77.246.204:55555

Source: global traffic

TCP traffic: 192.168.2.23:49946 -> 103.77.246.204:55555

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.43
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a Author: unknown
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9127f7be Author: unknown
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf Author: unknown
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a Author: unknown
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a Author: unknown
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be Author: unknown
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be Author: unknown
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 6284, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 6285, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6f24b67d0a6a4fc4e1cfea5a5414b82af1332a3e6074eb2178aee6b27702b407, id = 1b2e2a3a-1302-41c7-be99-43edb5563294, last_modified = 2021-09-16
Source: x-3.2-.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9127f7be reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 72c742cb8b11ddf030e10f67e13c0392748dcd970394ec77ace3d2baa705a375, id = 9127f7be-6e82-46a1-9f11-0b3570b0cd76, last_modified = 2021-09-16
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_6122acdf os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 283275705c729be23d7dc75056388ecae00390bd25ee7b66b0cfc9b85feee212, id = 6122acdf-1eef-45ea-83ea-699d21c2dc20, last_modified = 2021-09-16
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6f24b67d0a6a4fc4e1cfea5a5414b82af1332a3e6074eb2178aee6b27702b407, id = 1b2e2a3a-1302-41c7-be99-43edb5563294, last_modified = 2021-09-16
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_1b2e2a3a reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 6f24b67d0a6a4fc4e1cfea5a5414b82af1332a3e6074eb2178aee6b27702b407, id = 1b2e2a3a-1302-41c7-be99-43edb5563294, last_modified = 2021-09-16
Source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 72c742cb8b11ddf030e10f67e13c0392748dcd970394ec77ace3d2baa705a375, id = 9127f7be-6e82-46a1-9f11-0b3570b0cd76, last_modified = 2021-09-16
Source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9127f7be reference_sample = 899c072730590003b98278bdda21c15ecaa2f49ad51e417ed59e88caf054a72d, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 72c742cb8b11ddf030e10f67e13c0392748dcd970394ec77ace3d2baa705a375, id = 9127f7be-6e82-46a1-9f11-0b3570b0cd76, last_modified = 2021-09-16
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 6284, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: x-3.2-.Sakura.elf PID: 6285, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/0@0/0

Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crt1.S
Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crti.S
Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/crtn.S
Source: x-3.2-.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/i386/mmap.S

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: x-3.2-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-3.2-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: x-3.2-.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: x-3.2-.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 6285.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 6284.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 Remote System Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{
  "C2 url": "103.77.246.204:55555"
}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
x-3.2-.Sakura.elf	62%	Virustotal		Browse
x-3.2-.Sakura.elf	67%	ReversingLabs	Linux.Trojan.LnxSakura
x-3.2-.Sakura.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

⊘No contacted domains info

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
103.77.246.204:55555	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
103.77.246.204	unknown	India	136165	X4B-AS-APX4BDDoSProtectedAnnouncementsAU	true
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
103.77.246.204	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
91.189.91.43	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse
	EdiAf.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	EdiAf.mips.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	hgfs.arm6.elf	Get hash	malicious	Unknown	Browse
	kaizen.sh4.elf	Get hash	malicious	Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
91.189.91.42	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	main_arm7.elf	Get hash	malicious	Mirai	Browse
	EdiAf.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	EdiAf.mips.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse
	na.elf	Get hash	malicious	Prometei	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CANONICAL-ASGB	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	main_arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	EdiAf.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	EdiAf.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
CANONICAL-ASGB	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	91.189.91.42
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	185.125.190.26
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	main_arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	EdiAf.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	EdiAf.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
	na.elf	Get hash	malicious	Prometei	Browse	91.189.91.42
X4B-AS-APX4BDDoSProtectedAnnouncementsAU	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	smbhost.exe	Get hash	malicious	Xmrig	Browse	103.249.70.7
	http://ff.members.gerane.vn/	Get hash	malicious	Unknown	Browse	103.77.241.200
	Address_verification_form_awb_shipping_documents_Invoice_Billof lading000000000000000000000.vbs	Get hash	malicious	GuLoader	Browse	103.77.246.15
	Tracking_Invoice_Awb_BL_00340434757340073972.vbs	Get hash	malicious	Remcos, GuLoader	Browse	103.77.246.15
	Invoice_Awb_BL_238415455_01408202_pdf.vbs	Get hash	malicious	GuLoader	Browse	103.77.246.15
	7PY33AaMqH.elf	Get hash	malicious	Mirai, Okiru	Browse	103.77.246.53
INIT7CH	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	main_arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	EdiAf.m68k.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	EdiAf.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202
	na.elf	Get hash	malicious	Prometei	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.3069918537892455
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	x-3.2-.Sakura.elf
File size:	84'999 bytes
MD5:	11db83b944cdb0af582b34829c935488
SHA1:	2ea10ebd17d94d07ba46c6cecdb941d6c76df6be
SHA256:	493921834c54a76b9b0ed969a840e30b322f30f4e275525ac5fc14971d2ccaad
SHA512:	79b9cb3771b2d54c4f349e864f3d78b6e244bb3fc6cd8a44fd8dd5101b8f0536cde737c880d503a0321cc05a1c43add61700e4c589f97f63cde9535164b850d9
SSDEEP:	1536:qr5b1ZU4d3J6lreu5r4hWj8LYGDloRmF+wVOz+sXcfW7k:wb1ZU4ZJ6liuq0Y8GoRmEwVOz+ucfW7k
TLSH:	C0833B01E643C6B3CC8307B2029BAE661931BDAA5E2ADF49F31D7DF49B128C47116F55
File Content Preview:	.ELF....................h...4...`.......4. ...(..............................................p...p.......i..........Q.td............................U..S.......w....h....s...[]...$.............U......=.s...t..1....$p.....$p......u........t...$.f..........s

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048168
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	65120
Section Header Size:	40
Number of Section Headers:	16
Header String Table Index:	13

