Edit tour

Linux Analysis Report
m-i.p-s.Sakura.elf

Overview

General Information

Sample name:	m-i.p-s.Sakura.elf
Analysis ID:	1641244
MD5:	233fd40ad60ad8e11aaaf2a88fdb1754
SHA1:	fbb08d735f00b8d6df4327826887b249f15962c7
SHA256:	c3bb638ceb426eb32535b79e2e93302201e39060fefaee3a000bf0d2a929ab93
Tags:	user-elfdigest
Infos:

Detection

Gafgyt, Mirai

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Yara detected Mirai

Contains symbols with names commonly found in malware

Opens /proc/net/* files useful for finding connected devices and routers

Detected TCP or UDP traffic on non-standard ports

Sample contains strings that are user agent strings indicative of HTTP manipulation

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641244
Start date and time:	2025-03-18 04:43:36 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	m-i.p-s.Sakura.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@2/0

Warnings

VT rate limit hit for: 103.77.246.204:55555

Runtime Messages

Command:	/tmp/m-i.p-s.Sakura.elf
PID:	5523
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

system is lnxubuntu20

m-i.p-s.Sakura.elf (PID: 5523, Parent: 5438, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/m-i.p-s.Sakura.elf

m-i.p-s.Sakura.elf New Fork (PID: 5525, Parent: 5523)

m-i.p-s.Sakura.elf New Fork (PID: 5527, Parent: 5525)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
m-i.p-s.Sakura.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
m-i.p-s.Sakura.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
m-i.p-s.Sakura.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14f94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1500c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1505c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15070:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15084:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15098:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15110:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15124:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
5525.1.00007f24ec400000.00007f24ec418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5525.1.00007f24ec400000.00007f24ec418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14f94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1500c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1505c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15070:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15084:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15098:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15110:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15124:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
5523.1.00007f24ec400000.00007f24ec418000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5523.1.00007f24ec400000.00007f24ec418000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x14f94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fa8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14fe4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x14ff8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1500c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15020:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15034:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15048:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1505c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15070:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15084:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15098:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x150fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15110:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x15124:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: m-i.p-s.Sakura.elf PID: 5523	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: m-i.p-s.Sakura.elf PID: 5523	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0xc7c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xc90:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xca4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcb8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xccc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xce0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xcf4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd08:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd1c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd30:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd44:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd58:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd6c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd80:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xd94:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xda8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdbc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdd0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xde4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xdf8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0xe0c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: m-i.p-s.Sakura.elf PID: 5525	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: m-i.p-s.Sakura.elf PID: 5525	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x10c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x10ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1101:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1115:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1129:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x113d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1151:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1165:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1179:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x118d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11a1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11b5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11c9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11dd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x11f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1205:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1219:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x122d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1241:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1255:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 3 entries

Suricata Signatures

ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-18T04:44:38.658933+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60800	103.77.246.204	55555	TCP
2025-03-18T04:44:39.508573+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60802	103.77.246.204	55555	TCP
2025-03-18T04:44:40.374008+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60804	103.77.246.204	55555	TCP
2025-03-18T04:44:41.213467+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60806	103.77.246.204	55555	TCP
2025-03-18T04:44:42.052962+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60808	103.77.246.204	55555	TCP
2025-03-18T04:44:42.894084+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60810	103.77.246.204	55555	TCP
2025-03-18T04:44:43.737138+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60812	103.77.246.204	55555	TCP
2025-03-18T04:44:44.606362+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60814	103.77.246.204	55555	TCP
2025-03-18T04:44:45.455365+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60816	103.77.246.204	55555	TCP
2025-03-18T04:44:46.310725+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60818	103.77.246.204	55555	TCP
2025-03-18T04:44:47.142537+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60820	103.77.246.204	55555	TCP
2025-03-18T04:44:47.977128+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60822	103.77.246.204	55555	TCP
2025-03-18T04:44:48.812660+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60824	103.77.246.204	55555	TCP
2025-03-18T04:44:49.649368+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60826	103.77.246.204	55555	TCP
2025-03-18T04:44:50.484012+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60828	103.77.246.204	55555	TCP
2025-03-18T04:44:51.324715+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60830	103.77.246.204	55555	TCP
2025-03-18T04:44:52.165352+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60832	103.77.246.204	55555	TCP
2025-03-18T04:44:53.001538+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60834	103.77.246.204	55555	TCP
2025-03-18T04:44:53.857366+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60836	103.77.246.204	55555	TCP
2025-03-18T04:44:54.701557+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60838	103.77.246.204	55555	TCP
2025-03-18T04:44:55.540180+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60840	103.77.246.204	55555	TCP
2025-03-18T04:44:56.378532+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60842	103.77.246.204	55555	TCP
2025-03-18T04:44:57.218027+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60844	103.77.246.204	55555	TCP
2025-03-18T04:44:58.064983+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60846	103.77.246.204	55555	TCP
2025-03-18T04:44:58.911170+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60848	103.77.246.204	55555	TCP
2025-03-18T04:44:59.753293+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60850	103.77.246.204	55555	TCP
2025-03-18T04:45:00.586950+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60852	103.77.246.204	55555	TCP
2025-03-18T04:45:01.430650+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60854	103.77.246.204	55555	TCP
2025-03-18T04:45:02.294899+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60856	103.77.246.204	55555	TCP
2025-03-18T04:45:03.149519+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60858	103.77.246.204	55555	TCP
2025-03-18T04:45:03.985269+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60860	103.77.246.204	55555	TCP
2025-03-18T04:45:04.838576+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60862	103.77.246.204	55555	TCP
2025-03-18T04:45:05.687993+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60864	103.77.246.204	55555	TCP
2025-03-18T04:45:06.519991+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60866	103.77.246.204	55555	TCP
2025-03-18T04:45:07.352201+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60868	103.77.246.204	55555	TCP
2025-03-18T04:45:08.183309+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60870	103.77.246.204	55555	TCP
2025-03-18T04:45:09.013875+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60872	103.77.246.204	55555	TCP
2025-03-18T04:45:09.872999+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60874	103.77.246.204	55555	TCP
2025-03-18T04:45:10.710782+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60876	103.77.246.204	55555	TCP
2025-03-18T04:45:11.560314+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60878	103.77.246.204	55555	TCP
2025-03-18T04:45:12.388347+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60880	103.77.246.204	55555	TCP
2025-03-18T04:45:13.241866+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60882	103.77.246.204	55555	TCP
2025-03-18T04:45:14.230984+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60884	103.77.246.204	55555	TCP
2025-03-18T04:45:15.078474+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60886	103.77.246.204	55555	TCP
2025-03-18T04:45:15.925643+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60888	103.77.246.204	55555	TCP
2025-03-18T04:45:16.774280+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60890	103.77.246.204	55555	TCP
2025-03-18T04:45:17.630935+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60892	103.77.246.204	55555	TCP
2025-03-18T04:45:18.474387+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60894	103.77.246.204	55555	TCP
2025-03-18T04:45:19.344023+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60896	103.77.246.204	55555	TCP
2025-03-18T04:45:20.191818+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60898	103.77.246.204	55555	TCP
2025-03-18T04:45:21.039948+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60900	103.77.246.204	55555	TCP
2025-03-18T04:45:21.870755+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60902	103.77.246.204	55555	TCP
2025-03-18T04:45:22.735731+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60904	103.77.246.204	55555	TCP
2025-03-18T04:45:23.566623+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60906	103.77.246.204	55555	TCP
2025-03-18T04:45:24.416987+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60908	103.77.246.204	55555	TCP
2025-03-18T04:45:25.270167+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60910	103.77.246.204	55555	TCP
2025-03-18T04:45:26.101512+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60912	103.77.246.204	55555	TCP
2025-03-18T04:45:26.946529+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60914	103.77.246.204	55555	TCP
2025-03-18T04:45:27.800520+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60916	103.77.246.204	55555	TCP
2025-03-18T04:45:28.635524+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60918	103.77.246.204	55555	TCP
2025-03-18T04:45:29.476478+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60920	103.77.246.204	55555	TCP
2025-03-18T04:45:30.311440+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60922	103.77.246.204	55555	TCP
2025-03-18T04:45:31.163387+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60924	103.77.246.204	55555	TCP
2025-03-18T04:45:32.001625+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60926	103.77.246.204	55555	TCP
2025-03-18T04:45:32.851134+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60928	103.77.246.204	55555	TCP
2025-03-18T04:45:33.687211+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60930	103.77.246.204	55555	TCP
2025-03-18T04:45:34.521015+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60932	103.77.246.204	55555	TCP
2025-03-18T04:45:35.511502+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60934	103.77.246.204	55555	TCP
2025-03-18T04:45:36.342502+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60936	103.77.246.204	55555	TCP
2025-03-18T04:45:37.184669+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60938	103.77.246.204	55555	TCP
2025-03-18T04:45:38.040924+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60940	103.77.246.204	55555	TCP
2025-03-18T04:45:38.880936+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60942	103.77.246.204	55555	TCP
2025-03-18T04:45:39.729404+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60944	103.77.246.204	55555	TCP
2025-03-18T04:45:40.585056+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60946	103.77.246.204	55555	TCP
2025-03-18T04:45:41.417685+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60948	103.77.246.204	55555	TCP
2025-03-18T04:45:42.257200+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60950	103.77.246.204	55555	TCP
2025-03-18T04:45:43.110736+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60952	103.77.246.204	55555	TCP
2025-03-18T04:45:43.947831+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60954	103.77.246.204	55555	TCP
2025-03-18T04:45:44.791823+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60956	103.77.246.204	55555	TCP
2025-03-18T04:45:45.644839+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60958	103.77.246.204	55555	TCP
2025-03-18T04:45:46.476253+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60960	103.77.246.204	55555	TCP
2025-03-18T04:45:47.306133+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60962	103.77.246.204	55555	TCP
2025-03-18T04:45:48.157170+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60964	103.77.246.204	55555	TCP
2025-03-18T04:45:49.022048+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60966	103.77.246.204	55555	TCP
2025-03-18T04:45:49.880378+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60968	103.77.246.204	55555	TCP
2025-03-18T04:45:50.736646+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60970	103.77.246.204	55555	TCP
2025-03-18T04:45:51.578683+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60972	103.77.246.204	55555	TCP
2025-03-18T04:45:52.417245+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60974	103.77.246.204	55555	TCP
2025-03-18T04:45:53.259379+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60976	103.77.246.204	55555	TCP
2025-03-18T04:45:54.112138+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60978	103.77.246.204	55555	TCP
2025-03-18T04:45:54.967015+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60980	103.77.246.204	55555	TCP
2025-03-18T04:45:55.813799+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60982	103.77.246.204	55555	TCP
2025-03-18T04:45:56.647295+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60984	103.77.246.204	55555	TCP
2025-03-18T04:45:57.479018+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60986	103.77.246.204	55555	TCP
2025-03-18T04:45:58.332022+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60988	103.77.246.204	55555	TCP
2025-03-18T04:45:59.176327+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60990	103.77.246.204	55555	TCP
2025-03-18T04:46:00.022943+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60992	103.77.246.204	55555	TCP
2025-03-18T04:46:00.859864+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60994	103.77.246.204	55555	TCP
2025-03-18T04:46:01.702154+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60996	103.77.246.204	55555	TCP
2025-03-18T04:46:02.542576+0100	2846526	1	A Network Trojan was detected	192.168.2.14	60998	103.77.246.204	55555	TCP
2025-03-18T04:46:03.403011+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32768	103.77.246.204	55555	TCP
2025-03-18T04:46:04.243110+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32770	103.77.246.204	55555	TCP
2025-03-18T04:46:05.071973+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32772	103.77.246.204	55555	TCP
2025-03-18T04:46:05.909007+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32774	103.77.246.204	55555	TCP
2025-03-18T04:46:09.783634+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32776	103.77.246.204	55555	TCP
2025-03-18T04:46:10.630383+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32778	103.77.246.204	55555	TCP
2025-03-18T04:46:11.461879+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32780	103.77.246.204	55555	TCP
2025-03-18T04:46:12.304926+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32782	103.77.246.204	55555	TCP
2025-03-18T04:46:13.136760+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32784	103.77.246.204	55555	TCP
2025-03-18T04:46:14.179320+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32786	103.77.246.204	55555	TCP
2025-03-18T04:46:15.031869+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32788	103.77.246.204	55555	TCP
2025-03-18T04:46:15.866471+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32790	103.77.246.204	55555	TCP
2025-03-18T04:46:16.710815+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32792	103.77.246.204	55555	TCP
2025-03-18T04:46:17.543382+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32794	103.77.246.204	55555	TCP
2025-03-18T04:46:18.380923+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32796	103.77.246.204	55555	TCP
2025-03-18T04:46:19.239601+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32798	103.77.246.204	55555	TCP
2025-03-18T04:46:20.093531+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32800	103.77.246.204	55555	TCP
2025-03-18T04:46:20.951721+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32802	103.77.246.204	55555	TCP
2025-03-18T04:46:21.822746+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32804	103.77.246.204	55555	TCP
2025-03-18T04:46:22.682553+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32806	103.77.246.204	55555	TCP
2025-03-18T04:46:23.516941+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32808	103.77.246.204	55555	TCP
2025-03-18T04:46:24.344997+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32810	103.77.246.204	55555	TCP
2025-03-18T04:46:25.191120+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32812	103.77.246.204	55555	TCP
2025-03-18T04:46:26.028066+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32814	103.77.246.204	55555	TCP
2025-03-18T04:46:26.861366+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32816	103.77.246.204	55555	TCP
2025-03-18T04:46:27.715970+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32818	103.77.246.204	55555	TCP
2025-03-18T04:46:28.559417+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32820	103.77.246.204	55555	TCP
2025-03-18T04:46:29.410232+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32822	103.77.246.204	55555	TCP
2025-03-18T04:46:30.241339+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32824	103.77.246.204	55555	TCP
2025-03-18T04:46:31.083401+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32826	103.77.246.204	55555	TCP
2025-03-18T04:46:31.932302+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32828	103.77.246.204	55555	TCP
2025-03-18T04:46:32.783330+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32830	103.77.246.204	55555	TCP
2025-03-18T04:46:33.633657+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32832	103.77.246.204	55555	TCP
2025-03-18T04:46:34.471389+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32834	103.77.246.204	55555	TCP
2025-03-18T04:46:35.301650+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32836	103.77.246.204	55555	TCP
2025-03-18T04:46:36.169513+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32838	103.77.246.204	55555	TCP
2025-03-18T04:46:37.017960+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32840	103.77.246.204	55555	TCP
2025-03-18T04:46:37.851863+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32842	103.77.246.204	55555	TCP
2025-03-18T04:46:38.689335+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32844	103.77.246.204	55555	TCP
2025-03-18T04:46:39.540313+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32846	103.77.246.204	55555	TCP
2025-03-18T04:46:40.380554+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32848	103.77.246.204	55555	TCP
2025-03-18T04:46:41.211912+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32850	103.77.246.204	55555	TCP
2025-03-18T04:46:42.053935+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32852	103.77.246.204	55555	TCP
2025-03-18T04:46:42.881942+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32854	103.77.246.204	55555	TCP
2025-03-18T04:46:43.729261+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32856	103.77.246.204	55555	TCP
2025-03-18T04:46:44.566095+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32858	103.77.246.204	55555	TCP
2025-03-18T04:46:45.395283+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32860	103.77.246.204	55555	TCP
2025-03-18T04:46:46.236523+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32862	103.77.246.204	55555	TCP
2025-03-18T04:46:47.076552+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32864	103.77.246.204	55555	TCP
2025-03-18T04:46:47.934707+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32866	103.77.246.204	55555	TCP
2025-03-18T04:46:48.790411+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32868	103.77.246.204	55555	TCP
2025-03-18T04:46:49.634117+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32870	103.77.246.204	55555	TCP
2025-03-18T04:46:50.488084+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32872	103.77.246.204	55555	TCP
2025-03-18T04:46:51.317816+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32874	103.77.246.204	55555	TCP
2025-03-18T04:46:52.164240+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32876	103.77.246.204	55555	TCP
2025-03-18T04:46:53.003414+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32878	103.77.246.204	55555	TCP
2025-03-18T04:46:53.845743+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32880	103.77.246.204	55555	TCP
2025-03-18T04:46:54.680086+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32882	103.77.246.204	55555	TCP
2025-03-18T04:46:55.515461+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32884	103.77.246.204	55555	TCP
2025-03-18T04:46:56.351791+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32886	103.77.246.204	55555	TCP
2025-03-18T04:46:57.192678+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32888	103.77.246.204	55555	TCP
2025-03-18T04:46:58.043259+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32890	103.77.246.204	55555	TCP
2025-03-18T04:46:58.894048+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32892	103.77.246.204	55555	TCP
2025-03-18T04:46:59.728390+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32894	103.77.246.204	55555	TCP
2025-03-18T04:47:00.584465+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32896	103.77.246.204	55555	TCP
2025-03-18T04:47:01.440546+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32898	103.77.246.204	55555	TCP
2025-03-18T04:47:02.278953+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32900	103.77.246.204	55555	TCP
2025-03-18T04:47:03.126565+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32902	103.77.246.204	55555	TCP
2025-03-18T04:47:03.968132+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32904	103.77.246.204	55555	TCP
2025-03-18T04:47:04.817663+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32906	103.77.246.204	55555	TCP
2025-03-18T04:47:05.671993+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32908	103.77.246.204	55555	TCP
2025-03-18T04:47:06.522363+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32910	103.77.246.204	55555	TCP
2025-03-18T04:47:07.357489+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32912	103.77.246.204	55555	TCP
2025-03-18T04:47:08.201115+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32914	103.77.246.204	55555	TCP
2025-03-18T04:47:09.048935+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32916	103.77.246.204	55555	TCP
2025-03-18T04:47:09.886449+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32918	103.77.246.204	55555	TCP
2025-03-18T04:47:10.738972+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32920	103.77.246.204	55555	TCP
2025-03-18T04:47:11.576993+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32922	103.77.246.204	55555	TCP
2025-03-18T04:47:12.430925+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32924	103.77.246.204	55555	TCP
2025-03-18T04:47:13.272553+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32926	103.77.246.204	55555	TCP
2025-03-18T04:47:14.109679+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32928	103.77.246.204	55555	TCP
2025-03-18T04:47:14.949209+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32930	103.77.246.204	55555	TCP
2025-03-18T04:47:15.787902+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32932	103.77.246.204	55555	TCP
2025-03-18T04:47:16.619996+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32934	103.77.246.204	55555	TCP
2025-03-18T04:47:17.452531+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32936	103.77.246.204	55555	TCP
2025-03-18T04:47:18.294389+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32938	103.77.246.204	55555	TCP
2025-03-18T04:47:19.143644+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32940	103.77.246.204	55555	TCP
2025-03-18T04:47:19.975780+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32942	103.77.246.204	55555	TCP
2025-03-18T04:47:20.819197+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32944	103.77.246.204	55555	TCP
2025-03-18T04:47:21.656054+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32946	103.77.246.204	55555	TCP
2025-03-18T04:47:22.496959+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32948	103.77.246.204	55555	TCP
2025-03-18T04:47:23.340596+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32950	103.77.246.204	55555	TCP
2025-03-18T04:47:24.176820+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32952	103.77.246.204	55555	TCP
2025-03-18T04:47:25.018513+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32954	103.77.246.204	55555	TCP
2025-03-18T04:47:25.864621+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32956	103.77.246.204	55555	TCP
2025-03-18T04:47:26.725217+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32958	103.77.246.204	55555	TCP
2025-03-18T04:47:27.660324+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32960	103.77.246.204	55555	TCP
2025-03-18T04:47:28.502134+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32962	103.77.246.204	55555	TCP
2025-03-18T04:47:29.349360+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32964	103.77.246.204	55555	TCP
2025-03-18T04:47:30.200304+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32966	103.77.246.204	55555	TCP
2025-03-18T04:47:31.029401+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32968	103.77.246.204	55555	TCP
2025-03-18T04:47:31.876883+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32970	103.77.246.204	55555	TCP
2025-03-18T04:47:32.709323+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32972	103.77.246.204	55555	TCP
2025-03-18T04:47:33.548297+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32974	103.77.246.204	55555	TCP
2025-03-18T04:47:34.396228+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32976	103.77.246.204	55555	TCP
2025-03-18T04:47:35.230817+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32978	103.77.246.204	55555	TCP
2025-03-18T04:47:36.069946+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32980	103.77.246.204	55555	TCP
2025-03-18T04:47:36.903442+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32982	103.77.246.204	55555	TCP
2025-03-18T04:47:37.753306+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32984	103.77.246.204	55555	TCP
2025-03-18T04:47:38.596301+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32986	103.77.246.204	55555	TCP
2025-03-18T04:47:39.426834+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32988	103.77.246.204	55555	TCP
2025-03-18T04:47:40.260960+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32990	103.77.246.204	55555	TCP
2025-03-18T04:47:41.100423+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32992	103.77.246.204	55555	TCP
2025-03-18T04:47:41.940267+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32994	103.77.246.204	55555	TCP
2025-03-18T04:47:42.781763+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32996	103.77.246.204	55555	TCP
2025-03-18T04:47:43.620714+0100	2846526	1	A Network Trojan was detected	192.168.2.14	32998	103.77.246.204	55555	TCP
2025-03-18T04:47:44.461003+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33000	103.77.246.204	55555	TCP
2025-03-18T04:47:45.335504+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33002	103.77.246.204	55555	TCP
2025-03-18T04:47:46.192177+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33004	103.77.246.204	55555	TCP
2025-03-18T04:47:47.028716+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33006	103.77.246.204	55555	TCP
2025-03-18T04:47:47.879249+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33008	103.77.246.204	55555	TCP
2025-03-18T04:47:48.713721+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33010	103.77.246.204	55555	TCP
2025-03-18T04:47:49.565421+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33012	103.77.246.204	55555	TCP
2025-03-18T04:47:50.405487+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33014	103.77.246.204	55555	TCP
2025-03-18T04:47:51.244410+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33016	103.77.246.204	55555	TCP
2025-03-18T04:47:52.107189+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33018	103.77.246.204	55555	TCP
2025-03-18T04:47:52.943053+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33020	103.77.246.204	55555	TCP
2025-03-18T04:47:53.793832+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33022	103.77.246.204	55555	TCP
2025-03-18T04:47:54.634497+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33024	103.77.246.204	55555	TCP
2025-03-18T04:47:55.492172+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33026	103.77.246.204	55555	TCP
2025-03-18T04:47:56.324713+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33028	103.77.246.204	55555	TCP
2025-03-18T04:47:57.180578+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33030	103.77.246.204	55555	TCP
2025-03-18T04:47:58.035046+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33032	103.77.246.204	55555	TCP
2025-03-18T04:47:58.887240+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33034	103.77.246.204	55555	TCP
2025-03-18T04:47:59.724640+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33036	103.77.246.204	55555	TCP
2025-03-18T04:48:00.562084+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33038	103.77.246.204	55555	TCP
2025-03-18T04:48:01.432181+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33040	103.77.246.204	55555	TCP
2025-03-18T04:48:02.265245+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33042	103.77.246.204	55555	TCP
2025-03-18T04:48:03.116657+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33044	103.77.246.204	55555	TCP
2025-03-18T04:48:03.951553+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33046	103.77.246.204	55555	TCP
2025-03-18T04:48:04.784810+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33048	103.77.246.204	55555	TCP
2025-03-18T04:48:05.638429+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33050	103.77.246.204	55555	TCP
2025-03-18T04:48:06.494585+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33052	103.77.246.204	55555	TCP
2025-03-18T04:48:07.341985+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33054	103.77.246.204	55555	TCP
2025-03-18T04:48:08.219938+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33056	103.77.246.204	55555	TCP
2025-03-18T04:48:09.081079+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33058	103.77.246.204	55555	TCP
2025-03-18T04:48:09.916062+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33060	103.77.246.204	55555	TCP
2025-03-18T04:48:10.753060+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33062	103.77.246.204	55555	TCP
2025-03-18T04:48:11.584676+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33064	103.77.246.204	55555	TCP
2025-03-18T04:48:12.434415+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33066	103.77.246.204	55555	TCP
2025-03-18T04:48:13.284940+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33068	103.77.246.204	55555	TCP
2025-03-18T04:48:14.124730+0100	2846526	1	A Network Trojan was detected	192.168.2.14	33070	103.77.246.204	55555	TCP

