Create Interactive Tour

Linux Analysis Report
pftp.elf

Overview

General Information

Sample name:	pftp.elf
Analysis ID:	1650456
MD5:	87ed1fcb88c5e21cd65dfc6e0bae2789
SHA1:	dabd6f8670b0c63f74f6b7ca8a195fd874a0f66e
SHA256:	b85f0ec92de6e669b4b5834e4fa6191ba4b73521e426a37348fca888a4b80d27
Tags:	elfuser-abuse_ch
Infos:

Detection

Gafgyt

Score:	100
Range:	0 - 100

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Gafgyt

Connects to many IPs within the same subnet mask (likely port scanning)

Opens /proc/net/* files useful for finding connected devices and routers

Sample scans a subnet

Uses IRC for communication with a C&C

Detected TCP or UDP traffic on non-standard ports

Executes the "rm" command used to delete files or directories

Sample and/or dropped files contains symbols with suspicious names

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1650456
Start date and time:	2025-03-27 18:24:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	pftp.elf
Detection:	MAL
Classification:	mal100.spre.troj.linELF@0/1@2/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/pftp.elf
PID:	5513
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	BUILD ART OF WAR BUILD ART OF WAR
Standard Error:

Process Tree

system is lnxubuntu20

pftp.elf (PID: 5513, Parent: 5439, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/pftp.elf

pftp.elf New Fork (PID: 5515, Parent: 5513)

pftp.elf New Fork (PID: 5517, Parent: 5515)

pftp.elf New Fork (PID: 5523, Parent: 5517)

dash New Fork (PID: 5571, Parent: 3670)

rm (PID: 5571, Parent: 3670, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.MOpt5PgGfU /tmp/tmp.VtmUyWWmLq /tmp/tmp.9XLNkGTnsi

dash New Fork (PID: 5572, Parent: 3670)

cat (PID: 5572, Parent: 3670, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.MOpt5PgGfU

dash New Fork (PID: 5573, Parent: 3670)

head (PID: 5573, Parent: 3670, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5574, Parent: 3670)

tr (PID: 5574, Parent: 3670, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5575, Parent: 3670)

cut (PID: 5575, Parent: 3670, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5576, Parent: 3670)

cat (PID: 5576, Parent: 3670, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.MOpt5PgGfU

dash New Fork (PID: 5577, Parent: 3670)

head (PID: 5577, Parent: 3670, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 5578, Parent: 3670)

tr (PID: 5578, Parent: 3670, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 5579, Parent: 3670)

cut (PID: 5579, Parent: 3670, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 5580, Parent: 3670)

rm (PID: 5580, Parent: 3670, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.MOpt5PgGfU /tmp/tmp.VtmUyWWmLq /tmp/tmp.9XLNkGTnsi

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
pftp.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
pftp.elf	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xe2a3:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Memory Dumps

Source	Rule	Description	Author	Strings
5515.1.00007f0030001000.00007f0030011000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xe2a3:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00
5513.1.00007f0030001000.00007f0030011000.r-x.sdmp	Linux_Trojan_Gafgyt_fb14e81f	unknown	unknown	0xe2a3:$a: 4E 45 52 00 53 43 41 4E 4E 45 52 20 4F 4E 20 7C 20 4F 46 46 00