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	0	0	1
.text	PROGBITS	0x80480b0	0xb0	0xbca4	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x8053d54	0xbd54	0x17	0x0	0x6	AX	0	0	1
.rodata	PROGBITS	0x8053d80	0xbd80	0x293c	0x0	0x2	A	0	0	32
.eh_frame	PROGBITS	0x80566bc	0xe6bc	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x8057000	0xf000	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x8057008	0xf008	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x8057010	0xf010	0x4	0x0	0x3	WA	0	0	4
.got.plt	PROGBITS	0x8057014	0xf014	0xc	0x4	0x3	WA	0	0	4
.data	PROGBITS	0x8057020	0xf020	0x2d8	0x0	0x3	WA	0	0	32
.bss	NOBITS	0x8057300	0xf2f8	0x66e4	0x0	0x3	WA	0	0	32
.comment	PROGBITS	0x0	0xf2f8	0xaf8	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0xfdf0	0x6f	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x100e0	0x2ac0	0x10	0x0		15	249	4
.strtab	STRTAB	0x0	0x12ba0	0x2067	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xe6c0	0xe6c0	6.5496	0x5	R E	0x1000	.init .text .fini .rodata .eh_frame
LOAD	0xf000	0x8057000	0x8057000	0x2f8	0x69e4	3.4286	0x6	RW	0x1000	.ctors .dtors .jcr .got.plt .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x8048094	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x80480b0	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x8053d54	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x8053d80	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x80566bc	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x8057000	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x8057008	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x8057010	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x8057014	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x8057020	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x8057300	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
C.147.5470	.symtab	0x8054ba4	24	OBJECT	<unknown>	DEFAULT	4
Q	.symtab	0x8057340	16384	OBJECT	<unknown>	DEFAULT	11
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x804a3d1	290	FUNC	<unknown>	DEFAULT	2
SendSTDHEX	.symtab	0x8049c33	306	FUNC	<unknown>	DEFAULT	2
SendSTD_HEX	.symtab	0x804a61e	312	FUNC	<unknown>	DEFAULT	2
SendUDP	.symtab	0x8049362	850	FUNC	<unknown>	DEFAULT	2
_GLOBAL_OFFSET_TABLE_	.symtab	0x8057014	0	OBJECT	<unknown>	HIDDEN	9
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x8057004	0	OBJECT	<unknown>	DEFAULT	6
__CTOR_LIST__	.symtab	0x8057000	0	OBJECT	<unknown>	DEFAULT	6
__C_ctype_b	.symtab	0x8057058	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x8054da0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_tolower	.symtab	0x80572f0	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x80556e0	768	OBJECT	<unknown>	DEFAULT	4
__C_ctype_toupper	.symtab	0x8057060	4	OBJECT	<unknown>	DEFAULT	10
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x80550a0	768	OBJECT	<unknown>	DEFAULT	4
__DTOR_END__	.symtab	0x805700c	0	OBJECT	<unknown>	DEFAULT	7
__DTOR_LIST__	.symtab	0x8057008	0	OBJECT	<unknown>	DEFAULT	7
__EH_FRAME_BEGIN__	.symtab	0x80566bc	0	OBJECT	<unknown>	DEFAULT	5
__FRAME_END__	.symtab	0x80566bc	0	OBJECT	<unknown>	DEFAULT	5
__GI___C_ctype_b	.symtab	0x8057058	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_b_data	.symtab	0x8054da0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_tolower	.symtab	0x80572f0	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_tolower_data	.symtab	0x80556e0	768	OBJECT	<unknown>	HIDDEN	4
__GI___C_ctype_toupper	.symtab	0x8057060	4	OBJECT	<unknown>	HIDDEN	10
__GI___C_ctype_toupper_data	.symtab	0x80550a0	768	OBJECT	<unknown>	HIDDEN	4
__GI___ctype_b	.symtab	0x805705c	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_tolower	.symtab	0x80572f4	4	OBJECT	<unknown>	HIDDEN	10
__GI___ctype_toupper	.symtab	0x8057064	4	OBJECT	<unknown>	HIDDEN	10
__GI___errno_location	.symtab	0x804d940	6	FUNC	<unknown>	HIDDEN	2
__GI___fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	HIDDEN	2
__GI___glibc_strerror_r	.symtab	0x8052d9c	29	FUNC	<unknown>	HIDDEN	2
__GI___h_errno_location	.symtab	0x804fd04	6	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	HIDDEN	2
__GI___libc_fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	HIDDEN	2
__GI___libc_open	.symtab	0x804d784	75	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_fini	.symtab	0x804f688	63	FUNC	<unknown>	HIDDEN	2
__GI___uClibc_init	.symtab	0x804f6ff	64	FUNC	<unknown>	HIDDEN	2
__GI___xpg_strerror_r	.symtab	0x8052dbc	182	FUNC	<unknown>	HIDDEN	2
__GI__exit	.symtab	0x804d604	40	FUNC	<unknown>	HIDDEN	2
__GI_abort	.symtab	0x804ed30	273	FUNC	<unknown>	HIDDEN	2
__GI_atoi	.symtab	0x804f1c8	20	FUNC	<unknown>	HIDDEN	2
__GI_atol	.symtab	0x804f1c8	20	FUNC	<unknown>	HIDDEN	2
__GI_brk	.symtab	0x805095c	54	FUNC	<unknown>	HIDDEN	2
__GI_chdir	.symtab	0x804d660	46	FUNC	<unknown>	HIDDEN	2
__GI_clock_getres	.symtab	0x804fa74	50	FUNC	<unknown>	HIDDEN	2
__GI_close	.symtab	0x804d690	46	FUNC	<unknown>	HIDDEN	2
__GI_connect	.symtab	0x804deb8	43	FUNC	<unknown>	HIDDEN	2
__GI_errno	.symtab	0x805b560	4	OBJECT	<unknown>	HIDDEN	11
__GI_exit	.symtab	0x804f31c	103	FUNC	<unknown>	HIDDEN	2
__GI_fclose	.symtab	0x80509e4	271	FUNC	<unknown>	HIDDEN	2
__GI_fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	HIDDEN	2
__GI_fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	HIDDEN	2
__GI_fflush_unlocked	.symtab	0x8050fc8	333	FUNC	<unknown>	HIDDEN	2
__GI_fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	HIDDEN	2
__GI_fgets	.symtab	0x8050e80	98	FUNC	<unknown>	HIDDEN	2
__GI_fgets_unlocked	.symtab	0x8051118	105	FUNC	<unknown>	HIDDEN	2
__GI_fopen	.symtab	0x8050af4	24	FUNC	<unknown>	HIDDEN	2
__GI_fork	.symtab	0x804d6c0	38	FUNC	<unknown>	HIDDEN	2
__GI_fputs_unlocked	.symtab	0x8052cb0	49	FUNC	<unknown>	HIDDEN	2
__GI_fseek	.symtab	0x8053ae0	27	FUNC	<unknown>	HIDDEN	2
__GI_fseeko64	.symtab	0x8053afc	231	FUNC	<unknown>	HIDDEN	2
__GI_fwrite_unlocked	.symtab	0x8052ce4	120	FUNC	<unknown>	HIDDEN	2
__GI_getc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	HIDDEN	2
__GI_getdtablesize	.symtab	0x804faa8	37	FUNC	<unknown>	HIDDEN	2
__GI_getegid	.symtab	0x804fad0	38	FUNC	<unknown>	HIDDEN	2
__GI_geteuid	.symtab	0x804faf8	38	FUNC	<unknown>	HIDDEN	2
__GI_getgid	.symtab	0x804fb20	38	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname	.symtab	0x804db54	48	FUNC	<unknown>	HIDDEN	2
__GI_gethostbyname_r	.symtab	0x804db84	818	FUNC	<unknown>	HIDDEN	2
__GI_getpagesize	.symtab	0x804fb48	17	FUNC	<unknown>	HIDDEN	2
__GI_getpid	.symtab	0x804d6e8	38	FUNC	<unknown>	HIDDEN	2
__GI_getrlimit	.symtab	0x804fb5c	50	FUNC	<unknown>	HIDDEN	2
__GI_getsockname	.symtab	0x804dee4	43	FUNC	<unknown>	HIDDEN	2
__GI_getuid	.symtab	0x804fb90	38	FUNC	<unknown>	HIDDEN	2
__GI_h_errno	.symtab	0x805b564	4	OBJECT	<unknown>	HIDDEN	11
__GI_inet_addr	.symtab	0x804db2c	37	FUNC	<unknown>	HIDDEN	2
__GI_inet_aton	.symtab	0x804fed8	148	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa	.symtab	0x804db17	21	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntoa_r	.symtab	0x804dac8	79	FUNC	<unknown>	HIDDEN	2
__GI_inet_ntop	.symtab	0x80516a9	465	FUNC	<unknown>	HIDDEN	2
__GI_inet_pton	.symtab	0x80513ce	458	FUNC	<unknown>	HIDDEN	2
__GI_initstate_r	.symtab	0x804f11d	171	FUNC	<unknown>	HIDDEN	2
__GI_ioctl	.symtab	0x804d710	63	FUNC	<unknown>	HIDDEN	2
__GI_isatty	.symtab	0x80512b8	29	FUNC	<unknown>	HIDDEN	2
__GI_kill	.symtab	0x804d750	50	FUNC	<unknown>	HIDDEN	2
__GI_lseek64	.symtab	0x8053cbc	86	FUNC	<unknown>	HIDDEN	2
__GI_memchr	.symtab	0x8053a0c	35	FUNC	<unknown>	HIDDEN	2
__GI_memcpy	.symtab	0x804fddc	39	FUNC	<unknown>	HIDDEN	2
__GI_memmove	.symtab	0x804fe04	39	FUNC	<unknown>	HIDDEN	2
__GI_mempcpy	.symtab	0x8052d78	33	FUNC	<unknown>	HIDDEN	2
__GI_memrchr	.symtab	0x8053a30	176	FUNC	<unknown>	HIDDEN	2
__GI_memset	.symtab	0x804d948	21	FUNC	<unknown>	HIDDEN	2
__GI_mmap	.symtab	0x804f9e8	27	FUNC	<unknown>	HIDDEN	2
__GI_munmap	.symtab	0x804fbb8	50	FUNC	<unknown>	HIDDEN	2
__GI_nanosleep	.symtab	0x804fbec	50	FUNC	<unknown>	HIDDEN	2
__GI_open	.symtab	0x804d784	75	FUNC	<unknown>	HIDDEN	2
__GI_poll	.symtab	0x80509ac	54	FUNC	<unknown>	HIDDEN	2
__GI_raise	.symtab	0x8050930	24	FUNC	<unknown>	HIDDEN	2
__GI_random	.symtab	0x804ee4c	72	FUNC	<unknown>	HIDDEN	2
__GI_random_r	.symtab	0x804f025	94	FUNC	<unknown>	HIDDEN	2
__GI_rawmemchr	.symtab	0x80511e8	99	FUNC	<unknown>	HIDDEN	2
__GI_read	.symtab	0x804d7e8	54	FUNC	<unknown>	HIDDEN	2
__GI_recv	.symtab	0x804df4c	51	FUNC	<unknown>	HIDDEN	2
__GI_sbrk	.symtab	0x804fc20	78	FUNC	<unknown>	HIDDEN	2
__GI_select	.symtab	0x804d820	63	FUNC	<unknown>	HIDDEN	2
__GI_send	.symtab	0x804df80	51	FUNC	<unknown>	HIDDEN	2
__GI_sendto	.symtab	0x804dfb4	67	FUNC	<unknown>	HIDDEN	2
__GI_setsid	.symtab	0x804d860	38	FUNC	<unknown>	HIDDEN	2
__GI_setsockopt	.symtab	0x804dff8	59	FUNC	<unknown>	HIDDEN	2
__GI_setstate_r	.symtab	0x804ef8c	153	FUNC	<unknown>	HIDDEN	2
__GI_sigaction	.symtab	0x804f90b	218	FUNC	<unknown>	HIDDEN	2
__GI_signal	.symtab	0x804e060	175	FUNC	<unknown>	HIDDEN	2
__GI_sigprocmask	.symtab	0x804fc70	85	FUNC	<unknown>	HIDDEN	2
__GI_sleep	.symtab	0x804f384	393	FUNC	<unknown>	HIDDEN	2
__GI_socket	.symtab	0x804e034	43	FUNC	<unknown>	HIDDEN	2
__GI_sprintf	.symtab	0x8051e6c	31	FUNC	<unknown>	HIDDEN	2
__GI_srandom_r	.symtab	0x804f083	154	FUNC	<unknown>	HIDDEN	2
__GI_strcasecmp	.symtab	0x8052e74	54	FUNC	<unknown>	HIDDEN	2
__GI_strchr	.symtab	0x804d960	30	FUNC	<unknown>	HIDDEN	2
__GI_strcmp	.symtab	0x8051184	29	FUNC	<unknown>	HIDDEN	2
__GI_strcoll	.symtab	0x8051184	29	FUNC	<unknown>	HIDDEN	2
__GI_strcpy	.symtab	0x804d980	27	FUNC	<unknown>	HIDDEN	2
__GI_strdup	.symtab	0x8051280	54	FUNC	<unknown>	HIDDEN	2
__GI_strlen	.symtab	0x80511a4	19	FUNC	<unknown>	HIDDEN	2
__GI_strncat	.symtab	0x80511b8	46	FUNC	<unknown>	HIDDEN	2
__GI_strncpy	.symtab	0x804fe2c	38	FUNC	<unknown>	HIDDEN	2
__GI_strnlen	.symtab	0x8052d5c	25	FUNC	<unknown>	HIDDEN	2
__GI_strpbrk	.symtab	0x804feb0	39	FUNC	<unknown>	HIDDEN	2
__GI_strspn	.symtab	0x805124c	50	FUNC	<unknown>	HIDDEN	2
__GI_strstr	.symtab	0x804d99c	206	FUNC	<unknown>	HIDDEN	2
__GI_strtok	.symtab	0x804da84	25	FUNC	<unknown>	HIDDEN	2
__GI_strtok_r	.symtab	0x804fe54	89	FUNC	<unknown>	HIDDEN	2
__GI_strtol	.symtab	0x804f1dc	26	FUNC	<unknown>	HIDDEN	2
__GI_sysconf	.symtab	0x804f510	325	FUNC	<unknown>	HIDDEN	2
__GI_tcgetattr	.symtab	0x80512d8	112	FUNC	<unknown>	HIDDEN	2
__GI_time	.symtab	0x804d888	46	FUNC	<unknown>	HIDDEN	2
__GI_tolower	.symtab	0x8051e4c	29	FUNC	<unknown>	HIDDEN	2
__GI_toupper	.symtab	0x804d920	29	FUNC	<unknown>	HIDDEN	2
__GI_vsnprintf	.symtab	0x8051e8c	176	FUNC	<unknown>	HIDDEN	2
__GI_wait4	.symtab	0x804fcc8	59	FUNC	<unknown>	HIDDEN	2
__GI_waitpid	.symtab	0x804d8b8	26	FUNC	<unknown>	HIDDEN	2
__GI_wcrtomb	.symtab	0x805305c	69	FUNC	<unknown>	HIDDEN	2
__GI_wcsnrtombs	.symtab	0x80530c4	133	FUNC	<unknown>	HIDDEN	2
__GI_wcsrtombs	.symtab	0x80530a4	30	FUNC	<unknown>	HIDDEN	2
__GI_write	.symtab	0x804d8d4	54	FUNC	<unknown>	HIDDEN	2
__JCR_END__	.symtab	0x8057010	0	OBJECT	<unknown>	DEFAULT	8
__JCR_LIST__	.symtab	0x8057010	0	OBJECT	<unknown>	DEFAULT	8
__app_fini	.symtab	0x805b554	4	OBJECT	<unknown>	HIDDEN	11
__atexit_lock	.symtab	0x8057160	24	OBJECT	<unknown>	DEFAULT	10
__bsd_signal	.symtab	0x804e060	175	FUNC	<unknown>	HIDDEN	2
__bss_start	.symtab	0x80572f8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x804f6cb	52	FUNC	<unknown>	DEFAULT	2
__ctype_b	.symtab	0x805705c	4	OBJECT	<unknown>	DEFAULT	10
__ctype_tolower	.symtab	0x80572f4	4	OBJECT	<unknown>	DEFAULT	10
__ctype_toupper	.symtab	0x8057064	4	OBJECT	<unknown>	DEFAULT	10
__curbrk	.symtab	0x805b584	4	OBJECT	<unknown>	HIDDEN	11
__data_start	.symtab	0x8057028	0	NOTYPE	<unknown>	DEFAULT	10
__decode_answer	.symtab	0x8051a48	249	FUNC	<unknown>	HIDDEN	2
__decode_dotted	.symtab	0x8052f3c	217	FUNC	<unknown>	HIDDEN	2
__decode_header	.symtab	0x805192c	171	FUNC	<unknown>	HIDDEN	2
__deregister_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x804ff6c	1876	FUNC	<unknown>	HIDDEN	2
__do_global_ctors_aux	.symtab	0x8053d20	0	FUNC	<unknown>	DEFAULT	2
__do_global_dtors_aux	.symtab	0x80480c0	0	FUNC	<unknown>	DEFAULT	2
__dso_handle	.symtab	0x8057020	0	OBJECT	<unknown>	HIDDEN	10
__encode_dotted	.symtab	0x8052eac	144	FUNC	<unknown>	HIDDEN	2
__encode_header	.symtab	0x805187c	175	FUNC	<unknown>	HIDDEN	2
__encode_question	.symtab	0x80519d8	83	FUNC	<unknown>	HIDDEN	2
__environ	.symtab	0x805b54c	4	OBJECT	<unknown>	DEFAULT	11
__errno_location	.symtab	0x804d940	6	FUNC	<unknown>	DEFAULT	2
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x805b544	4	OBJECT	<unknown>	HIDDEN	11
__fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	DEFAULT	2
__fini_array_end	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x8050904	44	FUNC	<unknown>	HIDDEN	2
__get_pc_thunk_bx	.symtab	0x80480b0	0	FUNC	<unknown>	HIDDEN	2
__getpagesize	.symtab	0x804fb48	17	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r	.symtab	0x8052d9c	29	FUNC	<unknown>	DEFAULT	2
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x804fd04	6	FUNC	<unknown>	DEFAULT	2
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__init_array_end	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x8053018	65	FUNC	<unknown>	HIDDEN	2
__length_question	.symtab	0x8051a2c	28	FUNC	<unknown>	HIDDEN	2
__libc_close	.symtab	0x804d690	46	FUNC	<unknown>	DEFAULT	2
__libc_connect	.symtab	0x804deb8	43	FUNC	<unknown>	DEFAULT	2
__libc_creat	.symtab	0x804d7cf	25	FUNC	<unknown>	DEFAULT	2
__libc_fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	DEFAULT	2
__libc_fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	DEFAULT	2
__libc_fork	.symtab	0x804d6c0	38	FUNC	<unknown>	DEFAULT	2
__libc_getpid	.symtab	0x804d6e8	38	FUNC	<unknown>	DEFAULT	2
__libc_lseek64	.symtab	0x8053cbc	86	FUNC	<unknown>	DEFAULT	2
__libc_nanosleep	.symtab	0x804fbec	50	FUNC	<unknown>	DEFAULT	2
__libc_open	.symtab	0x804d784	75	FUNC	<unknown>	DEFAULT	2
__libc_poll	.symtab	0x80509ac	54	FUNC	<unknown>	DEFAULT	2
__libc_read	.symtab	0x804d7e8	54	FUNC	<unknown>	DEFAULT	2
__libc_recv	.symtab	0x804df4c	51	FUNC	<unknown>	DEFAULT	2
__libc_select	.symtab	0x804d820	63	FUNC	<unknown>	DEFAULT	2
__libc_send	.symtab	0x804df80	51	FUNC	<unknown>	DEFAULT	2
__libc_sendto	.symtab	0x804dfb4	67	FUNC	<unknown>	DEFAULT	2
__libc_sigaction	.symtab	0x804f90b	218	FUNC	<unknown>	DEFAULT	2
__libc_stack_end	.symtab	0x805b548	4	OBJECT	<unknown>	DEFAULT	11
__libc_waitpid	.symtab	0x804d8b8	26	FUNC	<unknown>	DEFAULT	2
__libc_write	.symtab	0x804d8d4	54	FUNC	<unknown>	DEFAULT	2
__malloc_consolidate	.symtab	0x804e9c9	424	FUNC	<unknown>	HIDDEN	2
__malloc_largebin_index	.symtab	0x804e174	38	FUNC	<unknown>	DEFAULT	2
__malloc_lock	.symtab	0x8057068	24	OBJECT	<unknown>	DEFAULT	10
__malloc_state	.symtab	0x805d640	888	OBJECT	<unknown>	DEFAULT	11
__malloc_trim	.symtab	0x804e93c	141	FUNC	<unknown>	DEFAULT	2
__nameserver	.symtab	0x805d9c8	12	OBJECT	<unknown>	HIDDEN	11
__nameservers	.symtab	0x805d9d4	4	OBJECT	<unknown>	HIDDEN	11
__open_etc_hosts	.symtab	0x8051b44	49	FUNC	<unknown>	HIDDEN	2
__open_nameservers	.symtab	0x80506c0	579	FUNC	<unknown>	HIDDEN	2
__pagesize	.symtab	0x805b550	4	OBJECT	<unknown>	DEFAULT	11
__preinit_array_end	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x8057000	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_lock	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_trylock	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_mutex_unlock	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_0	.symtab	0x804f6c7	3	FUNC	<unknown>	DEFAULT	2
__pthread_return_void	.symtab	0x804f6ca	1	FUNC	<unknown>	DEFAULT	2
__raise	.symtab	0x8050930	24	FUNC	<unknown>	HIDDEN	2
__read_etc_hosts_r	.symtab	0x8051b75	724	FUNC	<unknown>	HIDDEN	2
__register_frame_info_bases	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x8057180	24	OBJECT	<unknown>	DEFAULT	10
__restore	.symtab	0x804f903	0	NOTYPE	<unknown>	DEFAULT	2
__restore_rt	.symtab	0x804f8fc	0	NOTYPE	<unknown>	DEFAULT	2
__rtld_fini	.symtab	0x805b558	4	OBJECT	<unknown>	HIDDEN	11
__searchdomain	.symtab	0x805d9b8	16	OBJECT	<unknown>	HIDDEN	11
__searchdomains	.symtab	0x805d9d8	4	OBJECT	<unknown>	HIDDEN	11
__sigaddset	.symtab	0x804e134	32	FUNC	<unknown>	DEFAULT	2
__sigdelset	.symtab	0x804e154	32	FUNC	<unknown>	DEFAULT	2
__sigismember	.symtab	0x804e110	36	FUNC	<unknown>	DEFAULT	2
__socketcall	.symtab	0x804fa04	50	FUNC	<unknown>	HIDDEN	2
__socketcall.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__stdin	.symtab	0x80571a4	4	OBJECT	<unknown>	DEFAULT	10
__stdio_READ	.symtab	0x805314c	79	FUNC	<unknown>	HIDDEN	2
__stdio_WRITE	.symtab	0x8051f3c	128	FUNC	<unknown>	HIDDEN	2
__stdio_adjust_position	.symtab	0x8053be4	164	FUNC	<unknown>	HIDDEN	2
__stdio_fwrite	.symtab	0x805319c	234	FUNC	<unknown>	HIDDEN	2
__stdio_init_mutex	.symtab	0x8050db3	23	FUNC	<unknown>	HIDDEN	2
__stdio_mutex_initializer.4160	.symtab	0x8055670	24	OBJECT	<unknown>	DEFAULT	4
__stdio_rfill	.symtab	0x8053288	40	FUNC	<unknown>	HIDDEN	2
__stdio_seek	.symtab	0x8053c88	51	FUNC	<unknown>	HIDDEN	2
__stdio_trans2r_o	.symtab	0x80532b0	110	FUNC	<unknown>	HIDDEN	2
__stdio_trans2w_o	.symtab	0x8053320	167	FUNC	<unknown>	HIDDEN	2
__stdio_wcommit	.symtab	0x8050e54	43	FUNC	<unknown>	HIDDEN	2
__stdout	.symtab	0x80571a8	4	OBJECT	<unknown>	DEFAULT	10
__syscall_error	.symtab	0x8050994	21	FUNC	<unknown>	HIDDEN	2
__syscall_error.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x804fa38	59	FUNC	<unknown>	HIDDEN	2
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x804f688	63	FUNC	<unknown>	DEFAULT	2
__uClibc_init	.symtab	0x804f6ff	64	FUNC	<unknown>	DEFAULT	2
__uClibc_main	.symtab	0x804f73f	443	FUNC	<unknown>	DEFAULT	2
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x8057178	4	OBJECT	<unknown>	HIDDEN	10
__xpg_strerror_r	.symtab	0x8052dbc	182	FUNC	<unknown>	DEFAULT	2
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x8051fbc	54	FUNC	<unknown>	DEFAULT	2
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x8050948	18	FUNC	<unknown>	DEFAULT	2
_dl_phdr	.symtab	0x805d9dc	4	OBJECT	<unknown>	DEFAULT	11
_dl_phnum	.symtab	0x805d9e0	4	OBJECT	<unknown>	DEFAULT	11
_edata	.symtab	0x80572f8	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x805d9e4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x805b560	4	OBJECT	<unknown>	DEFAULT	11
_exit	.symtab	0x804d604	40	FUNC	<unknown>	DEFAULT	2
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fini	.symtab	0x8053d54	3	FUNC	<unknown>	DEFAULT	3
_fixed_buffers	.symtab	0x805b5a0	8192	OBJECT	<unknown>	DEFAULT	11
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x8051ff2	106	FUNC	<unknown>	DEFAULT	2
_fpmaxtostr	.symtab	0x8053460	1449	FUNC	<unknown>	HIDDEN	2
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_h_errno	.symtab	0x805b564	4	OBJECT	<unknown>	DEFAULT	11
_init	.symtab	0x8048094	3	FUNC	<unknown>	DEFAULT	1
_load_inttype	.symtab	0x80533c8	86	FUNC	<unknown>	HIDDEN	2
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x8052614	111	FUNC	<unknown>	HIDDEN	2
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x8052805	975	FUNC	<unknown>	HIDDEN	2
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x8052684	66	FUNC	<unknown>	HIDDEN	2
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x80526c8	273	FUNC	<unknown>	HIDDEN	2
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x80527dc	41	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_pop_restore	.symtab	0x804f6ca	1	FUNC	<unknown>	DEFAULT	2
_pthread_cleanup_push_defer	.symtab	0x804f6ca	1	FUNC	<unknown>	DEFAULT	2
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x805d5c0	128	OBJECT	<unknown>	HIDDEN	11
_start	.symtab	0x8048168	34	FUNC	<unknown>	DEFAULT	2
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x8050b0c	579	FUNC	<unknown>	HIDDEN	2
_stdio_init	.symtab	0x8050d50	99	FUNC	<unknown>	HIDDEN	2
_stdio_openlist	.symtab	0x80571ac	4	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_add_lock	.symtab	0x80571b0	24	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_dec_use	.symtab	0x8050ee4	228	FUNC	<unknown>	DEFAULT	2
_stdio_openlist_del_count	.symtab	0x805b58c	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_del_lock	.symtab	0x80571c8	24	OBJECT	<unknown>	DEFAULT	10
_stdio_openlist_use_count	.symtab	0x805b588	4	OBJECT	<unknown>	DEFAULT	11
_stdio_streams	.symtab	0x8057200	240	OBJECT	<unknown>	DEFAULT	10
_stdio_term	.symtab	0x8050dca	136	FUNC	<unknown>	HIDDEN	2
_stdio_user_locking	.symtab	0x80571e0	4	OBJECT	<unknown>	DEFAULT	10
_stdlib_strto_l	.symtab	0x804f1f8	289	FUNC	<unknown>	HIDDEN	2
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x8053420	61	FUNC	<unknown>	HIDDEN	2
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x8055aa0	2906	OBJECT	<unknown>	HIDDEN	4
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x804fd0c	207	FUNC	<unknown>	HIDDEN	2
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x805205c	1464	FUNC	<unknown>	HIDDEN	2
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x804ed30	273	FUNC	<unknown>	DEFAULT	2
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x804d62c	50	FUNC	<unknown>	DEFAULT	2
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x804b4b8	298	FUNC	<unknown>	DEFAULT	2
atcp	.symtab	0x804af39	1407	FUNC	<unknown>	DEFAULT	2
atoi	.symtab	0x804f1c8	20	FUNC	<unknown>	DEFAULT	2
atol	.symtab	0x804f1c8	20	FUNC	<unknown>	DEFAULT	2
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x804aade	1115	FUNC	<unknown>	DEFAULT	2
bcopy	.symtab	0x804da6c	21	FUNC	<unknown>	DEFAULT	2
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x805b540	1	OBJECT	<unknown>	DEFAULT	11
been_there_done_that.3001	.symtab	0x805b55c	1	OBJECT	<unknown>	DEFAULT	11
brk	.symtab	0x805095c	54	FUNC	<unknown>	DEFAULT	2
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x804e060	175	FUNC	<unknown>	DEFAULT	2
buf.2827	.symtab	0x805b344	16	OBJECT	<unknown>	DEFAULT	11
buf.5162	.symtab	0x805b360	460	OBJECT	<unknown>	DEFAULT	11
c	.symtab	0x8057050	4	OBJECT	<unknown>	DEFAULT	10
chdir	.symtab	0x804d660	46	FUNC	<unknown>	DEFAULT	2
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
clock_getres	.symtab	0x804fa74	50	FUNC	<unknown>	DEFAULT	2
clock_getres.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x804d690	46	FUNC	<unknown>	DEFAULT	2
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x805702c	4	OBJECT	<unknown>	DEFAULT	10
completed.2429	.symtab	0x8057300	1	OBJECT	<unknown>	DEFAULT	11
connect	.symtab	0x804deb8	43	FUNC	<unknown>	DEFAULT	2
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x8048e77	523	FUNC	<unknown>	DEFAULT	2
creat	.symtab	0x804d7cf	25	FUNC	<unknown>	DEFAULT	2
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x8049187	159	FUNC	<unknown>	DEFAULT	2
currentServer	.symtab	0x805704c	4	OBJECT	<unknown>	DEFAULT	10
data_start	.symtab	0x8057028	0	NOTYPE	<unknown>	DEFAULT	10
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x805b54c	4	OBJECT	<unknown>	DEFAULT	11
errno	.symtab	0x805b560	4	OBJECT	<unknown>	DEFAULT	11
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exit	.symtab	0x804f31c	103	FUNC	<unknown>	DEFAULT	2
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x8056620	156	OBJECT	<unknown>	DEFAULT	4
fclose	.symtab	0x80509e4	271	FUNC	<unknown>	DEFAULT	2
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x804d56c	87	FUNC	<unknown>	DEFAULT	2
fcntl64	.symtab	0x804d5c4	63	FUNC	<unknown>	DEFAULT	2
fdgets	.symtab	0x80482e7	111	FUNC	<unknown>	DEFAULT	2
fflush_unlocked	.symtab	0x8050fc8	333	FUNC	<unknown>	DEFAULT	2
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	DEFAULT	2
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x8050e80	98	FUNC	<unknown>	DEFAULT	2
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x8051118	105	FUNC	<unknown>	DEFAULT	2
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x805660c	20	OBJECT	<unknown>	DEFAULT	4
fopen	.symtab	0x8050af4	24	FUNC	<unknown>	DEFAULT	2
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x804d6c0	38	FUNC	<unknown>	DEFAULT	2
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x8052cb0	49	FUNC	<unknown>	DEFAULT	2
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x8048110	0	FUNC	<unknown>	DEFAULT	2
free	.symtab	0x804eb71	412	FUNC	<unknown>	DEFAULT	2
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x8053ae0	27	FUNC	<unknown>	DEFAULT	2
fseeko	.symtab	0x8053ae0	27	FUNC	<unknown>	DEFAULT	2
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x8053afc	231	FUNC	<unknown>	DEFAULT	2
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x80496b4	1407	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked	.symtab	0x8052ce4	120	FUNC	<unknown>	DEFAULT	2
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x804b5e2	10	FUNC	<unknown>	DEFAULT	2
getHost	.symtab	0x8048c15	55	FUNC	<unknown>	DEFAULT	2
getOurIP	.symtab	0x8048356	547	FUNC	<unknown>	DEFAULT	2
getPortz	.symtab	0x804b5ec	154	FUNC	<unknown>	DEFAULT	2
getRandomIP	.symtab	0x80482bb	44	FUNC	<unknown>	DEFAULT	2
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x8052bd4	220	FUNC	<unknown>	DEFAULT	2
getdtablesize	.symtab	0x804faa8	37	FUNC	<unknown>	DEFAULT	2
getdtablesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getegid	.symtab	0x804fad0	38	FUNC	<unknown>	DEFAULT	2
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x804faf8	38	FUNC	<unknown>	DEFAULT	2
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x804fb20	38	FUNC	<unknown>	DEFAULT	2
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x804db54	48	FUNC	<unknown>	DEFAULT	2
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x804db84	818	FUNC	<unknown>	DEFAULT	2
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpagesize	.symtab	0x804fb48	17	FUNC	<unknown>	DEFAULT	2
getpagesize.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x804d6e8	38	FUNC	<unknown>	DEFAULT	2
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getrlimit	.symtab	0x804fb5c	50	FUNC	<unknown>	DEFAULT	2
getrlimit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x804dee4	43	FUNC	<unknown>	DEFAULT	2
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x804df10	59	FUNC	<unknown>	DEFAULT	2
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x804fb90	38	FUNC	<unknown>	DEFAULT	2
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x8057324	4	OBJECT	<unknown>	DEFAULT	11
h.5161	.symtab	0x805b52c	20	OBJECT	<unknown>	DEFAULT	11
h_errno	.symtab	0x805b564	4	OBJECT	<unknown>	DEFAULT	11
htonl	.symtab	0x804daad	7	FUNC	<unknown>	DEFAULT	2
htons	.symtab	0x804daa0	13	FUNC	<unknown>	DEFAULT	2
i.4243	.symtab	0x8057054	4	OBJECT	<unknown>	DEFAULT	10
index	.symtab	0x804d960	30	FUNC	<unknown>	DEFAULT	2
inet_addr	.symtab	0x804db2c	37	FUNC	<unknown>	DEFAULT	2
inet_aton	.symtab	0x804fed8	148	FUNC	<unknown>	DEFAULT	2
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x804db17	21	FUNC	<unknown>	DEFAULT	2
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x804dac8	79	FUNC	<unknown>	DEFAULT	2
inet_ntop	.symtab	0x80516a9	465	FUNC	<unknown>	DEFAULT	2
inet_ntop4	.symtab	0x8051598	273	FUNC	<unknown>	DEFAULT	2
inet_pton	.symtab	0x80513ce	458	FUNC	<unknown>	DEFAULT	2
inet_pton4	.symtab	0x8051348	134	FUNC	<unknown>	DEFAULT	2
initConnection	.symtab	0x804ce3b	334	FUNC	<unknown>	DEFAULT	2
init_rand	.symtab	0x804818c	111	FUNC	<unknown>	DEFAULT	2
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initstate	.symtab	0x804eef1	87	FUNC	<unknown>	DEFAULT	2
initstate_r	.symtab	0x804f11d	171	FUNC	<unknown>	DEFAULT	2
ioctl	.symtab	0x804d710	63	FUNC	<unknown>	DEFAULT	2
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x80512b8	29	FUNC	<unknown>	DEFAULT	2
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x804d90c	17	FUNC	<unknown>	DEFAULT	2
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x804d750	50	FUNC	<unknown>	DEFAULT	2
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/i386/mmap.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x8049082	261	FUNC	<unknown>	DEFAULT	2
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x8053cbc	86	FUNC	<unknown>	DEFAULT	2
macAddress	.symtab	0x8057330	6	OBJECT	<unknown>	DEFAULT	11
main	.symtab	0x804cf89	1507	FUNC	<unknown>	DEFAULT	2
mainCommSock	.symtab	0x8057320	4	OBJECT	<unknown>	DEFAULT	11
makeIPPacket	.symtab	0x80492de	132	FUNC	<unknown>	DEFAULT	2
makeRandomStr	.symtab	0x8048c4c	106	FUNC	<unknown>	DEFAULT	2
makevsepacket	.symtab	0x8049e63	151	FUNC	<unknown>	DEFAULT	2
malloc	.symtab	0x804e19a	1954	FUNC	<unknown>	DEFAULT	2
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
malloc_trim	.symtab	0x804ed0d	34	FUNC	<unknown>	DEFAULT	2
memchr	.symtab	0x8053a0c	35	FUNC	<unknown>	DEFAULT	2
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x804fddc	39	FUNC	<unknown>	DEFAULT	2
memcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memmove	.symtab	0x804fe04	39	FUNC	<unknown>	DEFAULT	2
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x8052d78	33	FUNC	<unknown>	DEFAULT	2
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x8053a30	176	FUNC	<unknown>	DEFAULT	2
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x804d948	21	FUNC	<unknown>	DEFAULT	2
memset.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mmap	.symtab	0x804f9e8	27	FUNC	<unknown>	DEFAULT	2
munmap	.symtab	0x804fbb8	50	FUNC	<unknown>	DEFAULT	2
munmap.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mylock	.symtab	0x8057080	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x8057098	24	OBJECT	<unknown>	DEFAULT	10
mylock	.symtab	0x805b568	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x804fbec	50	FUNC	<unknown>	DEFAULT	2
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1278	.symtab	0x805b340	4	OBJECT	<unknown>	DEFAULT	11
ntohl	.symtab	0x804dac1	7	FUNC	<unknown>	DEFAULT	2
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x804dab4	13	FUNC	<unknown>	DEFAULT	2
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x8057328	8	OBJECT	<unknown>	DEFAULT	11
object.2482	.symtab	0x8057304	24	OBJECT	<unknown>	DEFAULT	11
open	.symtab	0x804d784	75	FUNC	<unknown>	DEFAULT	2
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x805d5a0	4	OBJECT	<unknown>	DEFAULT	11
p.2427	.symtab	0x8057024	0	OBJECT	<unknown>	DEFAULT	10
pids	.symtab	0x805d5a4	4	OBJECT	<unknown>	DEFAULT	11
poll	.symtab	0x80509ac	54	FUNC	<unknown>	DEFAULT	2
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4371	.symtab	0x80559ed	12	OBJECT	<unknown>	DEFAULT	4
print	.symtab	0x804887f	722	FUNC	<unknown>	DEFAULT	2
printchar	.symtab	0x8048624	66	FUNC	<unknown>	DEFAULT	2
printi	.symtab	0x8048740	319	FUNC	<unknown>	DEFAULT	2
prints	.symtab	0x8048666	218	FUNC	<unknown>	DEFAULT	2
processCmd	.symtab	0x804b686	6069	FUNC	<unknown>	DEFAULT	2
qual_chars.4377	.symtab	0x8055a00	20	OBJECT	<unknown>	DEFAULT	4
raise	.symtab	0x8050930	24	FUNC	<unknown>	DEFAULT	2
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x804ee44	5	FUNC	<unknown>	DEFAULT	2
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x80481fb	192	FUNC	<unknown>	DEFAULT	2
random	.symtab	0x804ee4c	72	FUNC	<unknown>	DEFAULT	2
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x80553a0	40	OBJECT	<unknown>	DEFAULT	4
random_r	.symtab	0x804f025	94	FUNC	<unknown>	DEFAULT	2
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x80570e0	128	OBJECT	<unknown>	DEFAULT	10
rawmemchr	.symtab	0x80511e8	99	FUNC	<unknown>	DEFAULT	2
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x804d7e8	54	FUNC	<unknown>	DEFAULT	2
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x804df4c	51	FUNC	<unknown>	DEFAULT	2
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x8048cb6	449	FUNC	<unknown>	DEFAULT	2
rtcp	.symtab	0x804a756	904	FUNC	<unknown>	DEFAULT	2
sbrk	.symtab	0x804fc20	78	FUNC	<unknown>	DEFAULT	2
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x804d820	63	FUNC	<unknown>	DEFAULT	2
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x804df80	51	FUNC	<unknown>	DEFAULT	2
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x804dfb4	67	FUNC	<unknown>	DEFAULT	2
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x804d860	38	FUNC	<unknown>	DEFAULT	2
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x804dff8	59	FUNC	<unknown>	DEFAULT	2
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x804ee94	93	FUNC	<unknown>	DEFAULT	2
setstate_r	.symtab	0x804ef8c	153	FUNC	<unknown>	DEFAULT	2
sigaction	.symtab	0x804f90b	218	FUNC	<unknown>	DEFAULT	2
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x804e060	175	FUNC	<unknown>	DEFAULT	2
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x804fc70	85	FUNC	<unknown>	DEFAULT	2
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x804f384	393	FUNC	<unknown>	DEFAULT	2
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x804e034	43	FUNC	<unknown>	DEFAULT	2
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x8049d65	254	FUNC	<unknown>	DEFAULT	2
sockprintf	.symtab	0x8048b51	196	FUNC	<unknown>	DEFAULT	2
spec_and_mask.4376	.symtab	0x8055a14	16	OBJECT	<unknown>	DEFAULT	4
spec_base.4370	.symtab	0x80559f9	7	OBJECT	<unknown>	DEFAULT	4
spec_chars.4373	.symtab	0x8055a3d	21	OBJECT	<unknown>	DEFAULT	4
spec_flags.4372	.symtab	0x8055a52	8	OBJECT	<unknown>	DEFAULT	4
spec_or_mask.4375	.symtab	0x8055a24	16	OBJECT	<unknown>	DEFAULT	4
spec_ranges.4374	.symtab	0x8055a34	9	OBJECT	<unknown>	DEFAULT	4
sprintf	.symtab	0x8051e6c	31	FUNC	<unknown>	DEFAULT	2
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x804ef48	67	FUNC	<unknown>	DEFAULT	2
srandom	.symtab	0x804ef48	67	FUNC	<unknown>	DEFAULT	2
srandom_r	.symtab	0x804f083	154	FUNC	<unknown>	DEFAULT	2
static_id	.symtab	0x805717c	2	OBJECT	<unknown>	DEFAULT	10
static_ns	.symtab	0x805b580	4	OBJECT	<unknown>	DEFAULT	11
stderr	.symtab	0x80571a0	4	OBJECT	<unknown>	DEFAULT	10
stdhexflood	.symtab	0x804a4f3	299	FUNC	<unknown>	DEFAULT	2
stdin	.symtab	0x8057198	4	OBJECT	<unknown>	DEFAULT	10
stdout	.symtab	0x805719c	4	OBJECT	<unknown>	DEFAULT	10
strcasecmp	.symtab	0x8052e74	54	FUNC	<unknown>	DEFAULT	2
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x804d960	30	FUNC	<unknown>	DEFAULT	2
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x8051184	29	FUNC	<unknown>	DEFAULT	2
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x8051184	29	FUNC	<unknown>	DEFAULT	2
strcpy	.symtab	0x804d980	27	FUNC	<unknown>	DEFAULT	2
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x8051280	54	FUNC	<unknown>	DEFAULT	2
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x8052dbc	182	FUNC	<unknown>	DEFAULT	2
strlen	.symtab	0x80511a4	19	FUNC	<unknown>	DEFAULT	2
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x80511b8	46	FUNC	<unknown>	DEFAULT	2
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x804fe2c	38	FUNC	<unknown>	DEFAULT	2
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x8052d5c	25	FUNC	<unknown>	DEFAULT	2
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x804feb0	39	FUNC	<unknown>	DEFAULT	2
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x805124c	50	FUNC	<unknown>	DEFAULT	2
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x804d99c	206	FUNC	<unknown>	DEFAULT	2
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x804da84	25	FUNC	<unknown>	DEFAULT	2
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x804fe54	89	FUNC	<unknown>	DEFAULT	2
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x804f1dc	26	FUNC	<unknown>	DEFAULT	2
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sysconf	.symtab	0x804f510	325	FUNC	<unknown>	DEFAULT	2
sysconf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x80512d8	112	FUNC	<unknown>	DEFAULT	2
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x8049226	184	FUNC	<unknown>	DEFAULT	2
time	.symtab	0x804d888	46	FUNC	<unknown>	DEFAULT	2
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x8051e4c	29	FUNC	<unknown>	DEFAULT	2
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x804d920	29	FUNC	<unknown>	DEFAULT	2
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x8048579	171	FUNC	<unknown>	DEFAULT	2
type_codes	.symtab	0x8055a5a	24	OBJECT	<unknown>	DEFAULT	4
type_sizes	.symtab	0x8055a72	12	OBJECT	<unknown>	DEFAULT	4
unknown.1330	.symtab	0x8055a7e	14	OBJECT	<unknown>	DEFAULT	4
unsafe_state	.symtab	0x80570b0	28	OBJECT	<unknown>	DEFAULT	10
useragents	.symtab	0x8057030	28	OBJECT	<unknown>	DEFAULT	10
usleep	.symtab	0x804f658	48	FUNC	<unknown>	DEFAULT	2
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x8049efa	1239	FUNC	<unknown>	DEFAULT	2
vsnprintf	.symtab	0x8051e8c	176	FUNC	<unknown>	DEFAULT	2
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x804fcc8	59	FUNC	<unknown>	DEFAULT	2
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x804d8b8	26	FUNC	<unknown>	DEFAULT	2
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x805305c	69	FUNC	<unknown>	DEFAULT	2
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x80530c4	133	FUNC	<unknown>	DEFAULT	2
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x80530a4	30	FUNC	<unknown>	DEFAULT	2
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x804d8d4	54	FUNC	<unknown>	DEFAULT	2
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3285	.symtab	0x805569c	17	OBJECT	<unknown>	DEFAULT	4