Joe Sandbox Signatures

• AV Detection
• Spreading
• Networking
• System Summary
• Malware Analysis System Evasion
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: m-i.p-s.Sakura.elf

Avira: detected

Found malware configuration

Source: m-i.p-s.Sakura.elf

Malware Configuration Extractor: Gafgyt {"C2 url": "103.77.246.204:55555"}

Multi AV Scanner detection for submitted file

Source: m-i.p-s.Sakura.elf	Virustotal: Detection: 63%			Perma Link
Source: m-i.p-s.Sakura.elf	ReversingLabs: Detection: 61%

Spreading

Opens /proc/net/* files useful for finding connected devices and routers

Source: /tmp/m-i.p-s.Sakura.elf (PID: 5523)

Opens: /proc/net/route

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60878 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60814 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60826 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60858 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60898 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60918 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60922 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60834 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60934 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60832 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60828 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60888 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60844 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60914 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60808 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60896 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60872 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32806 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60910 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60874 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60816 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60806 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60846 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60842 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60850 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60804 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32828 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60882 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60812 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60836 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32820 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60880 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60800 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60902 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60830 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32768 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60984 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60856 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32844 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32782 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60942 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32810 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60860 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32858 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60944 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60890 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60822 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32814 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60908 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32854 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60974 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60940 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60956 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60848 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60950 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60802 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60998 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32788 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32780 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60870 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60982 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32798 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60864 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60906 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60824 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32886 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32870 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60876 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60968 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32816 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60978 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32792 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32784 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32850 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32796 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32882 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60852 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32824 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60894 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60960 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60892 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60818 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60862 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32848 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32924 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60972 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32786 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32778 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60964 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60810 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32918 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60962 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60946 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32836 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60900 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32846 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60976 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32864 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32840 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60854 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32860 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60980 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32934 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32888 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32920 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32830 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32954 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60912 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60996 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32800 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60838 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60936 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60866 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32912 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32908 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32876 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32902 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32922 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32880 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32838 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32964 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33012 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32868 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32884 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60840 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60886 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60884 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32962 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32852 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60920 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60958 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32976 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32872 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32772 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32968 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32774 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32978 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32776 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60928 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33006 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32898 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32832 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32900 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32940 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32822 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32896 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60924 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32928 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33020 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32990 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32972 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33038 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33042 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60904 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32950 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32986 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33016 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33060 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60966 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32926 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33052 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60868 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60930 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32970 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33030 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60992 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60952 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32770 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60938 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32874 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60820 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33000 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32802 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60988 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60916 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32826 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32842 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32904 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60986 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33010 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33048 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32948 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32906 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32980 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32910 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60948 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33050 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33068 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33044 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32812 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60990 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32966 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32994 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33032 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32790 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32834 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33036 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32988 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33028 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32894 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32914 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33014 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33040 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60954 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32960 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32956 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32958 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32932 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32998 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33070 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32856 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60926 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32952 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32818 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33004 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60970 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32942 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32936 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33062 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33018 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32890 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32944 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33024 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32794 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60932 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32892 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32930 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:60994 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32916 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32862 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32984 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33008 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32878 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32974 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32866 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33026 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33058 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32804 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32982 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33064 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33056 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33002 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32808 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33066 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33022 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33046 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32992 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33034 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32996 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:33054 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32938 -> 103.77.246.204:55555
Source: Network traffic	Suricata IDS: 2846526 - Severity 1 - ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin : 192.168.2.14:32946 -> 103.77.246.204:55555

Source: global traffic

TCP traffic: 192.168.2.14:60800 -> 103.77.246.204:55555

Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204
Source: unknown	TCP traffic detected without corresponding DNS query: 103.77.246.204

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

System Summary

Malicious sample detected (through community Yara rule)

Source: m-i.p-s.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5525.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5523.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5523, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Contains symbols with names commonly found in malware

Source: ELF static info symbol of initial sample

Name: vseattack

Source: m-i.p-s.Sakura.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5525.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5523.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5523, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5525, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@2/0

Source: m-i.p-s.Sakura.elf	ELF static info symbol of initial sample: libc/string/mips/memcpy.S
Source: m-i.p-s.Sakura.elf	ELF static info symbol of initial sample: libc/string/mips/memset.S
Source: m-i.p-s.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crt1.S
Source: m-i.p-s.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crti.S
Source: m-i.p-s.Sakura.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/mips/crtn.S

Source: /tmp/m-i.p-s.Sakura.elf (PID: 5523)

Queries kernel information via 'uname':

Jump to behavior

Source: m-i.p-s.Sakura.elf, 5523.1.0000560f264ac000.0000560f26533000.rw-.sdmp, m-i.p-s.Sakura.elf, 5525.1.0000560f264ac000.0000560f26533000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/mips
Source: m-i.p-s.Sakura.elf, 5523.1.0000560f264ac000.0000560f26533000.rw-.sdmp, m-i.p-s.Sakura.elf, 5525.1.0000560f264ac000.0000560f26533000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: m-i.p-s.Sakura.elf, 5523.1.00007ffde8a5a000.00007ffde8a7b000.rw-.sdmp, m-i.p-s.Sakura.elf, 5525.1.00007ffde8a5a000.00007ffde8a7b000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: m-i.p-s.Sakura.elf, 5523.1.00007ffde8a5a000.00007ffde8a7b000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.wKitrO
Source: m-i.p-s.Sakura.elf, 5523.1.00007ffde8a5a000.00007ffde8a7b000.rw-.sdmp, m-i.p-s.Sakura.elf, 5525.1.00007ffde8a5a000.00007ffde8a7b000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/m-i.p-s.Sakura.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/m-i.p-s.Sakura.elf
Source: m-i.p-s.Sakura.elf, 5523.1.00007ffde8a5a000.00007ffde8a7b000.rw-.sdmp	Binary or memory string: V/tmp/qemu-open.wKitrO\

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: m-i.p-s.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: m-i.p-s.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5523.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5523, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5525, type: MEMORYSTR

Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
Source: Initial sample	User agent string found: Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: m-i.p-s.Sakura.elf, type: SAMPLE

Yara detected Mirai

Source: Yara match	File source: m-i.p-s.Sakura.elf, type: SAMPLE
Source: Yara match	File source: 5525.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: 5523.1.00007f24ec400000.00007f24ec418000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5523, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: m-i.p-s.Sakura.elf PID: 5525, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	1 Remote System Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

Threatname: Gafgyt

{
  "C2 url": "103.77.246.204:55555"
}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
m-i.p-s.Sakura.elf	63%	Virustotal		Browse
m-i.p-s.Sakura.elf	61%	ReversingLabs	Linux.Exploit.Mirai
m-i.p-s.Sakura.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
103.77.246.204:55555	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
103.77.246.204:55555	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
103.77.246.204	unknown	India		136165	X4B-AS-APX4BDDoSProtectedAnnouncementsAU	true

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
103.77.246.204	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	EdiAf.ppc.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	EdiAf.arm.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	EdiAf.arm7.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	EdiAf.spc.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	debug.dbg.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	EdiAf.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	EdiAf.sh4.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
X4B-AS-APX4BDDoSProtectedAnnouncementsAU	m-p.s-l.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	m-6.8-k.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	x-8.6-.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	a-r.m-6.Sakura.elf	Get hash	malicious	Gafgyt, Mirai	Browse	103.77.246.204
	smbhost.exe	Get hash	malicious	Xmrig	Browse	103.249.70.7
	http://ff.members.gerane.vn/	Get hash	malicious	Unknown	Browse	103.77.241.200
	Address_verification_form_awb_shipping_documents_Invoice_Billof lading000000000000000000000.vbs	Get hash	malicious	GuLoader	Browse	103.77.246.15
	Tracking_Invoice_Awb_BL_00340434757340073972.vbs	Get hash	malicious	Remcos, GuLoader	Browse	103.77.246.15
	Invoice_Awb_BL_238415455_01408202_pdf.vbs	Get hash	malicious	GuLoader	Browse	103.77.246.15
	7PY33AaMqH.elf	Get hash	malicious	Mirai, Okiru	Browse	103.77.246.53

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.wKitrO (deleted)

Download File

Process:	/tmp/m-i.p-s.Sakura.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Static File Info

General

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	5.260238897972607
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	m-i.p-s.Sakura.elf
File size:	125'962 bytes
MD5:	233fd40ad60ad8e11aaaf2a88fdb1754
SHA1:	fbb08d735f00b8d6df4327826887b249f15962c7
SHA256:	c3bb638ceb426eb32535b79e2e93302201e39060fefaee3a000bf0d2a929ab93
SHA512:	8e378cb35b47dfe80aa6a53cb271fd3eacfbaae3a298f34523fe8278981d7865b506e0403110e9d489f0d660fdea0e72af6ff89bc8466a060bfa648f07f23a60
SSDEEP:	1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBe+ERLWfRZrmW+i:/a1UW0MZQHUB6RZrmW+IFB1Dt1hR/
TLSH:	AFC3842E7E12BBBEE668863107F35F70879521D237A19382F26CD6181E7128D1C5FB64
File Content Preview:	.ELF.....................@.....4.........4. ...(....p........@...@...........................@...@....pD..pD..............pD.EpD.EpD......l.........dt.Q.................................................E..<...'......!'.......................<...'......!...

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x4002a0
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	4
Section Header Offset:	106268
Section Header Size:	40
Number of Section Headers:	21
Header String Table Index:	18

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.reginfo	MIPS_REGINFO	0x4000b4	0xb4	0x18	0x18	0x2	A	0	0	4
.init	PROGBITS	0x4000cc	0xcc	0x8c	0x0	0x6	AX	0	0	4
.text	PROGBITS	0x400160	0x160	0x146c0	0x0	0x6	AX	0	0	16
.fini	PROGBITS	0x414820	0x14820	0x5c	0x0	0x6	AX	0	0	4
.rodata	PROGBITS	0x414880	0x14880	0x27c0	0x0	0x2	A	0	0	16
.eh_frame	PROGBITS	0x417040	0x17040	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x457044	0x17044	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x45704c	0x1704c	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x457054	0x17054	0x4	0x0	0x3	WA	0	0	4
.data.rel.ro	PROGBITS	0x457058	0x17058	0x20	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x457080	0x17080	0x440	0x0	0x3	WA	0	0	16
.got	PROGBITS	0x4574c0	0x174c0	0x460	0x4	0x10000003	WAp	0	0	16
.sbss	NOBITS	0x457920	0x17920	0x18	0x0	0x10000003	WAp	0	0	4
.bss	NOBITS	0x457940	0x17920	0x63a4	0x0	0x3	WA	0	0	16
.comment	PROGBITS	0x0	0x17920	0xa9e	0x0	0x0		0	0	1
.mdebug.abi32	PROGBITS	0xa9e	0x183be	0x0	0x0	0x0		0	0	1
.pdr	PROGBITS	0x0	0x183c0	0x1ac0	0x0	0x0		0	0	4
.shstrtab	STRTAB	0x0	0x19e80	0x9a	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x1a264	0x2a30	0x10	0x0		20	285	4
.strtab	STRTAB	0x0	0x1cc94	0x1f76	0x0	0x0		0	0	1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
<unknown>	0xb4	0x4000b4	0x4000b4	0x18	0x18	0.9834	0x4	R	0x4	.reginfo
LOAD	0x0	0x400000	0x400000	0x17044	0x17044	5.2167	0x5	R E	0x10000	.reginfo .init .text .fini .rodata .eh_frame
LOAD	0x17044	0x457044	0x457044	0x8dc	0x6ca0	3.9593	0x6	RW	0x10000	.ctors .dtors .jcr .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Symbols