Suricata Signatures

ETPRO MALWARE ELF/HITTA Bot Infection Status Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-27T18:24:52.836898+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	35290	TCP
2025-03-27T18:24:53.324226+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	35478	TCP
2025-03-27T18:24:53.765620+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36034	TCP
2025-03-27T18:24:54.187518+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36306	TCP
2025-03-27T18:24:54.588072+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36308	TCP
2025-03-27T18:24:55.091641+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36310	TCP
2025-03-27T18:24:55.474955+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36312	TCP
2025-03-27T18:24:55.864576+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36314	TCP
2025-03-27T18:24:56.252068+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36316	TCP
2025-03-27T18:24:56.649445+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36318	TCP
2025-03-27T18:24:57.044723+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36320	TCP
2025-03-27T18:24:57.426352+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36322	TCP
2025-03-27T18:24:57.812377+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36324	TCP
2025-03-27T18:24:58.189623+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36326	TCP
2025-03-27T18:24:58.581607+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36328	TCP
2025-03-27T18:24:58.994111+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36330	TCP
2025-03-27T18:24:59.380598+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36336	TCP
2025-03-27T18:24:59.750948+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36338	TCP
2025-03-27T18:25:00.145589+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36340	TCP
2025-03-27T18:25:00.507248+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36342	TCP
2025-03-27T18:25:00.903368+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36344	TCP
2025-03-27T18:25:01.276427+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36346	TCP
2025-03-27T18:25:01.661344+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36352	TCP
2025-03-27T18:25:02.027174+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36354	TCP
2025-03-27T18:25:02.400703+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36356	TCP
2025-03-27T18:25:02.767621+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36358	TCP
2025-03-27T18:25:03.136428+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36360	TCP
2025-03-27T18:25:03.523068+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36362	TCP
2025-03-27T18:25:03.894379+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36364	TCP
2025-03-27T18:25:04.254908+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36366	TCP
2025-03-27T18:25:04.639091+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36368	TCP
2025-03-27T18:25:05.020973+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36388	TCP
2025-03-27T18:25:05.413617+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36390	TCP
2025-03-27T18:25:05.787938+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36406	TCP
2025-03-27T18:25:06.222271+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36408	TCP
2025-03-27T18:25:06.610046+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36410	TCP
2025-03-27T18:25:06.983800+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36426	TCP
2025-03-27T18:25:07.347657+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36428	TCP
2025-03-27T18:25:07.735716+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36444	TCP
2025-03-27T18:25:08.090235+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36446	TCP
2025-03-27T18:25:08.463840+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36448	TCP
2025-03-27T18:25:08.830519+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36464	TCP
2025-03-27T18:25:09.253482+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	36840	TCP
2025-03-27T18:25:09.681736+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37328	TCP
2025-03-27T18:25:10.105790+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37398	TCP
2025-03-27T18:25:10.487124+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37400	TCP
2025-03-27T18:25:10.842362+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37402	TCP
2025-03-27T18:25:11.207956+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37404	TCP
2025-03-27T18:25:11.560484+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37406	TCP
2025-03-27T18:25:11.911827+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37408	TCP
2025-03-27T18:25:13.277023+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37410	TCP
2025-03-27T18:25:13.663762+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37414	TCP
2025-03-27T18:25:14.049406+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37416	TCP
2025-03-27T18:25:14.398150+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37418	TCP
2025-03-27T18:25:14.744496+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37420	TCP
2025-03-27T18:25:15.104301+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37426	TCP
2025-03-27T18:25:15.451904+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37428	TCP
2025-03-27T18:25:15.829743+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37430	TCP
2025-03-27T18:25:16.184663+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37432	TCP
2025-03-27T18:25:16.544884+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37434	TCP
2025-03-27T18:25:16.921956+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37436	TCP
2025-03-27T18:25:17.278522+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37438	TCP
2025-03-27T18:25:17.645460+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37444	TCP
2025-03-27T18:25:18.006453+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37446	TCP
2025-03-27T18:25:18.383719+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37448	TCP
2025-03-27T18:25:18.741172+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37450	TCP
2025-03-27T18:25:19.112596+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37452	TCP
2025-03-27T18:25:19.496734+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37454	TCP
2025-03-27T18:25:19.875977+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37456	TCP
2025-03-27T18:25:20.234708+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37458	TCP
2025-03-27T18:25:20.597765+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37478	TCP
2025-03-27T18:25:20.941887+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37494	TCP
2025-03-27T18:25:21.310852+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37496	TCP
2025-03-27T18:25:21.683577+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37528	TCP
2025-03-27T18:25:22.042925+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37530	TCP
2025-03-27T18:25:22.397510+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37544	TCP
2025-03-27T18:25:22.765582+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37560	TCP
2025-03-27T18:25:23.131793+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37562	TCP
2025-03-27T18:25:23.522347+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37592	TCP
2025-03-27T18:25:23.892598+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37596	TCP
2025-03-27T18:25:24.262062+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37624	TCP
2025-03-27T18:25:24.671874+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	37790	TCP
2025-03-27T18:25:25.046054+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38090	TCP
2025-03-27T18:25:25.403965+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38370	TCP
2025-03-27T18:25:25.775930+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38490	TCP
2025-03-27T18:25:26.134564+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38492	TCP
2025-03-27T18:25:26.499131+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38494	TCP
2025-03-27T18:25:26.863226+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38496	TCP
2025-03-27T18:25:27.211278+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38498	TCP
2025-03-27T18:25:27.557686+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38500	TCP
2025-03-27T18:25:27.889309+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38502	TCP
2025-03-27T18:25:29.263036+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38504	TCP
2025-03-27T18:25:29.615304+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38508	TCP
2025-03-27T18:25:29.964222+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38510	TCP
2025-03-27T18:25:30.299688+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38512	TCP
2025-03-27T18:25:30.632811+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38514	TCP
2025-03-27T18:25:30.989380+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38516	TCP
2025-03-27T18:25:31.330122+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38518	TCP
2025-03-27T18:25:31.662740+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38520	TCP
2025-03-27T18:25:32.004687+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38522	TCP
2025-03-27T18:25:32.336914+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38524	TCP
2025-03-27T18:25:32.682009+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38526	TCP
2025-03-27T18:25:33.016515+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38528	TCP
2025-03-27T18:25:33.366890+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38534	TCP
2025-03-27T18:25:33.703171+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38538	TCP
2025-03-27T18:25:34.049637+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38540	TCP
2025-03-27T18:25:34.409140+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38542	TCP
2025-03-27T18:25:34.744877+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38544	TCP
2025-03-27T18:25:35.085420+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38546	TCP
2025-03-27T18:25:35.417131+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38548	TCP
2025-03-27T18:25:35.761873+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38550	TCP
2025-03-27T18:25:36.108704+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38566	TCP
2025-03-27T18:25:36.457563+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38586	TCP
2025-03-27T18:25:36.801000+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38620	TCP
2025-03-27T18:25:37.146142+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38622	TCP
2025-03-27T18:25:37.493802+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38670	TCP
2025-03-27T18:25:37.836738+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38672	TCP
2025-03-27T18:25:38.169511+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38700	TCP
2025-03-27T18:25:38.527569+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38716	TCP
2025-03-27T18:25:38.861469+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38732	TCP
2025-03-27T18:25:39.210283+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38764	TCP
2025-03-27T18:25:39.559484+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38766	TCP
2025-03-27T18:25:39.894883+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	38884	TCP
2025-03-27T18:25:40.243905+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39074	TCP
2025-03-27T18:25:40.596635+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39232	TCP
2025-03-27T18:25:40.934150+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39410	TCP
2025-03-27T18:25:41.279692+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39584	TCP
2025-03-27T18:25:41.618867+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39586	TCP
2025-03-27T18:25:41.985654+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39588	TCP
2025-03-27T18:25:42.343204+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39590	TCP
2025-03-27T18:25:42.688179+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39592	TCP
2025-03-27T18:25:43.039553+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39594	TCP
2025-03-27T18:25:43.394046+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39596	TCP
2025-03-27T18:25:43.749749+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39598	TCP
2025-03-27T18:25:44.116520+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39602	TCP
2025-03-27T18:25:44.451255+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39604	TCP
2025-03-27T18:25:44.805299+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39606	TCP
2025-03-27T18:25:45.146200+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39608	TCP
2025-03-27T18:25:45.492030+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39610	TCP
2025-03-27T18:25:45.840419+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39612	TCP
2025-03-27T18:25:46.183650+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39614	TCP
2025-03-27T18:25:46.534579+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39616	TCP
2025-03-27T18:25:46.886192+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39618	TCP
2025-03-27T18:25:47.236839+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39620	TCP
2025-03-27T18:25:47.597668+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39622	TCP
2025-03-27T18:25:47.954182+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39624	TCP
2025-03-27T18:25:48.296601+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39626	TCP
2025-03-27T18:25:48.647555+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39628	TCP
2025-03-27T18:25:48.978447+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39630	TCP
2025-03-27T18:25:49.323956+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39638	TCP
2025-03-27T18:25:49.662688+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39640	TCP
2025-03-27T18:25:50.013776+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39642	TCP
2025-03-27T18:25:50.353392+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39644	TCP
2025-03-27T18:25:50.705952+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39646	TCP
2025-03-27T18:25:51.046939+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39648	TCP
2025-03-27T18:25:51.402796+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39650	TCP
2025-03-27T18:25:51.769947+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39684	TCP
2025-03-27T18:25:52.123402+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39718	TCP
2025-03-27T18:25:52.483103+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39756	TCP
2025-03-27T18:25:52.837563+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39788	TCP
2025-03-27T18:25:53.177543+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39824	TCP
2025-03-27T18:25:53.531653+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39852	TCP
2025-03-27T18:25:53.881741+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39882	TCP
2025-03-27T18:25:54.240216+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39912	TCP
2025-03-27T18:25:54.584833+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39944	TCP
2025-03-27T18:25:54.926459+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	39972	TCP
2025-03-27T18:25:55.301938+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40110	TCP
2025-03-27T18:25:55.664965+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40256	TCP
2025-03-27T18:25:56.017593+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40394	TCP
2025-03-27T18:25:56.361120+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40640	TCP
2025-03-27T18:25:56.700791+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40682	TCP
2025-03-27T18:25:57.058396+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40684	TCP
2025-03-27T18:25:57.415445+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40690	TCP
2025-03-27T18:25:57.772275+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40696	TCP
2025-03-27T18:25:58.135265+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40698	TCP
2025-03-27T18:25:58.490092+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40700	TCP
2025-03-27T18:25:58.844942+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40702	TCP
2025-03-27T18:25:59.190792+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40706	TCP
2025-03-27T18:25:59.544277+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40708	TCP
2025-03-27T18:25:59.895219+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40710	TCP
2025-03-27T18:26:00.249162+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40724	TCP
2025-03-27T18:26:00.622894+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40726	TCP
2025-03-27T18:26:00.967282+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40732	TCP
2025-03-27T18:26:01.323576+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40754	TCP
2025-03-27T18:26:01.685031+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40770	TCP
2025-03-27T18:26:02.027412+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40772	TCP
2025-03-27T18:26:02.367248+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40780	TCP
2025-03-27T18:26:02.718948+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40792	TCP
2025-03-27T18:26:03.077586+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40794	TCP
2025-03-27T18:26:03.433469+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40800	TCP
2025-03-27T18:26:03.777567+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40804	TCP
2025-03-27T18:26:04.133191+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40806	TCP
2025-03-27T18:26:04.488734+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40808	TCP
2025-03-27T18:26:04.839345+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40812	TCP
2025-03-27T18:26:05.189764+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40824	TCP
2025-03-27T18:26:05.535868+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40832	TCP
2025-03-27T18:26:05.897244+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40858	TCP
2025-03-27T18:26:06.232110+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40908	TCP
2025-03-27T18:26:06.576250+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40944	TCP
2025-03-27T18:26:06.915807+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40950	TCP
2025-03-27T18:26:07.263766+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	40984	TCP
2025-03-27T18:26:07.621790+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41008	TCP
2025-03-27T18:26:07.960940+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41046	TCP
2025-03-27T18:26:08.312171+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41062	TCP
2025-03-27T18:26:08.670036+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41092	TCP
2025-03-27T18:26:09.008815+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41100	TCP
2025-03-27T18:26:09.343595+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41108	TCP
2025-03-27T18:26:09.677675+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41146	TCP
2025-03-27T18:26:10.016191+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41218	TCP
2025-03-27T18:26:10.375749+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41352	TCP
2025-03-27T18:26:10.727143+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41490	TCP
2025-03-27T18:26:11.073135+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41672	TCP
2025-03-27T18:26:11.421955+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41778	TCP
2025-03-27T18:26:11.777022+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41780	TCP
2025-03-27T18:26:12.131090+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41786	TCP
2025-03-27T18:26:12.482482+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41792	TCP
2025-03-27T18:26:12.821520+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41794	TCP
2025-03-27T18:26:13.171525+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41796	TCP
2025-03-27T18:26:13.513341+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41800	TCP
2025-03-27T18:26:13.845456+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41802	TCP
2025-03-27T18:26:14.179594+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41804	TCP
2025-03-27T18:26:14.509767+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41806	TCP
2025-03-27T18:26:14.858481+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41822	TCP
2025-03-27T18:26:15.217416+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41826	TCP
2025-03-27T18:26:15.566476+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41836	TCP
2025-03-27T18:26:15.902620+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41862	TCP
2025-03-27T18:26:16.238073+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41884	TCP
2025-03-27T18:26:16.591623+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41912	TCP
2025-03-27T18:26:16.929843+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41964	TCP
2025-03-27T18:26:17.293210+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41966	TCP
2025-03-27T18:26:17.647784+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41972	TCP
2025-03-27T18:26:17.992652+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41976	TCP
2025-03-27T18:26:18.346226+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41978	TCP
2025-03-27T18:26:18.696056+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41980	TCP
2025-03-27T18:26:19.052477+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41982	TCP
2025-03-27T18:26:19.394899+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	41996	TCP
2025-03-27T18:26:19.740819+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42004	TCP
2025-03-27T18:26:20.074142+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42030	TCP
2025-03-27T18:26:20.408384+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42116	TCP
2025-03-27T18:26:20.757677+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42144	TCP
2025-03-27T18:26:21.104798+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42162	TCP
2025-03-27T18:26:21.446917+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42214	TCP
2025-03-27T18:26:21.789642+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42228	TCP
2025-03-27T18:26:22.124607+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42272	TCP
2025-03-27T18:26:22.467167+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42288	TCP
2025-03-27T18:26:22.814400+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42302	TCP
2025-03-27T18:26:23.161182+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42308	TCP
2025-03-27T18:26:23.499445+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42312	TCP
2025-03-27T18:26:23.834026+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42328	TCP
2025-03-27T18:26:24.169592+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42354	TCP
2025-03-27T18:26:24.518406+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42382	TCP
2025-03-27T18:26:24.848451+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42422	TCP
2025-03-27T18:26:25.201771+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42486	TCP
2025-03-27T18:26:25.549086+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42690	TCP
2025-03-27T18:26:25.880534+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42832	TCP
2025-03-27T18:26:26.229139+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42874	TCP
2025-03-27T18:26:26.581438+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42876	TCP
2025-03-27T18:26:26.932448+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42882	TCP
2025-03-27T18:26:27.285359+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42884	TCP
2025-03-27T18:26:27.626397+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42890	TCP
2025-03-27T18:26:27.967411+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42892	TCP
2025-03-27T18:26:28.310317+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42894	TCP
2025-03-27T18:26:29.669805+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42896	TCP
2025-03-27T18:26:30.001580+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42914	TCP
2025-03-27T18:26:30.347880+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42918	TCP
2025-03-27T18:26:30.727727+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42926	TCP
2025-03-27T18:26:31.075922+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42954	TCP
2025-03-27T18:26:31.425669+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42972	TCP
2025-03-27T18:26:31.772857+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	42992	TCP
2025-03-27T18:26:32.130027+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43046	TCP
2025-03-27T18:26:32.477719+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43058	TCP
2025-03-27T18:26:32.829243+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43060	TCP
2025-03-27T18:26:33.177484+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43068	TCP
2025-03-27T18:26:33.520173+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43070	TCP
2025-03-27T18:26:33.863809+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43072	TCP
2025-03-27T18:26:34.198054+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43076	TCP
2025-03-27T18:26:34.530834+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43092	TCP
2025-03-27T18:26:34.880310+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43094	TCP
2025-03-27T18:26:35.213514+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43126	TCP
2025-03-27T18:26:35.567718+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43202	TCP
2025-03-27T18:26:35.904771+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43234	TCP
2025-03-27T18:26:36.246314+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43258	TCP
2025-03-27T18:26:36.582219+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43292	TCP
2025-03-27T18:26:36.929981+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43314	TCP