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-18T04:44:45.717721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49946	103.77.246.204	55555	TCP
2025-03-18T04:44:46.552292+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49948	103.77.246.204	55555	TCP
2025-03-18T04:44:47.392737+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49950	103.77.246.204	55555	TCP
2025-03-18T04:44:48.241986+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49952	103.77.246.204	55555	TCP
2025-03-18T04:44:49.083118+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49954	103.77.246.204	55555	TCP
2025-03-18T04:44:49.927420+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49956	103.77.246.204	55555	TCP
2025-03-18T04:44:50.774630+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49958	103.77.246.204	55555	TCP
2025-03-18T04:44:51.632267+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49960	103.77.246.204	55555	TCP
2025-03-18T04:44:52.469466+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49962	103.77.246.204	55555	TCP
2025-03-18T04:44:53.313754+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49964	103.77.246.204	55555	TCP
2025-03-18T04:44:54.151233+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49966	103.77.246.204	55555	TCP
2025-03-18T04:44:54.981391+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49968	103.77.246.204	55555	TCP
2025-03-18T04:44:55.820076+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49970	103.77.246.204	55555	TCP
2025-03-18T04:44:56.653571+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49972	103.77.246.204	55555	TCP
2025-03-18T04:44:57.489996+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49974	103.77.246.204	55555	TCP
2025-03-18T04:44:58.421109+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49976	103.77.246.204	55555	TCP
2025-03-18T04:44:59.384592+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49978	103.77.246.204	55555	TCP
2025-03-18T04:45:00.214543+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49980	103.77.246.204	55555	TCP
2025-03-18T04:45:01.040829+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49982	103.77.246.204	55555	TCP
2025-03-18T04:45:01.875460+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49984	103.77.246.204	55555	TCP
2025-03-18T04:45:02.718657+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49986	103.77.246.204	55555	TCP
2025-03-18T04:45:03.560327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49988	103.77.246.204	55555	TCP
2025-03-18T04:45:04.392632+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49990	103.77.246.204	55555	TCP
2025-03-18T04:45:05.223279+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49992	103.77.246.204	55555	TCP
2025-03-18T04:45:06.080177+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49994	103.77.246.204	55555	TCP
2025-03-18T04:45:06.956117+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49996	103.77.246.204	55555	TCP
2025-03-18T04:45:07.810323+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	49998	103.77.246.204	55555	TCP
2025-03-18T04:45:08.649033+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50000	103.77.246.204	55555	TCP
2025-03-18T04:45:09.485845+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50002	103.77.246.204	55555	TCP
2025-03-18T04:45:10.323817+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50004	103.77.246.204	55555	TCP
2025-03-18T04:45:11.164995+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50006	103.77.246.204	55555	TCP
2025-03-18T04:45:11.999324+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50008	103.77.246.204	55555	TCP
2025-03-18T04:45:12.848140+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50010	103.77.246.204	55555	TCP
2025-03-18T04:45:13.687043+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50012	103.77.246.204	55555	TCP
2025-03-18T04:45:14.520144+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50014	103.77.246.204	55555	TCP
2025-03-18T04:45:15.371762+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50016	103.77.246.204	55555	TCP
2025-03-18T04:45:16.205120+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50018	103.77.246.204	55555	TCP
2025-03-18T04:45:17.058780+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50020	103.77.246.204	55555	TCP
2025-03-18T04:45:17.918020+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50022	103.77.246.204	55555	TCP
2025-03-18T04:45:18.769567+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50024	103.77.246.204	55555	TCP
2025-03-18T04:45:19.732916+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50026	103.77.246.204	55555	TCP
2025-03-18T04:45:20.569033+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50028	103.77.246.204	55555	TCP
2025-03-18T04:45:21.402764+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50030	103.77.246.204	55555	TCP
2025-03-18T04:45:22.234525+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50032	103.77.246.204	55555	TCP
2025-03-18T04:45:23.087093+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50034	103.77.246.204	55555	TCP
2025-03-18T04:45:23.918925+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50036	103.77.246.204	55555	TCP
2025-03-18T04:45:24.751760+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50038	103.77.246.204	55555	TCP
2025-03-18T04:45:25.587500+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50040	103.77.246.204	55555	TCP
2025-03-18T04:45:26.419186+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50042	103.77.246.204	55555	TCP
2025-03-18T04:45:27.267070+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50044	103.77.246.204	55555	TCP
2025-03-18T04:45:28.106271+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50046	103.77.246.204	55555	TCP
2025-03-18T04:45:28.958329+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50048	103.77.246.204	55555	TCP
2025-03-18T04:45:29.790930+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50050	103.77.246.204	55555	TCP
2025-03-18T04:45:30.622627+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50052	103.77.246.204	55555	TCP
2025-03-18T04:45:31.454387+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50054	103.77.246.204	55555	TCP
2025-03-18T04:45:32.288873+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50056	103.77.246.204	55555	TCP
2025-03-18T04:45:33.123207+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50058	103.77.246.204	55555	TCP
2025-03-18T04:45:33.956372+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50060	103.77.246.204	55555	TCP
2025-03-18T04:45:34.796584+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50062	103.77.246.204	55555	TCP
2025-03-18T04:45:35.647110+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50064	103.77.246.204	55555	TCP
2025-03-18T04:45:36.479399+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50066	103.77.246.204	55555	TCP
2025-03-18T04:45:37.331480+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50068	103.77.246.204	55555	TCP
2025-03-18T04:45:38.172612+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50070	103.77.246.204	55555	TCP
2025-03-18T04:45:39.012860+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50072	103.77.246.204	55555	TCP
2025-03-18T04:45:39.871078+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50074	103.77.246.204	55555	TCP
2025-03-18T04:45:40.718252+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50076	103.77.246.204	55555	TCP
2025-03-18T04:45:41.561795+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50078	103.77.246.204	55555	TCP
2025-03-18T04:45:42.401063+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50080	103.77.246.204	55555	TCP
2025-03-18T04:45:43.232046+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50082	103.77.246.204	55555	TCP
2025-03-18T04:45:44.068657+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50084	103.77.246.204	55555	TCP
2025-03-18T04:45:44.897927+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50086	103.77.246.204	55555	TCP
2025-03-18T04:45:45.771107+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50088	103.77.246.204	55555	TCP
2025-03-18T04:45:46.623818+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50090	103.77.246.204	55555	TCP
2025-03-18T04:45:47.454962+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50092	103.77.246.204	55555	TCP
2025-03-18T04:45:48.303793+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50094	103.77.246.204	55555	TCP
2025-03-18T04:45:49.132986+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50096	103.77.246.204	55555	TCP
2025-03-18T04:45:49.970345+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50098	103.77.246.204	55555	TCP
2025-03-18T04:45:50.804017+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50100	103.77.246.204	55555	TCP
2025-03-18T04:45:51.633582+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50102	103.77.246.204	55555	TCP
2025-03-18T04:45:52.489987+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50104	103.77.246.204	55555	TCP
2025-03-18T04:45:53.326238+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50106	103.77.246.204	55555	TCP
2025-03-18T04:45:54.162010+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50108	103.77.246.204	55555	TCP
2025-03-18T04:45:55.009990+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50110	103.77.246.204	55555	TCP
2025-03-18T04:45:55.858651+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50112	103.77.246.204	55555	TCP
2025-03-18T04:45:56.689251+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50114	103.77.246.204	55555	TCP
2025-03-18T04:45:57.523300+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50116	103.77.246.204	55555	TCP
2025-03-18T04:45:58.359051+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50118	103.77.246.204	55555	TCP
2025-03-18T04:45:59.203563+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50120	103.77.246.204	55555	TCP
2025-03-18T04:46:00.037055+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50122	103.77.246.204	55555	TCP
2025-03-18T04:46:00.866583+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50124	103.77.246.204	55555	TCP
2025-03-18T04:46:01.698599+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50126	103.77.246.204	55555	TCP
2025-03-18T04:46:02.552854+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50128	103.77.246.204	55555	TCP
2025-03-18T04:46:03.383765+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50130	103.77.246.204	55555	TCP
2025-03-18T04:46:04.236327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50132	103.77.246.204	55555	TCP
2025-03-18T04:46:05.070857+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50134	103.77.246.204	55555	TCP
2025-03-18T04:46:05.924375+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50136	103.77.246.204	55555	TCP
2025-03-18T04:46:09.791162+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50138	103.77.246.204	55555	TCP
2025-03-18T04:46:10.629306+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50140	103.77.246.204	55555	TCP
2025-03-18T04:46:11.459545+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50142	103.77.246.204	55555	TCP
2025-03-18T04:46:12.297724+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50144	103.77.246.204	55555	TCP
2025-03-18T04:46:13.147068+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50146	103.77.246.204	55555	TCP
2025-03-18T04:46:14.178780+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50148	103.77.246.204	55555	TCP
2025-03-18T04:46:15.012638+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50150	103.77.246.204	55555	TCP
2025-03-18T04:46:15.852551+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50152	103.77.246.204	55555	TCP
2025-03-18T04:46:16.700980+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50154	103.77.246.204	55555	TCP
2025-03-18T04:46:17.535173+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50156	103.77.246.204	55555	TCP
2025-03-18T04:46:18.370911+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50158	103.77.246.204	55555	TCP
2025-03-18T04:46:19.212449+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50160	103.77.246.204	55555	TCP
2025-03-18T04:46:20.082421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50162	103.77.246.204	55555	TCP
2025-03-18T04:46:20.928576+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50164	103.77.246.204	55555	TCP
2025-03-18T04:46:21.765904+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50166	103.77.246.204	55555	TCP
2025-03-18T04:46:22.626925+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50168	103.77.246.204	55555	TCP
2025-03-18T04:46:23.477310+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50170	103.77.246.204	55555	TCP
2025-03-18T04:46:24.322275+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50172	103.77.246.204	55555	TCP
2025-03-18T04:46:25.153980+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50174	103.77.246.204	55555	TCP
2025-03-18T04:46:25.983730+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50176	103.77.246.204	55555	TCP
2025-03-18T04:46:26.832766+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50178	103.77.246.204	55555	TCP
2025-03-18T04:46:27.666434+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50180	103.77.246.204	55555	TCP
2025-03-18T04:46:28.499167+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50182	103.77.246.204	55555	TCP
2025-03-18T04:46:29.338570+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50184	103.77.246.204	55555	TCP
2025-03-18T04:46:30.192763+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50186	103.77.246.204	55555	TCP
2025-03-18T04:46:31.029640+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50188	103.77.246.204	55555	TCP
2025-03-18T04:46:31.871423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50190	103.77.246.204	55555	TCP
2025-03-18T04:46:32.726858+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50192	103.77.246.204	55555	TCP
2025-03-18T04:46:33.557344+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50194	103.77.246.204	55555	TCP
2025-03-18T04:46:34.392874+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50196	103.77.246.204	55555	TCP
2025-03-18T04:46:35.228585+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50198	103.77.246.204	55555	TCP
2025-03-18T04:46:36.108651+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50200	103.77.246.204	55555	TCP
2025-03-18T04:46:36.946080+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50202	103.77.246.204	55555	TCP
2025-03-18T04:46:37.790506+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50204	103.77.246.204	55555	TCP
2025-03-18T04:46:38.630070+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50206	103.77.246.204	55555	TCP
2025-03-18T04:46:39.484716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50208	103.77.246.204	55555	TCP
2025-03-18T04:46:40.327834+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50210	103.77.246.204	55555	TCP
2025-03-18T04:46:41.180644+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50212	103.77.246.204	55555	TCP
2025-03-18T04:46:42.033356+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50214	103.77.246.204	55555	TCP
2025-03-18T04:46:42.867751+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50216	103.77.246.204	55555	TCP
2025-03-18T04:46:43.717906+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50218	103.77.246.204	55555	TCP
2025-03-18T04:46:44.558798+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50220	103.77.246.204	55555	TCP
2025-03-18T04:46:45.410636+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50222	103.77.246.204	55555	TCP
2025-03-18T04:46:46.246781+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50224	103.77.246.204	55555	TCP
2025-03-18T04:46:47.082827+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50226	103.77.246.204	55555	TCP
2025-03-18T04:46:47.913672+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50228	103.77.246.204	55555	TCP
2025-03-18T04:46:48.747124+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50230	103.77.246.204	55555	TCP
2025-03-18T04:46:49.582818+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50232	103.77.246.204	55555	TCP
2025-03-18T04:46:50.414264+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50234	103.77.246.204	55555	TCP
2025-03-18T04:46:51.261876+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50236	103.77.246.204	55555	TCP
2025-03-18T04:46:52.119865+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50238	103.77.246.204	55555	TCP
2025-03-18T04:46:52.977281+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50240	103.77.246.204	55555	TCP
2025-03-18T04:46:53.818998+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50242	103.77.246.204	55555	TCP
2025-03-18T04:46:54.667819+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50244	103.77.246.204	55555	TCP
2025-03-18T04:46:55.523185+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50246	103.77.246.204	55555	TCP
2025-03-18T04:46:56.380936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50248	103.77.246.204	55555	TCP
2025-03-18T04:46:57.240433+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50250	103.77.246.204	55555	TCP
2025-03-18T04:46:58.077587+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50252	103.77.246.204	55555	TCP
2025-03-18T04:46:58.929412+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50254	103.77.246.204	55555	TCP
2025-03-18T04:46:59.766018+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50256	103.77.246.204	55555	TCP
2025-03-18T04:47:00.598336+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50258	103.77.246.204	55555	TCP
2025-03-18T04:47:01.439622+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50260	103.77.246.204	55555	TCP
2025-03-18T04:47:02.278071+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50262	103.77.246.204	55555	TCP
2025-03-18T04:47:03.115301+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50264	103.77.246.204	55555	TCP
2025-03-18T04:47:03.965652+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50266	103.77.246.204	55555	TCP
2025-03-18T04:47:04.806174+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50268	103.77.246.204	55555	TCP
2025-03-18T04:47:05.643196+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50270	103.77.246.204	55555	TCP
2025-03-18T04:47:06.479424+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50272	103.77.246.204	55555	TCP
2025-03-18T04:47:07.338072+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50274	103.77.246.204	55555	TCP
2025-03-18T04:47:08.189397+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50276	103.77.246.204	55555	TCP
2025-03-18T04:47:09.044251+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50278	103.77.246.204	55555	TCP
2025-03-18T04:47:09.885942+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50280	103.77.246.204	55555	TCP
2025-03-18T04:47:10.732240+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50282	103.77.246.204	55555	TCP
2025-03-18T04:47:11.575550+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50284	103.77.246.204	55555	TCP
2025-03-18T04:47:12.430811+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50286	103.77.246.204	55555	TCP
2025-03-18T04:47:13.283609+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50288	103.77.246.204	55555	TCP
2025-03-18T04:47:14.137024+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50290	103.77.246.204	55555	TCP
2025-03-18T04:47:14.976937+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50292	103.77.246.204	55555	TCP
2025-03-18T04:47:15.819744+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50294	103.77.246.204	55555	TCP
2025-03-18T04:47:16.655327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50296	103.77.246.204	55555	TCP
2025-03-18T04:47:17.487476+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50298	103.77.246.204	55555	TCP
2025-03-18T04:47:18.321716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50300	103.77.246.204	55555	TCP
2025-03-18T04:47:19.181201+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50302	103.77.246.204	55555	TCP
2025-03-18T04:47:20.018320+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50304	103.77.246.204	55555	TCP
2025-03-18T04:47:20.857073+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50306	103.77.246.204	55555	TCP
2025-03-18T04:47:21.689159+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50308	103.77.246.204	55555	TCP
2025-03-18T04:47:22.533426+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50310	103.77.246.204	55555	TCP
2025-03-18T04:47:23.369462+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50312	103.77.246.204	55555	TCP
2025-03-18T04:47:24.208205+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50314	103.77.246.204	55555	TCP
2025-03-18T04:47:25.057319+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50316	103.77.246.204	55555	TCP
2025-03-18T04:47:25.902339+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50318	103.77.246.204	55555	TCP
2025-03-18T04:47:26.748184+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50320	103.77.246.204	55555	TCP
2025-03-18T04:47:27.660347+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50322	103.77.246.204	55555	TCP
2025-03-18T04:47:28.512842+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50324	103.77.246.204	55555	TCP
2025-03-18T04:47:29.352304+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50326	103.77.246.204	55555	TCP
2025-03-18T04:47:30.195616+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50328	103.77.246.204	55555	TCP
2025-03-18T04:47:31.032795+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50330	103.77.246.204	55555	TCP
2025-03-18T04:47:31.859524+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50332	103.77.246.204	55555	TCP
2025-03-18T04:47:32.713216+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50334	103.77.246.204	55555	TCP
2025-03-18T04:47:33.567060+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50336	103.77.246.204	55555	TCP
2025-03-18T04:47:34.399342+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50338	103.77.246.204	55555	TCP
2025-03-18T04:47:35.233499+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50340	103.77.246.204	55555	TCP
2025-03-18T04:47:36.070987+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50342	103.77.246.204	55555	TCP
2025-03-18T04:47:36.936805+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50344	103.77.246.204	55555	TCP
2025-03-18T04:47:37.785172+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50346	103.77.246.204	55555	TCP
2025-03-18T04:47:38.620447+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50348	103.77.246.204	55555	TCP
2025-03-18T04:47:39.451714+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50350	103.77.246.204	55555	TCP
2025-03-18T04:47:40.295590+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50352	103.77.246.204	55555	TCP
2025-03-18T04:47:41.148331+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50354	103.77.246.204	55555	TCP
2025-03-18T04:47:41.991278+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50356	103.77.246.204	55555	TCP
2025-03-18T04:47:42.823955+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50358	103.77.246.204	55555	TCP
2025-03-18T04:47:43.656630+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50360	103.77.246.204	55555	TCP
2025-03-18T04:47:44.502388+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50362	103.77.246.204	55555	TCP
2025-03-18T04:47:45.337003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50364	103.77.246.204	55555	TCP
2025-03-18T04:47:46.166591+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50366	103.77.246.204	55555	TCP
2025-03-18T04:47:47.012898+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50368	103.77.246.204	55555	TCP
2025-03-18T04:47:47.858036+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50370	103.77.246.204	55555	TCP
2025-03-18T04:47:48.692891+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50372	103.77.246.204	55555	TCP
2025-03-18T04:47:49.545554+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50374	103.77.246.204	55555	TCP
2025-03-18T04:47:50.393435+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50376	103.77.246.204	55555	TCP
2025-03-18T04:47:51.259435+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50378	103.77.246.204	55555	TCP
2025-03-18T04:47:52.120380+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50380	103.77.246.204	55555	TCP
2025-03-18T04:47:52.969276+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50382	103.77.246.204	55555	TCP
2025-03-18T04:47:53.817122+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50384	103.77.246.204	55555	TCP
2025-03-18T04:47:54.660211+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50386	103.77.246.204	55555	TCP
2025-03-18T04:47:55.504821+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50388	103.77.246.204	55555	TCP
2025-03-18T04:47:56.339080+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50390	103.77.246.204	55555	TCP
2025-03-18T04:47:57.186278+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50392	103.77.246.204	55555	TCP
2025-03-18T04:47:58.019458+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50394	103.77.246.204	55555	TCP
2025-03-18T04:47:58.855891+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50396	103.77.246.204	55555	TCP
2025-03-18T04:47:59.700200+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50398	103.77.246.204	55555	TCP
2025-03-18T04:48:00.564145+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50400	103.77.246.204	55555	TCP
2025-03-18T04:48:01.403623+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50402	103.77.246.204	55555	TCP
2025-03-18T04:48:02.249821+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50404	103.77.246.204	55555	TCP
2025-03-18T04:48:03.091599+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50406	103.77.246.204	55555	TCP
2025-03-18T04:48:03.927263+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50408	103.77.246.204	55555	TCP
2025-03-18T04:48:04.760159+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50410	103.77.246.204	55555	TCP
2025-03-18T04:48:05.604804+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50412	103.77.246.204	55555	TCP
2025-03-18T04:48:06.546124+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50414	103.77.246.204	55555	TCP
2025-03-18T04:48:07.387781+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50416	103.77.246.204	55555	TCP
2025-03-18T04:48:08.254953+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50418	103.77.246.204	55555	TCP
2025-03-18T04:48:09.091878+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50420	103.77.246.204	55555	TCP
2025-03-18T04:48:09.930936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50422	103.77.246.204	55555	TCP
2025-03-18T04:48:10.785806+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50424	103.77.246.204	55555	TCP
2025-03-18T04:48:11.642422+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50426	103.77.246.204	55555	TCP
2025-03-18T04:48:12.483928+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50428	103.77.246.204	55555	TCP
2025-03-18T04:48:13.330089+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50430	103.77.246.204	55555	TCP
2025-03-18T04:48:14.179563+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50432	103.77.246.204	55555	TCP
2025-03-18T04:48:15.029733+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50434	103.77.246.204	55555	TCP
2025-03-18T04:48:15.865232+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50436	103.77.246.204	55555	TCP
2025-03-18T04:48:16.712156+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50438	103.77.246.204	55555	TCP
2025-03-18T04:48:17.544874+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50440	103.77.246.204	55555	TCP
2025-03-18T04:48:18.391822+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.23	50442	103.77.246.204	55555	TCP