Name	Section Name	Value	Size	Symbol Type	Symbol Bind	Symbol Visibility	Ndx
	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
	.symtab	0x4000b4	0	SECTION	<unknown>	DEFAULT	1
	.symtab	0x4000cc	0	SECTION	<unknown>	DEFAULT	2
	.symtab	0x400160	0	SECTION	<unknown>	DEFAULT	3
	.symtab	0x414820	0	SECTION	<unknown>	DEFAULT	4
	.symtab	0x414880	0	SECTION	<unknown>	DEFAULT	5
	.symtab	0x417040	0	SECTION	<unknown>	DEFAULT	6
	.symtab	0x457044	0	SECTION	<unknown>	DEFAULT	7
	.symtab	0x45704c	0	SECTION	<unknown>	DEFAULT	8
	.symtab	0x457054	0	SECTION	<unknown>	DEFAULT	9
	.symtab	0x457058	0	SECTION	<unknown>	DEFAULT	10
	.symtab	0x457080	0	SECTION	<unknown>	DEFAULT	11
	.symtab	0x4574c0	0	SECTION	<unknown>	DEFAULT	12
	.symtab	0x457920	0	SECTION	<unknown>	DEFAULT	13
	.symtab	0x457940	0	SECTION	<unknown>	DEFAULT	14
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	15
	.symtab	0xa9e	0	SECTION	<unknown>	DEFAULT	16
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	17
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	18
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	19
	.symtab	0x0	0	SECTION	<unknown>	DEFAULT	20
C.111.5048	.symtab	0x457058	8	OBJECT	<unknown>	DEFAULT	10
C.148.5367	.symtab	0x457060	24	OBJECT	<unknown>	DEFAULT	10
Q	.symtab	0x457978	16384	OBJECT	<unknown>	DEFAULT	14
Sakura_Bot.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
SendSTD	.symtab	0x404774	516	FUNC	<unknown>	DEFAULT	3
SendSTDHEX	.symtab	0x4038c4	540	FUNC	<unknown>	DEFAULT	3
SendSTD_HEX	.symtab	0x404b88	588	FUNC	<unknown>	DEFAULT	3
SendUDP	.symtab	0x4028f8	1712	FUNC	<unknown>	DEFAULT	3
_GLOBAL_OFFSET_TABLE_	.symtab	0x4574c0	0	OBJECT	<unknown>	DEFAULT	12
_Jv_RegisterClasses	.symtab	0x0	0	NOTYPE	<unknown>	DEFAULT	SHN_UNDEF
_READ.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_WRITE.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__CTOR_END__	.symtab	0x457048	0	OBJECT	<unknown>	DEFAULT	7
__CTOR_LIST__	.symtab	0x457044	0	OBJECT	<unknown>	DEFAULT	7
__C_ctype_b	.symtab	0x4570e0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_b.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_b_data	.symtab	0x4158a0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_tolower	.symtab	0x4574b0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_tolower_data	.symtab	0x415fd0	768	OBJECT	<unknown>	DEFAULT	5
__C_ctype_toupper	.symtab	0x4570f0	4	OBJECT	<unknown>	DEFAULT	11
__C_ctype_toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__C_ctype_toupper_data	.symtab	0x415ba0	768	OBJECT	<unknown>	DEFAULT	5
__DTOR_END__	.symtab	0x457050	0	OBJECT	<unknown>	DEFAULT	8
__DTOR_LIST__	.symtab	0x45704c	0	OBJECT	<unknown>	DEFAULT	8
__EH_FRAME_BEGIN__	.symtab	0x417040	0	OBJECT	<unknown>	DEFAULT	6
__FRAME_END__	.symtab	0x417040	0	OBJECT	<unknown>	DEFAULT	6
__GI___C_ctype_b	.symtab	0x4570e0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_b_data	.symtab	0x4158a0	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_tolower	.symtab	0x4574b0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_tolower_data	.symtab	0x415fd0	768	OBJECT	<unknown>	HIDDEN	5
__GI___C_ctype_toupper	.symtab	0x4570f0	4	OBJECT	<unknown>	HIDDEN	11
__GI___C_ctype_toupper_data	.symtab	0x415ba0	768	OBJECT	<unknown>	HIDDEN	5
__GI___ctype_b	.symtab	0x4570e4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_tolower	.symtab	0x4574b4	4	OBJECT	<unknown>	HIDDEN	11
__GI___ctype_toupper	.symtab	0x4570f4	4	OBJECT	<unknown>	HIDDEN	11
__GI___errno_location	.symtab	0x40a780	24	FUNC	<unknown>	HIDDEN	3
__GI___fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	HIDDEN	3
__GI___glibc_strerror_r	.symtab	0x412c50	68	FUNC	<unknown>	HIDDEN	3
__GI___h_errno_location	.symtab	0x40d5f0	24	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl	.symtab	0x40a050	136	FUNC	<unknown>	HIDDEN	3
__GI___libc_fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	HIDDEN	3
__GI___libc_open	.symtab	0x40a450	124	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_fini	.symtab	0x40cbe0	196	FUNC	<unknown>	HIDDEN	3
__GI___uClibc_init	.symtab	0x40cd3c	140	FUNC	<unknown>	HIDDEN	3
__GI___xpg_strerror_r	.symtab	0x412ca0	392	FUNC	<unknown>	HIDDEN	3
__GI__exit	.symtab	0x40a150	80	FUNC	<unknown>	HIDDEN	3
__GI_abort	.symtab	0x40ebd0	428	FUNC	<unknown>	HIDDEN	3
__GI_atoi	.symtab	0x40c590	28	FUNC	<unknown>	HIDDEN	3
__GI_atol	.symtab	0x40c590	28	FUNC	<unknown>	HIDDEN	3
__GI_brk	.symtab	0x40edb0	112	FUNC	<unknown>	HIDDEN	3
__GI_chdir	.symtab	0x40a200	88	FUNC	<unknown>	HIDDEN	3
__GI_close	.symtab	0x40a260	84	FUNC	<unknown>	HIDDEN	3
__GI_connect	.symtab	0x40b300	84	FUNC	<unknown>	HIDDEN	3
__GI_errno	.symtab	0x45bbd0	4	OBJECT	<unknown>	HIDDEN	14
__GI_exit	.symtab	0x40c820	236	FUNC	<unknown>	HIDDEN	3
__GI_fclose	.symtab	0x40ee80	512	FUNC	<unknown>	HIDDEN	3
__GI_fcntl	.symtab	0x40a050	136	FUNC	<unknown>	HIDDEN	3
__GI_fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	HIDDEN	3
__GI_fflush_unlocked	.symtab	0x40f8f0	628	FUNC	<unknown>	HIDDEN	3
__GI_fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	HIDDEN	3
__GI_fgets	.symtab	0x40f680	216	FUNC	<unknown>	HIDDEN	3
__GI_fgets_unlocked	.symtab	0x40fb70	268	FUNC	<unknown>	HIDDEN	3
__GI_fopen	.symtab	0x40f080	28	FUNC	<unknown>	HIDDEN	3
__GI_fork	.symtab	0x40a2c0	84	FUNC	<unknown>	HIDDEN	3
__GI_fputs_unlocked	.symtab	0x412960	128	FUNC	<unknown>	HIDDEN	3
__GI_fseek	.symtab	0x414360	68	FUNC	<unknown>	HIDDEN	3
__GI_fseeko64	.symtab	0x4143b0	388	FUNC	<unknown>	HIDDEN	3
__GI_fwrite_unlocked	.symtab	0x4129e0	280	FUNC	<unknown>	HIDDEN	3
__GI_getc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	HIDDEN	3
__GI_getegid	.symtab	0x40d280	88	FUNC	<unknown>	HIDDEN	3
__GI_geteuid	.symtab	0x40d2e0	88	FUNC	<unknown>	HIDDEN	3
__GI_getgid	.symtab	0x40d340	84	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname	.symtab	0x40ae20	116	FUNC	<unknown>	HIDDEN	3
__GI_gethostbyname_r	.symtab	0x40aea0	1108	FUNC	<unknown>	HIDDEN	3
__GI_getpid	.symtab	0x40a320	84	FUNC	<unknown>	HIDDEN	3
__GI_getsockname	.symtab	0x40b360	84	FUNC	<unknown>	HIDDEN	3
__GI_getuid	.symtab	0x40d3a0	84	FUNC	<unknown>	HIDDEN	3
__GI_h_errno	.symtab	0x45bbd4	4	OBJECT	<unknown>	HIDDEN	14
__GI_inet_addr	.symtab	0x40add0	72	FUNC	<unknown>	HIDDEN	3
__GI_inet_aton	.symtab	0x40dc70	244	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa	.symtab	0x40adac	32	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntoa_r	.symtab	0x40ad10	156	FUNC	<unknown>	HIDDEN	3
__GI_inet_ntop	.symtab	0x410580	852	FUNC	<unknown>	HIDDEN	3
__GI_inet_pton	.symtab	0x4100d0	700	FUNC	<unknown>	HIDDEN	3
__GI_initstate_r	.symtab	0x40c440	328	FUNC	<unknown>	HIDDEN	3
__GI_ioctl	.symtab	0x40a380	104	FUNC	<unknown>	HIDDEN	3
__GI_isatty	.symtab	0x40fef0	60	FUNC	<unknown>	HIDDEN	3
__GI_kill	.symtab	0x40a3f0	88	FUNC	<unknown>	HIDDEN	3
__GI_lseek64	.symtab	0x414700	168	FUNC	<unknown>	HIDDEN	3
__GI_memchr	.symtab	0x414140	264	FUNC	<unknown>	HIDDEN	3
__GI_memcpy	.symtab	0x40a7a0	308	FUNC	<unknown>	HIDDEN	3
__GI_memmove	.symtab	0x40d770	816	FUNC	<unknown>	HIDDEN	3
__GI_mempcpy	.symtab	0x412b00	76	FUNC	<unknown>	HIDDEN	3
__GI_memrchr	.symtab	0x414250	272	FUNC	<unknown>	HIDDEN	3
__GI_memset	.symtab	0x40a8e0	144	FUNC	<unknown>	HIDDEN	3
__GI_nanosleep	.symtab	0x40d400	84	FUNC	<unknown>	HIDDEN	3
__GI_open	.symtab	0x40a450	124	FUNC	<unknown>	HIDDEN	3
__GI_poll	.symtab	0x40ee20	84	FUNC	<unknown>	HIDDEN	3
__GI_raise	.symtab	0x4111e0	76	FUNC	<unknown>	HIDDEN	3
__GI_random	.symtab	0x40be10	164	FUNC	<unknown>	HIDDEN	3
__GI_random_r	.symtab	0x40c21c	176	FUNC	<unknown>	HIDDEN	3
__GI_rawmemchr	.symtab	0x40fc80	200	FUNC	<unknown>	HIDDEN	3
__GI_read	.symtab	0x40a4f0	84	FUNC	<unknown>	HIDDEN	3
__GI_recv	.symtab	0x40b440	84	FUNC	<unknown>	HIDDEN	3
__GI_sbrk	.symtab	0x40d460	144	FUNC	<unknown>	HIDDEN	3
__GI_select	.symtab	0x40a550	120	FUNC	<unknown>	HIDDEN	3
__GI_send	.symtab	0x40b4a0	84	FUNC	<unknown>	HIDDEN	3
__GI_sendto	.symtab	0x40b500	128	FUNC	<unknown>	HIDDEN	3
__GI_setsid	.symtab	0x40a5d0	84	FUNC	<unknown>	HIDDEN	3
__GI_setsockopt	.symtab	0x40b580	120	FUNC	<unknown>	HIDDEN	3
__GI_setstate_r	.symtab	0x40c0e0	316	FUNC	<unknown>	HIDDEN	3
__GI_sigaction	.symtab	0x40d130	232	FUNC	<unknown>	HIDDEN	3
__GI_signal	.symtab	0x40b660	252	FUNC	<unknown>	HIDDEN	3
__GI_sigprocmask	.symtab	0x40d4f0	148	FUNC	<unknown>	HIDDEN	3
__GI_sleep	.symtab	0x40c910	564	FUNC	<unknown>	HIDDEN	3
__GI_socket	.symtab	0x40b600	84	FUNC	<unknown>	HIDDEN	3
__GI_sprintf	.symtab	0x411270	80	FUNC	<unknown>	HIDDEN	3
__GI_srandom_r	.symtab	0x40c2cc	372	FUNC	<unknown>	HIDDEN	3
__GI_strcasecmp	.symtab	0x412e30	108	FUNC	<unknown>	HIDDEN	3
__GI_strchr	.symtab	0x40a970	256	FUNC	<unknown>	HIDDEN	3
__GI_strcmp	.symtab	0x40aa70	44	FUNC	<unknown>	HIDDEN	3
__GI_strcoll	.symtab	0x40aa70	44	FUNC	<unknown>	HIDDEN	3
__GI_strcpy	.symtab	0x40aaa0	36	FUNC	<unknown>	HIDDEN	3
__GI_strdup	.symtab	0x40fe60	144	FUNC	<unknown>	HIDDEN	3
__GI_strlen	.symtab	0x40aad0	184	FUNC	<unknown>	HIDDEN	3
__GI_strncat	.symtab	0x40fd50	180	FUNC	<unknown>	HIDDEN	3
__GI_strncpy	.symtab	0x40daa0	188	FUNC	<unknown>	HIDDEN	3
__GI_strnlen	.symtab	0x412b50	256	FUNC	<unknown>	HIDDEN	3
__GI_strpbrk	.symtab	0x40dc30	64	FUNC	<unknown>	HIDDEN	3
__GI_strspn	.symtab	0x40fe10	76	FUNC	<unknown>	HIDDEN	3
__GI_strstr	.symtab	0x40ab90	256	FUNC	<unknown>	HIDDEN	3
__GI_strtok	.symtab	0x40acd0	32	FUNC	<unknown>	HIDDEN	3
__GI_strtok_r	.symtab	0x40db60	204	FUNC	<unknown>	HIDDEN	3
__GI_strtol	.symtab	0x40c5b0	28	FUNC	<unknown>	HIDDEN	3
__GI_tcgetattr	.symtab	0x40ff30	176	FUNC	<unknown>	HIDDEN	3
__GI_time	.symtab	0x40a630	84	FUNC	<unknown>	HIDDEN	3
__GI_tolower	.symtab	0x411230	60	FUNC	<unknown>	HIDDEN	3
__GI_toupper	.symtab	0x40a740	60	FUNC	<unknown>	HIDDEN	3
__GI_vsnprintf	.symtab	0x4112c0	260	FUNC	<unknown>	HIDDEN	3
__GI_wait4	.symtab	0x40d590	88	FUNC	<unknown>	HIDDEN	3
__GI_waitpid	.symtab	0x40a690	28	FUNC	<unknown>	HIDDEN	3
__GI_wcrtomb	.symtab	0x413170	112	FUNC	<unknown>	HIDDEN	3
__GI_wcsnrtombs	.symtab	0x413220	228	FUNC	<unknown>	HIDDEN	3
__GI_wcsrtombs	.symtab	0x4131e0	64	FUNC	<unknown>	HIDDEN	3
__GI_write	.symtab	0x40a6b0	84	FUNC	<unknown>	HIDDEN	3
__JCR_END__	.symtab	0x457054	0	OBJECT	<unknown>	DEFAULT	9
__JCR_LIST__	.symtab	0x457054	0	OBJECT	<unknown>	DEFAULT	9
__app_fini	.symtab	0x45bbbc	4	OBJECT	<unknown>	HIDDEN	14
__atexit_lock	.symtab	0x4572e0	24	OBJECT	<unknown>	DEFAULT	11
__bsd_signal	.symtab	0x40b660	252	FUNC	<unknown>	HIDDEN	3
__bss_start	.symtab	0x457920	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
__check_one_fd	.symtab	0x40ccb4	136	FUNC	<unknown>	DEFAULT	3
__ctype_b	.symtab	0x4570e4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_tolower	.symtab	0x4574b4	4	OBJECT	<unknown>	DEFAULT	11
__ctype_toupper	.symtab	0x4570f4	4	OBJECT	<unknown>	DEFAULT	11
__curbrk	.symtab	0x45bc10	4	OBJECT	<unknown>	HIDDEN	14
__data_start	.symtab	0x4570a0	0	OBJECT	<unknown>	DEFAULT	11
__decode_answer	.symtab	0x410be0	340	FUNC	<unknown>	HIDDEN	3
__decode_dotted	.symtab	0x412fc0	340	FUNC	<unknown>	HIDDEN	3
__decode_header	.symtab	0x4109f0	228	FUNC	<unknown>	HIDDEN	3
__deregister_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__dns_lookup	.symtab	0x40dd70	2568	FUNC	<unknown>	HIDDEN	3
__do_global_ctors_aux	.symtab	0x4147b0	0	FUNC	<unknown>	DEFAULT	3
__do_global_dtors_aux	.symtab	0x400160	0	FUNC	<unknown>	DEFAULT	3
__dso_handle	.symtab	0x457080	0	OBJECT	<unknown>	HIDDEN	11
__encode_dotted	.symtab	0x412ea0	280	FUNC	<unknown>	HIDDEN	3
__encode_header	.symtab	0x4108e0	272	FUNC	<unknown>	HIDDEN	3
__encode_question	.symtab	0x410ae0	172	FUNC	<unknown>	HIDDEN	3
__environ	.symtab	0x45bbb4	4	OBJECT	<unknown>	DEFAULT	14
__errno_location	.symtab	0x40a780	24	FUNC	<unknown>	DEFAULT	3
__errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__exit_cleanup	.symtab	0x45bba0	4	OBJECT	<unknown>	HIDDEN	14
__fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	DEFAULT	3
__fini_array_end	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__fini_array_start	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__get_hosts_byname_r	.symtab	0x40eb60	104	FUNC	<unknown>	HIDDEN	3
__glibc_strerror_r	.symtab	0x412c50	68	FUNC	<unknown>	DEFAULT	3
__glibc_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__h_errno_location	.symtab	0x40d5f0	24	FUNC	<unknown>	DEFAULT	3
__h_errno_location.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__heap_alloc	.symtab	0x40bb70	188	FUNC	<unknown>	DEFAULT	3
__heap_free	.symtab	0x40bc78	364	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area	.symtab	0x40bc30	44	FUNC	<unknown>	DEFAULT	3
__heap_link_free_area_after	.symtab	0x40bc5c	28	FUNC	<unknown>	DEFAULT	3
__init_array_end	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__init_array_start	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__length_dotted	.symtab	0x413120	72	FUNC	<unknown>	HIDDEN	3
__length_question	.symtab	0x410b90	72	FUNC	<unknown>	HIDDEN	3
__libc_close	.symtab	0x40a260	84	FUNC	<unknown>	DEFAULT	3
__libc_connect	.symtab	0x40b300	84	FUNC	<unknown>	DEFAULT	3
__libc_creat	.symtab	0x40a4cc	28	FUNC	<unknown>	DEFAULT	3
__libc_fcntl	.symtab	0x40a050	136	FUNC	<unknown>	DEFAULT	3
__libc_fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	DEFAULT	3
__libc_fork	.symtab	0x40a2c0	84	FUNC	<unknown>	DEFAULT	3
__libc_getpid	.symtab	0x40a320	84	FUNC	<unknown>	DEFAULT	3
__libc_lseek64	.symtab	0x414700	168	FUNC	<unknown>	DEFAULT	3
__libc_nanosleep	.symtab	0x40d400	84	FUNC	<unknown>	DEFAULT	3
__libc_open	.symtab	0x40a450	124	FUNC	<unknown>	DEFAULT	3
__libc_poll	.symtab	0x40ee20	84	FUNC	<unknown>	DEFAULT	3
__libc_read	.symtab	0x40a4f0	84	FUNC	<unknown>	DEFAULT	3
__libc_recv	.symtab	0x40b440	84	FUNC	<unknown>	DEFAULT	3
__libc_select	.symtab	0x40a550	120	FUNC	<unknown>	DEFAULT	3
__libc_send	.symtab	0x40b4a0	84	FUNC	<unknown>	DEFAULT	3
__libc_sendto	.symtab	0x40b500	128	FUNC	<unknown>	DEFAULT	3
__libc_sigaction	.symtab	0x40d130	232	FUNC	<unknown>	DEFAULT	3
__libc_stack_end	.symtab	0x45bbb0	4	OBJECT	<unknown>	DEFAULT	14
__libc_waitpid	.symtab	0x40a690	28	FUNC	<unknown>	DEFAULT	3
__libc_write	.symtab	0x40a6b0	84	FUNC	<unknown>	DEFAULT	3
__malloc_heap	.symtab	0x457210	4	OBJECT	<unknown>	DEFAULT	11
__malloc_heap_lock	.symtab	0x45bb80	24	OBJECT	<unknown>	DEFAULT	14
__malloc_sbrk_lock	.symtab	0x45dcb0	24	OBJECT	<unknown>	DEFAULT	14
__nameserver	.symtab	0x45dcd8	12	OBJECT	<unknown>	HIDDEN	14
__nameservers	.symtab	0x457928	4	OBJECT	<unknown>	HIDDEN	13
__open_etc_hosts	.symtab	0x410d40	108	FUNC	<unknown>	HIDDEN	3
__open_nameservers	.symtab	0x40e780	984	FUNC	<unknown>	HIDDEN	3
__pagesize	.symtab	0x45bbb8	4	OBJECT	<unknown>	DEFAULT	14
__preinit_array_end	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__preinit_array_start	.symtab	0x457044	0	NOTYPE	<unknown>	HIDDEN	SHN_ABS
__pthread_initialize_minimal	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__pthread_mutex_init	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_lock	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_trylock	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_mutex_unlock	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_0	.symtab	0x40cca4	8	FUNC	<unknown>	DEFAULT	3
__pthread_return_void	.symtab	0x40ccac	8	FUNC	<unknown>	DEFAULT	3
__raise	.symtab	0x4111e0	76	FUNC	<unknown>	HIDDEN	3
__read_etc_hosts_r	.symtab	0x410dac	1076	FUNC	<unknown>	HIDDEN	3
__register_frame_info	.symtab	0x0	0	FUNC	<unknown>	DEFAULT	SHN_UNDEF
__resolv_lock	.symtab	0x457320	24	OBJECT	<unknown>	DEFAULT	11
__rtld_fini	.symtab	0x45bbc0	4	OBJECT	<unknown>	HIDDEN	14
__searchdomain	.symtab	0x45dcc8	16	OBJECT	<unknown>	HIDDEN	14
__searchdomains	.symtab	0x45792c	4	OBJECT	<unknown>	HIDDEN	13
__sigaddset	.symtab	0x40b788	44	FUNC	<unknown>	DEFAULT	3
__sigdelset	.symtab	0x40b7b4	48	FUNC	<unknown>	DEFAULT	3
__sigismember	.symtab	0x40b760	40	FUNC	<unknown>	DEFAULT	3
__start	.symtab	0x4002a0	100	FUNC	<unknown>	DEFAULT	3
__stdin	.symtab	0x4573ac	4	OBJECT	<unknown>	DEFAULT	11
__stdio_READ	.symtab	0x413310	140	FUNC	<unknown>	HIDDEN	3
__stdio_WRITE	.symtab	0x4113d0	280	FUNC	<unknown>	HIDDEN	3
__stdio_adjust_position	.symtab	0x414540	324	FUNC	<unknown>	HIDDEN	3
__stdio_fwrite	.symtab	0x4133a0	472	FUNC	<unknown>	HIDDEN	3
__stdio_init_mutex	.symtab	0x40f4c8	32	FUNC	<unknown>	HIDDEN	3
__stdio_mutex_initializer.3833	.symtab	0x415f50	24	OBJECT	<unknown>	DEFAULT	5
__stdio_rfill	.symtab	0x413580	88	FUNC	<unknown>	HIDDEN	3
__stdio_seek	.symtab	0x414690	112	FUNC	<unknown>	HIDDEN	3
__stdio_trans2r_o	.symtab	0x4135e0	228	FUNC	<unknown>	HIDDEN	3
__stdio_trans2w_o	.symtab	0x4136d0	308	FUNC	<unknown>	HIDDEN	3
__stdio_wcommit	.symtab	0x40f610	100	FUNC	<unknown>	HIDDEN	3
__stdout	.symtab	0x4573b0	4	OBJECT	<unknown>	DEFAULT	11
__syscall_fcntl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_fcntl64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__syscall_rt_sigaction	.symtab	0x40d220	84	FUNC	<unknown>	HIDDEN	3
__syscall_rt_sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uClibc_fini	.symtab	0x40cbe0	196	FUNC	<unknown>	DEFAULT	3
__uClibc_init	.symtab	0x40cd3c	140	FUNC	<unknown>	DEFAULT	3
__uClibc_main	.symtab	0x40cdc8	864	FUNC	<unknown>	DEFAULT	3
__uClibc_main.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
__uclibc_progname	.symtab	0x457300	4	OBJECT	<unknown>	HIDDEN	11
__xpg_strerror_r	.symtab	0x412ca0	392	FUNC	<unknown>	DEFAULT	3
__xpg_strerror_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_adjust_pos.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_charpad	.symtab	0x4114f0	128	FUNC	<unknown>	DEFAULT	3
_cs_funcs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_dl_aux_init	.symtab	0x40ed80	44	FUNC	<unknown>	DEFAULT	3
_dl_phdr	.symtab	0x457930	4	OBJECT	<unknown>	DEFAULT	13
_dl_phnum	.symtab	0x457934	4	OBJECT	<unknown>	DEFAULT	13
_edata	.symtab	0x457920	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_end	.symtab	0x45dce4	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_errno	.symtab	0x45bbd0	4	OBJECT	<unknown>	DEFAULT	14
_exit	.symtab	0x40a150	80	FUNC	<unknown>	DEFAULT	3
_exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fbss	.symtab	0x457920	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_fdata	.symtab	0x457080	0	NOTYPE	<unknown>	DEFAULT	11
_fini	.symtab	0x414820	28	FUNC	<unknown>	DEFAULT	4
_fixed_buffers	.symtab	0x45bc28	8192	OBJECT	<unknown>	DEFAULT	14
_fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_fp_out_narrow	.symtab	0x411570	228	FUNC	<unknown>	DEFAULT	3
_fpmaxtostr	.symtab	0x4138f0	2120	FUNC	<unknown>	HIDDEN	3
_fpmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ftext	.symtab	0x400160	0	NOTYPE	<unknown>	DEFAULT	3
_fwrite.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_gp	.symtab	0x45f4b0	0	NOTYPE	<unknown>	DEFAULT	SHN_ABS
_gp_disp	.symtab	0x0	0	OBJECT	<unknown>	DEFAULT	SHN_UNDEF
_h_errno	.symtab	0x45bbd4	4	OBJECT	<unknown>	DEFAULT	14
_init	.symtab	0x4000cc	28	FUNC	<unknown>	DEFAULT	2
_load_inttype	.symtab	0x413810	136	FUNC	<unknown>	HIDDEN	3
_load_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_init	.symtab	0x411e00	220	FUNC	<unknown>	HIDDEN	3
_ppfs_init.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_parsespec	.symtab	0x4121dc	1512	FUNC	<unknown>	HIDDEN	3
_ppfs_parsespec.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_prepargs	.symtab	0x411ee0	100	FUNC	<unknown>	HIDDEN	3
_ppfs_prepargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_ppfs_setargs	.symtab	0x411f50	540	FUNC	<unknown>	HIDDEN	3
_ppfs_setargs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_promoted_size	.symtab	0x412170	108	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_pop_restore	.symtab	0x40ccac	8	FUNC	<unknown>	DEFAULT	3
_pthread_cleanup_push_defer	.symtab	0x40ccac	8	FUNC	<unknown>	DEFAULT	3
_rfill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_sigintr	.symtab	0x45dc30	128	OBJECT	<unknown>	HIDDEN	14
_stdio.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_stdio_fopen	.symtab	0x40f0a0	880	FUNC	<unknown>	HIDDEN	3
_stdio_init	.symtab	0x40f410	184	FUNC	<unknown>	HIDDEN	3
_stdio_openlist	.symtab	0x4573b4	4	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_add_lock	.symtab	0x457360	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_dec_use	.symtab	0x40f760	400	FUNC	<unknown>	DEFAULT	3