2025-03-27T18:26:37.278258+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43358	TCP
2025-03-27T18:26:37.631657+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43376	TCP
2025-03-27T18:26:37.983786+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43404	TCP
2025-03-27T18:26:38.312809+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43410	TCP
2025-03-27T18:26:38.660358+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43414	TCP
2025-03-27T18:26:39.004707+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43430	TCP
2025-03-27T18:26:39.362035+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43450	TCP
2025-03-27T18:26:39.716860+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43478	TCP
2025-03-27T18:26:40.065988+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43524	TCP
2025-03-27T18:26:40.411052+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43588	TCP
2025-03-27T18:26:47.896957+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	43766	TCP
2025-03-27T18:26:48.230057+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44122	TCP
2025-03-27T18:26:48.574891+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44126	TCP
2025-03-27T18:26:48.928206+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44128	TCP
2025-03-27T18:26:49.265514+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44130	TCP
2025-03-27T18:26:49.606501+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44136	TCP
2025-03-27T18:26:49.956009+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44150	TCP
2025-03-27T18:26:50.308143+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44158	TCP
2025-03-27T18:26:50.651208+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44226	TCP
2025-03-27T18:26:50.985446+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44270	TCP
2025-03-27T18:26:51.324097+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44298	TCP
2025-03-27T18:26:51.668457+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44316	TCP
2025-03-27T18:26:52.009536+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44368	TCP
2025-03-27T18:26:52.344474+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44384	TCP
2025-03-27T18:26:52.696033+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44430	TCP
2025-03-27T18:26:53.039699+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44448	TCP
2025-03-27T18:26:53.372801+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44462	TCP
2025-03-27T18:26:53.703903+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44468	TCP
2025-03-27T18:26:54.037900+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44472	TCP
2025-03-27T18:26:54.367620+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44490	TCP
2025-03-27T18:26:54.701845+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44514	TCP
2025-03-27T18:26:55.038048+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44546	TCP
2025-03-27T18:26:55.399400+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44582	TCP
2025-03-27T18:26:55.752132+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44688	TCP
2025-03-27T18:26:56.109669+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44844	TCP
2025-03-27T18:26:56.449499+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	44982	TCP
2025-03-27T18:26:56.806786+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45024	TCP
2025-03-27T18:26:57.140687+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45026	TCP
2025-03-27T18:26:57.475252+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45032	TCP
2025-03-27T18:26:57.809719+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45034	TCP
2025-03-27T18:26:58.173326+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45040	TCP
2025-03-27T18:26:58.514341+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45042	TCP
2025-03-27T18:26:58.862855+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45044	TCP
2025-03-27T18:26:59.193675+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45046	TCP
2025-03-27T18:26:59.537751+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45050	TCP
2025-03-27T18:26:59.873442+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45052	TCP
2025-03-27T18:27:00.207320+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45054	TCP
2025-03-27T18:27:00.562827+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45060	TCP
2025-03-27T18:27:00.902881+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45074	TCP
2025-03-27T18:27:01.233332+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45082	TCP
2025-03-27T18:27:01.569602+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45110	TCP
2025-03-27T18:27:01.903533+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45122	TCP
2025-03-27T18:27:02.251434+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45136	TCP
2025-03-27T18:27:02.581290+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45186	TCP
2025-03-27T18:27:02.931134+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45214	TCP
2025-03-27T18:27:03.271965+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45216	TCP
2025-03-27T18:27:03.613554+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45222	TCP
2025-03-27T18:27:03.947528+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45226	TCP
2025-03-27T18:27:04.278841+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45228	TCP
2025-03-27T18:27:04.629824+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45230	TCP
2025-03-27T18:27:04.981320+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45236	TCP
2025-03-27T18:27:05.312317+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45250	TCP
2025-03-27T18:27:05.641874+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45258	TCP
2025-03-27T18:27:05.982970+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45326	TCP
2025-03-27T18:27:06.312025+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45370	TCP
2025-03-27T18:27:06.662237+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45398	TCP
2025-03-27T18:27:07.010527+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45432	TCP
2025-03-27T18:27:07.352448+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45468	TCP
2025-03-27T18:27:07.712092+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45498	TCP
2025-03-27T18:27:08.070289+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45530	TCP
2025-03-27T18:27:08.406014+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45558	TCP
2025-03-27T18:27:08.755306+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45562	TCP
2025-03-27T18:27:09.105028+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45568	TCP
2025-03-27T18:27:09.449771+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45574	TCP
2025-03-27T18:27:09.787172+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45590	TCP
2025-03-27T18:27:10.117492+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45628	TCP
2025-03-27T18:27:10.451652+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45654	TCP
2025-03-27T18:27:10.784245+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45694	TCP
2025-03-27T18:27:11.113594+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45806	TCP
2025-03-27T18:27:11.459266+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	45944	TCP
2025-03-27T18:27:11.793908+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46106	TCP
2025-03-27T18:27:12.137616+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46124	TCP
2025-03-27T18:27:12.479978+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46126	TCP
2025-03-27T18:27:12.816983+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46132	TCP
2025-03-27T18:27:13.153055+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46134	TCP
2025-03-27T18:27:13.486578+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46140	TCP
2025-03-27T18:27:13.828854+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46142	TCP
2025-03-27T18:27:14.178202+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46144	TCP
2025-03-27T18:27:14.530297+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46146	TCP
2025-03-27T18:27:14.860009+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46150	TCP
2025-03-27T18:27:15.207710+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46152	TCP
2025-03-27T18:27:15.549894+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46154	TCP
2025-03-27T18:27:15.885892+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46170	TCP
2025-03-27T18:27:16.220941+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46174	TCP
2025-03-27T18:27:16.556540+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46182	TCP
2025-03-27T18:27:16.901829+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46210	TCP
2025-03-27T18:27:17.251329+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46224	TCP
2025-03-27T18:27:17.600467+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46242	TCP
2025-03-27T18:27:17.944039+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46296	TCP
2025-03-27T18:27:18.293406+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46314	TCP
2025-03-27T18:27:18.641585+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46316	TCP
2025-03-27T18:27:18.974266+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46322	TCP
2025-03-27T18:27:19.315996+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46326	TCP
2025-03-27T18:27:19.679226+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46328	TCP
2025-03-27T18:27:20.021170+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46330	TCP
2025-03-27T18:27:20.375242+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46340	TCP
2025-03-27T18:27:20.726783+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46350	TCP
2025-03-27T18:27:21.078016+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46368	TCP
2025-03-27T18:27:21.430470+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46440	TCP
2025-03-27T18:27:21.763678+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46488	TCP
2025-03-27T18:27:22.115054+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46498	TCP
2025-03-27T18:27:22.449109+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46548	TCP
2025-03-27T18:27:22.784292+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46568	TCP
2025-03-27T18:27:23.134108+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46612	TCP
2025-03-27T18:27:23.463766+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46630	TCP
2025-03-27T18:27:23.813202+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46658	TCP
2025-03-27T18:27:24.146529+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46666	TCP
2025-03-27T18:27:24.495916+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46670	TCP
2025-03-27T18:27:24.837899+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46678	TCP
2025-03-27T18:27:25.186870+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46690	TCP
2025-03-27T18:27:25.536556+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46734	TCP
2025-03-27T18:27:25.878055+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46766	TCP
2025-03-27T18:27:26.227440+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46806	TCP
2025-03-27T18:27:26.556004+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	46942	TCP
2025-03-27T18:27:26.902419+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47080	TCP
2025-03-27T18:27:27.250005+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47222	TCP
2025-03-27T18:27:28.597848+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47224	TCP
2025-03-27T18:27:28.947918+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47234	TCP
2025-03-27T18:27:29.280390+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47236	TCP
2025-03-27T18:27:29.628277+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47238	TCP
2025-03-27T18:27:29.980001+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47242	TCP
2025-03-27T18:27:30.313353+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47244	TCP
2025-03-27T18:27:30.662281+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47246	TCP
2025-03-27T18:27:31.015114+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47248	TCP
2025-03-27T18:27:31.372030+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47264	TCP
2025-03-27T18:27:31.703709+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47268	TCP
2025-03-27T18:27:32.054007+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47278	TCP
2025-03-27T18:27:32.399535+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47304	TCP
2025-03-27T18:27:32.749056+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47326	TCP
2025-03-27T18:27:33.105057+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47354	TCP
2025-03-27T18:27:33.462513+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47406	TCP
2025-03-27T18:27:33.821209+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47408	TCP
2025-03-27T18:27:34.171053+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47414	TCP
2025-03-27T18:27:34.508731+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47418	TCP
2025-03-27T18:27:34.870893+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47420	TCP
2025-03-27T18:27:35.228056+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47422	TCP
2025-03-27T18:27:35.572029+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47428	TCP
2025-03-27T18:27:35.903692+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47442	TCP
2025-03-27T18:27:36.239116+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47450	TCP
2025-03-27T18:27:36.577455+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47488	TCP
2025-03-27T18:27:36.936643+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47562	TCP
2025-03-27T18:27:37.284671+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47590	TCP
2025-03-27T18:27:37.621227+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47624	TCP
2025-03-27T18:27:37.954595+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47660	TCP
2025-03-27T18:27:38.285012+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47676	TCP
2025-03-27T18:27:38.642655+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47722	TCP
2025-03-27T18:27:38.976397+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47740	TCP
2025-03-27T18:27:39.328181+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47754	TCP
2025-03-27T18:27:39.694241+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47760	TCP
2025-03-27T18:27:40.050469+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47764	TCP
2025-03-27T18:27:40.383803+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47782	TCP
2025-03-27T18:27:40.743522+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47820	TCP
2025-03-27T18:27:41.084152+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47846	TCP
2025-03-27T18:27:41.427216+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	47886	TCP
2025-03-27T18:27:41.759989+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48020	TCP
2025-03-27T18:27:42.088484+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48158	TCP
2025-03-27T18:27:42.422191+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48316	TCP
2025-03-27T18:27:42.756326+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48318	TCP
2025-03-27T18:27:43.104895+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48322	TCP
2025-03-27T18:27:43.459959+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48330	TCP
2025-03-27T18:27:43.821706+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48336	TCP
2025-03-27T18:27:44.152634+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48340	TCP
2025-03-27T18:27:44.503849+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48342	TCP
2025-03-27T18:27:44.840506+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48344	TCP
2025-03-27T18:27:45.188153+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48348	TCP
2025-03-27T18:27:45.528930+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48350	TCP
2025-03-27T18:27:45.862033+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48352	TCP
2025-03-27T18:27:46.196316+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48354	TCP
2025-03-27T18:27:46.547115+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48370	TCP
2025-03-27T18:27:46.879503+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48376	TCP
2025-03-27T18:27:47.226040+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48386	TCP
2025-03-27T18:27:47.568969+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48412	TCP
2025-03-27T18:27:47.914881+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48430	TCP
2025-03-27T18:27:48.248057+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48462	TCP
2025-03-27T18:27:48.589863+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48514	TCP
2025-03-27T18:27:48.934258+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48518	TCP
2025-03-27T18:27:49.280393+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48520	TCP
2025-03-27T18:27:49.617245+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48526	TCP
2025-03-27T18:27:49.947231+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48528	TCP
2025-03-27T18:27:50.288980+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48530	TCP
2025-03-27T18:27:50.624418+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48534	TCP
2025-03-27T18:27:50.971053+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48550	TCP
2025-03-27T18:27:51.320172+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48552	TCP
2025-03-27T18:27:51.662996+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48584	TCP
2025-03-27T18:27:52.003132+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48656	TCP
2025-03-27T18:27:52.360482+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48688	TCP
2025-03-27T18:27:52.722149+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48704	TCP
2025-03-27T18:27:53.074265+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48744	TCP
2025-03-27T18:27:53.431593+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48778	TCP
2025-03-27T18:27:53.788904+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48810	TCP
2025-03-27T18:27:54.141075+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48842	TCP
2025-03-27T18:27:54.476841+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48856	TCP
2025-03-27T18:27:54.825346+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48860	TCP
2025-03-27T18:27:55.159676+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48864	TCP
2025-03-27T18:27:55.511400+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48880	TCP
2025-03-27T18:27:55.857372+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48906	TCP
2025-03-27T18:27:56.198306+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48938	TCP
2025-03-27T18:27:56.531606+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	48974	TCP
2025-03-27T18:27:56.886362+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49036	TCP
2025-03-27T18:28:00.261372+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49218	TCP
2025-03-27T18:28:00.606111+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49430	TCP
2025-03-27T18:28:00.968682+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49432	TCP
2025-03-27T18:28:01.306737+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49434	TCP
2025-03-27T18:28:01.652055+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49440	TCP
2025-03-27T18:28:02.001169+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49456	TCP
2025-03-27T18:28:02.349659+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49464	TCP
2025-03-27T18:28:02.695956+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49486	TCP
2025-03-27T18:28:03.055157+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49504	TCP
2025-03-27T18:28:03.385384+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49524	TCP
2025-03-27T18:28:03.719816+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49574	TCP
2025-03-27T18:28:04.062708+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49596	TCP
2025-03-27T18:28:04.419717+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49600	TCP
2025-03-27T18:28:04.750778+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49604	TCP
2025-03-27T18:28:05.101297+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49608	TCP
2025-03-27T18:28:05.439334+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49610	TCP
2025-03-27T18:28:05.782671+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49612	TCP
2025-03-27T18:28:06.122170+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49622	TCP
2025-03-27T18:28:06.456189+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49632	TCP
2025-03-27T18:28:06.807701+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49650	TCP
2025-03-27T18:28:07.146681+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49710	TCP
2025-03-27T18:28:07.492139+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49766	TCP
2025-03-27T18:28:07.825444+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49776	TCP
2025-03-27T18:28:08.169321+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49808	TCP
2025-03-27T18:28:08.520031+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49844	TCP
2025-03-27T18:28:08.859701+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49874	TCP
2025-03-27T18:28:09.219711+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49906	TCP
2025-03-27T18:28:09.570403+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49934	TCP
2025-03-27T18:28:09.923964+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49938	TCP
2025-03-27T18:28:10.272715+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49942	TCP
2025-03-27T18:28:10.620504+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49948	TCP
2025-03-27T18:28:10.962854+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	49964	TCP
2025-03-27T18:28:11.320241+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50002	TCP
2025-03-27T18:28:11.677121+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50028	TCP
2025-03-27T18:28:12.016008+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50068	TCP
2025-03-27T18:28:12.370263+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50200	TCP
2025-03-27T18:28:12.723865+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50354	TCP
2025-03-27T18:28:13.070276+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50498	TCP
2025-03-27T18:28:14.435034+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50502	TCP
2025-03-27T18:28:14.785566+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50516	TCP
2025-03-27T18:28:15.134152+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50518	TCP
2025-03-27T18:28:15.471786+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50522	TCP
2025-03-27T18:28:15.805484+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50528	TCP
2025-03-27T18:28:16.148056+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50532	TCP
2025-03-27T18:28:16.496988+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50534	TCP
2025-03-27T18:28:16.833869+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50540	TCP
2025-03-27T18:28:17.194401+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50556	TCP
2025-03-27T18:28:17.545944+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50564	TCP
2025-03-27T18:28:17.895661+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50592	TCP
2025-03-27T18:28:18.259466+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50606	TCP
2025-03-27T18:28:18.602921+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50628	TCP
2025-03-27T18:28:18.940073+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50692	TCP
2025-03-27T18:28:19.286715+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50708	TCP
2025-03-27T18:28:19.624070+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50712	TCP
2025-03-27T18:28:19.984471+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50718	TCP
2025-03-27T18:28:20.330658+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50720	TCP
2025-03-27T18:28:20.665489+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50722	TCP
2025-03-27T18:28:21.007634+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50726	TCP
2025-03-27T18:28:21.351141+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50734	TCP
2025-03-27T18:28:21.701917+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50742	TCP
2025-03-27T18:28:22.031938+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50760	TCP
2025-03-27T18:28:22.361274+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50830	TCP
2025-03-27T18:28:22.694894+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50876	TCP
2025-03-27T18:28:23.043269+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50886	TCP
2025-03-27T18:28:23.397510+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50934	TCP
2025-03-27T18:28:23.731886+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50952	TCP
2025-03-27T18:28:24.074400+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	50992	TCP
2025-03-27T18:28:24.424734+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51010	TCP
2025-03-27T18:28:24.781127+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51038	TCP
2025-03-27T18:28:25.128322+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51044	TCP
2025-03-27T18:28:25.456644+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51046	TCP
2025-03-27T18:28:25.805642+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51052	TCP
2025-03-27T18:28:26.138049+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51068	TCP
2025-03-27T18:28:26.479678+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51102	TCP
2025-03-27T18:28:26.825333+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51126	TCP
2025-03-27T18:28:27.155818+0100	2836863	1	A Network Trojan was detected	93.115.172.234	6667	192.168.2.15	51162	TCP