Network Port Distribution

Total Packets: 1253
• 55555 undefined
• 443 (HTTPS)
• 80 (HTTP)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 04:44:45.712791920 CET	49946	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:45.717606068 CET	55555	49946	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:45.717653036 CET	49946	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:45.717720985 CET	49946	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:45.722743988 CET	55555	49946	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:46.547246933 CET	55555	49946	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:46.547338963 CET	49946	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:46.547416925 CET	55555	49946	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:46.547471046 CET	49946	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:46.547513962 CET	49948	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:46.552098036 CET	55555	49946	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:46.552222967 CET	55555	49948	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:46.552273989 CET	49948	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:46.552292109 CET	49948	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:46.556941032 CET	55555	49948	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:47.387798071 CET	55555	49948	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:47.387906075 CET	49948	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:47.387907982 CET	55555	49948	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:47.387952089 CET	49948	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:47.388010025 CET	49950	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:47.392565966 CET	55555	49948	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:47.392661095 CET	55555	49950	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:47.392705917 CET	49950	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:47.392736912 CET	49950	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:47.397357941 CET	55555	49950	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:47.609528065 CET	43928	443	192.168.2.23	91.189.91.42
Mar 18, 2025 04:44:48.236788988 CET	55555	49950	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:48.236888885 CET	55555	49950	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:48.236951113 CET	49950	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:48.237036943 CET	49950	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:48.237123013 CET	49952	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:48.241643906 CET	55555	49950	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:48.241771936 CET	55555	49952	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:48.241971016 CET	49952	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:48.241986036 CET	49952	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:48.246633053 CET	55555	49952	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.077886105 CET	55555	49952	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.077984095 CET	49952	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.078154087 CET	55555	49952	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.078228951 CET	49952	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.078277111 CET	49954	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.082962990 CET	55555	49952	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.082994938 CET	55555	49954	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.083054066 CET	49954	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.083117962 CET	49954	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.087779045 CET	55555	49954	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.922334909 CET	55555	49954	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.922436953 CET	49954	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.922466993 CET	55555	49954	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.922554016 CET	49954	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.922647953 CET	49956	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.927172899 CET	55555	49954	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.927347898 CET	55555	49956	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:49.927401066 CET	49956	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.927419901 CET	49956	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:49.932341099 CET	55555	49956	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:50.769495010 CET	55555	49956	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:50.769603014 CET	49956	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:50.769627094 CET	55555	49956	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:50.769732952 CET	49956	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:50.769814968 CET	49958	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:50.774529934 CET	55555	49956	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:50.774543047 CET	55555	49958	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:50.774599075 CET	49958	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:50.774630070 CET	49958	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:50.779321909 CET	55555	49958	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:51.626866102 CET	55555	49958	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:51.626980066 CET	49958	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:51.627026081 CET	55555	49958	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:51.627099991 CET	49958	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:51.627145052 CET	49960	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:51.632164001 CET	55555	49958	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:51.632180929 CET	55555	49960	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:51.632237911 CET	49960	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:51.632266998 CET	49960	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:51.636970043 CET	55555	49960	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:52.464431047 CET	55555	49960	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:52.464560032 CET	49960	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:52.464616060 CET	55555	49960	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:52.464694023 CET	49960	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:52.464752913 CET	49962	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:52.469306946 CET	55555	49960	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:52.469387054 CET	55555	49962	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:52.469439030 CET	49962	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:52.469465971 CET	49962	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:52.474154949 CET	55555	49962	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:53.240782022 CET	42836	443	192.168.2.23	91.189.91.43
Mar 18, 2025 04:44:53.308573008 CET	55555	49962	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:53.308624029 CET	55555	49962	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:53.308685064 CET	49962	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:53.308845997 CET	49962	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:53.308888912 CET	49964	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:53.313488960 CET	55555	49962	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:53.313632965 CET	55555	49964	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:53.313710928 CET	49964	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:53.313754082 CET	49964	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:53.318403959 CET	55555	49964	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.146286011 CET	55555	49964	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.146384954 CET	49964	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.146430016 CET	55555	49964	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.146487951 CET	49964	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.146533012 CET	49966	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.151138067 CET	55555	49964	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.151160002 CET	55555	49966	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.151204109 CET	49966	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.151232958 CET	49966	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.155838966 CET	55555	49966	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.976319075 CET	55555	49966	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.976417065 CET	49966	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.976438046 CET	55555	49966	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.976568937 CET	49966	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.976620913 CET	49968	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.981189966 CET	55555	49966	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.981290102 CET	55555	49968	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:54.981350899 CET	49968	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.981390953 CET	49968	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:54.986033916 CET	55555	49968	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:55.815016985 CET	55555	49968	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:55.815134048 CET	49968	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:55.815155983 CET	55555	49968	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:55.815274954 CET	49968	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:55.815327883 CET	49970	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:55.819894075 CET	55555	49968	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:55.819968939 CET	55555	49970	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:55.820019007 CET	49970	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:55.820075989 CET	49970	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:55.824698925 CET	55555	49970	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:56.648297071 CET	55555	49970	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:56.648576021 CET	49970	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:56.648602009 CET	55555	49970	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:56.648686886 CET	49970	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:56.648770094 CET	49972	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:56.653361082 CET	55555	49970	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:56.653435946 CET	55555	49972	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:56.653505087 CET	49972	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:56.653570890 CET	49972	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:56.658221960 CET	55555	49972	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:57.484711885 CET	55555	49972	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:57.484885931 CET	55555	49972	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:57.484989882 CET	49972	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:57.485099077 CET	49972	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:57.485191107 CET	49974	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:57.489805937 CET	55555	49972	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:57.489871025 CET	55555	49974	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:57.489936113 CET	49974	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:57.489995956 CET	49974	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:57.494646072 CET	55555	49974	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:58.416085005 CET	55555	49974	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:58.416104078 CET	55555	49974	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:58.416114092 CET	55555	49974	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:58.416205883 CET	49974	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:58.416207075 CET	49974	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:58.416251898 CET	49974	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:58.416290998 CET	49976	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:58.421016932 CET	55555	49974	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:58.421027899 CET	55555	49976	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:58.421108961 CET	49976	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:58.421108961 CET	49976	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:58.425874949 CET	55555	49976	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:59.379515886 CET	55555	49976	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:59.379535913 CET	55555	49976	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:59.379651070 CET	49976	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:59.379682064 CET	55555	49976	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:59.379692078 CET	49976	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:59.379710913 CET	49976	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:59.379780054 CET	49978	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:59.384358883 CET	55555	49976	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:59.384497881 CET	55555	49978	103.77.246.204	192.168.2.23
Mar 18, 2025 04:44:59.384551048 CET	49978	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:59.384592056 CET	49978	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:44:59.389261007 CET	55555	49978	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:00.209570885 CET	55555	49978	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:00.209664106 CET	55555	49978	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:00.209676027 CET	49978	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:00.209724903 CET	49978	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:00.209765911 CET	49980	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:00.214457989 CET	55555	49978	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:00.214471102 CET	55555	49980	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:00.214512110 CET	49980	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:00.214543104 CET	49980	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:00.219176054 CET	55555	49980	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.035830021 CET	55555	49980	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.035952091 CET	55555	49980	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.035979033 CET	49980	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.036014080 CET	49980	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.036046028 CET	49982	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.040745020 CET	55555	49980	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.040760040 CET	55555	49982	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.040802002 CET	49982	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.040828943 CET	49982	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.045456886 CET	55555	49982	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.870274067 CET	55555	49982	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.870413065 CET	49982	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.870456934 CET	55555	49982	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.870520115 CET	49982	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.870570898 CET	49984	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.875180960 CET	55555	49982	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.875228882 CET	55555	49984	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:01.875431061 CET	49984	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.875459909 CET	49984	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:01.880074024 CET	55555	49984	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:02.713619947 CET	55555	49984	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:02.713677883 CET	55555	49984	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:02.713805914 CET	49984	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:02.713855028 CET	49984	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:02.713902950 CET	49986	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:02.718512058 CET	55555	49984	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:02.718544960 CET	55555	49986	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:02.718630075 CET	49986	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:02.718657017 CET	49986	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:02.723383904 CET	55555	49986	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:03.554920912 CET	55555	49986	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:03.554976940 CET	55555	49986	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:03.555087090 CET	49986	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:03.555367947 CET	49986	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:03.555455923 CET	49988	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:03.560080051 CET	55555	49986	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:03.560158014 CET	55555	49988	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:03.560235977 CET	49988	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:03.560327053 CET	49988	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:03.564977884 CET	55555	49988	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:04.387234926 CET	55555	49988	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:04.387339115 CET	49988	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:04.387384892 CET	55555	49988	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:04.387638092 CET	49988	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:04.387774944 CET	49990	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:04.392348051 CET	55555	49988	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:04.392426014 CET	55555	49990	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:04.392477036 CET	49990	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:04.392632008 CET	49990	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:04.397269964 CET	55555	49990	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:05.218085051 CET	55555	49990	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:05.218144894 CET	55555	49990	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:05.218205929 CET	49990	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:05.218449116 CET	49990	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:05.218550920 CET	49992	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:05.223098040 CET	55555	49990	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:05.223156929 CET	55555	49992	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:05.223206997 CET	49992	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:05.223278999 CET	49992	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:05.227878094 CET	55555	49992	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.074978113 CET	55555	49992	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.075088024 CET	49992	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.075164080 CET	55555	49992	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.075305939 CET	49992	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.075392962 CET	49994	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.080008030 CET	55555	49992	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.080065012 CET	55555	49994	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.080106020 CET	49994	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.080177069 CET	49994	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.084820032 CET	55555	49994	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.950751066 CET	55555	49994	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.950918913 CET	55555	49994	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.951025963 CET	49994	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.951260090 CET	49994	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.951320887 CET	49996	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.955885887 CET	55555	49994	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.955982924 CET	55555	49996	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:06.956057072 CET	49996	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.956116915 CET	49996	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:06.960799932 CET	55555	49996	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:07.805193901 CET	55555	49996	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:07.805217028 CET	55555	49996	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:07.805314064 CET	49996	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:07.805398941 CET	49996	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:07.805490971 CET	49998	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:07.810050964 CET	55555	49996	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:07.810190916 CET	55555	49998	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:07.810241938 CET	49998	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:07.810323000 CET	49998	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:07.814933062 CET	55555	49998	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:08.342653990 CET	42516	80	192.168.2.23	109.202.202.202
Mar 18, 2025 04:45:08.342684031 CET	43928	443	192.168.2.23	91.189.91.42
Mar 18, 2025 04:45:08.643640041 CET	55555	49998	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:08.643732071 CET	49998	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:08.643755913 CET	55555	49998	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:08.644000053 CET	49998	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:08.644115925 CET	50000	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:08.648705959 CET	55555	49998	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:08.648838997 CET	55555	50000	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:08.648941994 CET	50000	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:08.649033070 CET	50000	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:08.653742075 CET	55555	50000	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:09.480640888 CET	55555	50000	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:09.480721951 CET	55555	50000	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:09.480864048 CET	50000	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:09.480906963 CET	50000	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:09.480953932 CET	50002	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:09.485565901 CET	55555	50000	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:09.485579014 CET	55555	50002	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:09.485652924 CET	50002	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:09.485845089 CET	50002	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:09.490468979 CET	55555	50002	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:10.318569899 CET	55555	50002	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:10.318593979 CET	55555	50002	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:10.318837881 CET	50002	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:10.318962097 CET	50002	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:10.319061041 CET	50004	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:10.323564053 CET	55555	50002	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:10.323688984 CET	55555	50004	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:10.323755980 CET	50004	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:10.323817015 CET	50004	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:10.328459024 CET	55555	50004	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.159643888 CET	55555	50004	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.159729958 CET	55555	50004	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.159935951 CET	50004	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.160038948 CET	50004	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.160118103 CET	50006	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.164755106 CET	55555	50004	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.164856911 CET	55555	50006	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.164935112 CET	50006	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.164994955 CET	50006	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.169658899 CET	55555	50006	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.993521929 CET	55555	50006	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.993546963 CET	55555	50006	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.993840933 CET	50006	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.993947029 CET	50006	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.994028091 CET	50008	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.999150991 CET	55555	50006	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.999164104 CET	55555	50008	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:11.999243021 CET	50008	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:11.999324083 CET	50008	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:12.003954887 CET	55555	50008	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:12.842829943 CET	55555	50008	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:12.842943907 CET	50008	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:12.843173981 CET	55555	50008	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:12.843229055 CET	50008	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:12.843297005 CET	50010	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:12.847913980 CET	55555	50008	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:12.848057985 CET	55555	50010	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:12.848104954 CET	50010	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:12.848140001 CET	50010	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:12.853602886 CET	55555	50010	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:13.682022095 CET	55555	50010	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:13.682156086 CET	50010	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:13.682210922 CET	55555	50010	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:13.682251930 CET	50010	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:13.682291031 CET	50012	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:13.686955929 CET	55555	50010	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:13.686969042 CET	55555	50012	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:13.687010050 CET	50012	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:13.687042952 CET	50012	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:13.691725016 CET	55555	50012	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:14.514965057 CET	55555	50012	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:14.515068054 CET	55555	50012	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:14.515172005 CET	50012	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:14.515316010 CET	50012	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:14.515410900 CET	50014	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:14.519947052 CET	55555	50012	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:14.520061016 CET	55555	50014	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:14.520107031 CET	50014	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:14.520143986 CET	50014	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:14.524810076 CET	55555	50014	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:15.366714001 CET	55555	50014	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:15.366734028 CET	55555	50014	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:15.366864920 CET	50014	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:15.366906881 CET	50014	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:15.366935015 CET	50016	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:15.371659040 CET	55555	50014	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:15.371670961 CET	55555	50016	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:15.371731043 CET	50016	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:15.371762037 CET	50016	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:15.376403093 CET	55555	50016	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:16.199162006 CET	55555	50016	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:16.199297905 CET	50016	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:16.199424028 CET	55555	50016	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:16.199594975 CET	50016	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:16.199598074 CET	50018	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:16.205013990 CET	55555	50016	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:16.205025911 CET	55555	50018	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:16.205089092 CET	50018	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:16.205120087 CET	50018	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:16.209758043 CET	55555	50018	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.053742886 CET	55555	50018	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.053877115 CET	50018	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.053893089 CET	55555	50018	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.053966999 CET	50018	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.054009914 CET	50020	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.058597088 CET	55555	50018	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.058674097 CET	55555	50020	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.058743954 CET	50020	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.058779955 CET	50020	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.063512087 CET	55555	50020	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.912591934 CET	55555	50020	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.912749052 CET	50020	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.912955999 CET	55555	50020	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.913095951 CET	50020	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.913172960 CET	50022	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.917736053 CET	55555	50020	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.917855978 CET	55555	50022	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:17.917942047 CET	50022	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.918020010 CET	50022	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:17.922672987 CET	55555	50022	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:18.764367104 CET	55555	50022	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:18.764506102 CET	55555	50022	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:18.764517069 CET	50022	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:18.764617920 CET	50022	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:18.764714956 CET	50024	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:18.769257069 CET	55555	50022	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:18.769423962 CET	55555	50024	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:18.769480944 CET	50024	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:18.769567013 CET	50024	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:18.774244070 CET	55555	50024	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:19.727685928 CET	55555	50024	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:19.727715015 CET	55555	50024	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:19.727766037 CET	55555	50024	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:19.727866888 CET	50024	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:19.727866888 CET	50024	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:19.728038073 CET	50024	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:19.728113890 CET	50026	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:19.732645035 CET	55555	50024	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:19.732805014 CET	55555	50026	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:19.732845068 CET	50026	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:19.732916117 CET	50026	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:19.737517118 CET	55555	50026	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:20.563847065 CET	55555	50026	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:20.563893080 CET	55555	50026	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:20.563951015 CET	50026	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:20.564186096 CET	50026	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:20.564270973 CET	50028	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:20.568799019 CET	55555	50026	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:20.568921089 CET	55555	50028	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:20.568964005 CET	50028	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:20.569032907 CET	50028	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:20.573635101 CET	55555	50028	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:20.629030943 CET	42836	443	192.168.2.23	91.189.91.43
Mar 18, 2025 04:45:21.397602081 CET	55555	50028	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:21.397687912 CET	55555	50028	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:21.397763014 CET	50028	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:21.397952080 CET	50028	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:21.398035049 CET	50030	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:21.402560949 CET	55555	50028	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:21.402637959 CET	55555	50030	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:21.402678967 CET	50030	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:21.402764082 CET	50030	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:21.407413960 CET	55555	50030	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:22.229317904 CET	55555	50030	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:22.229357004 CET	55555	50030	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:22.229496956 CET	50030	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:22.229594946 CET	50030	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:22.229688883 CET	50032	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:22.234232903 CET	55555	50030	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:22.234371901 CET	55555	50032	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:22.234447956 CET	50032	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:22.234524965 CET	50032	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:22.239090919 CET	55555	50032	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.081737041 CET	55555	50032	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.081839085 CET	55555	50032	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.082011938 CET	50032	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.082115889 CET	50032	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.082196951 CET	50034	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.086806059 CET	55555	50032	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.086947918 CET	55555	50034	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.087004900 CET	50034	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.087093115 CET	50034	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.091773987 CET	55555	50034	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.913786888 CET	55555	50034	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.913948059 CET	50034	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.914006948 CET	55555	50034	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.914077997 CET	50034	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.914167881 CET	50036	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.918720961 CET	55555	50034	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.918792009 CET	55555	50036	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:23.918848991 CET	50036	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.918925047 CET	50036	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:23.923659086 CET	55555	50036	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:24.746494055 CET	55555	50036	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:24.746634007 CET	55555	50036	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:24.746865034 CET	50036	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:24.746906996 CET	50036	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:24.746994019 CET	50038	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:24.751535892 CET	55555	50036	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:24.751624107 CET	55555	50038	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:24.751679897 CET	50038	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:24.751760006 CET	50038	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:24.756378889 CET	55555	50038	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:25.581716061 CET	55555	50038	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:25.581837893 CET	55555	50038	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:25.582005024 CET	50038	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:25.582128048 CET	50038	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:25.582225084 CET	50040	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:25.586806059 CET	55555	50038	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:25.587373018 CET	55555	50040	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:25.587431908 CET	50040	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:25.587500095 CET	50040	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:25.592479944 CET	55555	50040	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:26.413489103 CET	55555	50040	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:26.413503885 CET	55555	50040	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:26.413686991 CET	50040	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:26.413770914 CET	50040	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:26.413849115 CET	50042	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:26.418371916 CET	55555	50040	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:26.418948889 CET	55555	50042	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:26.419012070 CET	50042	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:26.419186115 CET	50042	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:26.424118996 CET	55555	50042	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:27.260415077 CET	55555	50042	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:27.260607004 CET	55555	50042	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:27.260708094 CET	50042	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:27.260790110 CET	50042	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:27.260845900 CET	50044	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:27.266311884 CET	55555	50042	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:27.266930103 CET	55555	50044	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:27.267008066 CET	50044	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:27.267070055 CET	50044	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:27.273021936 CET	55555	50044	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.100076914 CET	55555	50044	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.100210905 CET	55555	50044	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.100398064 CET	50044	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.100480080 CET	50044	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.100562096 CET	50046	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.106106043 CET	55555	50044	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.106118917 CET	55555	50046	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.106189966 CET	50046	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.106271029 CET	50046	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.111748934 CET	55555	50046	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.953037977 CET	55555	50046	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.953161955 CET	55555	50046	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.953233957 CET	50046	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.953325987 CET	50046	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.953418016 CET	50048	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.958072901 CET	55555	50046	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.958194971 CET	55555	50048	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:28.958265066 CET	50048	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.958328962 CET	50048	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:28.962984085 CET	55555	50048	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:29.785700083 CET	55555	50048	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:29.785851002 CET	55555	50048	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:29.785890102 CET	50048	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:29.786016941 CET	50048	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:29.786108971 CET	50050	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:29.790770054 CET	55555	50048	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:29.790791035 CET	55555	50050	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:29.790852070 CET	50050	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:29.790930033 CET	50050	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:29.795627117 CET	55555	50050	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:30.617438078 CET	55555	50050	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:30.617607117 CET	50050	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:30.617675066 CET	55555	50050	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:30.617757082 CET	50050	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:30.617851973 CET	50052	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:30.622452974 CET	55555	50050	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:30.622490883 CET	55555	50052	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:30.622553110 CET	50052	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:30.622627020 CET	50052	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:30.627274036 CET	55555	50052	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:31.448966980 CET	55555	50052	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:31.449105978 CET	55555	50052	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:31.449137926 CET	50052	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:31.449234009 CET	50052	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:31.449318886 CET	50054	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:31.454211950 CET	55555	50052	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:31.454247952 CET	55555	50054	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:31.454307079 CET	50054	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:31.454386950 CET	50054	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:31.459069967 CET	55555	50054	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:32.283612967 CET	55555	50054	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:32.283801079 CET	55555	50054	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:32.283850908 CET	50054	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:32.283970118 CET	50054	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:32.284023046 CET	50056	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:32.288633108 CET	55555	50054	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:32.288731098 CET	55555	50056	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:32.288811922 CET	50056	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:32.288872957 CET	50056	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:32.293567896 CET	55555	50056	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.117814064 CET	55555	50056	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.118000031 CET	55555	50056	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.118004084 CET	50056	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.118083000 CET	50056	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.118161917 CET	50058	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.123032093 CET	55555	50056	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.123044014 CET	55555	50058	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.123120070 CET	50058	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.123207092 CET	50058	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.127861977 CET	55555	50058	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.951406002 CET	55555	50058	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.951545000 CET	55555	50058	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.951554060 CET	50058	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.951598883 CET	50058	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.951641083 CET	50060	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.956228018 CET	55555	50058	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.956290960 CET	55555	50060	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:33.956332922 CET	50060	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.956372023 CET	50060	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:33.960961103 CET	55555	50060	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:34.791507959 CET	55555	50060	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:34.791630983 CET	55555	50060	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:34.791661024 CET	50060	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:34.791728020 CET	50060	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:34.791785002 CET	50062	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:34.796351910 CET	55555	50060	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:34.796484947 CET	55555	50062	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:34.796547890 CET	50062	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:34.796583891 CET	50062	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:34.801234961 CET	55555	50062	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:35.642043114 CET	55555	50062	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:35.642119884 CET	50062	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:35.642220020 CET	55555	50062	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:35.642268896 CET	50062	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:35.642306089 CET	50064	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:35.646894932 CET	55555	50062	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:35.646965981 CET	55555	50064	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:35.647093058 CET	50064	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:35.647109985 CET	50064	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:35.651742935 CET	55555	50064	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:36.474204063 CET	55555	50064	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:36.474351883 CET	55555	50064	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:36.474399090 CET	50064	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:36.474484921 CET	50064	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:36.474564075 CET	50066	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:36.479144096 CET	55555	50064	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:36.479265928 CET	55555	50066	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:36.479341984 CET	50066	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:36.479398966 CET	50066	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:36.484107018 CET	55555	50066	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:37.325948954 CET	55555	50066	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:37.325975895 CET	55555	50066	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:37.326118946 CET	50066	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:37.326195002 CET	50066	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:37.326275110 CET	50068	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:37.330883026 CET	55555	50066	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:37.331341982 CET	55555	50068	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:37.331418991 CET	