_stdio_openlist_del_count	.symtab	0x45bc24	4	OBJECT	<unknown>	DEFAULT	14
_stdio_openlist_del_lock	.symtab	0x457378	24	OBJECT	<unknown>	DEFAULT	11
_stdio_openlist_use_count	.symtab	0x45bc20	4	OBJECT	<unknown>	DEFAULT	14
_stdio_streams	.symtab	0x4573b8	240	OBJECT	<unknown>	DEFAULT	11
_stdio_term	.symtab	0x40f4e8	284	FUNC	<unknown>	HIDDEN	3
_stdio_user_locking	.symtab	0x457390	4	OBJECT	<unknown>	DEFAULT	11
_stdlib_strto_l	.symtab	0x40c5d0	592	FUNC	<unknown>	HIDDEN	3
_stdlib_strto_l.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_store_inttype	.symtab	0x4138a0	68	FUNC	<unknown>	HIDDEN	3
_store_inttype.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_string_syserrmsgs	.symtab	0x416420	2934	OBJECT	<unknown>	HIDDEN	5
_string_syserrmsgs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_trans2w.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_uintmaxtostr	.symtab	0x40d610	340	FUNC	<unknown>	HIDDEN	3
_uintmaxtostr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_vfprintf_internal	.symtab	0x411654	1960	FUNC	<unknown>	HIDDEN	3
_vfprintf_internal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
_wcommit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
abort	.symtab	0x40ebd0	428	FUNC	<unknown>	DEFAULT	3
abort.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
access	.symtab	0x40a1a0	84	FUNC	<unknown>	DEFAULT	3
access.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
astd	.symtab	0x406650	536	FUNC	<unknown>	DEFAULT	3
atcp	.symtab	0x405d34	2332	FUNC	<unknown>	DEFAULT	3
atoi	.symtab	0x40c590	28	FUNC	<unknown>	DEFAULT	3
atol	.symtab	0x40c590	28	FUNC	<unknown>	DEFAULT	3
atol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
audp	.symtab	0x4054a8	2188	FUNC	<unknown>	DEFAULT	3
bcopy	.symtab	0x40ac90	32	FUNC	<unknown>	DEFAULT	3
bcopy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
been_there_done_that	.symtab	0x45bc00	4	OBJECT	<unknown>	DEFAULT	14
been_there_done_that.2792	.symtab	0x45bbc4	4	OBJECT	<unknown>	DEFAULT	14
brk	.symtab	0x40edb0	112	FUNC	<unknown>	DEFAULT	3
brk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
bsd_signal	.symtab	0x40b660	252	FUNC	<unknown>	DEFAULT	3
buf.2601	.symtab	0x45b990	16	OBJECT	<unknown>	DEFAULT	14
buf.4833	.symtab	0x45b9a0	460	OBJECT	<unknown>	DEFAULT	14
bzero	.symtab	0x40acb0	28	FUNC	<unknown>	DEFAULT	3
bzero.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
c	.symtab	0x4570b4	4	OBJECT	<unknown>	DEFAULT	11
chdir	.symtab	0x40a200	88	FUNC	<unknown>	DEFAULT	3
chdir.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
close	.symtab	0x40a260	84	FUNC	<unknown>	DEFAULT	3
close.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
commServer	.symtab	0x4570c0	4	OBJECT	<unknown>	DEFAULT	11
completed.2296	.symtab	0x457940	1	OBJECT	<unknown>	DEFAULT	14
connect	.symtab	0x40b300	84	FUNC	<unknown>	DEFAULT	3
connect.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
connectTimeout	.symtab	0x401ed8	828	FUNC	<unknown>	DEFAULT	3
creat	.symtab	0x40a4cc	28	FUNC	<unknown>	DEFAULT	3
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
crtstuff.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
csum	.symtab	0x402490	460	FUNC	<unknown>	DEFAULT	3
currentServer	.symtab	0x4570b0	4	OBJECT	<unknown>	DEFAULT	11
data_start	.symtab	0x4570a0	0	OBJECT	<unknown>	DEFAULT	11
decodea.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
decodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dl-support.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
dnslookup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encoded.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeh.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
encodeq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
environ	.symtab	0x45bbb4	4	OBJECT	<unknown>	DEFAULT	14
errno	.symtab	0x45bbd0	4	OBJECT	<unknown>	DEFAULT	14
errno.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
estridx	.symtab	0x416390	126	OBJECT	<unknown>	DEFAULT	5
exit	.symtab	0x40c820	236	FUNC	<unknown>	DEFAULT	3
exit.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
exp10_table	.symtab	0x416ff8	72	OBJECT	<unknown>	DEFAULT	5
fclose	.symtab	0x40ee80	512	FUNC	<unknown>	DEFAULT	3
fclose.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fcntl	.symtab	0x40a050	136	FUNC	<unknown>	DEFAULT	3
fcntl64	.symtab	0x40a0e0	104	FUNC	<unknown>	DEFAULT	3
fdgets	.symtab	0x4006bc	292	FUNC	<unknown>	DEFAULT	3
fflush_unlocked	.symtab	0x40f8f0	628	FUNC	<unknown>	DEFAULT	3
fflush_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgetc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	DEFAULT	3
fgetc_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets	.symtab	0x40f680	216	FUNC	<unknown>	DEFAULT	3
fgets.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fgets_unlocked	.symtab	0x40fb70	268	FUNC	<unknown>	DEFAULT	3
fgets_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fmt	.symtab	0x416fe0	20	OBJECT	<unknown>	DEFAULT	5
fopen	.symtab	0x40f080	28	FUNC	<unknown>	DEFAULT	3
fopen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fork	.symtab	0x40a2c0	84	FUNC	<unknown>	DEFAULT	3
fork.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fputs_unlocked	.symtab	0x412960	128	FUNC	<unknown>	DEFAULT	3
fputs_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
frame_dummy	.symtab	0x40021c	0	FUNC	<unknown>	DEFAULT	3
free	.symtab	0x40b9e0	396	FUNC	<unknown>	DEFAULT	3
free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseek	.symtab	0x414360	68	FUNC	<unknown>	DEFAULT	3
fseeko	.symtab	0x414360	68	FUNC	<unknown>	DEFAULT	3
fseeko.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
fseeko64	.symtab	0x4143b0	388	FUNC	<unknown>	DEFAULT	3
fseeko64.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ftcp	.symtab	0x402fa8	2332	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked	.symtab	0x4129e0	280	FUNC	<unknown>	DEFAULT	3
fwrite_unlocked.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getArch	.symtab	0x406868	56	FUNC	<unknown>	DEFAULT	3
getHost	.symtab	0x4019c0	160	FUNC	<unknown>	DEFAULT	3
getOurIP	.symtab	0x4007e0	896	FUNC	<unknown>	DEFAULT	3
getPortz	.symtab	0x4068a0	380	FUNC	<unknown>	DEFAULT	3
getRandomIP	.symtab	0x400610	172	FUNC	<unknown>	DEFAULT	3
get_hosts_byname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getc_unlocked	.symtab	0x4127d0	388	FUNC	<unknown>	DEFAULT	3
getegid	.symtab	0x40d280	88	FUNC	<unknown>	DEFAULT	3
getegid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
geteuid	.symtab	0x40d2e0	88	FUNC	<unknown>	DEFAULT	3
geteuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getgid	.symtab	0x40d340	84	FUNC	<unknown>	DEFAULT	3
getgid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname	.symtab	0x40ae20	116	FUNC	<unknown>	DEFAULT	3
gethostbyname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gethostbyname_r	.symtab	0x40aea0	1108	FUNC	<unknown>	DEFAULT	3
gethostbyname_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getpid	.symtab	0x40a320	84	FUNC	<unknown>	DEFAULT	3
getpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockname	.symtab	0x40b360	84	FUNC	<unknown>	DEFAULT	3
getsockname.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getsockopt	.symtab	0x40b3c0	120	FUNC	<unknown>	DEFAULT	3
getsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
getuid	.symtab	0x40d3a0	84	FUNC	<unknown>	DEFAULT	3
getuid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
gotIP	.symtab	0x457964	4	OBJECT	<unknown>	DEFAULT	14
h.4832	.symtab	0x45bb6c	20	OBJECT	<unknown>	DEFAULT	14
h_errno	.symtab	0x45bbd4	4	OBJECT	<unknown>	DEFAULT	14
heap_alloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
heap_free.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
hlt	.symtab	0x4002fc	0	NOTYPE	<unknown>	DEFAULT	3
htonl	.symtab	0x40ad00	8	FUNC	<unknown>	DEFAULT	3
htons	.symtab	0x40ad08	8	FUNC	<unknown>	DEFAULT	3
i.4126	.symtab	0x4570b8	4	OBJECT	<unknown>	DEFAULT	11
index	.symtab	0x40a970	256	FUNC	<unknown>	DEFAULT	3
inet_addr	.symtab	0x40add0	72	FUNC	<unknown>	DEFAULT	3
inet_aton	.symtab	0x40dc70	244	FUNC	<unknown>	DEFAULT	3
inet_aton.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_makeaddr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa	.symtab	0x40adac	32	FUNC	<unknown>	DEFAULT	3
inet_ntoa.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
inet_ntoa_r	.symtab	0x40ad10	156	FUNC	<unknown>	DEFAULT	3
inet_ntop	.symtab	0x410580	852	FUNC	<unknown>	DEFAULT	3
inet_ntop4	.symtab	0x41038c	500	FUNC	<unknown>	DEFAULT	3
inet_pton	.symtab	0x4100d0	700	FUNC	<unknown>	DEFAULT	3
inet_pton4	.symtab	0x40ffe0	240	FUNC	<unknown>	DEFAULT	3
initConnection	.symtab	0x409220	592	FUNC	<unknown>	DEFAULT	3
init_rand	.symtab	0x400310	300	FUNC	<unknown>	DEFAULT	3
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initfini.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
initial_fa	.symtab	0x457100	264	OBJECT	<unknown>	DEFAULT	11
initstate	.symtab	0x40bf64	208	FUNC	<unknown>	DEFAULT	3
initstate_r	.symtab	0x40c440	328	FUNC	<unknown>	DEFAULT	3
ioctl	.symtab	0x40a380	104	FUNC	<unknown>	DEFAULT	3
ioctl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isatty	.symtab	0x40fef0	60	FUNC	<unknown>	DEFAULT	3
isatty.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
isspace	.symtab	0x40a710	44	FUNC	<unknown>	DEFAULT	3
isspace.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
kill	.symtab	0x40a3f0	88	FUNC	<unknown>	DEFAULT	3
kill.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthd.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lengthq.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memcpy.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/string/mips/memset.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crt1.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crti.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
libc/sysdeps/linux/mips/crtn.S	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
listFork	.symtab	0x402214	636	FUNC	<unknown>	DEFAULT	3
llseek.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
lseek64	.symtab	0x414700	168	FUNC	<unknown>	DEFAULT	3
macAddress	.symtab	0x457970	6	OBJECT	<unknown>	DEFAULT	14
main	.symtab	0x409470	3028	FUNC	<unknown>	DEFAULT	3
mainCommSock	.symtab	0x457960	4	OBJECT	<unknown>	DEFAULT	14
makeIPPacket	.symtab	0x4027c0	312	FUNC	<unknown>	DEFAULT	3
makeRandomStr	.symtab	0x401a60	268	FUNC	<unknown>	DEFAULT	3
makevsepacket	.symtab	0x403c9c	348	FUNC	<unknown>	DEFAULT	3
malloc	.symtab	0x40b7f0	492	FUNC	<unknown>	DEFAULT	3
malloc.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memchr	.symtab	0x414140	264	FUNC	<unknown>	DEFAULT	3
memchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memcpy	.symtab	0x40a7a0	308	FUNC	<unknown>	DEFAULT	3
memmove	.symtab	0x40d770	816	FUNC	<unknown>	DEFAULT	3
memmove.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
mempcpy	.symtab	0x412b00	76	FUNC	<unknown>	DEFAULT	3
mempcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memrchr	.symtab	0x414250	272	FUNC	<unknown>	DEFAULT	3
memrchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
memset	.symtab	0x40a8e0	144	FUNC	<unknown>	DEFAULT	3
mylock	.symtab	0x457220	24	OBJECT	<unknown>	DEFAULT	11
mylock	.symtab	0x45bbe0	24	OBJECT	<unknown>	DEFAULT	14
mylock	.symtab	0x457340	24	OBJECT	<unknown>	DEFAULT	11
nanosleep	.symtab	0x40d400	84	FUNC	<unknown>	DEFAULT	3
nanosleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
next_start.1065	.symtab	0x45b980	4	OBJECT	<unknown>	DEFAULT	14
ntohl	.symtab	0x40acf0	8	FUNC	<unknown>	DEFAULT	3
ntohl.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ntohs	.symtab	0x40acf8	8	FUNC	<unknown>	DEFAULT	3
ntop.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
numpids	.symtab	0x457968	8	OBJECT	<unknown>	DEFAULT	14
object.2349	.symtab	0x457944	24	OBJECT	<unknown>	DEFAULT	14
open	.symtab	0x40a450	124	FUNC	<unknown>	DEFAULT	3
open.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
opennameservers.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
ourIP	.symtab	0x457920	4	OBJECT	<unknown>	DEFAULT	13
p.2294	.symtab	0x457090	0	OBJECT	<unknown>	DEFAULT	11
pids	.symtab	0x457924	4	OBJECT	<unknown>	DEFAULT	13
poll	.symtab	0x40ee20	84	FUNC	<unknown>	DEFAULT	3
poll.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
prefix.4045	.symtab	0x4162e0	12	OBJECT	<unknown>	DEFAULT	5
print	.symtab	0x4012b8	1456	FUNC	<unknown>	DEFAULT	3
printchar	.symtab	0x400d2c	184	FUNC	<unknown>	DEFAULT	3
printi	.symtab	0x401020	664	FUNC	<unknown>	DEFAULT	3
prints	.symtab	0x400de4	572	FUNC	<unknown>	DEFAULT	3
processCmd	.symtab	0x406a1c	10244	FUNC	<unknown>	DEFAULT	3
qual_chars.4050	.symtab	0x416300	20	OBJECT	<unknown>	DEFAULT	5
raise	.symtab	0x4111e0	76	FUNC	<unknown>	DEFAULT	3
raise.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand	.symtab	0x40bdf0	28	FUNC	<unknown>	DEFAULT	3
rand.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
rand_cmwc	.symtab	0x40043c	468	FUNC	<unknown>	DEFAULT	3
random	.symtab	0x40be10	164	FUNC	<unknown>	DEFAULT	3
random.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
random_poly_info	.symtab	0x415ea0	40	OBJECT	<unknown>	DEFAULT	5
random_r	.symtab	0x40c21c	176	FUNC	<unknown>	DEFAULT	3
random_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
randtbl	.symtab	0x457238	128	OBJECT	<unknown>	DEFAULT	11
rawmemchr	.symtab	0x40fc80	200	FUNC	<unknown>	DEFAULT	3
rawmemchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read	.symtab	0x40a4f0	84	FUNC	<unknown>	DEFAULT	3
read.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
read_etc_hosts_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recv	.symtab	0x40b440	84	FUNC	<unknown>	DEFAULT	3
recv.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
recvLine	.symtab	0x401b6c	876	FUNC	<unknown>	DEFAULT	3
rtcp	.symtab	0x404dd4	1748	FUNC	<unknown>	DEFAULT	3
sbrk	.symtab	0x40d460	144	FUNC	<unknown>	DEFAULT	3
sbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
select	.symtab	0x40a550	120	FUNC	<unknown>	DEFAULT	3
select.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
send	.symtab	0x40b4a0	84	FUNC	<unknown>	DEFAULT	3
send.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sendto	.symtab	0x40b500	128	FUNC	<unknown>	DEFAULT	3
sendto.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsid	.symtab	0x40a5d0	84	FUNC	<unknown>	DEFAULT	3
setsid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setsockopt	.symtab	0x40b580	120	FUNC	<unknown>	DEFAULT	3
setsockopt.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
setstate	.symtab	0x40beb4	176	FUNC	<unknown>	DEFAULT	3
setstate_r	.symtab	0x40c0e0	316	FUNC	<unknown>	DEFAULT	3
sigaction	.symtab	0x40d130	232	FUNC	<unknown>	DEFAULT	3
sigaction.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
signal	.symtab	0x40b660	252	FUNC	<unknown>	DEFAULT	3
signal.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigprocmask	.symtab	0x40d4f0	148	FUNC	<unknown>	DEFAULT	3
sigprocmask.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sigsetops.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
sleep	.symtab	0x40c910	564	FUNC	<unknown>	DEFAULT	3
sleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket	.symtab	0x40b600	84	FUNC	<unknown>	DEFAULT	3
socket.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
socket_connect	.symtab	0x403ae0	444	FUNC	<unknown>	DEFAULT	3
sockprintf	.symtab	0x401868	344	FUNC	<unknown>	DEFAULT	3
spec_and_mask.4049	.symtab	0x416314	16	OBJECT	<unknown>	DEFAULT	5
spec_base.4044	.symtab	0x4162ec	7	OBJECT	<unknown>	DEFAULT	5
spec_chars.4046	.symtab	0x416340	21	OBJECT	<unknown>	DEFAULT	5
spec_flags.4045	.symtab	0x416358	8	OBJECT	<unknown>	DEFAULT	5
spec_or_mask.4048	.symtab	0x416324	16	OBJECT	<unknown>	DEFAULT	5
spec_ranges.4047	.symtab	0x416334	9	OBJECT	<unknown>	DEFAULT	5
sprintf	.symtab	0x411270	80	FUNC	<unknown>	DEFAULT	3
sprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
srand	.symtab	0x40c034	172	FUNC	<unknown>	DEFAULT	3
srandom	.symtab	0x40c034	172	FUNC	<unknown>	DEFAULT	3
srandom_r	.symtab	0x40c2cc	372	FUNC	<unknown>	DEFAULT	3
static_id	.symtab	0x457310	2	OBJECT	<unknown>	DEFAULT	11
static_ns	.symtab	0x45bbf8	4	OBJECT	<unknown>	DEFAULT	14
stderr	.symtab	0x4573a8	4	OBJECT	<unknown>	DEFAULT	11
stdhexflood	.symtab	0x404978	528	FUNC	<unknown>	DEFAULT	3
stdin	.symtab	0x4573a0	4	OBJECT	<unknown>	DEFAULT	11
stdout	.symtab	0x4573a4	4	OBJECT	<unknown>	DEFAULT	11
strcasecmp	.symtab	0x412e30	108	FUNC	<unknown>	DEFAULT	3
strcasecmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strchr	.symtab	0x40a970	256	FUNC	<unknown>	DEFAULT	3
strchr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcmp	.symtab	0x40aa70	44	FUNC	<unknown>	DEFAULT	3
strcmp.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strcoll	.symtab	0x40aa70	44	FUNC	<unknown>	DEFAULT	3
strcpy	.symtab	0x40aaa0	36	FUNC	<unknown>	DEFAULT	3
strcpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strdup	.symtab	0x40fe60	144	FUNC	<unknown>	DEFAULT	3
strdup.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strerror_r	.symtab	0x412ca0	392	FUNC	<unknown>	DEFAULT	3
strlen	.symtab	0x40aad0	184	FUNC	<unknown>	DEFAULT	3
strlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncat	.symtab	0x40fd50	180	FUNC	<unknown>	DEFAULT	3
strncat.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strncpy	.symtab	0x40daa0	188	FUNC	<unknown>	DEFAULT	3
strncpy.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strnlen	.symtab	0x412b50	256	FUNC	<unknown>	DEFAULT	3
strnlen.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strpbrk	.symtab	0x40dc30	64	FUNC	<unknown>	DEFAULT	3
strpbrk.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strspn	.symtab	0x40fe10	76	FUNC	<unknown>	DEFAULT	3
strspn.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strstr	.symtab	0x40ab90	256	FUNC	<unknown>	DEFAULT	3
strstr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok	.symtab	0x40acd0	32	FUNC	<unknown>	DEFAULT	3
strtok.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtok_r	.symtab	0x40db60	204	FUNC	<unknown>	DEFAULT	3
strtok_r.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
strtol	.symtab	0x40c5b0	28	FUNC	<unknown>	DEFAULT	3
strtol.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcgetattr	.symtab	0x40ff30	176	FUNC	<unknown>	DEFAULT	3
tcgetattr.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tcpcsum	.symtab	0x40265c	356	FUNC	<unknown>	DEFAULT	3
time	.symtab	0x40a630	84	FUNC	<unknown>	DEFAULT	3
time.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
tolower	.symtab	0x411230	60	FUNC	<unknown>	DEFAULT	3
tolower.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
toupper	.symtab	0x40a740	60	FUNC	<unknown>	DEFAULT	3
toupper.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
trim	.symtab	0x400b60	460	FUNC	<unknown>	DEFAULT	3
type_codes	.symtab	0x416360	24	OBJECT	<unknown>	DEFAULT	5
type_sizes	.symtab	0x416378	12	OBJECT	<unknown>	DEFAULT	5
unknown.1088	.symtab	0x416410	14	OBJECT	<unknown>	DEFAULT	5
unsafe_state	.symtab	0x4572c0	28	OBJECT	<unknown>	DEFAULT	11
useragents	.symtab	0x4570c4	28	OBJECT	<unknown>	DEFAULT	11
usleep	.symtab	0x40cb50	144	FUNC	<unknown>	DEFAULT	3
usleep.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
vseattack	.symtab	0x403df8	2428	FUNC	<unknown>	DEFAULT	3
vsnprintf	.symtab	0x4112c0	260	FUNC	<unknown>	DEFAULT	3
vsnprintf.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wait4	.symtab	0x40d590	88	FUNC	<unknown>	DEFAULT	3
wait4.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
waitpid	.symtab	0x40a690	28	FUNC	<unknown>	DEFAULT	3
waitpid.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcrtomb	.symtab	0x413170	112	FUNC	<unknown>	DEFAULT	3
wcrtomb.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsnrtombs	.symtab	0x413220	228	FUNC	<unknown>	DEFAULT	3
wcsnrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
wcsrtombs	.symtab	0x4131e0	64	FUNC	<unknown>	DEFAULT	3
wcsrtombs.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
write	.symtab	0x40a6b0	84	FUNC	<unknown>	DEFAULT	3
write.c	.symtab	0x0	0	FILE	<unknown>	DEFAULT	SHN_ABS
xdigits.3043	.symtab	0x415f84	17	OBJECT	<unknown>	DEFAULT	5