HTTP traffic detected: GET / HTTP/1.1User-Agent: wget/1.20.3-1ubuntu1 Ubuntu/20.04.2/LTS GNU/Linux/5.4.0-72-generic/x86_64 Intel(R)/Xeon(R)/Silver/4210/CPU/@/2.20GHz cloud_id/noneAccept: */*Accept-Encoding: identityHost: motd.ubuntu.comConnection: Keep-Alive

Source: global traffic

DNS traffic detected: DNS query: daisy.ubuntu.com

Source: pftp.elf

String found in binary or memory: http://93.115.172.234/bins.sh;

Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34138
Source: unknown	Network traffic detected: HTTP traffic on port 34138 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: pftp.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5515.1.00007f0030001000.00007f0030011000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown
Source: 5513.1.00007f0030001000.00007f0030011000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f Author: unknown

Source: pftp.elf	ELF static info symbol of initial sample: passwords
Source: pftp.elf	ELF static info symbol of initial sample: usernames

Source: pftp.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5515.1.00007f0030001000.00007f0030011000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26
Source: 5513.1.00007f0030001000.00007f0030011000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_fb14e81f severity = 100, os = linux, arch_context = x86, creation_date = 2022-01-05, scan_context = file, memory, reference = 0fd07e6068a721774716eb4940e2c19faef02d5bdacf3b018bf5995fa98a3a27, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 12b430108256bd0f57f48b9dbbea12eba7405c0b3b66a1c4b882647051f1ec52, id = fb14e81f-be2a-4428-9877-958e394a7ae2, last_modified = 2022-01-26