50068	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:37.331480026 CET	50068	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:37.337349892 CET	55555	50068	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:38.167161942 CET	55555	50068	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:38.167236090 CET	55555	50068	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:38.167531013 CET	50068	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:38.167531967 CET	50068	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:38.167577982 CET	50070	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:38.172424078 CET	55555	50068	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:38.172457933 CET	55555	50070	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:38.172550917 CET	50070	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:38.172611952 CET	50070	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:38.177262068 CET	55555	50070	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.007534981 CET	55555	50070	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.007661104 CET	55555	50070	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.007837057 CET	50070	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.007953882 CET	50070	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.007999897 CET	50072	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.012681007 CET	55555	50070	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.012693882 CET	55555	50072	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.012789965 CET	50072	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.012860060 CET	50072	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.017512083 CET	55555	50072	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.865931988 CET	55555	50072	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.865991116 CET	55555	50072	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.866166115 CET	50072	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.866199970 CET	50072	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.866215944 CET	50074	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.870963097 CET	55555	50072	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.870975971 CET	55555	50074	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:39.871063948 CET	50074	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.871078014 CET	50074	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:39.875693083 CET	55555	50074	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:40.712901115 CET	55555	50074	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:40.713119030 CET	55555	50074	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:40.713248014 CET	50074	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:40.713316917 CET	50074	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:40.713397026 CET	50076	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:40.717991114 CET	55555	50074	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:40.718112946 CET	55555	50076	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:40.718219042 CET	50076	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:40.718251944 CET	50076	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:40.723001957 CET	55555	50076	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:41.556581020 CET	55555	50076	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:41.556737900 CET	55555	50076	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:41.556749105 CET	50076	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:41.556843042 CET	50076	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:41.556890965 CET	50078	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:41.561604023 CET	55555	50076	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:41.561640978 CET	55555	50078	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:41.561729908 CET	50078	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:41.561794996 CET	50078	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:41.566484928 CET	55555	50078	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:42.395976067 CET	55555	50078	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:42.396069050 CET	55555	50078	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:42.396183968 CET	50078	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:42.396184921 CET	50078	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:42.396240950 CET	50080	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:42.400944948 CET	55555	50078	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:42.400963068 CET	55555	50080	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:42.401031017 CET	50080	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:42.401062965 CET	50080	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:42.405658007 CET	55555	50080	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:43.227041960 CET	55555	50080	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:43.227189064 CET	50080	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:43.227238894 CET	55555	50080	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:43.227298975 CET	50080	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:43.227335930 CET	50082	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:43.231954098 CET	55555	50080	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:43.231965065 CET	55555	50082	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:43.232011080 CET	50082	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:43.232045889 CET	50082	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:43.236877918 CET	55555	50082	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.063664913 CET	55555	50082	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.063687086 CET	55555	50082	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.063812971 CET	50082	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.063838005 CET	50082	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.063874006 CET	50084	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.068522930 CET	55555	50082	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.068536043 CET	55555	50084	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.068600893 CET	50084	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.068656921 CET	50084	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.073299885 CET	55555	50084	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.892847061 CET	55555	50084	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.892977953 CET	55555	50084	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.893013000 CET	50084	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.893037081 CET	50084	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.893104076 CET	50086	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.897727966 CET	55555	50084	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.897835016 CET	55555	50086	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:44.897881985 CET	50086	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.897927046 CET	50086	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:44.902540922 CET	55555	50086	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:45.763889074 CET	55555	50086	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:45.763906956 CET	55555	50086	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:45.764046907 CET	50086	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:45.764095068 CET	50086	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:45.764151096 CET	50088	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:45.771003008 CET	55555	50086	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:45.771014929 CET	55555	50088	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:45.771056890 CET	50088	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:45.771106958 CET	50088	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:45.777553082 CET	55555	50088	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:46.618307114 CET	55555	50088	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:46.618388891 CET	55555	50088	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:46.618469954 CET	50088	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:46.618572950 CET	50088	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:46.618666887 CET	50090	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:46.623495102 CET	55555	50088	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:46.623673916 CET	55555	50090	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:46.623735905 CET	50090	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:46.623817921 CET	50090	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:46.629070997 CET	55555	50090	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:47.449652910 CET	55555	50090	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:47.449757099 CET	55555	50090	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:47.449830055 CET	50090	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:47.449913979 CET	50090	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:47.450010061 CET	50092	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:47.454576969 CET	55555	50090	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:47.454823971 CET	55555	50092	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:47.454881907 CET	50092	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:47.454962015 CET	50092	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:47.459583998 CET	55555	50092	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:48.298661947 CET	55555	50092	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:48.298770905 CET	55555	50092	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:48.298834085 CET	50092	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:48.298893929 CET	50094	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:48.298917055 CET	50092	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:48.303622007 CET	55555	50092	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:48.303632975 CET	55555	50094	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:48.303735971 CET	50094	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:48.303792953 CET	50094	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:48.308430910 CET	55555	50094	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.126722097 CET	55555	50094	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.126954079 CET	50094	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.127207994 CET	55555	50094	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.127283096 CET	50094	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.127346992 CET	50096	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.132688999 CET	55555	50094	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.132824898 CET	55555	50096	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.132922888 CET	50096	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.132986069 CET	50096	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.138243914 CET	55555	50096	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.297236919 CET	43928	443	192.168.2.23	91.189.91.42
Mar 18, 2025 04:45:49.963407040 CET	55555	50096	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.963418007 CET	55555	50096	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.963690996 CET	50096	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.963769913 CET	50096	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.963850975 CET	50098	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.970158100 CET	55555	50096	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.970169067 CET	55555	50098	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:49.970293999 CET	50098	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.970345020 CET	50098	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:49.974970102 CET	55555	50098	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:50.798873901 CET	55555	50098	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:50.798916101 CET	55555	50098	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:50.799118996 CET	50098	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:50.799163103 CET	50098	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:50.799192905 CET	50100	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:50.803893089 CET	55555	50098	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:50.803919077 CET	55555	50100	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:50.804003000 CET	50100	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:50.804017067 CET	50100	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:50.808847904 CET	55555	50100	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:51.627362013 CET	55555	50100	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:51.627649069 CET	50100	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:51.627896070 CET	55555	50100	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:51.628012896 CET	50100	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:51.628109932 CET	50102	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:51.633424997 CET	55555	50100	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:51.633438110 CET	55555	50102	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:51.633501053 CET	50102	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:51.633582115 CET	50102	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:51.639713049 CET	55555	50102	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:52.483437061 CET	55555	50102	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:52.483449936 CET	55555	50102	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:52.483705044 CET	50102	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:52.483741999 CET	50102	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:52.483774900 CET	50104	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:52.489862919 CET	55555	50102	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:52.489875078 CET	55555	50104	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:52.489972115 CET	50104	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:52.489986897 CET	50104	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:52.494633913 CET	55555	50104	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:53.321049929 CET	55555	50104	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:53.321136951 CET	55555	50104	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:53.321355104 CET	50104	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:53.321393013 CET	50104	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:53.321438074 CET	50106	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:53.326105118 CET	55555	50104	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:53.326114893 CET	55555	50106	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:53.326209068 CET	50106	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:53.326237917 CET	50106	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:53.330882072 CET	55555	50106	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:54.156743050 CET	55555	50106	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:54.156883001 CET	55555	50106	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:54.157027960 CET	50106	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:54.157115936 CET	50106	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:54.157159090 CET	50108	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:54.161714077 CET	55555	50106	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:54.161859989 CET	55555	50108	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:54.161940098 CET	50108	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:54.162009954 CET	50108	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:54.166645050 CET	55555	50108	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.004815102 CET	55555	50108	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.004935026 CET	55555	50108	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.005139112 CET	50108	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.005139112 CET	50108	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.005166054 CET	50110	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.009874105 CET	55555	50108	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.009885073 CET	55555	50110	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.009967089 CET	50110	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.009989977 CET	50110	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.015644073 CET	55555	50110	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.853096962 CET	55555	50110	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.853168964 CET	55555	50110	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.853487015 CET	50110	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.853511095 CET	50110	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.853547096 CET	50112	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.858477116 CET	55555	50110	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.858488083 CET	55555	50112	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:55.858561993 CET	50112	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.858650923 CET	50112	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:55.863329887 CET	55555	50112	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:56.684108019 CET	55555	50112	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:56.684194088 CET	55555	50112	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:56.684276104 CET	50112	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:56.684380054 CET	50112	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:56.684468985 CET	50114	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:56.689018011 CET	55555	50112	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:56.689116001 CET	55555	50114	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:56.689177990 CET	50114	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:56.689250946 CET	50114	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:56.693905115 CET	55555	50114	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:57.518213034 CET	55555	50114	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:57.518294096 CET	55555	50114	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:57.518416882 CET	50114	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:57.518459082 CET	50114	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:57.518501043 CET	50116	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:57.523092985 CET	55555	50114	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:57.523153067 CET	55555	50116	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:57.523215055 CET	50116	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:57.523299932 CET	50116	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:57.527962923 CET	55555	50116	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:58.354074955 CET	55555	50116	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:58.354171038 CET	50116	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:58.354243994 CET	55555	50116	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:58.354290962 CET	50116	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:58.354329109 CET	50118	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:58.358968019 CET	55555	50116	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:58.358979940 CET	55555	50118	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:58.359034061 CET	50118	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:58.359050989 CET	50118	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:58.363671064 CET	55555	50118	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:59.198617935 CET	55555	50118	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:59.198702097 CET	50118	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:59.198811054 CET	55555	50118	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:59.198858023 CET	50118	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:59.198909044 CET	50120	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:59.203468084 CET	55555	50118	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:59.203500032 CET	55555	50120	103.77.246.204	192.168.2.23
Mar 18, 2025 04:45:59.203531981 CET	50120	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:59.203562975 CET	50120	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:45:59.208223104 CET	55555	50120	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.031748056 CET	55555	50120	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.031893969 CET	50120	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.032119989 CET	55555	50120	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.032196999 CET	50120	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.032291889 CET	50122	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.036793947 CET	55555	50120	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.036928892 CET	55555	50122	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.036989927 CET	50122	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.037055016 CET	50122	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.041642904 CET	55555	50122	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.861327887 CET	55555	50122	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.861423016 CET	55555	50122	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.861526012 CET	50122	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.861572981 CET	50122	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.861614943 CET	50124	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.866410971 CET	55555	50122	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.866422892 CET	55555	50124	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:00.866498947 CET	50124	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.866583109 CET	50124	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:00.871238947 CET	55555	50124	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:01.693593025 CET	55555	50124	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:01.693691969 CET	50124	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:01.693716049 CET	55555	50124	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:01.693768978 CET	50124	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:01.693802118 CET	50126	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:01.698508978 CET	55555	50124	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:01.698520899 CET	55555	50126	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:01.698561907 CET	50126	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:01.698599100 CET	50126	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:01.703202009 CET	55555	50126	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:02.547727108 CET	55555	50126	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:02.547847033 CET	55555	50126	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:02.547890902 CET	50126	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:02.547945976 CET	50128	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:02.547993898 CET	50126	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:02.552714109 CET	55555	50128	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:02.552743912 CET	55555	50126	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:02.552854061 CET	50128	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:02.552854061 CET	50128	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:02.557594061 CET	55555	50128	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:03.378660917 CET	55555	50128	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:03.378740072 CET	55555	50128	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:03.378849030 CET	50128	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:03.378886938 CET	50128	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:03.378926039 CET	50130	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:03.383522987 CET	55555	50128	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:03.383666039 CET	55555	50130	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:03.383739948 CET	50130	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:03.383764982 CET	50130	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:03.389477015 CET	55555	50130	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:04.230701923 CET	55555	50130	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:04.230839968 CET	55555	50130	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:04.230993032 CET	50130	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:04.231268883 CET	50130	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:04.231340885 CET	50132	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:04.236012936 CET	55555	50130	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:04.236134052 CET	55555	50132	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:04.236222982 CET	50132	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:04.236326933 CET	50132	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:04.240995884 CET	55555	50132	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.065783978 CET	55555	50132	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.065876007 CET	55555	50132	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.065995932 CET	50132	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.066044092 CET	50132	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.066087008 CET	50134	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.070739985 CET	55555	50132	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.070751905 CET	55555	50134	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.070816040 CET	50134	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.070857048 CET	50134	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.075453043 CET	55555	50134	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.919406891 CET	55555	50134	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.919497967 CET	50134	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.919517040 CET	55555	50134	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.919574976 CET	50134	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.919610023 CET	50136	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.924273968 CET	55555	50134	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.924284935 CET	55555	50136	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:05.924330950 CET	50136	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.924375057 CET	50136	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:05.929038048 CET	55555	50136	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:09.786091089 CET	55555	50136	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:09.786235094 CET	55555	50136	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:09.786262035 CET	50136	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:09.786307096 CET	50136	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:09.786367893 CET	50138	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:09.790921926 CET	55555	50136	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:09.791032076 CET	55555	50138	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:09.791107893 CET	50138	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:09.791162014 CET	50138	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:09.795783997 CET	55555	50138	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:10.622905970 CET	55555	50138	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:10.623063087 CET	55555	50138	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:10.623147964 CET	50138	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:10.623176098 CET	50138	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:10.623225927 CET	50140	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:10.629173040 CET	55555	50138	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:10.629184008 CET	55555	50140	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:10.629280090 CET	50140	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:10.629306078 CET	50140	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:10.633995056 CET	55555	50140	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:11.454349995 CET	55555	50140	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:11.454482079 CET	55555	50140	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:11.454498053 CET	50140	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:11.454555035 CET	50140	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:11.454602003 CET	50142	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:11.459306002 CET	55555	50140	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:11.459414959 CET	55555	50142	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:11.459501028 CET	50142	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:11.459544897 CET	50142	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:11.464226007 CET	55555	50142	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:12.290695906 CET	55555	50142	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:12.290710926 CET	55555	50142	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:12.290913105 CET	50142	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:12.290967941 CET	50142	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:12.290977001 CET	50144	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:12.297626019 CET	55555	50142	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:12.297636986 CET	55555	50144	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:12.297689915 CET	50144	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:12.297724009 CET	50144	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:12.303735971 CET	55555	50144	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:13.142147064 CET	55555	50144	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:13.142218113 CET	55555	50144	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:13.142277002 CET	50144	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:13.142277002 CET	50144	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:13.142318010 CET	50146	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:13.146970034 CET	55555	50144	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:13.146980047 CET	55555	50146	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:13.147031069 CET	50146	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:13.147068024 CET	50146	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:13.151741028 CET	55555	50146	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:14.173791885 CET	55555	50146	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:14.173815012 CET	55555	50146	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:14.173924923 CET	50146	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:14.173924923 CET	50146	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:14.173943043 CET	50148	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:14.173996925 CET	55555	50146	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:14.174042940 CET	50146	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:14.178689003 CET	55555	50146	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:14.178700924 CET	55555	50148	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:14.178749084 CET	50148	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:14.178780079 CET	50148	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:14.183393955 CET	55555	50148	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.007601023 CET	55555	50148	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.007719994 CET	50148	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.007764101 CET	55555	50148	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.007832050 CET	50148	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.007846117 CET	50150	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.012470007 CET	55555	50148	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.012531042 CET	55555	50150	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.012614965 CET	50150	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.012638092 CET	50150	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.017332077 CET	55555	50150	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.847417116 CET	55555	50150	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.847489119 CET	55555	50150	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.847501040 CET	50150	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.847727060 CET	50150	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.847738028 CET	50152	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.852464914 CET	55555	50150	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.852477074 CET	55555	50152	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:15.852519035 CET	50152	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.852550983 CET	50152	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:15.857218981 CET	55555	50152	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:16.695878983 CET	55555	50152	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:16.696011066 CET	50152	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:16.696141958 CET	55555	50152	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:16.696198940 CET	50152	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:16.696238041 CET	50154	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:16.700891972 CET	55555	50152	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:16.700911045 CET	55555	50154	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:16.700958967 CET	50154	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:16.700979948 CET	50154	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:16.705590010 CET	55555	50154	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:17.529917002 CET	55555	50154	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:17.530050039 CET	50154	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:17.530159950 CET	55555	50154	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:17.530219078 CET	50154	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:17.530256987 CET	50156	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:17.535084963 CET	55555	50154	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:17.535096884 CET	55555	50156	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:17.535141945 CET	50156	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:17.535172939 CET	50156	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:17.540082932 CET	55555	50156	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:18.365643978 CET	55555	50156	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:18.365751982 CET	55555	50156	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:18.365927935 CET	50156	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:18.366040945 CET	50156	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:18.366121054 CET	50158	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:18.370673895 CET	55555	50156	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:18.370765924 CET	55555	50158	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:18.370830059 CET	50158	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:18.370910883 CET	50158	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:18.375504017 CET	55555	50158	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:19.207192898 CET	55555	50158	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:19.207318068 CET	55555	50158	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:19.207345009 CET	50158	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:19.207456112 CET	50158	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:19.207549095 CET	50160	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:19.212079048 CET	55555	50158	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:19.212276936 CET	55555	50160	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:19.212402105 CET	50160	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:19.212449074 CET	50160	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:19.239506006 CET	55555	50160	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.077135086 CET	55555	50160	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.077250004 CET	55555	50160	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.077409983 CET	50160	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.077500105 CET	50160	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.077550888 CET	50162	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.082257986 CET	55555	50160	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.082268953 CET	55555	50162	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.082360029 CET	50162	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.082421064 CET	50162	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.087166071 CET	55555	50162	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.923352003 CET	55555	50162	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.923418045 CET	55555	50162	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.923518896 CET	50162	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.923593044 CET	50162	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.923651934 CET	50164	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.928263903 CET	55555	50162	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.928427935 CET	55555	50164	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:20.928513050 CET	50164	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.928575993 CET	50164	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:20.933231115 CET	55555	50164	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:21.760359049 CET	55555	50164	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:21.760392904 CET	55555	50164	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:21.760458946 CET	50164	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:21.760612965 CET	50164	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:21.760704994 CET	50166	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:21.765724897 CET	55555	50164	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:21.765734911 CET	55555	50166	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:21.765832901 CET	50166	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:21.765903950 CET	50166	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:21.771816015 CET	55555	50166	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:22.621728897 CET	55555	50166	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:22.621860981 CET	50166	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:22.621967077 CET	55555	50166	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:22.622024059 CET	50166	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:22.622066975 CET	50168	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:22.626693964 CET	55555	50166	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:22.626816034 CET	55555	50168	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:22.626862049 CET	50168	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:22.626924992 CET	50168	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:22.631652117 CET	55555	50168	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:23.472071886 CET	55555	50168	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:23.472202063 CET	50168	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:23.472254992 CET	55555	50168	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:23.472434998 CET	50168	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:23.472521067 CET	50170	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:23.477171898 CET	55555	50168	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:23.477184057 CET	55555	50170	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:23.477241993 CET	50170	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:23.477309942 CET	50170	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:23.481935024 CET	55555	50170	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:24.317106962 CET	55555	50170	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:24.317214012 CET	50170	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:24.317282915 CET	55555	50170	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:24.317413092 CET	50170	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:24.317500114 CET	50172	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:24.322077990 CET	55555	50170	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:24.322160006 CET	55555	50172	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:24.322210073 CET	50172	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:24.322274923 CET	50172	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:24.326956034 CET	55555	50172	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.148684025 CET	55555	50172	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.148786068 CET	50172	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.148811102 CET	55555	50172	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.149002075 CET	50172	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.149154902 CET	50174	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.153625965 CET	55555	50172	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.153846025 CET	55555	50174	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.153897047 CET	50174	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.153980017 CET	50174	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.158587933 CET	55555	50174	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.978214025 CET	55555	50174	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.978321075 CET	50174	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.978413105 CET	55555	50174	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.978548050 CET	50174	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.978645086 CET	50176	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.983191967 CET	55555	50174	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.983604908 CET	55555	50176	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:25.983648062 CET	50176	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.983730078 CET	50176	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:25.988842010 CET	55555	50176	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:26.825926065 CET	55555	50176	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:26.826067924 CET	50176	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:26.826158047 CET	55555	50176	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:26.826222897 CET	50176	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:26.826301098 CET	50178	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:26.832601070 CET	55555	50176	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:26.832613945 CET	55555	50178	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:26.832731962 CET	50178	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:26.832766056 CET	50178	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:26.839799881 CET	55555	50178	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:27.661355019 CET	55555	50178	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:27.661484003 CET	50178	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:27.661510944 CET	55555	50178	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:27.661585093 CET	50178	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:27.661636114 CET	50180	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:27.666332960 CET	55555	50178	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:27.666343927 CET	55555	50180	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:27.666407108 CET	50180	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:27.666434050 CET	50180	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:27.671092033 CET	55555	50180	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:28.493805885 CET	55555	50180	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:28.493895054 CET	50180	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:28.494126081 CET	55555	50180	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:28.494245052 CET	50180	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:28.494324923 CET	50182	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:28.498900890 CET	55555	50180	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:28.499037027 CET	55555	50182	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:28.499083042 CET	50182	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:28.499166965 CET	50182	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:28.503813982 CET	55555	50182	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:29.333420992 CET	55555	50182	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:29.333553076 CET	55555	50182	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:29.333544016 CET	50182	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:29.333642006 CET	50182	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:29.333728075 CET	50184	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:29.338244915 CET	55555	50182	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:29.338438034 CET	55555	50184	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:29.338489056 CET	50184	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:29.338570118 CET	50184	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:29.343187094 CET	55555	50184	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:30.186980963 CET	55555	50184	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:30.187117100 CET	50184	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:30.187150955 CET	55555	50184	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:30.187354088 CET	50184	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:30.187458992 CET	50186	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:30.192468882 CET	55555	50184	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:30.192637920 CET	55555	50186	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:30.192694902 CET	50186	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:30.192763090 CET	50186	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:30.197742939 CET	55555	50186	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.024388075 CET	55555	50186	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.024452925 CET	55555	50186	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.024661064 CET	50186	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.024746895 CET	50186	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.024827003 CET	50188	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.029372931 CET	55555	50186	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.029511929 CET	55555	50188	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.029577971 CET	50188	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.029639959 CET	50188	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.035018921 CET	55555	50188	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.866311073 CET	55555	50188	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.866436005 CET	55555	50188	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.866472006 CET	50188	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.866516113 CET	50188	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.866559029 CET	50190	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.871293068 CET	55555	50188	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.871304989 CET	55555	50190	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:31.871387005 CET	50190	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.871423006 CET	50190	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:31.876045942 CET	55555	50190	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:32.721421957 CET	55555	50190	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:32.721431017 CET	55555	50190	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:32.721590042 CET	50190	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:32.721781015 CET	50190	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:32.721899033 CET	50192	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:32.726419926 CET	55555	50190	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:32.726672888 CET	55555	50192	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:32.726792097 CET	50192	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:32.726857901 CET	50192	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:32.731549978 CET	55555	50192	