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-18T04:44:38.658933+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60800	103.77.246.204	55555	TCP
2025-03-18T04:44:39.508573+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60802	103.77.246.204	55555	TCP
2025-03-18T04:44:40.374008+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60804	103.77.246.204	55555	TCP
2025-03-18T04:44:41.213467+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60806	103.77.246.204	55555	TCP
2025-03-18T04:44:42.052962+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60808	103.77.246.204	55555	TCP
2025-03-18T04:44:42.894084+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60810	103.77.246.204	55555	TCP
2025-03-18T04:44:43.737138+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60812	103.77.246.204	55555	TCP
2025-03-18T04:44:44.606362+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60814	103.77.246.204	55555	TCP
2025-03-18T04:44:45.455365+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60816	103.77.246.204	55555	TCP
2025-03-18T04:44:46.310725+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60818	103.77.246.204	55555	TCP
2025-03-18T04:44:47.142537+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60820	103.77.246.204	55555	TCP
2025-03-18T04:44:47.977128+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60822	103.77.246.204	55555	TCP
2025-03-18T04:44:48.812660+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60824	103.77.246.204	55555	TCP
2025-03-18T04:44:49.649368+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60826	103.77.246.204	55555	TCP
2025-03-18T04:44:50.484012+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60828	103.77.246.204	55555	TCP
2025-03-18T04:44:51.324715+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60830	103.77.246.204	55555	TCP
2025-03-18T04:44:52.165352+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60832	103.77.246.204	55555	TCP
2025-03-18T04:44:53.001538+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60834	103.77.246.204	55555	TCP
2025-03-18T04:44:53.857366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60836	103.77.246.204	55555	TCP
2025-03-18T04:44:54.701557+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60838	103.77.246.204	55555	TCP
2025-03-18T04:44:55.540180+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60840	103.77.246.204	55555	TCP
2025-03-18T04:44:56.378532+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60842	103.77.246.204	55555	TCP
2025-03-18T04:44:57.218027+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60844	103.77.246.204	55555	TCP
2025-03-18T04:44:58.064983+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60846	103.77.246.204	55555	TCP
2025-03-18T04:44:58.911170+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60848	103.77.246.204	55555	TCP
2025-03-18T04:44:59.753293+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60850	103.77.246.204	55555	TCP
2025-03-18T04:45:00.586950+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60852	103.77.246.204	55555	TCP
2025-03-18T04:45:01.430650+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60854	103.77.246.204	55555	TCP
2025-03-18T04:45:02.294899+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60856	103.77.246.204	55555	TCP
2025-03-18T04:45:03.149519+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60858	103.77.246.204	55555	TCP
2025-03-18T04:45:03.985269+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60860	103.77.246.204	55555	TCP
2025-03-18T04:45:04.838576+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60862	103.77.246.204	55555	TCP
2025-03-18T04:45:05.687993+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60864	103.77.246.204	55555	TCP
2025-03-18T04:45:06.519991+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60866	103.77.246.204	55555	TCP
2025-03-18T04:45:07.352201+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60868	103.77.246.204	55555	TCP
2025-03-18T04:45:08.183309+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60870	103.77.246.204	55555	TCP
2025-03-18T04:45:09.013875+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60872	103.77.246.204	55555	TCP
2025-03-18T04:45:09.872999+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60874	103.77.246.204	55555	TCP
2025-03-18T04:45:10.710782+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60876	103.77.246.204	55555	TCP
2025-03-18T04:45:11.560314+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60878	103.77.246.204	55555	TCP
2025-03-18T04:45:12.388347+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60880	103.77.246.204	55555	TCP
2025-03-18T04:45:13.241866+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60882	103.77.246.204	55555	TCP
2025-03-18T04:45:14.230984+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60884	103.77.246.204	55555	TCP
2025-03-18T04:45:15.078474+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60886	103.77.246.204	55555	TCP
2025-03-18T04:45:15.925643+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60888	103.77.246.204	55555	TCP
2025-03-18T04:45:16.774280+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60890	103.77.246.204	55555	TCP
2025-03-18T04:45:17.630935+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60892	103.77.246.204	55555	TCP
2025-03-18T04:45:18.474387+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60894	103.77.246.204	55555	TCP
2025-03-18T04:45:19.344023+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60896	103.77.246.204	55555	TCP
2025-03-18T04:45:20.191818+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60898	103.77.246.204	55555	TCP
2025-03-18T04:45:21.039948+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60900	103.77.246.204	55555	TCP
2025-03-18T04:45:21.870755+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60902	103.77.246.204	55555	TCP
2025-03-18T04:45:22.735731+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60904	103.77.246.204	55555	TCP
2025-03-18T04:45:23.566623+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60906	103.77.246.204	55555	TCP
2025-03-18T04:45:24.416987+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60908	103.77.246.204	55555	TCP
2025-03-18T04:45:25.270167+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60910	103.77.246.204	55555	TCP
2025-03-18T04:45:26.101512+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60912	103.77.246.204	55555	TCP
2025-03-18T04:45:26.946529+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60914	103.77.246.204	55555	TCP
2025-03-18T04:45:27.800520+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60916	103.77.246.204	55555	TCP
2025-03-18T04:45:28.635524+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60918	103.77.246.204	55555	TCP
2025-03-18T04:45:29.476478+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60920	103.77.246.204	55555	TCP
2025-03-18T04:45:30.311440+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60922	103.77.246.204	55555	TCP
2025-03-18T04:45:31.163387+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60924	103.77.246.204	55555	TCP
2025-03-18T04:45:32.001625+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60926	103.77.246.204	55555	TCP
2025-03-18T04:45:32.851134+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60928	103.77.246.204	55555	TCP
2025-03-18T04:45:33.687211+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60930	103.77.246.204	55555	TCP
2025-03-18T04:45:34.521015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60932	103.77.246.204	55555	TCP
2025-03-18T04:45:35.511502+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60934	103.77.246.204	55555	TCP
2025-03-18T04:45:36.342502+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60936	103.77.246.204	55555	TCP
2025-03-18T04:45:37.184669+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60938	103.77.246.204	55555	TCP
2025-03-18T04:45:38.040924+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60940	103.77.246.204	55555	TCP
2025-03-18T04:45:38.880936+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60942	103.77.246.204	55555	TCP
2025-03-18T04:45:39.729404+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60944	103.77.246.204	55555	TCP
2025-03-18T04:45:40.585056+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60946	103.77.246.204	55555	TCP
2025-03-18T04:45:41.417685+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60948	103.77.246.204	55555	TCP
2025-03-18T04:45:42.257200+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60950	103.77.246.204	55555	TCP
2025-03-18T04:45:43.110736+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60952	103.77.246.204	55555	TCP
2025-03-18T04:45:43.947831+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60954	103.77.246.204	55555	TCP
2025-03-18T04:45:44.791823+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60956	103.77.246.204	55555	TCP
2025-03-18T04:45:45.644839+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60958	103.77.246.204	55555	TCP
2025-03-18T04:45:46.476253+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60960	103.77.246.204	55555	TCP
2025-03-18T04:45:47.306133+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60962	103.77.246.204	55555	TCP
2025-03-18T04:45:48.157170+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60964	103.77.246.204	55555	TCP
2025-03-18T04:45:49.022048+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60966	103.77.246.204	55555	TCP
2025-03-18T04:45:49.880378+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60968	103.77.246.204	55555	TCP
2025-03-18T04:45:50.736646+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60970	103.77.246.204	55555	TCP
2025-03-18T04:45:51.578683+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60972	103.77.246.204	55555	TCP
2025-03-18T04:45:52.417245+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60974	103.77.246.204	55555	TCP
2025-03-18T04:45:53.259379+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60976	103.77.246.204	55555	TCP
2025-03-18T04:45:54.112138+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60978	103.77.246.204	55555	TCP
2025-03-18T04:45:54.967015+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60980	103.77.246.204	55555	TCP
2025-03-18T04:45:55.813799+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60982	103.77.246.204	55555	TCP
2025-03-18T04:45:56.647295+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60984	103.77.246.204	55555	TCP
2025-03-18T04:45:57.479018+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60986	103.77.246.204	55555	TCP
2025-03-18T04:45:58.332022+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60988	103.77.246.204	55555	TCP
2025-03-18T04:45:59.176327+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60990	103.77.246.204	55555	TCP
2025-03-18T04:46:00.022943+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60992	103.77.246.204	55555	TCP
2025-03-18T04:46:00.859864+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60994	103.77.246.204	55555	TCP
2025-03-18T04:46:01.702154+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60996	103.77.246.204	55555	TCP
2025-03-18T04:46:02.542576+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	60998	103.77.246.204	55555	TCP
2025-03-18T04:46:03.403011+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32768	103.77.246.204	55555	TCP
2025-03-18T04:46:04.243110+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32770	103.77.246.204	55555	TCP
2025-03-18T04:46:05.071973+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32772	103.77.246.204	55555	TCP
2025-03-18T04:46:05.909007+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32774	103.77.246.204	55555	TCP
2025-03-18T04:46:09.783634+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32776	103.77.246.204	55555	TCP
2025-03-18T04:46:10.630383+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32778	103.77.246.204	55555	TCP
2025-03-18T04:46:11.461879+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32780	103.77.246.204	55555	TCP
2025-03-18T04:46:12.304926+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32782	103.77.246.204	55555	TCP
2025-03-18T04:46:13.136760+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32784	103.77.246.204	55555	TCP
2025-03-18T04:46:14.179320+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32786	103.77.246.204	55555	TCP
2025-03-18T04:46:15.031869+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32788	103.77.246.204	55555	TCP
2025-03-18T04:46:15.866471+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32790	103.77.246.204	55555	TCP
2025-03-18T04:46:16.710815+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32792	103.77.246.204	55555	TCP
2025-03-18T04:46:17.543382+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32794	103.77.246.204	55555	TCP
2025-03-18T04:46:18.380923+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32796	103.77.246.204	55555	TCP
2025-03-18T04:46:19.239601+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32798	103.77.246.204	55555	TCP
2025-03-18T04:46:20.093531+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32800	103.77.246.204	55555	TCP
2025-03-18T04:46:20.951721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32802	103.77.246.204	55555	TCP
2025-03-18T04:46:21.822746+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32804	103.77.246.204	55555	TCP
2025-03-18T04:46:22.682553+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32806	103.77.246.204	55555	TCP
2025-03-18T04:46:23.516941+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32808	103.77.246.204	55555	TCP
2025-03-18T04:46:24.344997+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32810	103.77.246.204	55555	TCP
2025-03-18T04:46:25.191120+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32812	103.77.246.204	55555	TCP
2025-03-18T04:46:26.028066+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32814	103.77.246.204	55555	TCP
2025-03-18T04:46:26.861366+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32816	103.77.246.204	55555	TCP
2025-03-18T04:46:27.715970+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32818	103.77.246.204	55555	TCP
2025-03-18T04:46:28.559417+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32820	103.77.246.204	55555	TCP
2025-03-18T04:46:29.410232+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32822	103.77.246.204	55555	TCP
2025-03-18T04:46:30.241339+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32824	103.77.246.204	55555	TCP
2025-03-18T04:46:31.083401+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32826	103.77.246.204	55555	TCP
2025-03-18T04:46:31.932302+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32828	103.77.246.204	55555	TCP
2025-03-18T04:46:32.783330+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32830	103.77.246.204	55555	TCP
2025-03-18T04:46:33.633657+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32832	103.77.246.204	55555	TCP
2025-03-18T04:46:34.471389+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32834	103.77.246.204	55555	TCP
2025-03-18T04:46:35.301650+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32836	103.77.246.204	55555	TCP
2025-03-18T04:46:36.169513+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32838	103.77.246.204	55555	TCP
2025-03-18T04:46:37.017960+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32840	103.77.246.204	55555	TCP
2025-03-18T04:46:37.851863+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32842	103.77.246.204	55555	TCP
2025-03-18T04:46:38.689335+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32844	103.77.246.204	55555	TCP
2025-03-18T04:46:39.540313+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32846	103.77.246.204	55555	TCP
2025-03-18T04:46:40.380554+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32848	103.77.246.204	55555	TCP
2025-03-18T04:46:41.211912+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32850	103.77.246.204	55555	TCP
2025-03-18T04:46:42.053935+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32852	103.77.246.204	55555	TCP
2025-03-18T04:46:42.881942+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32854	103.77.246.204	55555	TCP
2025-03-18T04:46:43.729261+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32856	103.77.246.204	55555	TCP
2025-03-18T04:46:44.566095+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32858	103.77.246.204	55555	TCP
2025-03-18T04:46:45.395283+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32860	103.77.246.204	55555	TCP
2025-03-18T04:46:46.236523+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32862	103.77.246.204	55555	TCP
2025-03-18T04:46:47.076552+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32864	103.77.246.204	55555	TCP
2025-03-18T04:46:47.934707+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32866	103.77.246.204	55555	TCP
2025-03-18T04:46:48.790411+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32868	103.77.246.204	55555	TCP
2025-03-18T04:46:49.634117+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32870	103.77.246.204	55555	TCP
2025-03-18T04:46:50.488084+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32872	103.77.246.204	55555	TCP
2025-03-18T04:46:51.317816+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32874	103.77.246.204	55555	TCP
2025-03-18T04:46:52.164240+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32876	103.77.246.204	55555	TCP
2025-03-18T04:46:53.003414+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32878	103.77.246.204	55555	TCP
2025-03-18T04:46:53.845743+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32880	103.77.246.204	55555	TCP
2025-03-18T04:46:54.680086+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32882	103.77.246.204	55555	TCP
2025-03-18T04:46:55.515461+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32884	103.77.246.204	55555	TCP
2025-03-18T04:46:56.351791+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32886	103.77.246.204	55555	TCP
2025-03-18T04:46:57.192678+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32888	103.77.246.204	55555	TCP
2025-03-18T04:46:58.043259+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32890	103.77.246.204	55555	TCP
2025-03-18T04:46:58.894048+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32892	103.77.246.204	55555	TCP
2025-03-18T04:46:59.728390+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32894	103.77.246.204	55555	TCP
2025-03-18T04:47:00.584465+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32896	103.77.246.204	55555	TCP
2025-03-18T04:47:01.440546+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32898	103.77.246.204	55555	TCP
2025-03-18T04:47:02.278953+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32900	103.77.246.204	55555	TCP
2025-03-18T04:47:03.126565+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32902	103.77.246.204	55555	TCP
2025-03-18T04:47:03.968132+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32904	103.77.246.204	55555	TCP
2025-03-18T04:47:04.817663+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32906	103.77.246.204	55555	TCP
2025-03-18T04:47:05.671993+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32908	103.77.246.204	55555	TCP
2025-03-18T04:47:06.522363+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32910	103.77.246.204	55555	TCP
2025-03-18T04:47:07.357489+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32912	103.77.246.204	55555	TCP
2025-03-18T04:47:08.201115+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32914	103.77.246.204	55555	TCP
2025-03-18T04:47:09.048935+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32916	103.77.246.204	55555	TCP
2025-03-18T04:47:09.886449+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32918	103.77.246.204	55555	TCP
2025-03-18T04:47:10.738972+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32920	103.77.246.204	55555	TCP
2025-03-18T04:47:11.576993+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32922	103.77.246.204	55555	TCP
2025-03-18T04:47:12.430925+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32924	103.77.246.204	55555	TCP
2025-03-18T04:47:13.272553+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32926	103.77.246.204	55555	TCP
2025-03-18T04:47:14.109679+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32928	103.77.246.204	55555	TCP
2025-03-18T04:47:14.949209+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32930	103.77.246.204	55555	TCP
2025-03-18T04:47:15.787902+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32932	103.77.246.204	55555	TCP
2025-03-18T04:47:16.619996+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32934	103.77.246.204	55555	TCP
2025-03-18T04:47:17.452531+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32936	103.77.246.204	55555	TCP
2025-03-18T04:47:18.294389+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32938	103.77.246.204	55555	TCP
2025-03-18T04:47:19.143644+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32940	103.77.246.204	55555	TCP
2025-03-18T04:47:19.975780+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32942	103.77.246.204	55555	TCP
2025-03-18T04:47:20.819197+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32944	103.77.246.204	55555	TCP
2025-03-18T04:47:21.656054+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32946	103.77.246.204	55555	TCP
2025-03-18T04:47:22.496959+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32948	103.77.246.204	55555	TCP
2025-03-18T04:47:23.340596+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32950	103.77.246.204	55555	TCP
2025-03-18T04:47:24.176820+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32952	103.77.246.204	55555	TCP
2025-03-18T04:47:25.018513+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32954	103.77.246.204	55555	TCP
2025-03-18T04:47:25.864621+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32956	103.77.246.204	55555	TCP
2025-03-18T04:47:26.725217+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32958	103.77.246.204	55555	TCP
2025-03-18T04:47:27.660324+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32960	103.77.246.204	55555	TCP
2025-03-18T04:47:28.502134+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32962	103.77.246.204	55555	TCP
2025-03-18T04:47:29.349360+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32964	103.77.246.204	55555	TCP
2025-03-18T04:47:30.200304+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32966	103.77.246.204	55555	TCP
2025-03-18T04:47:31.029401+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32968	103.77.246.204	55555	TCP
2025-03-18T04:47:31.876883+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32970	103.77.246.204	55555	TCP
2025-03-18T04:47:32.709323+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32972	103.77.246.204	55555	TCP
2025-03-18T04:47:33.548297+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32974	103.77.246.204	55555	TCP
2025-03-18T04:47:34.396228+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32976	103.77.246.204	55555	TCP
2025-03-18T04:47:35.230817+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32978	103.77.246.204	55555	TCP
2025-03-18T04:47:36.069946+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32980	103.77.246.204	55555	TCP
2025-03-18T04:47:36.903442+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32982	103.77.246.204	55555	TCP
2025-03-18T04:47:37.753306+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32984	103.77.246.204	55555	TCP
2025-03-18T04:47:38.596301+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32986	103.77.246.204	55555	TCP
2025-03-18T04:47:39.426834+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32988	103.77.246.204	55555	TCP
2025-03-18T04:47:40.260960+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32990	103.77.246.204	55555	TCP
2025-03-18T04:47:41.100423+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32992	103.77.246.204	55555	TCP
2025-03-18T04:47:41.940267+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32994	103.77.246.204	55555	TCP
2025-03-18T04:47:42.781763+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32996	103.77.246.204	55555	TCP
2025-03-18T04:47:43.620714+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	32998	103.77.246.204	55555	TCP
2025-03-18T04:47:44.461003+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33000	103.77.246.204	55555	TCP
2025-03-18T04:47:45.335504+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33002	103.77.246.204	55555	TCP
2025-03-18T04:47:46.192177+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33004	103.77.246.204	55555	TCP
2025-03-18T04:47:47.028716+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33006	103.77.246.204	55555	TCP
2025-03-18T04:47:47.879249+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33008	103.77.246.204	55555	TCP
2025-03-18T04:47:48.713721+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33010	103.77.246.204	55555	TCP
2025-03-18T04:47:49.565421+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33012	103.77.246.204	55555	TCP
2025-03-18T04:47:50.405487+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33014	103.77.246.204	55555	TCP
2025-03-18T04:47:51.244410+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33016	103.77.246.204	55555	TCP
2025-03-18T04:47:52.107189+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33018	103.77.246.204	55555	TCP
2025-03-18T04:47:52.943053+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33020	103.77.246.204	55555	TCP
2025-03-18T04:47:53.793832+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33022	103.77.246.204	55555	TCP
2025-03-18T04:47:54.634497+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33024	103.77.246.204	55555	TCP
2025-03-18T04:47:55.492172+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33026	103.77.246.204	55555	TCP
2025-03-18T04:47:56.324713+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33028	103.77.246.204	55555	TCP
2025-03-18T04:47:57.180578+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33030	103.77.246.204	55555	TCP
2025-03-18T04:47:58.035046+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33032	103.77.246.204	55555	TCP
2025-03-18T04:47:58.887240+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33034	103.77.246.204	55555	TCP
2025-03-18T04:47:59.724640+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33036	103.77.246.204	55555	TCP
2025-03-18T04:48:00.562084+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33038	103.77.246.204	55555	TCP
2025-03-18T04:48:01.432181+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33040	103.77.246.204	55555	TCP
2025-03-18T04:48:02.265245+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33042	103.77.246.204	55555	TCP
2025-03-18T04:48:03.116657+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33044	103.77.246.204	55555	TCP
2025-03-18T04:48:03.951553+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33046	103.77.246.204	55555	TCP
2025-03-18T04:48:04.784810+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33048	103.77.246.204	55555	TCP
2025-03-18T04:48:05.638429+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33050	103.77.246.204	55555	TCP
2025-03-18T04:48:06.494585+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33052	103.77.246.204	55555	TCP
2025-03-18T04:48:07.341985+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33054	103.77.246.204	55555	TCP
2025-03-18T04:48:08.219938+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33056	103.77.246.204	55555	TCP
2025-03-18T04:48:09.081079+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33058	103.77.246.204	55555	TCP
2025-03-18T04:48:09.916062+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33060	103.77.246.204	55555	TCP
2025-03-18T04:48:10.753060+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33062	103.77.246.204	55555	TCP
2025-03-18T04:48:11.584676+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33064	103.77.246.204	55555	TCP
2025-03-18T04:48:12.434415+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33066	103.77.246.204	55555	TCP
2025-03-18T04:48:13.284940+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33068	103.77.246.204	55555	TCP
2025-03-18T04:48:14.124730+0100	2846526	ETPRO MALWARE ELF/BASHLITE Variant CnC Checkin	1	192.168.2.14	33070	103.77.246.204	55555	TCP