Source: classification engine

Classification label: mal100.spre.troj.linELF@0/1@2/0

Source: pftp.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/crt1.S
Source: pftp.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/crti.S
Source: pftp.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/crtn.S
Source: pftp.elf	ELF static info symbol of initial sample: libc/sysdeps/linux/m68k/vfork.S

Source: /usr/bin/dash (PID: 5571)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.MOpt5PgGfU /tmp/tmp.VtmUyWWmLq /tmp/tmp.9XLNkGTnsi			Jump to behavior
Source: /usr/bin/dash (PID: 5580)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.MOpt5PgGfU /tmp/tmp.VtmUyWWmLq /tmp/tmp.9XLNkGTnsi			Jump to behavior

Source: /tmp/pftp.elf (PID: 5513)

Queries kernel information via 'uname':

Jump to behavior

Source: pftp.elf, 5513.1.00007ffff2bc1000.00007ffff2be2000.rw-.sdmp, pftp.elf, 5515.1.00007ffff2bc1000.00007ffff2be2000.rw-.sdmp	Binary or memory string: Ykx86_64/usr/bin/qemu-m68k/tmp/pftp.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/pftp.elf
Source: pftp.elf, 5513.1.00007ffff2bc1000.00007ffff2be2000.rw-.sdmp, pftp.elf, 5515.1.00007ffff2bc1000.00007ffff2be2000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: pftp.elf, 5513.1.00007ffff2bc1000.00007ffff2be2000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.wlgsk3
Source: pftp.elf, 5513.1.00005601534ca000.000056015354e000.rw-.sdmp, pftp.elf, 5515.1.00005601534ca000.000056015354e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k
Source: pftp.elf, 5513.1.00007ffff2bc1000.00007ffff2be2000.rw-.sdmp	Binary or memory string: V/tmp/qemu-open.wlgsk3\D
Source: pftp.elf, 5513.1.00005601534ca000.000056015354e000.rw-.sdmp, pftp.elf, 5515.1.00005601534ca000.000056015354e000.rw-.sdmp	Binary or memory string: V!/etc/qemu-binfmt/m68k

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match

File source: pftp.elf, type: SAMPLE

Remote Access Functionality

Yara detected Gafgyt

Source: Yara match

File source: pftp.elf, type: SAMPLE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 File Deletion	LSASS Memory	1 Network Service Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	1 Remote System Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	13 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

Threatname: Gafgyt

{
  "C2 url": "93.115.172.234:6667"
}

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
pftp.elf	72%	ReversingLabs	Linux.Backdoor.Gafgyt
pftp.elf	100%	Avira	EXP/ELF.Gafgyt.B

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://motd.ubuntu.com/	false		high
93.115.172.234:6667	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://93.115.172.234/bins.sh;	pftp.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
136.218.253.252	unknown	United States	1563	DNIC-ASBLK-01550-01601US	true
136.218.253.253	unknown	United States	1563	DNIC-ASBLK-01550-01601US	true
136.218.253.250	unknown	United States	1563	DNIC-ASBLK-01550-01601US	true
136.218.253.251	unknown	United States	1563	DNIC-ASBLK-01550-01601US	true
136.218.253.254	unknown	United States	1563	DNIC-ASBLK-01550-01601US	true
136.218.253.255	unknown	United States	1563	DNIC-ASBLK-01550-01601US	true
3.239.46.191	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.192	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.190	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.195	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.196	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.193	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.194	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.199	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.197	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.198	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.170	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.173	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.174	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.171	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.172	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.177	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.178	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.175	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.176	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.179	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.180	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.181	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.184	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.185	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.182	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.183	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.188	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.189	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.186	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.187	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.151	unknown	United States	14618	AMAZON-AESUS	true
133.84.205.5	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
3.239.46.152	unknown	United States	14618	AMAZON-AESUS	true
133.84.205.4	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
133.84.205.7	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
3.239.46.150	unknown	United States	14618	AMAZON-AESUS	true
133.84.205.6	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
3.239.46.155	unknown	United States	14618	AMAZON-AESUS	true
133.84.205.9	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
3.239.46.156	unknown	United States	14618	AMAZON-AESUS	true
133.84.205.8	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
3.239.46.153	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.154	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.159	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.157	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.158	unknown	United States	14618	AMAZON-AESUS	true
133.84.205.1	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
133.84.205.0	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
133.84.205.3	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
133.84.205.2	unknown	Japan	55904	KOGAKUIN-ASKOGAKUINUniversityJP	true
3.239.46.162	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.163	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.160	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.161	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.166	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.167	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.164	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.165	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.168	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.169	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.130	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.133	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.134	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.131	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.132	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.137	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.138	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.135	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.136	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.139	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.140	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.141	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.144	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.145	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.142	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.143	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.148	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.149	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.146	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.147	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.111	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.112	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.110	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.115	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.116	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.113	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.114	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.119	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.117	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.118	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.122	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.123	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.120	unknown	United States	14618	AMAZON-AESUS	true
3.239.46.121	unknown	United States	14618	AMAZON-AESUS	true

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	apache2.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	ftp.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	sshd.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	SecuriteInfo.com.Linux.Mirai.4306.30063.19032.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	SecuriteInfo.com.Linux.Mirai.4514.4138.24817.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	SecuriteInfo.com.Linux.Mirai.4306.20497.23930.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	SecuriteInfo.com.Linux.Mirai.4306.5284.10688.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	SecuriteInfo.com.Linux.Mirai.2522.5402.17083.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	k03ldc.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DNIC-ASBLK-01550-01601US	resgod.m68k.elf	Get hash	malicious	Mirai	Browse	134.232.248.53
	frosty.x86.elf	Get hash	malicious	Unknown	Browse	155.30.181.223
	frosty.spc.elf	Get hash	malicious	Unknown	Browse	155.28.153.166
	arm.elf	Get hash	malicious	Gafgyt, Okiru	Browse	155.26.234.30
	resgod.mips.elf	Get hash	malicious	Mirai	Browse	134.235.6.146
	i686.elf	Get hash	malicious	Mirai	Browse	147.35.128.121
	Nyx4r.mpsl.elf	Get hash	malicious	Okiru	Browse	155.30.181.231
	jkse.arm5.elf	Get hash	malicious	Unknown	Browse	136.218.244.244
	jklspc.elf	Get hash	malicious	Unknown	Browse	140.154.8.18
	resgod.mpsl.elf	Get hash	malicious	Mirai	Browse	134.235.142.100
DNIC-ASBLK-01550-01601US	resgod.m68k.elf	Get hash	malicious	Mirai	Browse	134.232.248.53
	frosty.x86.elf	Get hash	malicious	Unknown	Browse	155.30.181.223
	frosty.spc.elf	Get hash	malicious	Unknown	Browse	155.28.153.166
	arm.elf	Get hash	malicious	Gafgyt, Okiru	Browse	155.26.234.30
	resgod.mips.elf	Get hash	malicious	Mirai	Browse	134.235.6.146
	i686.elf	Get hash	malicious	Mirai	Browse	147.35.128.121
	Nyx4r.mpsl.elf	Get hash	malicious	Okiru	Browse	155.30.181.231
	jkse.arm5.elf	Get hash	malicious	Unknown	Browse	136.218.244.244
	jklspc.elf	Get hash	malicious	Unknown	Browse	140.154.8.18
	resgod.mpsl.elf	Get hash	malicious	Mirai	Browse	134.235.142.100
DNIC-ASBLK-01550-01601US	resgod.m68k.elf	Get hash	malicious	Mirai	Browse	134.232.248.53
	frosty.x86.elf	Get hash	malicious	Unknown	Browse	155.30.181.223
	frosty.spc.elf	Get hash	malicious	Unknown	Browse	155.28.153.166
	arm.elf	Get hash	malicious	Gafgyt, Okiru	Browse	155.26.234.30
	resgod.mips.elf	Get hash	malicious	Mirai	Browse	134.235.6.146
	i686.elf	Get hash	malicious	Mirai	Browse	147.35.128.121
	Nyx4r.mpsl.elf	Get hash	malicious	Okiru	Browse	155.30.181.231
	jkse.arm5.elf	Get hash	malicious	Unknown	Browse	136.218.244.244
	jklspc.elf	Get hash	malicious	Unknown	Browse	140.154.8.18
	resgod.mpsl.elf	Get hash	malicious	Mirai	Browse	134.235.142.100
DNIC-ASBLK-01550-01601US	resgod.m68k.elf	Get hash	malicious	Mirai	Browse	134.232.248.53
	frosty.x86.elf	Get hash	malicious	Unknown	Browse	155.30.181.223
	frosty.spc.elf	Get hash	malicious	Unknown	Browse	155.28.153.166
	arm.elf	Get hash	malicious	Gafgyt, Okiru	Browse	155.26.234.30
	resgod.mips.elf	Get hash	malicious	Mirai	Browse	134.235.6.146
	i686.elf	Get hash	malicious	Mirai	Browse	147.35.128.121
	Nyx4r.mpsl.elf	Get hash	malicious	Okiru	Browse	155.30.181.231
	jkse.arm5.elf	Get hash	malicious	Unknown	Browse	136.218.244.244
	jklspc.elf	Get hash	malicious	Unknown	Browse	140.154.8.18
	resgod.mpsl.elf	Get hash	malicious	Mirai	Browse	134.235.142.100
DNIC-ASBLK-01550-01601US	resgod.m68k.elf	Get hash	malicious	Mirai	Browse	134.232.248.53
	frosty.x86.elf	Get hash	malicious	Unknown	Browse	155.30.181.223
	frosty.spc.elf	Get hash	malicious	Unknown	Browse	155.28.153.166
	arm.elf	Get hash	malicious	Gafgyt, Okiru	Browse	155.26.234.30
	resgod.mips.elf	Get hash	malicious	Mirai	Browse	134.235.6.146
	i686.elf	Get hash	malicious	Mirai	Browse	147.35.128.121
	Nyx4r.mpsl.elf	Get hash	malicious	Okiru	Browse	155.30.181.231
	jkse.arm5.elf	Get hash	malicious	Unknown	Browse	136.218.244.244
	jklspc.elf	Get hash	malicious	Unknown	Browse	140.154.8.18
	resgod.mpsl.elf	Get hash	malicious	Mirai	Browse	134.235.142.100

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/tmp/qemu-open.wlgsk3 (deleted)

Download File

Process:	/tmp/pftp.elf
File Type:	ASCII text
Category:	dropped
Size (bytes):	230
Entropy (8bit):	3.709552666863289
Encrypted:	false
SSDEEP:	6:iekrEcvwAsE5KlwSd4pzKaV6Lpms/a/1VCxGF:ur+m5MwSdIKaV6L1adVRF
MD5:	2E667F43AE18CD1FE3C108641708A82C
SHA1:	12B90DE2DA0FBCFE66F3D6130905E56C8D6A68D3
SHA-256:	6F721492E7A337C5B498A8F55F5EB7AC745AFF716D0B5B08EFF2C1B6B250F983
SHA-512:	D2A0EE2509154EC1098994F38BE172F98F4150399C534A04D5C675D7C05630802225019F19344CC9070C576BC465A4FEB382AC7712DE6BF25E9244B54A9DB830
Malicious:	false
Reputation:	high, very likely benign file
Preview:	Iface.Destination.Gateway .Flags.RefCnt.Use.Metric.Mask..MTU.Window.IRTT .ens160.00000000.c0a80201.0003.0.0.0.00000000.0.0.0.ens160.c0a80200.00000000.0001.0.0.0.ffffff00.0.0.0.