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:33.552221060 CET	55555	50192	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:33.552364111 CET	55555	50192	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:33.552396059 CET	50192	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:33.552489996 CET	50192	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:33.552561045 CET	50194	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:33.557142973 CET	55555	50192	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:33.557195902 CET	55555	50194	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:33.557259083 CET	50194	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:33.557343960 CET	50194	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:33.561947107 CET	55555	50194	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:34.385544062 CET	55555	50194	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:34.385566950 CET	55555	50194	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:34.385724068 CET	50194	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:34.385823965 CET	50194	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:34.385921955 CET	50196	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:34.392714977 CET	55555	50194	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:34.392726898 CET	55555	50196	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:34.392798901 CET	50196	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:34.392874002 CET	50196	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:34.399985075 CET	55555	50196	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:35.223263025 CET	55555	50196	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:35.223283052 CET	55555	50196	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:35.223547935 CET	50196	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:35.223659039 CET	50196	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:35.223750114 CET	50198	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:35.228319883 CET	55555	50196	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:35.228446007 CET	55555	50198	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:35.228509903 CET	50198	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:35.228585005 CET	50198	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:35.233182907 CET	55555	50198	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.103369951 CET	55555	50198	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.103513956 CET	50198	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.103688955 CET	55555	50198	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.103774071 CET	50198	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.103857994 CET	50200	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.108457088 CET	55555	50198	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.108530998 CET	55555	50200	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.108592033 CET	50200	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.108650923 CET	50200	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.113270044 CET	55555	50200	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.940803051 CET	55555	50200	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.940927982 CET	55555	50200	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.941061020 CET	50200	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.941173077 CET	50200	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.941252947 CET	50202	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.945810080 CET	55555	50200	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.945946932 CET	55555	50202	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:36.946016073 CET	50202	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.946079969 CET	50202	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:36.950701952 CET	55555	50202	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:37.785293102 CET	55555	50202	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:37.785475969 CET	50202	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:37.785547018 CET	55555	50202	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:37.785634995 CET	50202	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:37.785711050 CET	50204	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:37.790254116 CET	55555	50202	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:37.790378094 CET	55555	50204	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:37.790442944 CET	50204	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:37.790505886 CET	50204	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:37.795871019 CET	55555	50204	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:38.624877930 CET	55555	50204	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:38.624902010 CET	55555	50204	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:38.625058889 CET	50204	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:38.625142097 CET	50204	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:38.625231981 CET	50206	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:38.629731894 CET	55555	50204	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:38.629928112 CET	55555	50206	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:38.629990101 CET	50206	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:38.630069971 CET	50206	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:38.635689974 CET	55555	50206	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:39.479681015 CET	55555	50206	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:39.479777098 CET	50206	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:39.479794979 CET	55555	50206	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:39.479840040 CET	50206	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:39.479878902 CET	50208	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:39.484570026 CET	55555	50206	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:39.484580994 CET	55555	50208	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:39.484704018 CET	50208	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:39.484715939 CET	50208	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:39.489478111 CET	55555	50208	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:40.322529078 CET	55555	50208	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:40.322622061 CET	55555	50208	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:40.322829962 CET	50208	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:40.322895050 CET	50208	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:40.322938919 CET	50210	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:40.327713013 CET	55555	50208	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:40.327723026 CET	55555	50210	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:40.327821970 CET	50210	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:40.327833891 CET	50210	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:40.332474947 CET	55555	50210	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:41.175282001 CET	55555	50210	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:41.175535917 CET	50210	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:41.175581932 CET	55555	50210	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:41.175739050 CET	50210	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:41.175818920 CET	50212	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:41.180349112 CET	55555	50210	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:41.180502892 CET	55555	50212	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:41.180577993 CET	50212	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:41.180644035 CET	50212	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:41.185256004 CET	55555	50212	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.027849913 CET	55555	50212	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.027869940 CET	55555	50212	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.028022051 CET	50212	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.028076887 CET	50212	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.028120041 CET	50214	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.033209085 CET	55555	50212	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.033221960 CET	55555	50214	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.033319950 CET	50214	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.033355951 CET	50214	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.038070917 CET	55555	50214	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.862595081 CET	55555	50214	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.862675905 CET	55555	50214	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.862770081 CET	50214	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.862819910 CET	50214	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.862874031 CET	50216	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.867508888 CET	55555	50214	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.867521048 CET	55555	50216	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:42.867633104 CET	50216	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.867750883 CET	50216	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:42.872533083 CET	55555	50216	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:43.712827921 CET	55555	50216	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:43.713032961 CET	50216	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:43.713047981 CET	55555	50216	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:43.713128090 CET	50216	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:43.713182926 CET	50218	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:43.717746019 CET	55555	50216	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:43.717797041 CET	55555	50218	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:43.717878103 CET	50218	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:43.717905998 CET	50218	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:43.722539902 CET	55555	50218	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:44.553431988 CET	55555	50218	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:44.553529024 CET	55555	50218	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:44.553706884 CET	50218	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:44.553869009 CET	50218	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:44.553953886 CET	50220	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:44.558526039 CET	55555	50218	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:44.558634996 CET	55555	50220	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:44.558736086 CET	50220	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:44.558798075 CET	50220	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:44.563460112 CET	55555	50220	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:45.405106068 CET	55555	50220	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:45.405145884 CET	55555	50220	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:45.405421019 CET	50220	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:45.405668020 CET	50220	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:45.405755043 CET	50222	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:45.410345078 CET	55555	50220	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:45.410459995 CET	55555	50222	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:45.410540104 CET	50222	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:45.410635948 CET	50222	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:45.415235043 CET	55555	50222	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:46.241823912 CET	55555	50222	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:46.241971016 CET	50222	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:46.242000103 CET	55555	50222	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:46.242079973 CET	50222	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:46.242115974 CET	50224	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:46.246687889 CET	55555	50222	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:46.246704102 CET	55555	50224	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:46.246753931 CET	50224	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:46.246781111 CET	50224	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:46.251375914 CET	55555	50224	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.077862978 CET	55555	50224	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.077943087 CET	50224	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.078002930 CET	55555	50224	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.078047037 CET	50224	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.078087091 CET	50226	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.082658052 CET	55555	50224	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.082761049 CET	55555	50226	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.082798004 CET	50226	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.082827091 CET	50226	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.087455034 CET	55555	50226	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.908663988 CET	55555	50226	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.908741951 CET	50226	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.908852100 CET	55555	50226	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.908895969 CET	50226	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.908931971 CET	50228	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.913590908 CET	55555	50226	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.913602114 CET	55555	50228	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:47.913644075 CET	50228	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.913671970 CET	50228	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:47.918360949 CET	55555	50228	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:48.742191076 CET	55555	50228	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:48.742263079 CET	50228	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:48.742317915 CET	55555	50228	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:48.742357016 CET	50228	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:48.742396116 CET	50230	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:48.747052908 CET	55555	50228	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:48.747062922 CET	55555	50230	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:48.747111082 CET	50230	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:48.747123957 CET	50230	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:48.751873970 CET	55555	50230	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:49.577830076 CET	55555	50230	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:49.577841043 CET	55555	50230	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:49.577924967 CET	50230	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:49.577951908 CET	50230	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:49.577992916 CET	50232	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:49.582745075 CET	55555	50230	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:49.582753897 CET	55555	50232	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:49.582792997 CET	50232	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:49.582818031 CET	50232	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:49.587497950 CET	55555	50232	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:50.409228086 CET	55555	50232	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:50.409343958 CET	50232	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:50.409357071 CET	55555	50232	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:50.409405947 CET	50232	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:50.409454107 CET	50234	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:50.414082050 CET	55555	50232	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:50.414192915 CET	55555	50234	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:50.414241076 CET	50234	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:50.414263964 CET	50234	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:50.418932915 CET	55555	50234	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:51.256042004 CET	55555	50234	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:51.256136894 CET	55555	50234	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:51.256158113 CET	50234	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:51.256186008 CET	50234	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:51.256222963 CET	50236	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:51.261782885 CET	55555	50234	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:51.261792898 CET	55555	50236	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:51.261831999 CET	50236	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:51.261876106 CET	50236	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:51.267307997 CET	55555	50236	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.114813089 CET	55555	50236	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.114897013 CET	55555	50236	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.114924908 CET	50236	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.114970922 CET	50236	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.115026951 CET	50238	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.119654894 CET	55555	50236	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.119782925 CET	55555	50238	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.119828939 CET	50238	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.119864941 CET	50238	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.124519110 CET	55555	50238	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.972085953 CET	55555	50238	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.972137928 CET	55555	50238	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.972265959 CET	50238	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.972379923 CET	50238	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.972455978 CET	50240	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.977077007 CET	55555	50238	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.977118969 CET	55555	50240	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:52.977235079 CET	50240	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.977281094 CET	50240	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:52.982006073 CET	55555	50240	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:53.811997890 CET	55555	50240	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:53.812012911 CET	55555	50240	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:53.812163115 CET	50240	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:53.812213898 CET	50240	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:53.812269926 CET	50242	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:53.818629026 CET	55555	50240	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:53.818896055 CET	55555	50242	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:53.818965912 CET	50242	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:53.818998098 CET	50242	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:53.824084997 CET	55555	50242	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:54.662836075 CET	55555	50242	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:54.662909985 CET	55555	50242	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:54.662964106 CET	50242	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:54.663008928 CET	50242	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:54.663059950 CET	50244	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:54.667650938 CET	55555	50242	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:54.667732954 CET	55555	50244	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:54.667800903 CET	50244	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:54.667819023 CET	50244	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:54.672467947 CET	55555	50244	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:55.518093109 CET	55555	50244	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:55.518181086 CET	50244	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:55.518227100 CET	55555	50244	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:55.518301964 CET	50244	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:55.518347979 CET	50246	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:55.523037910 CET	55555	50244	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:55.523085117 CET	55555	50246	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:55.523155928 CET	50246	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:55.523185015 CET	50246	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:55.527924061 CET	55555	50246	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:56.375922918 CET	55555	50246	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:56.376019001 CET	50246	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:56.376082897 CET	55555	50246	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:56.376167059 CET	50246	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:56.376209974 CET	50248	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:56.380798101 CET	55555	50246	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:56.380857944 CET	55555	50248	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:56.380908966 CET	50248	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:56.380935907 CET	50248	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:56.385605097 CET	55555	50248	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:57.235384941 CET	55555	50248	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:57.235480070 CET	50248	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:57.235555887 CET	55555	50248	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:57.235626936 CET	50248	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:57.235673904 CET	50250	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:57.240335941 CET	55555	50248	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:57.240346909 CET	55555	50250	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:57.240402937 CET	50250	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:57.240432978 CET	50250	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:57.245026112 CET	55555	50250	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.072530985 CET	55555	50250	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.072549105 CET	55555	50250	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.072630882 CET	50250	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.072674036 CET	50250	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.072719097 CET	50252	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.077457905 CET	55555	50250	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.077467918 CET	55555	50252	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.077528954 CET	50252	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.077586889 CET	50252	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.082191944 CET	55555	50252	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.924236059 CET	55555	50252	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.924346924 CET	50252	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.924374104 CET	55555	50252	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.924474001 CET	50252	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.924551964 CET	50254	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.929162979 CET	55555	50252	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.929287910 CET	55555	50254	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:58.929342985 CET	50254	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.929411888 CET	50254	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:58.934032917 CET	55555	50254	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:59.759682894 CET	55555	50254	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:59.759879112 CET	50254	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:59.760077953 CET	55555	50254	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:59.760204077 CET	50254	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:59.760288000 CET	50256	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:59.765331030 CET	55555	50254	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:59.765851021 CET	55555	50256	103.77.246.204	192.168.2.23
Mar 18, 2025 04:46:59.765930891 CET	50256	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:59.766017914 CET	50256	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:46:59.771410942 CET	55555	50256	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:00.592583895 CET	55555	50256	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:00.592593908 CET	55555	50256	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:00.592689037 CET	50256	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:00.592722893 CET	50256	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:00.592767000 CET	50258	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:00.598159075 CET	55555	50256	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:00.598170042 CET	55555	50258	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:00.598248005 CET	50258	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:00.598335981 CET	50258	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:00.603705883 CET	55555	50258	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:01.432492018 CET	55555	50258	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:01.432638884 CET	50258	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:01.433208942 CET	55555	50258	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:01.433300972 CET	50258	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:01.433389902 CET	50260	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:01.439532995 CET	55555	50258	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:01.439544916 CET	55555	50260	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:01.439594984 CET	50260	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:01.439621925 CET	50260	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:01.445480108 CET	55555	50260	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:02.272553921 CET	55555	50260	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:02.272720098 CET	50260	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:02.272811890 CET	55555	50260	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:02.272893906 CET	50260	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:02.272977114 CET	50262	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:02.277961969 CET	55555	50260	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:02.277975082 CET	55555	50262	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:02.278024912 CET	50262	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:02.278070927 CET	50262	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:02.282731056 CET	55555	50262	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.110018015 CET	55555	50262	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.110093117 CET	55555	50262	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.110182047 CET	50262	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.110301018 CET	50262	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.110375881 CET	50264	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.114975929 CET	55555	50262	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.115084887 CET	55555	50264	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.115176916 CET	50264	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.115300894 CET	50264	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.119916916 CET	55555	50264	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.960525990 CET	55555	50264	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.960622072 CET	55555	50264	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.960753918 CET	50264	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.960808992 CET	50264	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.960860014 CET	50266	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.965476036 CET	55555	50264	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.965527058 CET	55555	50266	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:03.965589046 CET	50266	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.965651989 CET	50266	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:03.970315933 CET	55555	50266	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:04.799747944 CET	55555	50266	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:04.799947977 CET	50266	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:04.800020933 CET	55555	50266	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:04.800080061 CET	50266	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:04.800116062 CET	50268	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:04.805555105 CET	55555	50266	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:04.806044102 CET	55555	50268	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:04.806111097 CET	50268	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:04.806174040 CET	50268	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:04.812248945 CET	55555	50268	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:05.637271881 CET	55555	50268	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:05.637376070 CET	50268	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:05.637924910 CET	55555	50268	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:05.637984991 CET	50268	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:05.638031960 CET	50270	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:05.643014908 CET	55555	50268	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:05.643027067 CET	55555	50270	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:05.643132925 CET	50270	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:05.643196106 CET	50270	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:05.648252010 CET	55555	50270	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:06.472990036 CET	55555	50270	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:06.473089933 CET	50270	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:06.473133087 CET	55555	50270	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:06.473181009 CET	50270	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:06.473221064 CET	50272	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:06.479254961 CET	55555	50270	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:06.479266882 CET	55555	50272	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:06.479403973 CET	50272	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:06.479424000 CET	50272	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:06.484107018 CET	55555	50272	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:07.332889080 CET	55555	50272	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:07.333142042 CET	55555	50272	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:07.333194017 CET	50272	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:07.333237886 CET	50272	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:07.333286047 CET	50274	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:07.337941885 CET	55555	50272	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:07.337960005 CET	55555	50274	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:07.338053942 CET	50274	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:07.338072062 CET	50274	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:07.342809916 CET	55555	50274	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:08.184102058 CET	55555	50274	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:08.184240103 CET	50274	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:08.184290886 CET	55555	50274	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:08.184380054 CET	50274	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:08.184433937 CET	50276	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:08.189030886 CET	55555	50274	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:08.189302921 CET	55555	50276	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:08.189380884 CET	50276	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:08.189397097 CET	50276	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:08.194009066 CET	55555	50276	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.038830996 CET	55555	50276	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.038986921 CET	55555	50276	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.039138079 CET	50276	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.039184093 CET	50276	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.039227962 CET	50278	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.044112921 CET	55555	50276	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.044125080 CET	55555	50278	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.044224977 CET	50278	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.044250965 CET	50278	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.048897982 CET	55555	50278	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.879616976 CET	55555	50278	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.879628897 CET	55555	50278	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.879801989 CET	50278	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.879844904 CET	50278	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.879888058 CET	50280	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.885812044 CET	55555	50278	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.885823965 CET	55555	50280	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:09.885915995 CET	50280	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.885941982 CET	50280	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:09.891877890 CET	55555	50280	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:10.727089882 CET	55555	50280	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:10.727184057 CET	55555	50280	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:10.727372885 CET	50280	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:10.727415085 CET	50280	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:10.727466106 CET	50282	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:10.732049942 CET	55555	50280	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:10.732145071 CET	55555	50282	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:10.732223988 CET	50282	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:10.732239962 CET	50282	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:10.736880064 CET	55555	50282	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:11.570267916 CET	55555	50282	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:11.570537090 CET	50282	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:11.570627928 CET	55555	50282	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:11.570720911 CET	50282	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:11.570760965 CET	50284	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:11.575351954 CET	55555	50282	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:11.575452089 CET	55555	50284	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:11.575526953 CET	50284	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:11.575550079 CET	50284	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:11.580281973 CET	55555	50284	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:12.425403118 CET	55555	50284	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:12.425499916 CET	50284	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:12.425523996 CET	55555	50284	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:12.425595045 CET	50284	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:12.425633907 CET	50286	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:12.430572987 CET	55555	50284	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:12.430726051 CET	55555	50286	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:12.430783033 CET	50286	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:12.430810928 CET	50286	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:12.436089993 CET	55555	50286	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:13.278496981 CET	55555	50286	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:13.278584957 CET	50286	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:13.278613091 CET	55555	50286	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:13.278690100 CET	50286	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:13.278729916 CET	50288	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:13.283417940 CET	55555	50286	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:13.283432007 CET	55555	50288	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:13.283521891 CET	50288	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:13.283608913 CET	50288	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:13.290559053 CET	55555	50288	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.131947041 CET	55555	50288	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.132085085 CET	55555	50288	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.132096052 CET	50288	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.132215977 CET	50288	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.132309914 CET	50290	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.136826992 CET	55555	50288	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.136948109 CET	55555	50290	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.136991978 CET	50290	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.137023926 CET	50290	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.141702890 CET	55555	50290	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.970210075 CET	55555	50290	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.970221996 CET	55555	50290	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.970326900 CET	50290	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.970366955 CET	50290	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.970417023 CET	50292	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.976847887 CET	55555	50290	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.976860046 CET	55555	50292	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:14.976903915 CET	50292	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.976937056 CET	50292	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:14.981770039 CET	55555	50292	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:15.814743996 CET	55555	50292	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:15.814755917 CET	55555	50292	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:15.814817905 CET	50292	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:15.814837933 CET	50292	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:15.814868927 CET	50294	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:15.819601059 CET	55555	50292	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:15.819617033 CET	55555	50294	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:15.819681883 CET	50294	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:15.819744110 CET	50294	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:15.825021982 CET	55555	50294	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:16.650058031 CET	55555	50294	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:16.650070906 CET	55555	50294	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:16.650161982 CET	50294	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:16.650212049 CET	50294	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:16.650268078 CET	50296	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:16.655236006 CET	55555	50294	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:16.655246973 CET	55555	50296	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:16.655287027 CET	50296	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:16.655327082 CET	50296	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:16.659946918 CET	55555	50296	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:17.482454062 CET	55555	50296	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:17.482553959 CET	50296	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:17.482589960 CET	55555	50296	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:17.482636929 CET	50296	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:17.482685089 CET	50298	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:17.487385035 CET	55555	50296	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:17.487396002 CET	55555	50298	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:17.487435102 CET	50298	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:17.487476110 CET	50298	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:17.492182970 CET	55555	50298	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:18.316452026 CET	55555	50298	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:18.316586018 CET	55555	50298	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:18.316719055 CET	50298	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:18.316848040 CET	50298	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:18.316943884 CET	50300	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:18.321482897 CET	55555	50298	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:18.321590900 CET	55555	50300	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:18.321649075 CET	50300	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:18.321716070 CET	50300	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:18.326339006 CET	55555	50300	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:19.172719002 CET	55555	50300	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:19.172868013 CET	55555	50300	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:19.172990084 CET	50300	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:19.173158884 CET	50300	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:19.173248053 CET	50302	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:19.181015968 CET	55555	50300	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:19.181026936 CET	55555	50302	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:19.181117058 CET	50302	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:19.181200981 CET	50302	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:19.187056065 CET	55555	50302	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.013029099 CET	55555	50302	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.013168097 CET	55555	50302	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.013314962 CET	50302	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.013437033 CET	50302	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.013529062 CET	50304	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.018049955 CET	55555	50302	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.018177986 CET	55555	50304	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.018243074 CET	50304	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.018320084 CET	50304	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.022957087 CET	55555	50304	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.850805998 CET	55555	50304	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.850918055 CET	50304	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.850939989 CET	55555	50304	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.850985050 CET	50304	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.851027966 CET	50306	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.856975079 CET	55555	50304	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.856986046 CET	55555	50306	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:20.857029915 CET	50306	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.857073069 CET	50306	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:20.862979889 CET	55555	50306	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:21.684170961 CET	55555	50306	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:21.684283972 CET	55555	50306	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:21.684294939 CET	50306	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:21.684375048 CET	50308	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:21.684395075 CET	50306	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:21.689043045 CET	55555	50308	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:21.689054966 CET	55555	50306	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:21.689101934 CET	50308	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:21.689158916 CET	50308	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:21.693851948 CET	55555	50308	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:22.528301954 CET	55555	50308	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:22.528429031 CET	50308	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:22.528496981 CET	55555	50308	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:22.528556108 CET	50308	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:22.528603077 CET	50310	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:22.533322096 CET	55555	50308	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:22.533334017 CET	55555	50310	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:22.533389091 CET	50310	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:22.533426046 CET	50310	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:22.538100004 CET	55555	50310	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:23.362272024 CET	55555	50310	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:23.362483978 CET	50310	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:23.362545013 CET	55555	50310	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:23.362652063 CET	50310	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:23.362718105 CET	50312	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:23.368871927 CET	55555	50310	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:23.369322062 CET	55555	50312	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:23.369398117 CET	50312	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:23.369462013 CET	50312	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:23.379095078 CET	55555	50312	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:24.202986002 CET	55555	50312	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:24.203035116 CET	55555	50312	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:24.203279018 CET	50312	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:24.203311920 CET	50312	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:24.203351021 CET	50314	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:24.207931995 CET	55555	50312	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:24.208064079 CET	55555	50314	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:24.208128929 CET	50314	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:24.208204985 CET	50314	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:24.212836981 CET	55555	50314	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.051826954 CET	55555	50314	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.051979065 CET	55555	50314	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.052161932 CET	50314	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.052238941 CET	50314	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.052421093 CET	50316	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.056864977 CET	55555	50314	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.057178020 CET	55555	50316	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.057250977 CET	50316	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.057318926 CET	50316	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.061908960 CET	55555	50316	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.896816969 CET	55555	50316	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.897083998 CET	55555	50316	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.897136927 CET	50316	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.897169113 CET	50316	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.897273064 CET	50318	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.902146101 