Network Port Distribution

Total Packets: 1265
• 55555 undefined
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 04:44:38.652787924 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:38.657577038 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:38.657630920 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:38.658932924 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:38.663575888 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:39.501920938 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:39.501941919 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:39.502171040 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:39.502890110 CET	60800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:39.503760099 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:39.507555962 CET	55555	60800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:39.508443117 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:39.508573055 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:39.508573055 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:39.513252974 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:40.364420891 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:40.364443064 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:40.364752054 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:40.364752054 CET	60802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:40.365314960 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:40.373337984 CET	55555	60802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:40.373871088 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:40.373955011 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:40.374007940 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:40.379816055 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:41.206101894 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:41.206213951 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:41.206330061 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:41.206331015 CET	60804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:41.207041979 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:41.212177038 CET	55555	60804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:41.213356018 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:41.213419914 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:41.213466883 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:41.219451904 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.047239065 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.047329903 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.047560930 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.047560930 CET	60806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.048132896 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.052299023 CET	55555	60806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.052839041 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.052907944 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.052962065 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.057564974 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.888407946 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.888495922 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.888627052 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.888665915 CET	60808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.889219999 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.893332958 CET	55555	60808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.893968105 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:42.894033909 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.894083977 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:42.898705006 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:43.731566906 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:43.731646061 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:43.731899977 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:43.731899977 CET	60810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:43.732348919 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:43.736618996 CET	55555	60810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:43.737051010 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:43.737098932 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:43.737138033 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:43.741801023 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:44.600558043 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:44.600660086 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:44.600776911 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:44.601011992 CET	60812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:44.601505041 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:44.605772018 CET	55555	60812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:44.606245995 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:44.606326103 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:44.606362104 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:44.611041069 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:45.449625015 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:45.449760914 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:45.449795008 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:45.449855089 CET	60814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:45.450470924 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:45.454514980 CET	55555	60814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:45.455236912 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:45.455298901 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:45.455364943 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:45.460055113 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:46.304864883 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:46.304886103 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:46.305140972 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:46.305140972 CET	60816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:46.305929899 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:46.309835911 CET	55555	60816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:46.310579062 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:46.310657978 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:46.310724974 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:46.315304995 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.136759996 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.136883974 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.137017965 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.137018919 CET	60818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.137723923 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.141738892 CET	55555	60818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.142409086 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.142492056 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.142537117 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.147278070 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.971306086 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.971594095 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.971622944 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.971681118 CET	60820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.972285032 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.976350069 CET	55555	60820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.977009058 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:47.977070093 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.977128029 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:47.981719971 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:48.806984901 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:48.807097912 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:48.807225943 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:48.807225943 CET	60822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:48.807847023 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:48.811939955 CET	55555	60822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:48.812534094 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:48.812597036 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:48.812659979 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:48.817313910 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:49.643708944 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:49.643897057 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:49.643990040 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:49.644012928 CET	60824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:49.644613981 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:49.648689032 CET	55555	60824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:49.649247885 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:49.649323940 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:49.649368048 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:49.654920101 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:50.476845026 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:50.477011919 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:50.477144003 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:50.477190971 CET	60826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:50.477926016 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:50.483407021 CET	55555	60826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:50.483897924 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:50.483959913 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:50.484011889 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:50.489430904 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:51.316596031 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:51.316610098 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:51.316900969 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:51.316900969 CET	60828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:51.317472935 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:51.323810101 CET	55555	60828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:51.324594975 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:51.324659109 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:51.324714899 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:51.332523108 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.159769058 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.159792900 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.160017967 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.160017967 CET	60830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.160572052 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.164716959 CET	55555	60830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.165261030 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.165307999 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.165352106 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.170101881 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.994465113 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.994558096 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:52.994684935 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.994684935 CET	60832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:52.995352030 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.000869989 CET	55555	60832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.001408100 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.001492023 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.001538038 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.007498026 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.849256039 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.849497080 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.849725962 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.849843979 CET	60834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.850581884 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.856702089 CET	55555	60834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.857151985 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:53.857232094 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.857366085 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:53.864041090 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:54.695514917 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:54.695593119 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:54.695805073 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:54.695919991 CET	60836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:54.696739912 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:54.700644970 CET	55555	60836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:54.701436043 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:54.701510906 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:54.701556921 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:54.706227064 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:55.534593105 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:55.534774065 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:55.534789085 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:55.534838915 CET	60838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:55.535381079 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:55.539518118 CET	55555	60838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:55.540086031 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:55.540138006 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:55.540179968 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:55.544806004 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:56.372143984 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:56.372430086 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:56.372648001 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:56.372742891 CET	60840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:56.373609066 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:56.377420902 CET	55555	60840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:56.378343105 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:56.378428936 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:56.378531933 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:56.383147955 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:57.212311983 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:57.212392092 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:57.212575912 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:57.212575912 CET	60842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:57.213129044 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:57.217339039 CET	55555	60842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:57.217849016 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:57.217936993 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:57.218027115 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:57.222707033 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.059137106 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.059252977 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.059361935 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.059361935 CET	60844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.060112953 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.064158916 CET	55555	60844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.064815044 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.064882994 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.064982891 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.069606066 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.905261993 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.905381918 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.905520916 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.905520916 CET	60846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.906162977 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.910376072 CET	55555	60846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.911019087 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:58.911073923 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.911170006 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:58.915807009 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:59.747365952 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:59.747443914 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:59.747620106 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:59.747658968 CET	60848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:59.748449087 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:59.752348900 CET	55555	60848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:59.753113985 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:44:59.753194094 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:59.753293037 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:44:59.757960081 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:00.581361055 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:00.581387043 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:00.581634045 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:00.581634045 CET	60850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:00.582160950 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:00.586348057 CET	55555	60850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:00.586853981 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:00.586910009 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:00.586950064 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:00.591523886 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:01.424829006 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:01.424856901 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:01.425115108 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:01.425115108 CET	60852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:01.425704002 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:01.429836035 CET	55555	60852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:01.430443048 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:01.430536032 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:01.430649996 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:01.435261011 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:02.288642883 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:02.288707972 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:02.288991928 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:02.289108992 CET	60854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:02.289958954 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:02.293814898 CET	55555	60854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:02.294714928 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:02.294800997 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:02.294898987 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:02.299560070 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.143718958 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.143913984 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.143974066 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.144048929 CET	60856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.144732952 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.148725033 CET	55555	60856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.149420023 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.149478912 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.149518967 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.154125929 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.979545116 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.979573011 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.979787111 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.979787111 CET	60858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.980479002 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.984499931 CET	55555	60858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.985142946 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:03.985238075 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.985269070 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:03.989948988 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:04.832737923 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:04.832927942 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:04.832936049 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:04.833137035 CET	60860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:04.833697081 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:04.837800980 CET	55555	60860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:04.838457108 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:04.838525057 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:04.838576078 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:04.843189955 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:05.679059029 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:05.679209948 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:05.679276943 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:05.679276943 CET	60862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:05.683141947 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:05.684009075 CET	55555	60862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:05.687895060 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:05.687948942 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:05.687993050 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:05.692656040 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:06.513896942 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:06.513921976 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:06.514066935 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:06.514143944 CET	60864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:06.514981985 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:06.518991947 CET	55555	60864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:06.519874096 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:06.519936085 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:06.519990921 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:06.524686098 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:07.345282078 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:07.345302105 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:07.345470905 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:07.345607996 CET	60866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:07.346379042 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:07.350869894 CET	55555	60866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:07.352013111 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:07.352087975 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:07.352200985 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:07.357592106 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:08.177115917 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:08.177181005 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:08.177236080 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:08.177426100 CET	60868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:08.178209066 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:08.182166100 CET	55555	60868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:08.183126926 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:08.183182001 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:08.183309078 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:08.188007116 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.008105040 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.008197069 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.008377075 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.008423090 CET	60870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.009094954 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.013062954 CET	55555	60870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.013772964 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.013850927 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.013875008 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.018543959 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.866600990 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.866734982 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.867543936 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.867613077 CET	60872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.868196964 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.872227907 CET	55555	60872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.872895002 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:09.872951984 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.872998953 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:09.877648115 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:10.704998016 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:10.705194950 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:10.705224991 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:10.705295086 CET	60874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:10.705944061 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:10.709920883 CET	55555	60874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:10.710668087 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:10.710738897 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:10.710782051 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:10.715579033 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:11.554492950 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:11.554644108 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:11.554675102 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:11.554815054 CET	60876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:11.555478096 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:11.559473038 CET	55555	60876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:11.560158968 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:11.560221910 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:11.560313940 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:11.564905882 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:12.382705927 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:12.382859945 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:12.382868052 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:12.382955074 CET	60878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:12.383490086 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:12.387662888 CET	55555	60878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:12.388169050 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:12.388221979 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:12.388346910 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:12.393028021 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:13.232403040 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:13.232549906 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:13.232964039 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:13.233048916 CET	60880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:13.233622074 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:13.241321087 CET	55555	60880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:13.241765976 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:13.241820097 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:13.241866112 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:13.246661901 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:14.224407911 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:14.224432945 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:14.224441051 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:14.224597931 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:14.224631071 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:14.224765062 CET	60882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:14.225476980 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:14.229964018 CET	55555	60882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:14.230823994 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:14.230874062 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:14.230983973 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:14.236696959 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.070664883 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.070828915 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.071247101 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.071326971 CET	60884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.071907997 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.077672005 CET	55555	60884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.078387022 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.078433037 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.078474045 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.085057974 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.919687986 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.919699907 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.919862986 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.920013905 CET	60886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.920806885 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.924818039 CET	55555	60886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.925484896 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:15.925551891 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.925642967 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:15.930346012 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:16.768650055 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:16.768783092 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:16.768786907 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:16.768858910 CET	60888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:16.769414902 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:16.773490906 CET	55555	60888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:16.774101019 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:16.774199963 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:16.774280071 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:16.778867006 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:17.625140905 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:17.625267029 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:17.625302076 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:17.625428915 CET	60890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:17.626106977 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:17.630120039 CET	55555	60890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:17.630779028 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:17.630836010 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:17.630934954 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:17.635606050 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:18.468627930 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:18.468741894 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:18.468755007 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:18.468910933 CET	60892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:18.469540119 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:18.473560095 CET	55555	60892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:18.474189997 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:18.474270105 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:18.474386930 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:18.479073048 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:19.338093042 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:19.338217974 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:19.338346004 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:19.338430882 CET	60894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:19.339211941 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:19.343055964 CET	55555	60894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:19.343851089 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:19.343907118 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:19.344022989 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:19.348699093 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:20.185575008 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:20.185713053 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:20.185976028 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:20.186227083 CET	60896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:20.186980009 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:20.190915108 CET	55555	60896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:20.191660881 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:20.191742897 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:20.191817999 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:20.196423054 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.034266949 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.034406900 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.034457922 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.034562111 CET	60898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.035167933 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.039167881 CET	55555	60898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.039752960 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.039829016 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.039947987 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.044609070 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.864896059 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.865012884 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.865031004 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.865075111 CET	60900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.865752935 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.869716883 CET	55555	60900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.870587111 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:21.870661974 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.870754957 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:21.875401020 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:22.727679014 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:22.727818012 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:22.727976084 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:22.728013039 CET	60902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:22.728624105 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:22.734719992 CET	55555	60902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:22.735627890 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:22.735668898 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:22.735730886 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:22.740645885 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:23.561124086 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:23.561224937 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:23.561337948 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:23.561383963 CET	60904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:23.561855078 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:23.566061974 CET	55555	60904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:23.566529989 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:23.566574097 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:23.566622972 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:23.571234941 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:24.410377026 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:24.410583973 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:24.410674095 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:24.410726070 CET	60906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:24.411355019 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:24.415427923 CET	55555	60906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:24.416769981 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:24.416867018 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:24.416986942 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:24.421840906 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:25.263900042 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:25.264009953 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:25.264329910 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:25.264420986 CET	60908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:25.265239000 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:25.269409895 CET	55555	60908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:25.270005941 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:25.270083904 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:25.270167112 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:25.274888992 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.095474005 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.095609903 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.095725060 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.095865011 CET	60910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.096525908 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.100445986 CET	55555	60910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.101352930 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.101423025 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.101511955 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.106556892 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.936750889 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.936960936 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.937248945 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.937397957 CET	60912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.938644886 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.945036888 CET	55555	60912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.946331978 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:26.946417093 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.946528912 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:26.953788996 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:27.794538021 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:27.794620991 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:27.794687986 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:27.794739008 CET	60914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:27.795562983 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:27.799525976 CET	55555	60914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:27.800359011 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:27.800417900 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:27.800519943 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:27.805162907 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:28.629575968 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:28.629638910 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:28.629718065 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:28.629848957 CET	60916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:28.630565882 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:28.634426117 CET	55555	60916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:28.635339022 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:28.635415077 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:28.635524035 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:28.640180111 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:29.469212055 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:29.469386101 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:29.469619989 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:29.469902039 CET	60918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:29.471064091 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:29.475919008 CET	55555	60918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:29.476281881 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:29.476380110 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:29.476478100 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:29.482714891 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:30.305092096 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:30.305280924 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:30.305336952 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:30.305416107 CET	60920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:30.306438923 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:30.310134888 CET	55555	60920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:30.311300993 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:30.311383009 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:30.311439991 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:30.316167116 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.157547951 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.157610893 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.157805920 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.157805920 CET	60922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.158550978 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.162646055 CET	55555	60922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.163256884 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.163347006 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.163387060 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.168417931 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.995673895 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.995898962 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:31.996059895 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.996061087 CET	60924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:31.996706963 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.000783920 CET	55555	60924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.001455069 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.001534939 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.001625061 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.006289959 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.845016956 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.845165968 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.845190048 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.845258951 CET	60926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.846226931 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.849993944 CET	55555	60926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.851016998 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:32.851097107 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.851134062 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:32.855967045 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:33.681133032 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:33.681246996 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:33.681343079 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:33.681405067 CET	60928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:33.682430029 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:33.686002970 CET	55555	60928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:33.687108994 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:33.687165022 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:33.687211037 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:33.691893101 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:34.515342951 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:34.515458107 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:34.515495062 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:34.515579939 CET	60930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:34.516269922 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:34.520246029 CET	55555	60930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:34.520896912 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:34.520972013 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:34.521014929 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:34.525688887 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:35.505763054 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:35.505785942 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:35.505846024 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:35.506051064 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:35.506051064 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:35.506051064 CET	60932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:35.506686926 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:35.510762930 CET	55555	60932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:35.511399031 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:35.511456966 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:35.511502028 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:35.516206980 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:36.336637020 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:36.336675882 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:36.336771011 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:36.336836100 CET	60934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:36.337388039 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:36.341798067 CET	55555	60934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:36.342397928 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:36.342453003 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:36.342502117 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:36.347543955 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:37.178859949 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:37.178958893 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:37.179079056 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:37.179121017 CET	60936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:37.179841995 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:37.183825016 CET	55555	60936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:37.184565067 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:37.184623003 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:37.184669018 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:37.189315081 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.035226107 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.035379887 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.035480022 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.035542011 CET	60938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.036138058 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.040251017 CET	55555	60938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.040817022 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.040884018 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.040924072 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.045592070 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.875235081 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.875338078 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.875401020 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.875432968 CET	60940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.876138926 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.880121946 CET	55555	60940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.880809069 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:38.880872965 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.880935907 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:38.885587931 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:39.723828077 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:39.723964930 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:39.723973036 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:39.724028111 CET	60942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:39.724601984 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:39.728693962 CET	55555	60942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:39.729310036 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:39.729357958 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:39.729403973 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:39.733993053 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:40.579245090 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:40.579278946 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:40.579376936 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:40.579422951 CET	60944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:40.580265999 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:40.584058046 CET	55555	60944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:40.584948063 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:40.585030079 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:40.585056067 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:40.589654922 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:41.411941051 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:41.412097931 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:41.412161112 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:41.412244081 CET	60946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:41.412781000 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:41.416929007 CET	55555	60946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:41.417576075 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:41.417642117 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:41.417685032 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:41.422336102 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:42.251574993 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:42.251766920 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:42.251816034 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:42.251854897 CET	60948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:42.252427101 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:42.256556034 CET	55555	60948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:42.257098913 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:42.257162094 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:42.257200003 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:42.261826038 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.104938984 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.105051994 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.105238914 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.105240107 CET	60950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.105910063 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.109958887 CET	55555	60950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.110606909 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.110687017 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.110735893 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.115425110 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.940614939 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.940638065 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.940870047 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.940870047 CET	60952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.941601038 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.947135925 CET	55555	60952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.947699070 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:43.947788000 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.947830915 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:43.954041004 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:44.785828114 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:44.786003113 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:44.786022902 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:44.786096096 CET	60954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:44.786919117 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:44.790806055 CET	55555	60954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:44.791663885 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:44.791755915 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:44.791822910 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:44.796505928 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:45.638922930 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:45.638994932 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:45.639084101 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:45.639158010 CET	60956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:45.639931917 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:45.643861055 CET	55555	60956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:45.644695044 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:45.644808054 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:45.644839048 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:45.649631977 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:46.470132113 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:46.470177889 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:46.470490932 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:46.470593929 CET	60958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:46.471416950 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:46.475203991 CET	55555	60958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:46.476074934 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:46.476150990 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:46.476253033 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:46.481002092 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:47.298892975 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:47.298949957 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:47.299050093 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:47.299096107 CET	60960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:47.299710035 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:47.304882050 CET	55555	60960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:47.306022882 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:47.306082010 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:47.306133032 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:47.311553955 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:48.151490927 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:48.151633024 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:48.151657104 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:48.151714087 CET	60962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:48.152291059 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:48.156331062 CET	55555	60962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:48.157048941 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:48.157124043 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:48.157170057 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:48.161777020 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.015913963 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.016028881 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.016067982 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.016242981 CET	60964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.016729116 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.021945000 CET	55555	60964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.021958113 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.022002935 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.022047997 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.027297020 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.874669075 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.874852896 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.874877930 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.874917984 CET	60966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.875546932 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.879612923 CET	55555	60966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.880279064 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:49.880331039 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.880378008 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:49.885047913 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:50.730958939 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:50.730983019 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:50.731100082 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:50.731161118 CET	60968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:50.731808901 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:50.735850096 CET	55555	60968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:50.736526966 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:50.736587048 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:50.736645937 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:50.741324902 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:51.570755959 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:51.571011066 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:51.571258068 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:51.571425915 CET	60970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:51.572400093 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:51.577508926 CET	55555	60970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:51.578538895 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:51.578639030 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:51.578682899 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:51.584635973 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:52.409993887 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:52.410156012 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:52.410284996 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:52.410342932 CET	60972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:52.411047935 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:52.417129040 CET	55555	60972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:52.417140961 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:52.417191029 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:52.417244911 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:52.421974897 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:53.252957106 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:53.253086090 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:53.253664970 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:53.253727913 CET	60974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:53.254518032 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:53.258394957 CET	55555	60974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:53.259278059 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:53.259327888 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:53.259378910 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:53.264045954 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.105551958 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.105639935 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.105695963 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.105756998 CET	60976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.106784105 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.110939980 CET	55555	60976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.112004042 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.112101078 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.112138033 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.116753101 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.961270094 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.961426020 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.961585045 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.961585045 CET	60978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.962239981 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.966296911 CET	55555	60978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.966921091 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:54.966974020 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.967015028 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:54.973035097 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:55.807692051 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:55.807828903 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:55.807843924 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:55.807898045 CET	60980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:55.808790922 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:55.812583923 CET	55555	60980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:55.813683033 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:55.813749075 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:55.813798904 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:55.818475962 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:56.641851902 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:56.641936064 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:56.641979933 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:56.642039061 CET	60982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:56.642520905 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:56.646735907 CET	55555	60982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:56.647181988 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:56.647249937 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:56.647294998 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:56.651976109 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:57.473422050 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:57.473551989 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:57.473647118 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:57.473711014 CET	60984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:57.474229097 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:57.478352070 CET	55555	60984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:57.478914976 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:57.478971004 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:57.479017973 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:57.483591080 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:58.326400042 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:58.326446056 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:58.326595068 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:58.326657057 CET	60986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:58.327275991 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:58.331276894 CET	55555	60986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:58.331898928 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:58.331971884 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:58.332021952 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:58.336632013 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:59.169994116 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:59.170087099 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:59.170231104 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:59.170423985 CET	60988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:59.171452045 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:59.175069094 CET	55555	60988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:59.176132917 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:45:59.176208019 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:59.176326990 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:45:59.181111097 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.017630100 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.017744064 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.017751932 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.017797947 CET	60990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.018179893 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.022459030 CET	55555	60990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.022857904 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.022896051 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.022943020 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.027534962 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.854053974 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.854073048 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.854275942 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.854372025 CET	60992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.855058908 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.859086990 CET	55555	60992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.859697104 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:00.859777927 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.859863997 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:00.864631891 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:01.696345091 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:01.696505070 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:01.696552038 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:01.696598053 CET	60994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:01.697246075 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:01.701242924 CET	55555	60994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:01.701981068 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:01.702049017 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:01.702153921 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:01.706809044 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:02.536254883 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:02.536330938 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:02.536504984 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:02.536556005 CET	60996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:02.537552118 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:02.541379929 CET	55555	60996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:02.542426109 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:02.542515039 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:02.542576075 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:02.547243118 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:03.394257069 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:03.394376993 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:03.394387960 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:03.394562006 CET	60998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:03.395236015 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:03.402340889 CET	55555	60998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:03.402851105 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:03.402926922 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:03.403011084 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:03.411319971 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:04.237052917 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:04.237123013 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:04.237234116 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:04.237371922 CET	32768	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:04.238121986 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:04.241988897 CET	55555	32768	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:04.242933035 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:04.243010044 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:04.243109941 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:04.247749090 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.066479921 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.066597939 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.066618919 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.066696882 CET	32770	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.067223072 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.071340084 CET	55555	32770	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.071881056 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.071932077 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.071973085 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.076634884 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.902075052 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.902177095 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.902204990 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.902261019 CET	32772	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.902698994 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.908220053 CET	55555	32772	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.908833981 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:05.908966064 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.909007072 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:05.914954901 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:09.777662992 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:09.777806997 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:09.777895927 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:09.778053045 CET	32774	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:09.778791904 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:09.782653093 CET	55555	32774	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:09.783468962 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:09.783523083 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:09.783633947 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:09.788300991 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:10.623406887 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:10.623519897 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:10.623548031 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:10.623615980 CET	32776	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:10.624108076 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:10.629193068 CET	55555	32776	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:10.630235910 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:10.630383015 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:10.630383015 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:10.635200024 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:11.456351995 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:11.456459999 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:11.456468105 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:11.456516981 CET	32778	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:11.457036018 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:11.461165905 CET	55555	32778	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:11.461771965 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:11.461823940 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:11.461879015 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:11.466500998 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:12.299190044 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:12.299201012 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:12.299369097 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:12.299424887 CET	32780	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:12.300127983 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:12.304044962 CET	55555	32780	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:12.304816008 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:12.304878950 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:12.304925919 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:12.309597015 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:13.131191015 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:13.131309986 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:13.131345987 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:13.131402016 CET	32782	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:13.131928921 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:13.135988951 CET	55555	32782	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:13.136653900 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:13.136698008 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:13.136759996 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:13.141484022 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:14.173881054 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:14.173890114 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:14.173981905 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:14.174031019 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:14.174076080 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:14.174115896 CET	32784	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:14.174592972 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:14.178710938 CET	55555	32784	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:14.179192066 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:14.179250002 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:14.179320097 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:14.183957100 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.026436090 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.026560068 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.026565075 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.026652098 CET	32786	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.027167082 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.031315088 CET	55555	32786	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.031768084 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.031825066 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.031868935 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.036536932 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.860937119 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.861035109 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.861051083 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.861112118 CET	32788	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.861715078 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.865823984 CET	55555	32788	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.866373062 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:15.866435051 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.866471052 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:15.871105909 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:16.705199957 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:16.705333948 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:16.705344915 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:16.705439091 CET	32790	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:16.706023932 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:16.710134029 CET	55555	32790	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:16.710711002 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:16.710768938 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:16.710814953 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:16.715436935 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:17.536386967 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:17.536495924 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:17.536813021 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:17.536875010 CET	32792	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:17.537412882 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:17.542551994 CET	55555	32792	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:17.543260098 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:17.543312073 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:17.543381929 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:17.549211025 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:18.375380993 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:18.375463009 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:18.375555992 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:18.375575066 CET	32794	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:18.376038074 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:18.380281925 CET	55555	32794	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:18.380732059 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:18.380811930 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:18.380923033 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:18.385612965 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:19.211144924 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:19.211237907 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:19.211258888 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:19.211318016 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:19.211888075 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:19.239478111 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:19.239486933 CET	55555	32796	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:19.239495993 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:19.239526987 CET	32796	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:19.239543915 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:19.239600897 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:19.247198105 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.087860107 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.087975025 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.087995052 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.088047028 CET	32798	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.088749886 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.092811108 CET	55555	32798	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.093437910 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.093486071 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.093530893 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.098191977 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.946206093 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.946360111 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.946413994 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.946481943 CET	32800	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.946899891 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.951587915 CET	55555	32800	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.951598883 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:20.951664925 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.951720953 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:20.956362963 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:21.817262888 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:21.817399025 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:21.817409992 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:21.817491055 CET	32802	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:21.817922115 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:21.822153091 CET	55555	32802	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:21.822659016 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:21.822707891 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:21.822746038 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:21.827446938 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:22.677161932 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:22.677246094 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:22.677285910 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:22.677373886 CET	32804	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:22.677805901 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:22.681988955 CET	55555	32804	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:22.682446003 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:22.682512045 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:22.682553053 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:22.687154055 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:23.510591030 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:23.510695934 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:23.510710955 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:23.510755062 CET	32806	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:23.511234999 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:23.516779900 CET	55555	32806	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:23.516792059 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:23.516861916 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:23.516941071 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:23.521646976 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:24.339174032 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:24.339324951 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:24.339381933 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:24.339520931 CET	32808	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:24.340167046 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:24.344140053 CET	55555	32808	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:24.344806910 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:24.344927073 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:24.344996929 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:24.349589109 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:25.185069084 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:25.185200930 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:25.185282946 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:25.185420990 CET	32810	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:25.186211109 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:25.190073967 CET	55555	32810	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:25.190939903 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:25.191025972 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:25.191119909 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:25.195723057 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.022209883 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.022242069 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.022399902 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.022542000 CET	32812	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.023209095 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.027158022 CET	55555	32812	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.027863979 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.027973890 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.028065920 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.033411980 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.854902029 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.854912996 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.855200052 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.855339050 CET	32814	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.856117010 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.860600948 CET	55555	32814	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.861201048 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:26.861274004 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.861366034 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:26.868419886 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:27.710059881 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:27.710170031 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:27.710196018 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:27.710289955 CET	32816	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:27.711142063 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:27.714932919 CET	55555	32816	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:27.715781927 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:27.715853930 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:27.715970039 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:27.720552921 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:28.552894115 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:28.553035975 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:28.553067923 