Source: unknown	TCP traffic detected without corresponding DNS query: 93.115.172.234
Source: unknown	TCP traffic detected without corresponding DNS query: 93.115.172.234
Source: unknown	TCP traffic detected without corresponding DNS query: 93.115.172.234
Source: unknown	TCP traffic detected without corresponding DNS query: 93.115.172.234
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.0
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.1
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.2
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.3
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.4
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.5
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.6
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.7
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.8
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.9
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.10
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.11
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.12
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.13
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.14
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.15
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.16
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.17
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.18
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.19
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.20
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.21
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.22
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.23
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.24
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.25
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.26
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.27
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.28
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.29
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.30
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.31
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.32
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.33
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.34
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.35
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.36
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.37
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.38
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.39
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.40
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.41
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.42
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.43
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.44
Source: unknown	TCP traffic detected without corresponding DNS query: 38.183.198.45

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, not stripped
Entropy (8bit):	6.011621676310961
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	pftp.elf
File size:	84'242 bytes
MD5:	87ed1fcb88c5e21cd65dfc6e0bae2789
SHA1:	dabd6f8670b0c63f74f6b7ca8a195fd874a0f66e
SHA256:	b85f0ec92de6e669b4b5834e4fa6191ba4b73521e426a37348fca888a4b80d27
SHA512:	9bb0f1946ae7261533cebb12beca8f38859af8fddaa1f3220663d5e523f6e54c223aa9a9e1e17e591378f6870777febb27ff54eedde60d5332943704fc4a26ee
SSDEEP:	1536:CDZnbtXBNaSG8F6mdR/zTM1XHUTKvwAAcsBSiVwrmztZ:CDZnbtRASvdRnM508sBS2R
TLSH:	3E8308A2F941EF66F40A9A3A06C347247530FF660B831E7173577A669A723C47827F06
File Content Preview:	.ELF.......................D...4.........4. ...(.................................. .......................e....... .dt.Q............................NV..a....da.....N^NuNV..J9...Hf>"y.... QJ.g.X.#.....N."y.... QJ.f.A.....J.g.Hy...\|N.X........HN^NuNV..N^NuN

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66444
Section Header Size:	40
Number of Section Headers:	15
Header String Table Index:	12

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Link	Info	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0	0	0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	0	0	2
.text	PROGBITS	0x800000a8	0xa8	0xdad4	0x0	0x6	AX	0	0	4
.fini	PROGBITS	0x8000db7c	0xdb7c	0xe	0x0	0x6	AX	0	0	2
.rodata	PROGBITS	0x8000db8a	0xdb8a	0x1af2	0x0	0x2	A	0	0	2
.eh_frame	PROGBITS	0x8000f67c	0xf67c	0x4	0x0	0x2	A	0	0	4
.ctors	PROGBITS	0x80011680	0xf680	0x8	0x0	0x3	WA	0	0	4
.dtors	PROGBITS	0x80011688	0xf688	0x8	0x0	0x3	WA	0	0	4
.jcr	PROGBITS	0x80011690	0xf690	0x4	0x0	0x3	WA	0	0	4
.data	PROGBITS	0x80011694	0xf694	0x3b4	0x0	0x3	WA	0	0	4
.bss	NOBITS	0x80011a48	0xfa48	0x6148	0x0	0x3	WA	0	0	4
.comment	PROGBITS	0x0	0xfa48	0x8dc	0x0	0x0		0	0	1
.shstrtab	STRTAB	0x0	0x10324	0x66	0x0	0x0		0	0	1
.symtab	SYMTAB	0x0	0x105e4	0x2680	0x10	0x0		14	234	4
.strtab	STRTAB	0x0	0x12c64	0x1cae	0x0	0x0		0	0	1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0xf680	0xf680	5.9984	0x5	R E	0x2000	.init .text .fini .rodata .eh_frame
LOAD	0xf680	0x80011680	0x80011680	0x3c8	0x6510	3.0469	0x6	RW	0x2000	.ctors .dtors .jcr .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 27, 2025 18:27:38.382873058 CET	192.168.2.15	8.8.8.8	0xc93b	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 18:27:38.382917881 CET	192.168.2.15	8.8.8.8	0x7e03	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 27, 2025 18:27:38.473839045 CET	8.8.8.8	192.168.2.15	0xc93b	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Mar 27, 2025 18:27:38.473839045 CET	8.8.8.8	192.168.2.15	0xc93b	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:25:33 UTC	249	OUT	GET / HTTP/1.1 User-Agent: wget/1.20.3-1ubuntu1 Ubuntu/20.04.2/LTS GNU/Linux/5.4.0-72-generic/x86_64 Intel(R)/Xeon(R)/Silver/4210/CPU/@/2.20GHz cloud_id/none Accept: / Accept-Encoding: identity Host: motd.ubuntu.com Connection: Keep-Alive
2025-03-27 17:25:35 UTC	271	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:25:35 GMT Server: Apache/2.4.18 (Ubuntu) Last-Modified: Thu, 27 Mar 2025 17:15:40 GMT ETag: "d8-631561a695e57" Accept-Ranges: bytes Content-Length: 216 Vary: Accept-Encoding Connection: close Content-Type: text/plain
2025-03-27 17:25:35 UTC	216	IN	Data Raw: 20 2a 20 53 74 72 69 63 74 6c 79 20 63 6f 6e 66 69 6e 65 64 20 4b 75 62 65 72 6e 65 74 65 73 20 6d 61 6b 65 73 20 65 64 67 65 20 61 6e 64 20 49 6f 54 20 73 65 63 75 72 65 2e 20 4c 65 61 72 6e 20 68 6f 77 20 4d 69 63 72 6f 4b 38 73 0a 20 20 20 6a 75 73 74 20 72 61 69 73 65 64 20 74 68 65 20 62 61 72 20 66 6f 72 20 65 61 73 79 2c 20 72 65 73 69 6c 69 65 6e 74 20 61 6e 64 20 73 65 63 75 72 65 20 4b 38 73 20 63 6c 75 73 74 65 72 20 64 65 70 6c 6f 79 6d 65 6e 74 2e 0a 0a 20 20 20 68 74 74 70 73 3a 2f 2f 75 62 75 6e 74 75 2e 63 6f 6d 2f 65 6e 67 61 67 65 2f 73 65 63 75 72 65 2d 6b 75 62 65 72 6e 65 74 65 73 2d 61 74 2d 74 68 65 2d 65 64 67 65 0a Data Ascii: * Strictly confined Kubernetes makes edge and IoT secure. Learn how MicroK8s just raised the bar for easy, resilient and secure K8s cluster deployment. https://ubuntu.com/engage/secure-kubernetes-at-the-edge