CET	55555	50316	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.902157068 CET	55555	50318	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:25.902259111 CET	50318	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.902338982 CET	50318	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:25.907598019 CET	55555	50318	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:26.742862940 CET	55555	50318	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:26.742974997 CET	55555	50318	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:26.743123055 CET	50318	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:26.743215084 CET	50318	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:26.743304968 CET	50320	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:26.747842073 CET	55555	50318	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:26.747998953 CET	55555	50320	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:26.748123884 CET	50320	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:26.748183966 CET	50320	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:26.752788067 CET	55555	50320	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:27.651338100 CET	55555	50320	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:27.651346922 CET	55555	50320	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:27.651355982 CET	55555	50320	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:27.651545048 CET	50320	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:27.651567936 CET	50320	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:27.651724100 CET	50320	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:27.651814938 CET	50322	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:27.660208941 CET	55555	50320	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:27.660218954 CET	55555	50322	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:27.660269022 CET	50322	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:27.660346985 CET	50322	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:27.665051937 CET	55555	50322	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:28.507622004 CET	55555	50322	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:28.507683039 CET	55555	50322	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:28.507927895 CET	50322	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:28.507980108 CET	50322	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:28.508050919 CET	50324	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:28.512603998 CET	55555	50322	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:28.512677908 CET	55555	50324	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:28.512784004 CET	50324	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:28.512841940 CET	50324	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:28.517486095 CET	55555	50324	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:29.347048044 CET	55555	50324	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:29.347157001 CET	55555	50324	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:29.347246885 CET	50324	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:29.347385883 CET	50324	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:29.347476959 CET	50326	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:29.351979017 CET	55555	50324	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:29.352184057 CET	55555	50326	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:29.352236986 CET	50326	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:29.352303982 CET	50326	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:29.356903076 CET	55555	50326	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:30.190481901 CET	55555	50326	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:30.190502882 CET	55555	50326	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:30.190679073 CET	50326	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:30.190690041 CET	50326	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:30.190778971 CET	50328	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:30.195461035 CET	55555	50326	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:30.195477009 CET	55555	50328	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:30.195533037 CET	50328	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:30.195616007 CET	50328	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:30.201276064 CET	55555	50328	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.026567936 CET	55555	50328	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.026794910 CET	50328	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.026920080 CET	55555	50328	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.027025938 CET	50328	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.027115107 CET	50330	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.031670094 CET	55555	50328	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.032666922 CET	55555	50330	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.032718897 CET	50330	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.032794952 CET	50330	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.037513971 CET	55555	50330	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.854635000 CET	55555	50330	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.854688883 CET	50330	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.854743004 CET	55555	50330	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.854790926 CET	50330	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.854830027 CET	50332	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.859426975 CET	55555	50330	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.859456062 CET	55555	50332	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:31.859500885 CET	50332	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.859524012 CET	50332	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:31.864257097 CET	55555	50332	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:32.708240986 CET	55555	50332	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:32.708332062 CET	50332	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:32.708379030 CET	55555	50332	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:32.708450079 CET	50332	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:32.708470106 CET	50334	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:32.713120937 CET	55555	50332	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:32.713131905 CET	55555	50334	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:32.713177919 CET	50334	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:32.713216066 CET	50334	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:32.720093966 CET	55555	50334	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:33.561861992 CET	55555	50334	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:33.562011003 CET	55555	50334	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:33.562074900 CET	50334	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:33.562212944 CET	50336	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:33.562256098 CET	50334	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:33.566960096 CET	55555	50336	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:33.566998959 CET	55555	50334	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:33.567033052 CET	50336	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:33.567059994 CET	50336	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:33.571729898 CET	55555	50336	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:34.394351959 CET	55555	50336	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:34.394505024 CET	55555	50336	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:34.394571066 CET	50336	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:34.394598007 CET	50336	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:34.394615889 CET	50338	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:34.399252892 CET	55555	50336	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:34.399264097 CET	55555	50338	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:34.399315119 CET	50338	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:34.399342060 CET	50338	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:34.404006958 CET	55555	50338	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:35.228405952 CET	55555	50338	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:35.228538990 CET	55555	50338	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:35.228605986 CET	50338	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:35.228605986 CET	50338	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:35.228627920 CET	50340	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:35.233413935 CET	55555	50338	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:35.233424902 CET	55555	50340	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:35.233472109 CET	50340	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:35.233499050 CET	50340	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:35.238446951 CET	55555	50340	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.066054106 CET	55555	50340	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.066131115 CET	50340	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.066145897 CET	55555	50340	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.066194057 CET	50340	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.066226959 CET	50342	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.070897102 CET	55555	50340	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.070909977 CET	55555	50342	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.070949078 CET	50342	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.070986986 CET	50342	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.075656891 CET	55555	50342	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.929687023 CET	55555	50342	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.929701090 CET	55555	50342	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.929790974 CET	50342	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.929824114 CET	50342	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.929871082 CET	50344	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.936722994 CET	55555	50342	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.936732054 CET	55555	50344	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:36.936777115 CET	50344	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.936805010 CET	50344	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:36.943599939 CET	55555	50344	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:37.780224085 CET	55555	50344	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:37.780256987 CET	55555	50344	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:37.780358076 CET	50344	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:37.780388117 CET	50344	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:37.780426979 CET	50346	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:37.785034895 CET	55555	50344	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:37.785082102 CET	55555	50346	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:37.785136938 CET	50346	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:37.785171986 CET	50346	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:37.789841890 CET	55555	50346	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:38.615382910 CET	55555	50346	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:38.615396023 CET	55555	50346	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:38.615497112 CET	50346	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:38.615525007 CET	50346	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:38.615566969 CET	50348	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:38.620359898 CET	55555	50346	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:38.620372057 CET	55555	50348	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:38.620414972 CET	50348	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:38.620446920 CET	50348	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:38.625232935 CET	55555	50348	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:39.446624041 CET	55555	50348	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:39.446753979 CET	55555	50348	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:39.446827888 CET	50348	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:39.446871996 CET	50348	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:39.446911097 CET	50350	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:39.451606989 CET	55555	50348	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:39.451637983 CET	55555	50350	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:39.451683044 CET	50350	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:39.451714039 CET	50350	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:39.456336975 CET	55555	50350	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:40.290457010 CET	55555	50350	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:40.290568113 CET	50350	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:40.290626049 CET	55555	50350	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:40.290676117 CET	50350	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:40.290719032 CET	50352	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:40.295403957 CET	55555	50350	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:40.295433998 CET	55555	50352	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:40.295557022 CET	50352	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:40.295589924 CET	50352	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:40.300261021 CET	55555	50352	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.143276930 CET	55555	50352	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.143352032 CET	55555	50352	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.143448114 CET	50352	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.143480062 CET	50352	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.143524885 CET	50354	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.148205996 CET	55555	50352	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.148217916 CET	55555	50354	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.148308039 CET	50354	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.148330927 CET	50354	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.152929068 CET	55555	50354	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.986216068 CET	55555	50354	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.986330032 CET	50354	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.986377954 CET	55555	50354	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.986464024 CET	50354	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.986512899 CET	50356	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.991079092 CET	55555	50354	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.991153955 CET	55555	50356	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:41.991198063 CET	50356	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.991277933 CET	50356	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:41.995969057 CET	55555	50356	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:42.818980932 CET	55555	50356	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:42.819094896 CET	50356	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:42.819159031 CET	55555	50356	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:42.819230080 CET	50356	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:42.819272995 CET	50358	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:42.823833942 CET	55555	50356	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:42.823868036 CET	55555	50358	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:42.823921919 CET	50358	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:42.823955059 CET	50358	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:42.828591108 CET	55555	50358	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:43.651484966 CET	55555	50358	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:43.651568890 CET	50358	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:43.651700020 CET	55555	50358	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:43.651768923 CET	50358	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:43.651815891 CET	50360	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:43.656415939 CET	55555	50358	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:43.656559944 CET	55555	50360	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:43.656608105 CET	50360	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:43.656630039 CET	50360	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:43.661304951 CET	55555	50360	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:44.497431040 CET	55555	50360	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:44.497536898 CET	55555	50360	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:44.497549057 CET	50360	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:44.497620106 CET	50360	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:44.497662067 CET	50362	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:44.502227068 CET	55555	50360	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:44.502316952 CET	55555	50362	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:44.502362013 CET	50362	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:44.502388000 CET	50362	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:44.507044077 CET	55555	50362	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:45.331650019 CET	55555	50362	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:45.331662893 CET	55555	50362	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:45.331856012 CET	50364	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:45.331859112 CET	50362	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:45.331859112 CET	50362	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:45.336864948 CET	55555	50362	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:45.336904049 CET	55555	50364	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:45.336961985 CET	50364	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:45.337002993 CET	50364	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:45.341631889 CET	55555	50364	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:46.159300089 CET	55555	50364	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:46.159462929 CET	55555	50364	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:46.159564018 CET	50364	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:46.159681082 CET	50364	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:46.159715891 CET	50366	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:46.166383982 CET	55555	50364	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:46.166395903 CET	55555	50366	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:46.166505098 CET	50366	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:46.166590929 CET	50366	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:46.171884060 CET	55555	50366	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.007034063 CET	55555	50366	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.007184029 CET	50366	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.007225037 CET	55555	50366	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.007407904 CET	50366	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.007491112 CET	50368	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.012460947 CET	55555	50366	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.012718916 CET	55555	50368	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.012821913 CET	50368	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.012897968 CET	50368	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.018471003 CET	55555	50368	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.852804899 CET	55555	50368	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.852940083 CET	55555	50368	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.853166103 CET	50368	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.853166103 CET	50368	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.853173018 CET	50370	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.857846022 CET	55555	50370	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.857923985 CET	50370	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.857933998 CET	55555	50368	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:47.858036041 CET	50370	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:47.862711906 CET	55555	50370	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:48.687747955 CET	55555	50370	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:48.687827110 CET	55555	50370	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:48.687982082 CET	50370	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:48.688020945 CET	50370	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:48.688116074 CET	50372	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:48.692702055 CET	55555	50370	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:48.692760944 CET	55555	50372	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:48.692821026 CET	50372	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:48.692890882 CET	50372	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:48.697518110 CET	55555	50372	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:49.537893057 CET	55555	50372	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:49.538095951 CET	55555	50372	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:49.538095951 CET	50372	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:49.538182974 CET	50372	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:49.538256884 CET	50374	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:49.545387983 CET	55555	50372	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:49.545397997 CET	55555	50374	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:49.545471907 CET	50374	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:49.545553923 CET	50374	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:49.552577019 CET	55555	50374	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:50.388111115 CET	55555	50374	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:50.388268948 CET	55555	50374	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:50.388509989 CET	50374	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:50.388537884 CET	50374	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:50.388636112 CET	50376	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:50.393137932 CET	55555	50374	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:50.393349886 CET	55555	50376	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:50.393393040 CET	50376	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:50.393435001 CET	50376	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:50.398091078 CET	55555	50376	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:51.250477076 CET	55555	50376	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:51.250488043 CET	55555	50376	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:51.250813007 CET	50376	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:51.250840902 CET	50376	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:51.250927925 CET	50378	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:51.259260893 CET	55555	50376	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:51.259273052 CET	55555	50378	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:51.259346962 CET	50378	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:51.259434938 CET	50378	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:51.267571926 CET	55555	50378	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.114550114 CET	55555	50378	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.114691019 CET	55555	50378	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.114789009 CET	50378	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.114789009 CET	50378	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.114804983 CET	50380	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.120202065 CET	55555	50378	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.120213985 CET	55555	50380	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.120294094 CET	50380	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.120379925 CET	50380	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.125096083 CET	55555	50380	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.964081049 CET	55555	50380	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.964247942 CET	55555	50380	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.964346886 CET	50380	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.964348078 CET	50380	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.964406013 CET	50382	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.969111919 CET	55555	50382	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.969122887 CET	55555	50380	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:52.969182014 CET	50382	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.969275951 CET	50382	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:52.973948956 CET	55555	50382	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:53.811829090 CET	55555	50382	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:53.811932087 CET	55555	50382	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:53.812169075 CET	50382	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:53.812197924 CET	50382	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:53.812298059 CET	50384	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:53.816843033 CET	55555	50382	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:53.816982985 CET	55555	50384	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:53.817061901 CET	50384	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:53.817121983 CET	50384	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:53.821769953 CET	55555	50384	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:54.654162884 CET	55555	50384	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:54.654386997 CET	50384	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:54.654726028 CET	55555	50384	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:54.654834032 CET	50384	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:54.654911995 CET	50386	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:54.660056114 CET	55555	50384	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:54.660067081 CET	55555	50386	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:54.660129070 CET	50386	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:54.660211086 CET	50386	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:54.665133953 CET	55555	50386	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:55.499536991 CET	55555	50386	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:55.499576092 CET	55555	50386	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:55.499747038 CET	50386	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:55.499905109 CET	50386	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:55.499998093 CET	50388	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:55.504539013 CET	55555	50386	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:55.504689932 CET	55555	50388	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:55.504740953 CET	50388	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:55.504821062 CET	50388	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:55.509500027 CET	55555	50388	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:56.334034920 CET	55555	50388	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:56.334044933 CET	55555	50388	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:56.334233999 CET	50388	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:56.334233999 CET	50388	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:56.334307909 CET	50390	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:56.338948011 CET	55555	50388	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:56.338958025 CET	55555	50390	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:56.339015961 CET	50390	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:56.339080095 CET	50390	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:56.343667984 CET	55555	50390	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:57.180757046 CET	55555	50390	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:57.180968046 CET	50390	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:57.181277037 CET	55555	50390	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:57.181392908 CET	50390	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:57.181468964 CET	50392	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:57.186140060 CET	55555	50390	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:57.186155081 CET	55555	50392	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:57.186213970 CET	50392	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:57.186278105 CET	50392	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:57.190880060 CET	55555	50392	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.011177063 CET	55555	50392	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.011389971 CET	50392	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.011394024 CET	55555	50392	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.011507034 CET	50392	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.011590004 CET	50394	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.019284964 CET	55555	50392	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.019330978 CET	55555	50394	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.019381046 CET	50394	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.019458055 CET	50394	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.025620937 CET	55555	50394	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.849426985 CET	55555	50394	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.849628925 CET	55555	50394	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.849642992 CET	50394	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.849745989 CET	50394	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.849838018 CET	50396	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.855741978 CET	55555	50394	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.855756998 CET	55555	50396	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:58.855812073 CET	50396	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.855890989 CET	50396	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:58.861562014 CET	55555	50396	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:59.694818020 CET	55555	50396	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:59.694943905 CET	55555	50396	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:59.695065975 CET	50396	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:59.695224047 CET	50396	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:59.695344925 CET	50398	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:59.699913025 CET	55555	50396	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:59.700037003 CET	55555	50398	103.77.246.204	192.168.2.23
Mar 18, 2025 04:47:59.700120926 CET	50398	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:59.700200081 CET	50398	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:47:59.704834938 CET	55555	50398	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:00.558825016 CET	55555	50398	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:00.559104919 CET	50398	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:00.559180975 CET	55555	50398	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:00.559287071 CET	50398	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:00.559376955 CET	50400	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:00.563947916 CET	55555	50398	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:00.563986063 CET	55555	50400	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:00.564069986 CET	50400	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:00.564145088 CET	50400	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:00.568938971 CET	55555	50400	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:01.398332119 CET	55555	50400	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:01.398658037 CET	55555	50400	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:01.398696899 CET	50400	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:01.398753881 CET	50400	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:01.398829937 CET	50402	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:01.403368950 CET	55555	50400	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:01.403472900 CET	55555	50402	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:01.403534889 CET	50402	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:01.403623104 CET	50402	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:01.408226967 CET	55555	50402	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:02.244673014 CET	55555	50402	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:02.244784117 CET	55555	50402	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:02.244959116 CET	50402	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:02.244975090 CET	50402	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:02.245063066 CET	50404	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:02.249630928 CET	55555	50402	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:02.249675035 CET	55555	50404	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:02.249742031 CET	50404	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:02.249820948 CET	50404	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:02.254545927 CET	55555	50404	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.086500883 CET	55555	50404	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.086586952 CET	55555	50404	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.086704016 CET	50404	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.086749077 CET	50404	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.086839914 CET	50406	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.091367006 CET	55555	50404	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.091466904 CET	55555	50406	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.091532946 CET	50406	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.091598988 CET	50406	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.096215963 CET	55555	50406	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.922049999 CET	55555	50406	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.922137022 CET	55555	50406	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.922398090 CET	50406	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.922418118 CET	50406	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.922494888 CET	50408	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.927064896 CET	55555	50406	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.927126884 CET	55555	50408	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:03.927197933 CET	50408	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.927263021 CET	50408	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:03.931878090 CET	55555	50408	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:04.754853964 CET	55555	50408	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:04.755052090 CET	55555	50408	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:04.755184889 CET	50408	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:04.755220890 CET	50408	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:04.755290031 CET	50410	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:04.760008097 CET	55555	50408	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:04.760020018 CET	55555	50410	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:04.760094881 CET	50410	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:04.760159016 CET	50410	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:04.764770985 CET	55555	50410	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:05.598618984 CET	55555	50410	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:05.598629951 CET	55555	50410	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:05.598941088 CET	50410	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:05.598968029 CET	50410	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:05.599040985 CET	50412	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:05.604650974 CET	55555	50410	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:05.604662895 CET	55555	50412	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:05.604739904 CET	50412	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:05.604804039 CET	50412	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:05.609441042 CET	55555	50412	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:06.539563894 CET	55555	50412	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:06.540052891 CET	50412	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:06.540069103 CET	50414	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:06.545948029 CET	55555	50412	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:06.545960903 CET	55555	50414	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:06.546032906 CET	50414	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:06.546123981 CET	50414	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:06.552151918 CET	55555	50414	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:07.382666111 CET	55555	50414	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:07.382778883 CET	55555	50414	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:07.382885933 CET	50414	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:07.382915974 CET	50414	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:07.382998943 CET	50416	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:07.387655020 CET	55555	50414	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:07.387666941 CET	55555	50416	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:07.387732029 CET	50416	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:07.387780905 CET	50416	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:07.392422915 CET	55555	50416	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:08.249324083 CET	55555	50416	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:08.249494076 CET	55555	50416	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:08.249560118 CET	50416	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:08.249648094 CET	50416	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:08.249726057 CET	50418	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:08.254823923 CET	55555	50416	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:08.254834890 CET	55555	50418	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:08.254887104 CET	50418	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:08.254952908 CET	50418	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:08.260148048 CET	55555	50418	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.085978031 CET	55555	50418	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.086163044 CET	50418	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.086201906 CET	55555	50418	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.086324930 CET	50418	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.086457014 CET	50420	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.091486931 CET	55555	50418	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.091747999 CET	55555	50420	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.091793060 CET	50420	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.091877937 CET	50420	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.097132921 CET	55555	50420	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.925717115 CET	55555	50420	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.925874949 CET	55555	50420	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.925903082 CET	50420	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.926060915 CET	50420	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.926156998 CET	50422	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.930758953 CET	55555	50420	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.930769920 CET	55555	50422	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:09.930875063 CET	50422	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.930936098 CET	50422	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:09.935610056 CET	55555	50422	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:10.777105093 CET	55555	50422	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:10.777288914 CET	50422	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:10.777825117 CET	55555	50422	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:10.777934074 CET	50422	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:10.778013945 CET	50424	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:10.785661936 CET	55555	50422	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:10.785674095 CET	55555	50424	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:10.785737038 CET	50424	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:10.785805941 CET	50424	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:10.792229891 CET	55555	50424	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:11.636987925 CET	55555	50424	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:11.637171030 CET	50424	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:11.637434006 CET	55555	50424	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:11.637530088 CET	50424	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:11.637617111 CET	50426	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:11.642153978 CET	55555	50424	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:11.642311096 CET	55555	50426	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:11.642391920 CET	50426	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:11.642421961 CET	50426	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:11.647058010 CET	55555	50426	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:12.478739023 CET	55555	50426	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:12.478919983 CET	55555	50426	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:12.478955984 CET	50426	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:12.479032040 CET	50426	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:12.479120970 CET	50428	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:12.483679056 CET	55555	50426	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:12.483794928 CET	55555	50428	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:12.483851910 CET	50428	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:12.483927965 CET	50428	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:12.488570929 CET	55555	50428	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:13.323831081 CET	55555	50428	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:13.323843002 CET	55555	50428	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:13.324012995 CET	50428	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:13.324012995 CET	50428	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:13.324045897 CET	50430	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:13.329929113 CET	55555	50428	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:13.329941034 CET	55555	50430	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:13.330005884 CET	50430	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:13.330089092 CET	50430	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:13.336035013 CET	55555	50430	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:14.174093008 CET	55555	50430	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:14.174319029 CET	50430	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:14.174344063 CET	55555	50430	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:14.174463987 CET	50430	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:14.174570084 CET	50432	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:14.179121971 CET	55555	50430	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:14.179352045 CET	55555	50432	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:14.179457903 CET	50432	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:14.179563046 CET	50432	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:14.184228897 CET	55555	50432	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.024473906 CET	55555	50432	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.024518013 CET	55555	50432	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.024796963 CET	50434	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.024807930 CET	50432	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.024807930 CET	50432	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.029551029 CET	55555	50434	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.029561043 CET	55555	50432	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.029732943 CET	50434	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.029732943 CET	50434	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.034379959 CET	55555	50434	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.860064030 CET	55555	50434	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.860251904 CET	55555	50434	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.860342979 CET	50434	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.860342979 CET	50434	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.860357046 CET	50436	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.865057945 CET	55555	50434	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.865075111 CET	55555	50436	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:15.865150928 CET	50436	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.865231991 CET	50436	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:15.869822025 CET	55555	50436	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:16.705908060 CET	55555	50436	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:16.705919981 CET	55555	50436	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:16.706146955 CET	50436	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:16.706178904 CET	50436	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:16.706250906 CET	50438	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:16.711997032 CET	55555	50436	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:16.712008953 CET	55555	50438	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:16.712089062 CET	50438	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:16.712156057 CET	50438	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:16.717154026 CET	55555	50438	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:17.539736032 CET	55555	50438	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:17.539949894 CET	50438	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:17.539975882 CET	55555	50438	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:17.540051937 CET	50438	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:17.540092945 CET	50440	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:17.544747114 CET	55555	50438	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:17.544795036 CET	55555	50440	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:17.544842005 CET	50440	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:17.544873953 CET	50440	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:17.549554110 CET	55555	50440	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:18.386405945 CET	55555	50440	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:18.386519909 CET	55555	50440	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:18.386804104 CET	50440	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:18.386842012 CET	50440	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:18.386912107 CET	50442	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:18.391657114 CET	55555	50440	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:18.391668081 CET	55555	50442	103.77.246.204	192.168.2.23
Mar 18, 2025 04:48:18.391745090 CET	50442	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:18.391822100 CET	50442	55555	192.168.2.23	103.77.246.204
Mar 18, 2025 04:48:18.396411896 CET	55555	50442	103.77.246.204	192.168.2.23