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:28.553210020 CET	32818	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:28.553850889 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:28.558660030 CET	55555	32818	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:28.559228897 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:28.559340954 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:28.559417009 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:28.564795017 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:29.404294014 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:29.404432058 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:29.404581070 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:29.404603958 CET	32820	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:29.405323029 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:29.409332037 CET	55555	32820	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:29.410051107 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:29.410129070 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:29.410232067 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:29.414832115 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:30.235333920 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:30.235373020 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:30.235635996 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:30.235766888 CET	32822	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:30.236458063 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:30.240417957 CET	55555	32822	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:30.241144896 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:30.241256952 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:30.241338968 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:30.245949030 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.077914000 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.077954054 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.078092098 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.078134060 CET	32824	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.078605890 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.082818031 CET	55555	32824	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.083292007 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.083338022 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.083400965 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.088032007 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.926448107 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.926574945 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.926681995 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.926837921 CET	32826	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.927546024 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.931461096 CET	55555	32826	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.932185888 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:31.932262897 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.932301998 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:31.936913967 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:32.775655031 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:32.775815964 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:32.775821924 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:32.775980949 CET	32828	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:32.776678085 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:32.783143997 CET	55555	32828	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:32.783155918 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:32.783236027 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:32.783329964 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:32.788609982 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:33.627827883 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:33.627964973 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:33.628006935 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:33.628159046 CET	32830	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:33.628787041 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:33.632788897 CET	55555	32830	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:33.633492947 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:33.633557081 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:33.633656979 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:33.638286114 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:34.465035915 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:34.465049028 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:34.465234041 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:34.465405941 CET	32832	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:34.466136932 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:34.470150948 CET	55555	32832	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:34.471193075 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:34.471313953 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:34.471389055 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:34.477627993 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:35.296076059 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:35.296221972 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:35.296252966 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:35.296333075 CET	32834	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:35.296849966 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:35.301050901 CET	55555	32834	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:35.301551104 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:35.301605940 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:35.301650047 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:35.306329012 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:36.164089918 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:36.164099932 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:36.164238930 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:36.164284945 CET	32836	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:36.164724112 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:36.168951988 CET	55555	32836	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:36.169388056 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:36.169487953 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:36.169512987 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:36.175205946 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.012465954 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.012587070 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.012679100 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.012758017 CET	32838	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.013266087 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.017368078 CET	55555	32838	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.017869949 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.017920971 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.017960072 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.022591114 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.846508026 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.846590996 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.846645117 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.846693993 CET	32840	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.847095966 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.851377964 CET	55555	32840	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.851757050 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:37.851836920 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.851862907 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:37.856544018 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:38.682904005 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:38.683012962 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:38.683243990 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:38.683326960 CET	32842	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:38.683737993 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:38.689223051 CET	55555	32842	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:38.689234972 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:38.689286947 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:38.689335108 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:38.693984985 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:39.534882069 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:39.534986019 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:39.535007000 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:39.535062075 CET	32844	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:39.535485983 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:39.539716959 CET	55555	32844	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:39.540138006 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:39.540230989 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:39.540313005 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:39.544926882 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:40.374881983 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:40.375005007 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:40.375166893 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:40.375266075 CET	32846	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:40.375713110 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:40.379872084 CET	55555	32846	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:40.380429029 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:40.380521059 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:40.380553961 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:40.385194063 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:41.206336021 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:41.206449032 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:41.206464052 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:41.206549883 CET	32848	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:41.207016945 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:41.211137056 CET	55555	32848	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:41.211791992 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:41.211852074 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:41.211911917 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:41.216542006 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.048433065 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.048511982 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.048558950 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.048619986 CET	32850	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.049092054 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.053246021 CET	55555	32850	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.053808928 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.053889036 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.053935051 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.058777094 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.876342058 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.876450062 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.876610994 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.876696110 CET	32852	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.877141953 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.881320000 CET	55555	32852	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.881839037 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:42.881891966 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.881942034 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:42.886544943 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:43.723726034 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:43.723843098 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:43.723851919 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:43.723912001 CET	32854	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:43.724421978 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:43.728558064 CET	55555	32854	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:43.729049921 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:43.729177952 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:43.729260921 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:43.733947992 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:44.560600996 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:44.560708046 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:44.560777903 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:44.560950994 CET	32856	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:44.561393976 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:44.565589905 CET	55555	32856	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:44.565995932 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:44.566046000 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:44.566095114 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:44.570714951 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:45.389885902 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:45.390013933 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:45.390055895 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:45.390119076 CET	32858	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:45.390533924 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:45.394788027 CET	55555	32858	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:45.395133972 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:45.395256042 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:45.395282984 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:45.399965048 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:46.231127024 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:46.231231928 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:46.231287956 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:46.231370926 CET	32860	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:46.231760979 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:46.235992908 CET	55555	32860	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:46.236429930 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:46.236479998 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:46.236522913 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:46.241110086 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.067008018 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.067123890 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.071207047 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.071270943 CET	32862	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.071755886 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.075968027 CET	55555	32862	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.076469898 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.076515913 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.076551914 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.081262112 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.929183006 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.929271936 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.929524899 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.929579020 CET	32864	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.929945946 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.934233904 CET	55555	32864	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.934602976 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:47.934680939 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.934706926 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:47.939491034 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:48.784987926 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:48.785065889 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:48.785093069 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:48.785140991 CET	32866	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:48.785562992 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:48.789767027 CET	55555	32866	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:48.790302038 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:48.790354967 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:48.790410995 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:48.795010090 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:49.628750086 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:49.628859043 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:49.628901958 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:49.628956079 CET	32868	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:49.629359961 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:49.633584976 CET	55555	32868	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:49.634011030 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:49.634089947 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:49.634116888 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:49.638895035 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:50.482620001 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:50.482639074 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:50.482729912 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:50.482775927 CET	32870	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:50.483259916 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:50.487416983 CET	55555	32870	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:50.487993002 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:50.488039970 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:50.488084078 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:50.492819071 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:51.312366962 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:51.312438011 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:51.312489986 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:51.312561989 CET	32872	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:51.313055038 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:51.317208052 CET	55555	32872	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:51.317709923 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:51.317781925 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:51.317816019 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:51.322458982 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.157885075 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.157983065 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.158014059 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.158392906 CET	32874	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.159356117 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.163075924 CET	55555	32874	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.164017916 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.164088964 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.164239883 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.168926954 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.997610092 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.997838020 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.998002052 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:52.998064995 CET	32876	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:52.998585939 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.002731085 CET	55555	32876	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.003268957 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.003371954 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.003413916 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.008063078 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.839616060 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.839627028 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.839858055 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.839881897 CET	32878	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.840522051 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.844976902 CET	55555	32878	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.845643997 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:53.845693111 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.845742941 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:53.850513935 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:54.673902035 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:54.674113035 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:54.674155951 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:54.674206018 CET	32880	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:54.674815893 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:54.679388046 CET	55555	32880	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:54.679984093 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:54.680041075 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:54.680085897 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:54.685643911 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:55.509890079 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:55.510052919 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:55.510138035 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:55.510174036 CET	32882	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:55.510652065 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:55.514864922 CET	55555	32882	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:55.515340090 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:55.515420914 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:55.515460968 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:55.520174026 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:56.346076012 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:56.346271038 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:56.346277952 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:56.346401930 CET	32884	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:56.346951008 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:56.351093054 CET	55555	32884	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:56.351679087 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:56.351737022 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:56.351790905 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:56.356398106 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:57.187035084 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:57.187223911 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:57.187217951 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:57.187304020 CET	32886	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:57.187841892 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:57.191934109 CET	55555	32886	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:57.192531109 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:57.192653894 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:57.192677975 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:57.197295904 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.037697077 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.037813902 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.037945032 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.038028002 CET	32888	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.038492918 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.042675972 CET	55555	32888	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.043164968 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.043217897 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.043258905 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.047872066 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.887923002 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.888063908 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.888206005 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.888286114 CET	32890	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.889059067 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.893049002 CET	55555	32890	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.893866062 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:58.893964052 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.894047976 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:58.898768902 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:59.721618891 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:59.721771955 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:59.721776009 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:59.721890926 CET	32892	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:59.722654104 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:59.727123976 CET	55555	32892	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:59.728184938 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:46:59.728277922 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:59.728389978 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:46:59.733738899 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:00.578883886 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:00.578998089 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:00.579034090 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:00.579086065 CET	32894	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:00.579565048 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:00.583720922 CET	55555	32894	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:00.584319115 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:00.584435940 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:00.584465027 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:00.590660095 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:01.433221102 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:01.433231115 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:01.433533907 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:01.433619022 CET	32896	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:01.434165001 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:01.439728975 CET	55555	32896	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:01.440392971 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:01.440462112 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:01.440546036 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:01.446825027 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:02.273305893 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:02.273411036 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:02.273443937 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:02.273490906 CET	32898	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:02.274009943 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:02.278565884 CET	55555	32898	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:02.278829098 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:02.278914928 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:02.278953075 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:02.284184933 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.121000051 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.121081114 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.121107101 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.121176958 CET	32900	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.121690035 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.125929117 CET	55555	32900	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.126470089 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.126522064 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.126564980 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.131176949 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.962632895 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.962724924 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.962774038 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.962846994 CET	32902	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.963376045 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.967463017 CET	55555	32902	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.968019962 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:03.968106031 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.968132019 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:03.972807884 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:04.810343027 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:04.810492992 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:04.810499907 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:04.810585022 CET	32904	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:04.811278105 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:04.816736937 CET	55555	32904	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:04.817550898 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:04.817609072 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:04.817662954 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:04.823575974 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:05.666064024 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:05.666076899 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:05.666198015 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:05.666254044 CET	32906	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:05.666838884 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:05.671092033 CET	55555	32906	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:05.671873093 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:05.671957016 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:05.671993017 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:05.676673889 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:06.516715050 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:06.516840935 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:06.516860962 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:06.516974926 CET	32908	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:06.517627001 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:06.521656036 CET	55555	32908	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:06.522272110 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:06.522325993 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:06.522362947 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:06.527096987 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:07.351706028 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:07.351850986 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:07.351906061 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:07.351958036 CET	32910	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:07.352632046 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:07.356637955 CET	55555	32910	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:07.357312918 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:07.357378960 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:07.357489109 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:07.362166882 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:08.194961071 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:08.195024014 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:08.195127964 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:08.195190907 CET	32912	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:08.195575953 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:08.200983047 CET	55555	32912	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:08.201013088 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:08.201071978 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:08.201114893 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:08.206862926 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.042890072 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.042970896 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.043029070 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.043188095 CET	32914	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.044012070 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.047792912 CET	55555	32914	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.048758030 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.048832893 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.048934937 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.053600073 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.879069090 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.879081964 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.879373074 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.879550934 CET	32916	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.880317926 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.885278940 CET	55555	32916	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.886255026 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:09.886348009 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.886449099 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:09.892436981 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:10.732935905 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:10.733064890 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:10.733129978 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:10.733361959 CET	32918	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:10.734142065 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:10.737971067 CET	55555	32918	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:10.738800049 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:10.738874912 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:10.738971949 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:10.743626118 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:11.570980072 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:11.571115017 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:11.571247101 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:11.571306944 CET	32920	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:11.572011948 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:11.575977087 CET	55555	32920	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:11.576802015 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:11.576885939 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:11.576992989 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:11.581691027 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:12.424699068 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:12.424787998 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:12.424972057 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:12.424995899 CET	32922	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:12.425688028 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:12.430139065 CET	55555	32922	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:12.430737019 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:12.430829048 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:12.430924892 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:12.436100960 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:13.266570091 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:13.266696930 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:13.266751051 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:13.266906977 CET	32924	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:13.267699003 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:13.271557093 CET	55555	32924	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:13.272327900 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:13.272449970 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:13.272552967 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:13.278810024 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.103630066 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.103833914 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.103888988 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.104055882 CET	32926	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.104868889 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.108712912 CET	55555	32926	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.109528065 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.109579086 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.109678984 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.114315033 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.941282988 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.941303015 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.941404104 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.941565037 CET	32928	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.942290068 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.947959900 CET	55555	32928	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.949026108 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:14.949100018 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.949208975 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:14.957871914 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:15.782397985 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:15.782496929 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:15.782632113 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:15.782632113 CET	32930	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:15.783061981 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:15.787357092 CET	55555	32930	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:15.787782907 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:15.787858009 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:15.787902117 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:15.792665958 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:16.614236116 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:16.614352942 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:16.614425898 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:16.614605904 CET	32932	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:16.615051985 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:16.619640112 CET	55555	32932	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:16.619882107 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:16.619939089 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:16.619996071 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:16.624669075 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:17.446914911 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:17.446932077 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:17.447099924 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:17.447168112 CET	32934	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:17.447680950 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:17.451914072 CET	55555	32934	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:17.452368021 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:17.452485085 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:17.452531099 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:17.457261086 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:18.287647009 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:18.287765026 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:18.287952900 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:18.288045883 CET	32936	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:18.288652897 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:18.293715000 CET	55555	32936	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:18.294260979 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:18.294325113 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:18.294389009 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:18.299856901 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.137903929 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.137990952 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.138019085 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.138072968 CET	32938	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.138520956 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.142860889 CET	55555	32938	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.143554926 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.143616915 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.143644094 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.149147987 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.969862938 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.969954014 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.969995975 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.970252037 CET	32940	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.970973015 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.974848986 CET	55555	32940	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.975596905 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:19.975671053 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.975780010 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:19.980498075 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:20.811978102 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:20.812227964 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:20.812310934 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:20.812482119 CET	32942	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:20.813222885 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:20.818512917 CET	55555	32942	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:20.819041967 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:20.819106102 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:20.819196939 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:20.825185061 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:21.650365114 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:21.650428057 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:21.650527954 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:21.650588036 CET	32944	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:21.651166916 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:21.655476093 CET	55555	32944	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:21.655883074 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:21.655985117 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:21.656054020 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:21.660765886 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:22.491031885 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:22.491149902 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:22.491205931 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:22.491327047 CET	32946	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:22.492104053 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:22.496045113 CET	55555	32946	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:22.496788025 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:22.496865988 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:22.496958971 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:22.501605034 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:23.333118916 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:23.333139896 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:23.333522081 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:23.333576918 CET	32948	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:23.334286928 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:23.339842081 CET	55555	32948	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:23.340394974 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:23.340496063 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:23.340595961 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:23.346529007 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:24.170628071 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:24.170681000 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:24.171184063 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:24.171247005 CET	32950	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:24.171996117 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:24.175900936 CET	55555	32950	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:24.176723957 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:24.176770926 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:24.176820040 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:24.182130098 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.012761116 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.012826920 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.012866020 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.013096094 CET	32952	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.013734102 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.017771959 CET	55555	32952	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.018409014 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.018461943 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.018512964 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.023108959 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.858596087 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.858717918 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.858803034 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.858803034 CET	32954	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.859309912 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.863883018 CET	55555	32954	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.864525080 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:25.864579916 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.864620924 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:25.869586945 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:26.719779015 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:26.719959021 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:26.719964981 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:26.720032930 CET	32956	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:26.720464945 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:26.724694014 CET	55555	32956	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:26.725117922 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:26.725176096 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:26.725217104 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:26.730082989 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:27.651199102 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:27.651209116 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:27.651325941 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:27.651384115 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:27.651385069 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:27.651385069 CET	32958	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:27.651843071 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:27.656121969 CET	55555	32958	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:27.660229921 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:27.660298109 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:27.660324097 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:27.665041924 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:28.495868921 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:28.496069908 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:28.496088982 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:28.496135950 CET	32960	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:28.496522903 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:28.502029896 CET	55555	32960	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:28.502041101 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:28.502090931 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:28.502134085 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:28.506850004 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:29.343867064 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:29.343978882 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:29.343986034 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:29.344142914 CET	32962	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:29.344630003 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:29.348807096 CET	55555	32962	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:29.349257946 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:29.349318981 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:29.349359989 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:29.354006052 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:30.194037914 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:30.194168091 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:30.194209099 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:30.194262981 CET	32964	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:30.194786072 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:30.199569941 CET	55555	32964	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:30.200201035 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:30.200261116 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:30.200304031 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:30.205682039 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.023813963 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.023919106 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.023926973 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.024075985 CET	32966	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.024573088 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.028698921 CET	55555	32966	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.029297113 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.029355049 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.029401064 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.034043074 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.871402025 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.871494055 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.871515036 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.871593952 CET	32968	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.872106075 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.876282930 CET	55555	32968	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.876777887 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:31.876836061 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.876883030 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:31.881578922 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:32.701411963 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:32.701548100 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:32.701656103 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:32.701683998 CET	32970	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:32.702146053 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:32.709220886 CET	55555	32970	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:32.709233046 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:32.709290981 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:32.709322929 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:32.713974953 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:33.542798042 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:33.542818069 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:33.542907953 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:33.542967081 CET	32972	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:33.543494940 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:33.547739029 CET	55555	32972	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:33.548202038 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:33.548261881 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:33.548296928 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:33.553061008 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:34.390727043 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:34.390834093 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:34.390937090 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:34.390984058 CET	32974	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:34.391485929 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:34.395632029 CET	55555	32974	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:34.396128893 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:34.396183014 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:34.396228075 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:34.400830984 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:35.225106955 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:35.225238085 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:35.225311995 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:35.225399971 CET	32976	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:35.225874901 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:35.230165005 CET	55555	32976	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:35.230705023 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:35.230772018 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:35.230817080 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:35.235789061 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.064311028 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.064408064 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.064414024 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.064476013 CET	32978	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.065145969 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.069133043 CET	55555	32978	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.069824934 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.069910049 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.069946051 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.074564934 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.897785902 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.897943974 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.898109913 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.898169041 CET	32980	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.898745060 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.902847052 CET	55555	32980	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.903347015 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:36.903403044 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.903441906 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:36.910111904 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:37.747534990 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:37.747663975 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:37.747729063 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:37.747786045 CET	32982	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:37.748461008 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:37.752439022 CET	55555	32982	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:37.753175974 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:37.753249884 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:37.753305912 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:37.757945061 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:38.590446949 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:38.590574980 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:38.590992928 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:38.591073036 CET	32984	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:38.591558933 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:38.595705032 CET	55555	32984	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:38.596199036 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:38.596255064 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:38.596301079 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:38.600970030 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:39.420947075 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:39.421052933 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:39.421061993 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:39.421138048 CET	32986	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:39.421948910 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:39.425793886 CET	55555	32986	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:39.426664114 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:39.426752090 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:39.426834106 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:39.431420088 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:40.255158901 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:40.255198956 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:40.255503893 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:40.255548954 CET	32988	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:40.256145954 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:40.260263920 CET	55555	32988	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:40.260863066 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:40.260917902 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:40.260960102 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:40.265599966 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.094610929 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.094707966 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.094708920 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.094769001 CET	32990	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.095588923 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.099402905 CET	55555	32990	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.100296021 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.100353003 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.100423098 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.105088949 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.934636116 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.934739113 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.934761047 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.934838057 CET	32992	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.935483932 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.939510107 CET	55555	32992	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.940155029 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:41.940234900 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.940267086 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:41.944910049 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:42.775612116 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:42.775749922 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:42.775896072 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:42.776061058 CET	32994	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:42.776806116 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:42.780736923 CET	55555	32994	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:42.781568050 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:42.781650066 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:42.781763077 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:42.786422014 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:43.614440918 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:43.614521027 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:43.614636898 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:43.614784002 CET	32996	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:43.615875959 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:43.619472027 CET	55555	32996	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:43.620531082 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:43.620616913 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:43.620713949 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:43.625366926 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:44.454953909 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:44.455094099 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:44.455100060 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:44.455293894 CET	32998	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:44.456103086 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:44.459923029 CET	55555	32998	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:44.460793018 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:44.460870028 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:44.461003065 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:44.465699911 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:45.327979088 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:45.327995062 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:45.328226089 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:45.328376055 CET	33000	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:45.328974962 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:45.335395098 CET	55555	33000	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:45.335407972 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:45.335458994 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:45.335504055 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:45.340190887 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:46.183191061 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:46.183329105 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:46.183816910 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:46.183950901 CET	33002	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:46.184638977 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:46.191272974 CET	55555	33002	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:46.192068100 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:46.192130089 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:46.192177057 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:46.198091030 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.022182941 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.022295952 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.022313118 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.022403955 CET	33004	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.023114920 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.028567076 CET	55555	33004	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.028578043 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.028662920 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.028716087 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.033808947 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.873748064 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.873903036 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.873909950 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.873985052 CET	33006	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.874521017 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.878624916 CET	55555	33006	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.879138947 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:47.879215002 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.879249096 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:47.883887053 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:48.708172083 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:48.708281994 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:48.708364010 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:48.708448887 CET	33008	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:48.708978891 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:48.713140011 CET	55555	33008	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:48.713628054 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:48.713680983 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:48.713721037 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:48.718368053 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:49.558046103 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:49.558057070 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:49.558144093 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:49.558204889 CET	33010	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:49.558851957 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:49.565290928 CET	55555	33010	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:49.565300941 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:49.565378904 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:49.565421104 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:49.570143938 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:50.399801970 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:50.399955988 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:50.399962902 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:50.400073051 CET	33012	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:50.400712967 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:50.404840946 CET	55555	33012	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:50.405395031 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:50.405448914 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:50.405487061 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:50.410151958 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:51.235366106 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:51.235377073 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:51.235495090 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:51.235551119 CET	33014	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:51.236236095 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:51.243959904 CET	55555	33014	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:51.244287014 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:51.244369984 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:51.244410038 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:51.252572060 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.099993944 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.100075960 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.100213051 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.100399971 CET	33016	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.101202965 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.106185913 CET	55555	33016	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.106976032 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.107060909 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.107188940 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.112725973 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.936961889 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.937074900 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.937242985 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.937421083 CET	33018	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.938309908 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.942058086 CET	55555	33018	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.942948103 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:52.943003893 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.943053007 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:52.947686911 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:53.788077116 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:53.788177967 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:53.788183928 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:53.788321018 CET	33020	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:53.788979053 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:53.792958021 CET	55555	33020	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:53.793638945 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:53.793715954 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:53.793832064 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:53.798460960 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:54.628029108 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:54.628053904 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:54.628190041 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:54.628345966 CET	33022	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:54.629115105 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:54.633821964 CET	55555	33022	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:54.634331942 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:54.634388924 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:54.634496927 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:54.639661074 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:55.485965014 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:55.486043930 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:55.486277103 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:55.486464024 CET	33024	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:55.487200022 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:55.491213083 CET	55555	33024	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:55.491930008 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:55.491986036 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:55.492172003 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:55.496880054 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:56.318984985 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:56.319087029 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:56.319138050 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:56.319237947 CET	33026	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:56.319875002 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:56.323898077 CET	55555	33026	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:56.324620962 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:56.324675083 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:56.324712992 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:56.329394102 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:57.175142050 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:57.175229073 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:57.175236940 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:57.175312042 CET	33028	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:57.175797939 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:57.180272102 CET	55555	33028	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:57.180466890 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:57.180537939 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:57.180577993 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:57.185427904 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.029140949 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.029162884 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.029232979 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.029416084 CET	33030	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.030036926 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.034101963 CET	55555	33030	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.034876108 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.034953117 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.035046101 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.041562080 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.880158901 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.880171061 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.880425930 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.880580902 CET	33032	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.882385015 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.885318041 CET	55555	33032	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.887092113 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:58.887146950 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.887239933 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:58.891910076 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:59.719176054 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:59.719291925 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:59.719340086 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:59.719434977 CET	33034	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:59.719922066 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:59.724069118 CET	55555	33034	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:59.724539995 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:47:59.724594116 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:59.724639893 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:47:59.729331017 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:00.555970907 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:00.556055069 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:00.556359053 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:00.556412935 CET	33036	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:00.556921005 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:00.561450958 CET	55555	33036	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:00.561985970 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:00.562037945 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:00.562083960 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:00.567143917 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:01.426860094 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:01.426928043 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:01.426950932 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:01.427012920 CET	33038	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:01.427438021 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:01.431624889 CET	55555	33038	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:01.432090998 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:01.432136059 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:01.432180882 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:01.436783075 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:02.259854078 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:02.259951115 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:02.259984016 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:02.260052919 CET	33040	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:02.260490894 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:02.264672041 CET	55555	33040	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:02.265141964 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:02.265197992 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:02.265244961 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:02.270324945 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.109823942 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.109833956 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.109931946 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.109987974 CET	33042	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.110675097 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.115402937 CET	55555	33042	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.116560936 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.116616964 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.116657019 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.122376919 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.946156979 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.946209908 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.946238995 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.946322918 CET	33044	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.946748972 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.950964928 CET	55555	33044	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.951436043 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:03.951514006 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.951553106 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:03.956222057 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:04.779319048 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:04.779432058 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:04.779450893 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:04.779501915 CET	33046	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:04.779984951 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:04.784178019 CET	55555	33046	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:04.784641981 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:04.784701109 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:04.784810066 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:04.789469004 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:05.632729053 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:05.632817984 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:05.632831097 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:05.632986069 CET	33048	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:05.633590937 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:05.637667894 CET	55555	33048	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:05.638237953 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:05.638314962 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:05.638428926 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:05.643075943 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:06.488029003 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:06.488043070 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:06.488218069 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:06.488298893 CET	33050	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:06.488822937 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:06.494016886 CET	55555	33050	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:06.494482040 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:06.494539022 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:06.494585037 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:06.499612093 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:07.336492062 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:07.336596966 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:07.336667061 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:07.336749077 CET	33052	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:07.337193012 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:07.341432095 CET	55555	33052	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:07.341885090 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:07.341943979 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:07.341984987 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:07.346635103 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:08.214184999 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:08.214265108 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:08.214351892 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:08.214405060 CET	33054	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:08.214766026 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:08.219841003 CET	55555	33054	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:08.219856024 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:08.219890118 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:08.219938040 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:08.225734949 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.075162888 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.075314999 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.075341940 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.075508118 CET	33056	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.076119900 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.080184937 CET	55555	33056	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.080907106 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.080975056 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.081079006 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.085721970 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.910305977 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.910398006 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.910429001 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.910621881 CET	33058	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.911235094 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.915297031 CET	55555	33058	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.915868998 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:09.915952921 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.916062117 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:09.920644045 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:10.744033098 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:10.744142056 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:10.744484901 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:10.744541883 CET	33060	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:10.745059013 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:10.752347946 CET	55555	33060	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:10.752953053 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:10.753014088 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:10.753060102 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:10.760668039 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:11.578655958 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:11.578754902 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:11.579081059 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:11.579161882 CET	33062	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:11.579641104 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:11.584252119 CET	55555	33062	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:11.584568977 CET	55555	33064	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:11.584631920 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:11.584676027 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:11.589668989 CET	55555	33064	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:12.428801060 CET	55555	33064	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:12.428858995 CET	55555	33064	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:12.428900957 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:12.428972006 CET	33064	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:12.429603100 CET	33066	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:12.433671951 CET	55555	33064	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:12.434308052 CET	55555	33066	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:12.434374094 CET	33066	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:12.434415102 CET	33066	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:12.439111948 CET	55555	33066	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:13.279414892 CET	55555	33066	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:13.279483080 CET	33066	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:13.279623985 CET	55555	33066	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:13.279701948 CET	33066	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:13.280066013 CET	33068	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:13.284411907 CET	55555	33066	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:13.284749985 CET	55555	33068	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:13.284835100 CET	33068	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:13.284940004 CET	33068	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:13.289549112 CET	55555	33068	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:14.119343042 CET	55555	33068	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:14.119426966 CET	33068	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:14.119457006 CET	55555	33068	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:14.119503975 CET	33068	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:14.119961023 CET	33070	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:14.124155998 CET	55555	33068	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:14.124615908 CET	55555	33070	103.77.246.204	192.168.2.14
Mar 18, 2025 04:48:14.124686956 CET	33070	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:14.124730110 CET	33070	55555	192.168.2.14	103.77.246.204
Mar 18, 2025 04:48:14.129373074 CET	55555	33070	103.77.246.204	192.168.2.14