Start time (UTC):	17:24:50
Start date (UTC):	27/03/2025
Path:	/tmp/pftp.elf
Arguments:	/tmp/pftp.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	17:24:51
Start date (UTC):	27/03/2025
Path:	/tmp/pftp.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Source: ip traffic	Subnet 185.43.115.0/24: 185.43.115.3, 185.43.115.2, 185.43.115.21, 185.43.115.1, 185.43.115.20, 185.43.115.0, 185.43.115.7, 185.43.115.6, 185.43.115.5, 185.43.115.4, 185.43.115.27, 185.43.115.26, 185.43.115.29, 185.43.115.28, 185.43.115.23, 185.43.115.22, 185.43.115.25, 185.43.115.24, 185.43.115.9, 185.43.115.8, 185.43.115.30, 185.43.115.32, 185.43.115.31, 185.43.115.38, 185.43.115.37, 185.43.115.39, 185.43.115.34, 185.43.115.33, 185.43.115.36, 185.43.115.35, 185.43.115.41, 185.43.115.204, 185.43.115.40, 185.43.115.205, 185.43.115.43, 185.43.115.202, 185.43.115.42, 185.43.115.203, 185.43.115.200, 185.43.115.201, 185.43.115.49, 185.43.115.48, 185.43.115.45, 185.43.115.44, 185.43.115.47, 185.43.115.46, 185.43.115.208, 185.43.115.209, 185.43.115.206, 185.43.115.207, 185.43.115.52, 185.43.115.51, 185.43.115.54, 185.43.115.53, 185.43.115.50, 185.43.115.59, 185.43.115.56, 185.43.115.55, 185.43.115.58, 185.43.115.57, 185.43.115.63, 185.43.115.62, 185.43.115.65, 185.43.115.64, 185.43.115.189, 185.43.115.61, 185.43.115.187, 185.43.115.60, 185.43.115.188, 185.43.115.185, 185.43.115.186, 185.43.115.183, 185.43.115.184, 185.43.115.67, 185.43.115.181, 185.43.115.66, 185.43.115.182, 185.43.115.69, 185.43.115.68, 185.43.115.180, 185.43.115.74, 185.43.115.73, 185.43.115.76, 185.43.115.75, 185.43.115.70, 185.43.115.178, 185.43.115.179, 185.43.115.72, 185.43.115.176, 185.43.115.71, 185.43.115.177, 185.43.115.174, 185.43.115.175, 185.43.115.172, 185.43.115.173, 185.43.115.78, 185.43.115.170, 185.43.115.77, 185.43.115.171, 185.43.115.79, 185.43.115.85, 185.43.115.84, 185.43.115.87, 185.43.115.86, 185.43.115.81, 185.43.115.80, 185.43.115.83, 185.43.115.82, 185.43.115.89, 185.43.115.88, 185.43.115.90, 185.43.115.96, 185.43.115.95, 185.43.115.98, 185.43.115.97, 185.43.115.92, 185.43.115.91, 185.43.115.94, 185.43.115.198, 185.43.115.93, 185.43.115.199, 185.43.115.196, 185.43.115.197, 185.43.115.194, 185.43.115.195, 185.43.115.192, 185.43.115.99, 185.43.115.193, 185.43.115.190, 185.43.115.191, 185.43.115.149, 185.43.115.147, 185.43.115.148, 185.43.115.145, 185.43.115.146, 185.43.115.143, 185.43.115.144, 185.43.115.141, 185.43.115.142, 185.43.115.140, 185.43.115.138, 185.43.115.139, 185.43.115.136, 185.43.115.137, 185.43.115.134, 185.43.115.255, 185.43.115.135, 185.43.115.132, 185.43.115.253, 185.43.115.133, 185.43.115.254, 185.43.115.130, 185.43.115.251, 185.43.115.131, 185.43.115.252, 185.43.115.250, 185.43.115.169, 185.43.115.167, 185.43.115.168, 185.43.115.165, 185.43.115.166, 185.43.115.163, 185.43.115.164, 185.43.115.161, 185.43.115.162, 185.43.115.160, 185.43.115.158, 185.43.115.159, 185.43.115.156, 185.43.115.157, 185.43.115.154, 185.43.115.155, 185.43.115.152, 185.43.115.153, 185.43.115.150, 185.43.115.151, 185.43.115.105, 185.43.115.226, 185.43.115.106, 185.43.115.227, 185.43.115.103, 185.43.115.224, 185.43.115.104, 185.43.115.225, 185.43.115.101, 185.43.115.222, 185.43.115.102, 185.43.115.223, 185.43.115.220, 185.43.115.100, 185.43.115.221, 185.43.115.109, 185.43.115.107, 185.43.115.2
Source: ip traffic	Subnet 3.239.46.0/24: 3.239.46.91, 3.239.46.90, 3.239.46.95, 3.239.46.94, 3.239.46.93, 3.239.46.92, 3.239.46.99, 3.239.46.98, 3.239.46.97, 3.239.46.96, 3.239.46.111, 3.239.46.232, 3.239.46.112, 3.239.46.233, 3.239.46.230, 3.239.46.110, 3.239.46.231, 3.239.46.115, 3.239.46.236, 3.239.46.116, 3.239.46.237, 3.239.46.113, 3.239.46.234, 3.239.46.114, 3.239.46.235, 3.239.46.119, 3.239.46.117, 3.239.46.238, 3.239.46.118, 3.239.46.239, 3.239.46.80, 3.239.46.84, 3.239.46.83, 3.239.46.82, 3.239.46.81, 3.239.46.88, 3.239.46.87, 3.239.46.86, 3.239.46.85, 3.239.46.89, 3.239.46.240, 3.239.46.122, 3.239.46.243, 3.239.46.123, 3.239.46.244, 3.239.46.120, 3.239.46.241, 3.239.46.121, 3.239.46.242, 3.239.46.126, 3.239.46.247, 3.239.46.127, 3.239.46.248, 3.239.46.124, 3.239.46.245, 3.239.46.125, 3.239.46.246, 3.239.46.128, 3.239.46.249, 3.239.46.129, 3.239.46.209, 3.239.46.210, 3.239.46.211, 3.239.46.214, 3.239.46.215, 3.239.46.212, 3.239.46.213, 3.239.46.218, 3.239.46.219, 3.239.46.216, 3.239.46.217, 3.239.46.100, 3.239.46.221, 3.239.46.101, 3.239.46.222, 3.239.46.220, 3.239.46.104, 3.239.46.225, 3.239.46.105, 3.239.46.226, 3.239.46.102, 3.239.46.223, 3.239.46.103, 3.239.46.224, 3.239.46.108, 3.239.46.229, 3.239.46.109, 3.239.46.106, 3.239.46.227, 3.239.46.107, 3.239.46.228, 3.239.46.51, 3.239.46.50, 3.239.46.55, 3.239.46.54, 3.239.46.53, 3.239.46.52, 3.239.46.59, 3.239.46.58, 3.239.46.57, 3.239.46.56, 3.239.46.49, 3.239.46.40, 3.239.46.44, 3.239.46.43, 3.239.46.42, 3.239.46.41, 3.239.46.48, 3.239.46.47, 3.239.46.46, 3.239.46.45, 3.239.46.39, 3.239.46.38, 3.239.46.200, 3.239.46.203, 3.239.46.204, 3.239.46.201, 3.239.46.202, 3.239.46.207, 3.239.46.208, 3.239.46.205, 3.239.46.206, 3.239.46.73, 3.239.46.72, 3.239.46.71, 3.239.46.70, 3.239.46.77, 3.239.46.76, 3.239.46.75, 3.239.46.74, 3.239.46.79, 3.239.46.78, 3.239.46.62, 3.239.46.61, 3.239.46.60, 3.239.46.66, 3.239.46.65, 3.239.46.64, 3.239.46.63, 3.239.46.69, 3.239.46.68, 3.239.46.67, 3.239.46.11, 3.239.46.10, 3.239.46.15, 3.239.46.191, 3.239.46.14, 3.239.46.192, 3.239.46.13, 3.239.46.12, 3.239.46.190, 3.239.46.195, 3.239.46.196, 3.239.46.193, 3.239.46.194, 3.239.46.199, 3.239.46.197, 3.239.46.198, 3.239.46.33, 3.239.46.32, 3.239.46.31, 3.239.46.30, 3.239.46.37, 3.239.46.36, 3.239.46.170, 3.239.46.35, 3.239.46.34, 3.239.46.173, 3.239.46.29, 3.239.46.174, 3.239.46.28, 3.239.46.171, 3.239.46.27, 3.239.46.172, 3.239.46.177, 3.239.46.178, 3.239.46.175, 3.239.46.176, 3.239.46.179, 3.239.46.22, 3.239.46.21, 3.239.46.20, 3.239.46.26, 3.239.46.180, 3.239.46.25, 3.239.46.181, 3.239.46.24, 3.239.46.23, 3.239.46.19, 3.239.46.184, 3.239.46.18, 3.239.46.185, 3.239.46.17, 3.239.46.182, 3.239.46.16, 3.239.46.183, 3.239.46.188, 3.239.46.189, 3.239.46.186, 3.239.46.187, 3.239.46.5, 3.239.46.151, 3.239.46.6, 3.239.46.152, 3.239.46.3, 3.239.46.4, 3.239.46.150, 3.239.46.9, 3.239.46.155, 3.239.46.156, 3.239.46.7, 3.239.46.153, 3.239.46.8, 3.239.46.154, 3.239.46.159, 3.239.46.157, 3.239.46.158, 3.239.46.1, 3.239.46.2, 3.239.46.0, 3.239.46.162, 3.239.46.163, 3.
Source: ip traffic	Subnet 133.125.4.0/24: 133.125.4.167, 133.125.4.166, 133.125.4.169, 133.125.4.168, 133.125.4.170, 133.125.4.172, 133.125.4.171, 133.125.4.174, 133.125.4.173, 133.125.4.176, 133.125.4.175, 133.125.4.90, 133.125.4.156, 133.125.4.91, 133.125.4.155, 133.125.4.92, 133.125.4.158, 133.125.4.93, 133.125.4.157, 133.125.4.94, 133.125.4.95, 133.125.4.159, 133.125.4.96, 133.125.4.97, 133.125.4.98, 133.125.4.99, 133.125.4.161, 133.125.4.160, 133.125.4.163, 133.125.4.162, 133.125.4.165, 133.125.4.164, 133.125.4.145, 133.125.4.144, 133.125.4.147, 133.125.4.146, 133.125.4.149, 133.125.4.148, 133.125.4.150, 133.125.4.152, 133.125.4.151, 133.125.4.154, 133.125.4.153, 133.125.4.134, 133.125.4.255, 133.125.4.133, 133.125.4.254, 133.125.4.136, 133.125.4.135, 133.125.4.138, 133.125.4.137, 133.125.4.139, 133.125.4.141, 133.125.4.140, 133.125.4.143, 133.125.4.142, 133.125.4.60, 133.125.4.61, 133.125.4.62, 133.125.4.63, 133.125.4.64, 133.125.4.65, 133.125.4.66, 133.125.4.67, 133.125.4.68, 133.125.4.69, 133.125.4.199, 133.125.4.50, 133.125.4.51, 133.125.4.52, 133.125.4.53, 133.125.4.54, 133.125.4.55, 133.125.4.56, 133.125.4.57, 133.125.4.58, 133.125.4.59, 133.125.4.189, 133.125.4.80, 133.125.4.188, 133.125.4.81, 133.125.4.82, 133.125.4.83, 133.125.4.84, 133.125.4.85, 133.125.4.86, 133.125.4.87, 133.125.4.192, 133.125.4.88, 133.125.4.191, 133.125.4.89, 133.125.4.194, 133.125.4.193, 133.125.4.196, 133.125.4.195, 133.125.4.198, 133.125.4.197, 133.125.4.190, 133.125.4.178, 133.125.4.177, 133.125.4.70, 133.125.4.71, 133.125.4.179, 133.125.4.72, 133.125.4.73, 133.125.4.74, 133.125.4.75, 133.125.4.76, 133.125.4.181, 133.125.4.77, 133.125.4.180, 133.125.4.78, 133.125.4.183, 133.125.4.79, 133.125.4.182, 133.125.4.185, 133.125.4.184, 133.125.4.187, 133.125.4.186, 133.125.4.208, 133.125.4.207, 133.125.4.209, 133.125.4.200, 133.125.4.202, 133.125.4.201, 133.125.4.204, 133.125.4.203, 133.125.4.206, 133.125.4.20, 133.125.4.205, 133.125.4.21, 133.125.4.22, 133.125.4.23, 133.125.4.24, 133.125.4.25, 133.125.4.26, 133.125.4.27, 133.125.4.28, 133.125.4.29, 133.125.4.10, 133.125.4.11, 133.125.4.12, 133.125.4.13, 133.125.4.14, 133.125.4.15, 133.125.4.16, 133.125.4.17, 133.125.4.18, 133.125.4.19, 133.125.4.5, 133.125.4.6, 133.125.4.7, 133.125.4.8, 133.125.4.1, 133.125.4.2, 133.125.4.3, 133.125.4.4, 133.125.4.9, 133.125.4.40, 133.125.4.41, 133.125.4.42, 133.125.4.43, 133.125.4.44, 133.125.4.45, 133.125.4.46, 133.125.4.47, 133.125.4.48, 133.125.4.49, 133.125.4.30, 133.125.4.31, 133.125.4.32, 133.125.4.33, 133.125.4.34, 133.125.4.35, 133.125.4.36, 133.125.4.37, 133.125.4.38, 133.125.4.39, 133.125.4.0, 133.125.4.123, 133.125.4.244, 133.125.4.122, 133.125.4.243, 133.125.4.125, 133.125.4.246, 133.125.4.124, 133.125.4.245, 133.125.4.127, 133.125.4.248, 133.125.4.126, 133.125.4.247, 133.125.4.129, 133.125.4.128, 133.125.4.249, 133.125.4.130, 133.125.4.251, 133.125.4.250, 133.125.4.132, 133.125.4.253, 133.125.4.131, 133.125.4.252, 133.125.4.119, 133.125.4.112, 133.125.4.233, 133.125.4.111, 133.125.4.232, 133.125.4.114, 133.1
Source: ip traffic	Subnet 214.80.27.0/24: 214.80.27.206, 214.80.27.207, 214.80.27.208, 214.80.27.209, 214.80.27.202, 214.80.27.203, 214.80.27.204, 214.80.27.205, 214.80.27.200, 214.80.27.201, 214.80.27.19, 214.80.27.16, 214.80.27.15, 214.80.27.18, 214.80.27.17, 214.80.27.107, 214.80.27.228, 214.80.27.108, 214.80.27.229, 214.80.27.109, 214.80.27.103, 214.80.27.224, 214.80.27.104, 214.80.27.225, 214.80.27.105, 214.80.27.226, 214.80.27.106, 214.80.27.227, 214.80.27.12, 214.80.27.220, 214.80.27.100, 214.80.27.11, 214.80.27.221, 214.80.27.101, 214.80.27.14, 214.80.27.222, 214.80.27.13, 214.80.27.102, 214.80.27.223, 214.80.27.10, 214.80.27.217, 214.80.27.218, 214.80.27.219, 214.80.27.213, 214.80.27.214, 214.80.27.215, 214.80.27.216, 214.80.27.210, 214.80.27.211, 214.80.27.212, 214.80.27.129, 214.80.27.125, 214.80.27.246, 214.80.27.126, 214.80.27.247, 214.80.27.127, 214.80.27.248, 214.80.27.128, 214.80.27.249, 214.80.27.121, 214.80.27.242, 214.80.27.122, 214.80.27.243, 214.80.27.123, 214.80.27.244, 214.80.27.124, 214.80.27.245, 214.80.27.240, 214.80.27.120, 214.80.27.241, 214.80.27.118, 214.80.27.239, 214.80.27.119, 214.80.27.114, 214.80.27.235, 214.80.27.115, 214.80.27.236, 214.80.27.116, 214.80.27.237, 214.80.27.117, 214.80.27.238, 214.80.27.110, 214.80.27.231, 214.80.27.111, 214.80.27.232, 214.80.27.112, 214.80.27.233, 214.80.27.113, 214.80.27.234, 214.80.27.230, 214.80.27.59, 214.80.27.7, 214.80.27.6, 214.80.27.50, 214.80.27.5, 214.80.27.4, 214.80.27.147, 214.80.27.148, 214.80.27.9, 214.80.27.149, 214.80.27.8, 214.80.27.56, 214.80.27.143, 214.80.27.55, 214.80.27.144, 214.80.27.58, 214.80.27.145, 214.80.27.57, 214.80.27.146, 214.80.27.3, 214.80.27.52, 214.80.27.51, 214.80.27.2, 214.80.27.140, 214.80.27.1, 214.80.27.54, 214.80.27.141, 214.80.27.0, 214.80.27.53, 214.80.27.142, 214.80.27.49, 214.80.27.48, 214.80.27.136, 214.80.27.137, 214.80.27.138, 214.80.27.139, 214.80.27.45, 214.80.27.132, 214.80.27.253, 214.80.27.44, 214.80.27.133, 214.80.27.254, 214.80.27.47, 214.80.27.134, 214.80.27.255, 214.80.27.46, 214.80.27.135, 214.80.27.41, 214.80.27.40, 214.80.27.250, 214.80.27.43, 214.80.27.130, 214.80.27.251, 214.80.27.42, 214.80.27.131, 214.80.27.252, 214.80.27.170, 214.80.27.171, 214.80.27.38, 214.80.27.37, 214.80.27.39, 214.80.27.169, 214.80.27.34, 214.80.27.165, 214.80.27.33, 214.80.27.166, 214.80.27.36, 214.80.27.167, 214.80.27.35, 214.80.27.168, 214.80.27.30, 214.80.27.161, 214.80.27.162, 214.80.27.32, 214.80.27.163, 214.80.27.31, 214.80.27.164, 214.80.27.160, 214.80.27.27, 214.80.27.26, 214.80.27.29, 214.80.27.28, 214.80.27.158, 214.80.27.159, 214.80.27.23, 214.80.27.154, 214.80.27.22, 214.80.27.155, 214.80.27.25, 214.80.27.156, 214.80.27.24, 214.80.27.157, 214.80.27.150, 214.80.27.151, 214.80.27.21, 214.80.27.152, 214.80.27.20, 214.80.27.153, 214.80.27.190, 214.80.27.191, 214.80.27.192, 214.80.27.193, 214.80.27.92, 214.80.27.91, 214.80.27.94, 214.80.27.93, 214.80.27.90, 214.80.27.187, 214.80.27.99, 214.80.27.188, 214.80.27.189, 214.80.27.96, 214.80.27.183, 214.80.27.95, 214.80.27.184, 214
Source: ip traffic	Subnet 28.194.153.0/24: 28.194.153.124, 28.194.153.245, 28.194.153.125, 28.194.153.246, 28.194.153.122, 28.194.153.243, 28.194.153.123, 28.194.153.244, 28.194.153.128, 28.194.153.249, 28.194.153.129, 28.194.153.126, 28.194.153.247, 28.194.153.127, 28.194.153.248, 28.194.153.120, 28.194.153.241, 28.194.153.121, 28.194.153.242, 28.194.153.240, 28.194.153.81, 28.194.153.82, 28.194.153.80, 28.194.153.85, 28.194.153.86, 28.194.153.83, 28.194.153.84, 28.194.153.89, 28.194.153.87, 28.194.153.88, 28.194.153.135, 28.194.153.136, 28.194.153.133, 28.194.153.254, 28.194.153.134, 28.194.153.255, 28.194.153.139, 28.194.153.137, 28.194.153.138, 28.194.153.131, 28.194.153.252, 28.194.153.132, 28.194.153.253, 28.194.153.250, 28.194.153.130, 28.194.153.251, 28.194.153.92, 28.194.153.93, 28.194.153.90, 28.194.153.91, 28.194.153.96, 28.194.153.97, 28.194.153.94, 28.194.153.95, 28.194.153.98, 28.194.153.99, 28.194.153.102, 28.194.153.223, 28.194.153.103, 28.194.153.224, 28.194.153.100, 28.194.153.221, 28.194.153.101, 28.194.153.222, 28.194.153.106, 28.194.153.227, 28.194.153.107, 28.194.153.228, 28.194.153.104, 28.194.153.225, 28.194.153.105, 28.194.153.226, 28.194.153.220, 28.194.153.108, 28.194.153.229, 28.194.153.109, 28.194.153.113, 28.194.153.234, 28.194.153.114, 28.194.153.235, 28.194.153.111, 28.194.153.232, 28.194.153.112, 28.194.153.233, 28.194.153.117, 28.194.153.238, 28.194.153.118, 28.194.153.239, 28.194.153.115, 28.194.153.236, 28.194.153.116, 28.194.153.237, 28.194.153.230, 28.194.153.110, 28.194.153.231, 28.194.153.119, 28.194.153.201, 28.194.153.202, 28.194.153.200, 28.194.153.205, 28.194.153.206, 28.194.153.203, 28.194.153.204, 28.194.153.41, 28.194.153.42, 28.194.153.40, 28.194.153.45, 28.194.153.209, 28.194.153.46, 28.194.153.43, 28.194.153.207, 28.194.153.44, 28.194.153.208, 28.194.153.49, 28.194.153.47, 28.194.153.48, 28.194.153.212, 28.194.153.213, 28.194.153.210, 28.194.153.211, 28.194.153.216, 28.194.153.217, 28.194.153.214, 28.194.153.215, 28.194.153.52, 28.194.153.53, 28.194.153.50, 28.194.153.51, 28.194.153.56, 28.194.153.57, 28.194.153.54, 28.194.153.218, 28.194.153.55, 28.194.153.219, 28.194.153.58, 28.194.153.59, 28.194.153.60, 28.194.153.63, 28.194.153.64, 28.194.153.61, 28.194.153.62, 28.194.153.67, 28.194.153.68, 28.194.153.65, 28.194.153.66, 28.194.153.69, 28.194.153.70, 28.194.153.71, 28.194.153.74, 28.194.153.75, 28.194.153.72, 28.194.153.73, 28.194.153.78, 28.194.153.79, 28.194.153.76, 28.194.153.77, 28.194.153.18, 28.194.153.19, 28.194.153.12, 28.194.153.13, 28.194.153.10, 28.194.153.11, 28.194.153.16, 28.194.153.17, 28.194.153.14, 28.194.153.15, 28.194.153.29, 28.194.153.188, 28.194.153.189, 28.194.153.182, 28.194.153.183, 28.194.153.180, 28.194.153.181, 28.194.153.186, 28.194.153.187, 28.194.153.184, 28.194.153.185, 28.194.153.20, 28.194.153.190, 28.194.153.23, 28.194.153.24, 28.194.153.21, 28.194.153.22, 28.194.153.27, 28.194.153.28, 28.194.153.25, 28.194.153.26, 28.194.153.199, 28.194.153.193, 28.194.153.194, 28.194.153.191, 28.194.153.192, 28.194.1