System Behavior

Analysis Process: x-3.2-.Sakura.elf PID: 6284, Parent PID: 6207

General

Start time (UTC):	03:44:44
Start date (UTC):	18/03/2025
Path:	/tmp/x-3.2-.Sakura.elf
Arguments:	/tmp/x-3.2-.Sakura.elf
File size:	84999 bytes
MD5 hash:	11db83b944cdb0af582b34829c935488

File Activities

File Opened

File Read

Process Activities

Process Forked

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 6285, Parent PID: 6284

General

Start time (UTC):	03:44:44
Start date (UTC):	18/03/2025
Path:	/tmp/x-3.2-.Sakura.elf
Arguments:	-
File size:	84999 bytes
MD5 hash:	11db83b944cdb0af582b34829c935488

Process Activities

Process Forked

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 6286, Parent PID: 6285

General

Start time (UTC):	03:44:44
Start date (UTC):	18/03/2025
Path:	/tmp/x-3.2-.Sakura.elf
Arguments:	-
File size:	84999 bytes
MD5 hash:	11db83b944cdb0af582b34829c935488

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report x-3.2-.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

System Behavior

Analysis Process: x-3.2-.Sakura.elf PID: 6284, Parent PID: 6207

General

File Activities

File Opened

File Read

Process Activities

Process Forked

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 6285, Parent PID: 6284

General

Process Activities

Process Forked

Chronological Activities

Analysis Process: x-3.2-.Sakura.elf PID: 6286, Parent PID: 6285

General

Linux Analysis Report
x-3.2-.Sakura.elf