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 04:47:24.095125914 CET	44455	53	192.168.2.14	1.1.1.1
Mar 18, 2025 04:47:24.095170975 CET	60050	53	192.168.2.14	1.1.1.1
Mar 18, 2025 04:47:24.105518103 CET	53	60050	1.1.1.1	192.168.2.14
Mar 18, 2025 04:47:24.106106043 CET	53	44455	1.1.1.1	192.168.2.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 18, 2025 04:47:24.095125914 CET	192.168.2.14	1.1.1.1	0xef50	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Mar 18, 2025 04:47:24.095170975 CET	192.168.2.14	1.1.1.1	0xb809	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 18, 2025 04:47:24.106106043 CET	1.1.1.1	192.168.2.14	0xef50	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Mar 18, 2025 04:47:24.106106043 CET	1.1.1.1	192.168.2.14	0xef50	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

System Behavior

Analysis Process: m-i.p-s.Sakura.elf PID: 5523, Parent PID: 5438

General

Start time (UTC):	03:44:37
Start date (UTC):	18/03/2025
Path:	/tmp/m-i.p-s.Sakura.elf
Arguments:	/tmp/m-i.p-s.Sakura.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

File Activities

File Opened

File Deleted

File Read

File Written

Process Activities

Process Forked

Thread Sleep

System Activities

Query System Information (uname)

Network Activities

Socket Connecting

Chronological Activities

Analysis Process: m-i.p-s.Sakura.elf PID: 5525, Parent PID: 5523

General

Start time (UTC):	03:44:37
Start date (UTC):	18/03/2025
Path:	/tmp/m-i.p-s.Sakura.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Process Activities

Process Forked

Thread Sleep

Chronological Activities

Analysis Process: m-i.p-s.Sakura.elf PID: 5527, Parent PID: 5525

General

Start time (UTC):	03:44:37
Start date (UTC):	18/03/2025
Path:	/tmp/m-i.p-s.Sakura.elf
Arguments:	-
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net .
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obfuscate command and control traffic to make it more difficult to detect. Command and control (C2) communications are hidden (but not necessarily encrypted) in an attempt to make the content more difficult to discover or decipher and to make the communication less conspicuous and hide commands from being seen. This encompasses many methods, such as adding junk data to protocol traffic, using steganography, or impersonating legitimate protocols.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report m-i.p-s.Sakura.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.wKitrO (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

System Behavior

Analysis Process: m-i.p-s.Sakura.elf PID: 5523, Parent PID: 5438

General

File Activities

File Opened

File Deleted

File Read

File Written

Process Activities

Process Forked

Thread Sleep

System Activities

Linux Analysis Report
m-i.p-s.Sakura.elf