Source: ip traffic	Subnet 38.183.198.0/24: 38.183.198.98, 38.183.198.99, 38.183.198.92, 38.183.198.93, 38.183.198.90, 38.183.198.91, 38.183.198.96, 38.183.198.97, 38.183.198.94, 38.183.198.95, 38.183.198.194, 38.183.198.193, 38.183.198.192, 38.183.198.191, 38.183.198.198, 38.183.198.197, 38.183.198.196, 38.183.198.195, 38.183.198.199, 38.183.198.89, 38.183.198.87, 38.183.198.88, 38.183.198.0, 38.183.198.3, 38.183.198.81, 38.183.198.4, 38.183.198.82, 38.183.198.1, 38.183.198.2, 38.183.198.80, 38.183.198.7, 38.183.198.85, 38.183.198.190, 38.183.198.8, 38.183.198.86, 38.183.198.5, 38.183.198.83, 38.183.198.6, 38.183.198.84, 38.183.198.183, 38.183.198.182, 38.183.198.9, 38.183.198.181, 38.183.198.180, 38.183.198.187, 38.183.198.186, 38.183.198.185, 38.183.198.184, 38.183.198.189, 38.183.198.188, 38.183.198.219, 38.183.198.218, 38.183.198.213, 38.183.198.212, 38.183.198.211, 38.183.198.210, 38.183.198.217, 38.183.198.216, 38.183.198.215, 38.183.198.214, 38.183.198.209, 38.183.198.208, 38.183.198.207, 38.183.198.202, 38.183.198.201, 38.183.198.200, 38.183.198.206, 38.183.198.205, 38.183.198.204, 38.183.198.203, 38.183.198.12, 38.183.198.13, 38.183.198.10, 38.183.198.11, 38.183.198.119, 38.183.198.16, 38.183.198.17, 38.183.198.14, 38.183.198.15, 38.183.198.110, 38.183.198.231, 38.183.198.230, 38.183.198.114, 38.183.198.235, 38.183.198.113, 38.183.198.234, 38.183.198.18, 38.183.198.112, 38.183.198.233, 38.183.198.19, 38.183.198.111, 38.183.198.232, 38.183.198.118, 38.183.198.239, 38.183.198.117, 38.183.198.238, 38.183.198.116, 38.183.198.237, 38.183.198.115, 38.183.198.236, 38.183.198.109, 38.183.198.108, 38.183.198.229, 38.183.198.220, 38.183.198.103, 38.183.198.224, 38.183.198.102, 38.183.198.223, 38.183.198.101, 38.183.198.222, 38.183.198.100, 38.183.198.221, 38.183.198.107, 38.183.198.228, 38.183.198.106, 38.183.198.227, 38.183.198.105, 38.183.198.226, 38.183.198.104, 38.183.198.225, 38.183.198.34, 38.183.198.35, 38.183.198.32, 38.183.198.33, 38.183.198.38, 38.183.198.39, 38.183.198.36, 38.183.198.37, 38.183.198.30, 38.183.198.31, 38.183.198.132, 38.183.198.253, 38.183.198.131, 38.183.198.252, 38.183.198.130, 38.183.198.251, 38.183.198.250, 38.183.198.136, 38.183.198.135, 38.183.198.134, 38.183.198.255, 38.183.198.133, 38.183.198.254, 38.183.198.139, 38.183.198.138, 38.183.198.137, 38.183.198.23, 38.183.198.24, 38.183.198.21, 38.183.198.22, 38.183.198.27, 38.183.198.28, 38.183.198.25, 38.183.198.26, 38.183.198.20, 38.183.198.121, 38.183.198.242, 38.183.198.120, 38.183.198.241, 38.183.198.240, 38.183.198.125, 38.183.198.246, 38.183.198.124, 38.183.198.245, 38.183.198.29, 38.183.198.123, 38.183.198.244, 38.183.198.122, 38.183.198.243, 38.183.198.129, 38.183.198.128, 38.183.198.249, 38.183.198.127, 38.183.198.248, 38.183.198.126, 38.183.198.247, 38.183.198.56, 38.183.198.57, 38.183.198.54, 38.183.198.55, 38.183.198.58, 38.183.198.59, 38.183.198.52, 38.183.198.53, 38.183.198.50, 38.183.198.51, 38.183.198.150, 38.183.198.154, 38.183.198.153, 38.183.198.152, 38.183.198.151, 38.183.198.158, 38.183.1
Source: ip traffic	Subnet 7.174.201.0/24: 7.174.201.73, 7.174.201.74, 7.174.201.71, 7.174.201.72, 7.174.201.167, 7.174.201.70, 7.174.201.168, 7.174.201.169, 7.174.201.174, 7.174.201.175, 7.174.201.79, 7.174.201.176, 7.174.201.177, 7.174.201.77, 7.174.201.170, 7.174.201.78, 7.174.201.171, 7.174.201.75, 7.174.201.172, 7.174.201.76, 7.174.201.173, 7.174.201.62, 7.174.201.63, 7.174.201.60, 7.174.201.61, 7.174.201.156, 7.174.201.157, 7.174.201.158, 7.174.201.159, 7.174.201.163, 7.174.201.164, 7.174.201.68, 7.174.201.165, 7.174.201.69, 7.174.201.166, 7.174.201.66, 7.174.201.67, 7.174.201.160, 7.174.201.64, 7.174.201.161, 7.174.201.65, 7.174.201.162, 7.174.201.95, 7.174.201.96, 7.174.201.93, 7.174.201.94, 7.174.201.91, 7.174.201.189, 7.174.201.92, 7.174.201.90, 7.174.201.2, 7.174.201.3, 7.174.201.4, 7.174.201.5, 7.174.201.6, 7.174.201.7, 7.174.201.8, 7.174.201.9, 7.174.201.190, 7.174.201.191, 7.174.201.196, 7.174.201.197, 7.174.201.198, 7.174.201.199, 7.174.201.99, 7.174.201.192, 7.174.201.193, 7.174.201.97, 7.174.201.194, 7.174.201.98, 7.174.201.195, 7.174.201.84, 7.174.201.85, 7.174.201.82, 7.174.201.83, 7.174.201.80, 7.174.201.178, 7.174.201.81, 7.174.201.179, 7.174.201.180, 7.174.201.0, 7.174.201.1, 7.174.201.185, 7.174.201.186, 7.174.201.187, 7.174.201.188, 7.174.201.88, 7.174.201.181, 7.174.201.89, 7.174.201.182, 7.174.201.86, 7.174.201.183, 7.174.201.87, 7.174.201.184, 7.174.201.127, 7.174.201.248, 7.174.201.128, 7.174.201.249, 7.174.201.129, 7.174.201.123, 7.174.201.244, 7.174.201.124, 7.174.201.245, 7.174.201.125, 7.174.201.246, 7.174.201.126, 7.174.201.247, 7.174.201.130, 7.174.201.251, 7.174.201.131, 7.174.201.252, 7.174.201.132, 7.174.201.253, 7.174.201.133, 7.174.201.254, 7.174.201.250, 7.174.201.116, 7.174.201.237, 7.174.201.117, 7.174.201.238, 7.174.201.118, 7.174.201.239, 7.174.201.119, 7.174.201.112, 7.174.201.233, 7.174.201.113, 7.174.201.234, 7.174.201.114, 7.174.201.235, 7.174.201.115, 7.174.201.236, 7.174.201.240, 7.174.201.120, 7.174.201.241, 7.174.201.121, 7.174.201.242, 7.174.201.122, 7.174.201.243, 7.174.201.149, 7.174.201.145, 7.174.201.146, 7.174.201.147, 7.174.201.148, 7.174.201.152, 7.174.201.153, 7.174.201.154, 7.174.201.155, 7.174.201.150, 7.174.201.151, 7.174.201.138, 7.174.201.139, 7.174.201.134, 7.174.201.255, 7.174.201.135, 7.174.201.136, 7.174.201.137, 7.174.201.141, 7.174.201.142, 7.174.201.143, 7.174.201.144, 7.174.201.140, 7.174.201.204, 7.174.201.205, 7.174.201.206, 7.174.201.207, 7.174.201.200, 7.174.201.201, 7.174.201.202, 7.174.201.203, 7.174.201.208, 7.174.201.209, 7.174.201.210, 7.174.201.105, 7.174.201.226, 7.174.201.106, 7.174.201.227, 7.174.201.107, 7.174.201.228, 7.174.201.108, 7.174.201.229, 7.174.201.101, 7.174.201.222, 7.174.201.102, 7.174.201.223, 7.174.201.103, 7.174.201.224, 7.174.201.104, 7.174.201.225, 7.174.201.109, 7.174.201.19, 7.174.201.17, 7.174.201.18, 7.174.201.15, 7.174.201.16, 7.174.201.230, 7.174.201.13, 7.174.201.110, 7.174.201.231, 7.174.201.14, 7.174.201.111, 7.174.201.232, 7.174.201.11, 7.174.201.12, 7.174.201.10, 7.174.201.
Source: ip traffic	Subnet 77.177.71.0/24: 77.177.71.36, 77.177.71.116, 77.177.71.237, 77.177.71.37, 77.177.71.115, 77.177.71.236, 77.177.71.38, 77.177.71.118, 77.177.71.239, 77.177.71.39, 77.177.71.117, 77.177.71.238, 77.177.71.32, 77.177.71.112, 77.177.71.233, 77.177.71.33, 77.177.71.111, 77.177.71.232, 77.177.71.34, 77.177.71.114, 77.177.71.235, 77.177.71.35, 77.177.71.113, 77.177.71.234, 77.177.71.30, 77.177.71.110, 77.177.71.231, 77.177.71.31, 77.177.71.230, 77.177.71.119, 77.177.71.47, 77.177.71.127, 77.177.71.248, 77.177.71.48, 77.177.71.126, 77.177.71.247, 77.177.71.49, 77.177.71.129, 77.177.71.128, 77.177.71.249, 77.177.71.43, 77.177.71.123, 77.177.71.244, 77.177.71.44, 77.177.71.122, 77.177.71.243, 77.177.71.45, 77.177.71.125, 77.177.71.246, 77.177.71.46, 77.177.71.124, 77.177.71.245, 77.177.71.240, 77.177.71.40, 77.177.71.41, 77.177.71.121, 77.177.71.242, 77.177.71.42, 77.177.71.120, 77.177.71.241, 77.177.71.58, 77.177.71.138, 77.177.71.59, 77.177.71.137, 77.177.71.139, 77.177.71.54, 77.177.71.134, 77.177.71.255, 77.177.71.55, 77.177.71.133, 77.177.71.254, 77.177.71.56, 77.177.71.136, 77.177.71.57, 77.177.71.135, 77.177.71.50, 77.177.71.130, 77.177.71.251, 77.177.71.51, 77.177.71.250, 77.177.71.52, 77.177.71.132, 77.177.71.253, 77.177.71.53, 77.177.71.131, 77.177.71.252, 77.177.71.69, 77.177.71.149, 77.177.71.148, 77.177.71.65, 77.177.71.145, 77.177.71.66, 77.177.71.144, 77.177.71.67, 77.177.71.147, 77.177.71.68, 77.177.71.146, 77.177.71.61, 77.177.71.141, 77.177.71.62, 77.177.71.140, 77.177.71.63, 77.177.71.143, 77.177.71.64, 77.177.71.142, 77.177.71.60, 77.177.71.76, 77.177.71.77, 77.177.71.78, 77.177.71.79, 77.177.71.72, 77.177.71.73, 77.177.71.74, 77.177.71.75, 77.177.71.70, 77.177.71.71, 77.177.71.204, 77.177.71.203, 77.177.71.206, 77.177.71.205, 77.177.71.87, 77.177.71.200, 77.177.71.88, 77.177.71.89, 77.177.71.202, 77.177.71.201, 77.177.71.83, 77.177.71.84, 77.177.71.85, 77.177.71.86, 77.177.71.80, 77.177.71.81, 77.177.71.82, 77.177.71.208, 77.177.71.207, 77.177.71.209, 77.177.71.215, 77.177.71.214, 77.177.71.217, 77.177.71.216, 77.177.71.98, 77.177.71.211, 77.177.71.99, 77.177.71.210, 77.177.71.213, 77.177.71.212, 77.177.71.94, 77.177.71.95, 77.177.71.96, 77.177.71.97, 77.177.71.90, 77.177.71.91, 77.177.71.92, 77.177.71.93, 77.177.71.219, 77.177.71.218, 77.177.71.105, 77.177.71.226, 77.177.71.104, 77.177.71.225, 77.177.71.107, 77.177.71.228, 77.177.71.106, 77.177.71.227, 77.177.71.101, 77.177.71.222, 77.177.71.100, 77.177.71.221, 77.177.71.103, 77.177.71.224, 77.177.71.102, 77.177.71.223, 77.177.71.220, 77.177.71.109, 77.177.71.108, 77.177.71.229, 77.177.71.199, 77.177.71.196, 77.177.71.195, 77.177.71.198, 77.177.71.197, 77.177.71.192, 77.177.71.191, 77.177.71.194, 77.177.71.193, 77.177.71.0, 77.177.71.3, 77.177.71.4, 77.177.71.1, 77.177.71.2, 77.177.71.7, 77.177.71.8, 77.177.71.5, 77.177.71.6, 77.177.71.9, 77.177.71.159, 77.177.71.156, 77.177.71.155, 77.177.71.158, 77.177.71.157, 77.177.71.152, 77.177.71.151, 77.177.71.154, 77.177.71.153, 77.177.71.150, 77.177.71.167,
Source: ip traffic	Subnet 174.76.151.0/24: 174.76.151.28, 174.76.151.152, 174.76.151.29, 174.76.151.153, 174.76.151.26, 174.76.151.150, 174.76.151.27, 174.76.151.151, 174.76.151.24, 174.76.151.25, 174.76.151.22, 174.76.151.23, 174.76.151.20, 174.76.151.149, 174.76.151.21, 174.76.151.147, 174.76.151.148, 174.76.151.145, 174.76.151.146, 174.76.151.143, 174.76.151.144, 174.76.151.39, 174.76.151.141, 174.76.151.142, 174.76.151.37, 174.76.151.38, 174.76.151.140, 174.76.151.35, 174.76.151.36, 174.76.151.33, 174.76.151.34, 174.76.151.31, 174.76.151.138, 174.76.151.32, 174.76.151.139, 174.76.151.136, 174.76.151.30, 174.76.151.137, 174.76.151.134, 174.76.151.255, 174.76.151.135, 174.76.151.132, 174.76.151.253, 174.76.151.133, 174.76.151.254, 174.76.151.174, 174.76.151.175, 174.76.151.48, 174.76.151.172, 174.76.151.49, 174.76.151.173, 174.76.151.46, 174.76.151.170, 174.76.151.47, 174.76.151.171, 174.76.151.44, 174.76.151.45, 174.76.151.42, 174.76.151.43, 174.76.151.40, 174.76.151.169, 174.76.151.41, 174.76.151.167, 174.76.151.168, 174.76.151.165, 174.76.151.166, 174.76.151.163, 174.76.151.164, 174.76.151.59, 174.76.151.161, 174.76.151.162, 174.76.151.57, 174.76.151.58, 174.76.151.160, 174.76.151.55, 174.76.151.56, 174.76.151.53, 174.76.151.54, 174.76.151.51, 174.76.151.158, 174.76.151.52, 174.76.151.159, 174.76.151.156, 174.76.151.50, 174.76.151.157, 174.76.151.154, 174.76.151.155, 174.76.151.230, 174.76.151.68, 174.76.151.69, 174.76.151.66, 174.76.151.67, 174.76.151.109, 174.76.151.107, 174.76.151.228, 174.76.151.108, 174.76.151.229, 174.76.151.64, 174.76.151.105, 174.76.151.226, 174.76.151.65, 174.76.151.106, 174.76.151.227, 174.76.151.62, 174.76.151.103, 174.76.151.224, 174.76.151.63, 174.76.151.104, 174.76.151.225, 174.76.151.101, 174.76.151.60, 174.76.151.222, 174.76.151.61, 174.76.151.102, 174.76.151.223, 174.76.151.220, 174.76.151.100, 174.76.151.221, 174.76.151.79, 174.76.151.77, 174.76.151.78, 174.76.151.219, 174.76.151.217, 174.76.151.218, 174.76.151.75, 174.76.151.215, 174.76.151.76, 174.76.151.216, 174.76.151.73, 174.76.151.213, 174.76.151.74, 174.76.151.214, 174.76.151.71, 174.76.151.211, 174.76.151.72, 174.76.151.212, 174.76.151.70, 174.76.151.210, 174.76.151.130, 174.76.151.251, 174.76.151.131, 174.76.151.252, 174.76.151.250, 174.76.151.88, 174.76.151.89, 174.76.151.129, 174.76.151.86, 174.76.151.127, 174.76.151.248, 174.76.151.87, 174.76.151.128, 174.76.151.249, 174.76.151.84, 174.76.151.125, 174.76.151.246, 174.76.151.85, 174.76.151.126, 174.76.151.247, 174.76.151.82, 174.76.151.123, 174.76.151.244, 174.76.151.83, 174.76.151.124, 174.76.151.245, 174.76.151.80, 174.76.151.121, 174.76.151.242, 174.76.151.81, 174.76.151.122, 174.76.151.243, 174.76.151.240, 174.76.151.120, 174.76.151.241, 174.76.151.99, 174.76.151.5, 174.76.151.4, 174.76.151.90, 174.76.151.7, 174.76.151.6, 174.76.151.1, 174.76.151.0, 174.76.151.3, 174.76.151.118, 174.76.151.239, 174.76.151.2, 174.76.151.119, 174.76.151.97, 174.76.151.116, 174.76.151.237, 174.76.151.98, 174.76.151.117, 174.76.151.238, 174.76.151.95, 174
Source: ip traffic	Subnet 14.249.1.0/24: 14.249.1.117, 14.249.1.238, 14.249.1.118, 14.249.1.239, 14.249.1.119, 14.249.1.113, 14.249.1.234, 14.249.1.114, 14.249.1.235, 14.249.1.115, 14.249.1.236, 14.249.1.116, 14.249.1.237, 14.249.1.230, 14.249.1.110, 14.249.1.231, 14.249.1.111, 14.249.1.232, 14.249.1.112, 14.249.1.233, 14.249.1.11, 14.249.1.10, 14.249.1.240, 14.249.1.128, 14.249.1.249, 14.249.1.129, 14.249.1.124, 14.249.1.245, 14.249.1.125, 14.249.1.246, 14.249.1.126, 14.249.1.247, 14.249.1.127, 14.249.1.248, 14.249.1.120, 14.249.1.241, 14.249.1.121, 14.249.1.242, 14.249.1.122, 14.249.1.243, 14.249.1.123, 14.249.1.244, 14.249.1.22, 14.249.1.21, 14.249.1.20, 14.249.1.216, 14.249.1.217, 14.249.1.218, 14.249.1.219, 14.249.1.19, 14.249.1.212, 14.249.1.18, 14.249.1.213, 14.249.1.17, 14.249.1.214, 14.249.1.16, 14.249.1.215, 14.249.1.15, 14.249.1.14, 14.249.1.13, 14.249.1.210, 14.249.1.12, 14.249.1.211, 14.249.1.33, 14.249.1.32, 14.249.1.31, 14.249.1.30, 14.249.1.106, 14.249.1.227, 14.249.1.107, 14.249.1.228, 14.249.1.108, 14.249.1.229, 14.249.1.109, 14.249.1.102, 14.249.1.223, 14.249.1.29, 14.249.1.103, 14.249.1.224, 14.249.1.28, 14.249.1.104, 14.249.1.225, 14.249.1.27, 14.249.1.105, 14.249.1.226, 14.249.1.26, 14.249.1.25, 14.249.1.220, 14.249.1.100, 14.249.1.24, 14.249.1.221, 14.249.1.101, 14.249.1.23, 14.249.1.222, 14.249.1.150, 14.249.1.151, 14.249.1.152, 14.249.1.157, 14.249.1.158, 14.249.1.159, 14.249.1.153, 14.249.1.154, 14.249.1.155, 14.249.1.156, 14.249.1.160, 14.249.1.161, 14.249.1.162, 14.249.1.163, 14.249.1.168, 14.249.1.169, 14.249.1.164, 14.249.1.165, 14.249.1.166, 14.249.1.167, 14.249.1.250, 14.249.1.130, 14.249.1.251, 14.249.1.139, 14.249.1.135, 14.249.1.136, 14.249.1.137, 14.249.1.138, 14.249.1.131, 14.249.1.252, 14.249.1.132, 14.249.1.253, 14.249.1.133, 14.249.1.254, 14.249.1.134, 14.249.1.255, 14.249.1.140, 14.249.1.141, 14.249.1.146, 14.249.1.147, 14.249.1.148, 14.249.1.149, 14.249.1.142, 14.249.1.143, 14.249.1.144, 14.249.1.145, 14.249.1.88, 14.249.1.193, 14.249.1.87, 14.249.1.194, 14.249.1.86, 14.249.1.195, 14.249.1.85, 14.249.1.196, 14.249.1.84, 14.249.1.83, 14.249.1.190, 14.249.1.82, 14.249.1.191, 14.249.1.81, 14.249.1.192, 14.249.1.80, 14.249.1.197, 14.249.1.198, 14.249.1.79, 14.249.1.199, 14.249.1.78, 14.249.1.99, 14.249.1.98, 14.249.1.97, 14.249.1.96, 14.249.1.95, 14.249.1.94, 14.249.1.93, 14.249.1.92, 14.249.1.91, 14.249.1.90, 14.249.1.89, 14.249.1.171, 14.249.1.172, 14.249.1.173, 14.249.1.174, 14.249.1.170, 14.249.1.179, 14.249.1.175, 14.249.1.176, 14.249.1.177, 14.249.1.178, 14.249.1.182, 14.249.1.183, 14.249.1.184, 14.249.1.185, 14.249.1.180, 14.249.1.181, 14.249.1.186, 14.249.1.187, 14.249.1.188, 14.249.1.189, 14.249.1.44, 14.249.1.43, 14.249.1.42, 14.249.1.41, 14.249.1.40, 14.249.1.39, 14.249.1.38, 14.249.1.37, 14.249.1.36, 14.249.1.35, 14.249.1.34, 14.249.1.55, 14.249.1.54, 14.249.1.53, 14.249.1.52, 14.249.1.51, 14.249.1.50, 14.249.1.209, 14.249.1.205, 14.249.1.206, 14.249.1.207, 14.249.1.208, 14.249.1.201, 14.249.1.202, 14.249.1.203, 14.249.1.49, 14.249.1.204
Source: ip traffic	Subnet 24.146.147.0/24: 24.146.147.109, 24.146.147.108, 24.146.147.229, 24.146.147.103, 24.146.147.224, 24.146.147.102, 24.146.147.223, 24.146.147.101, 24.146.147.222, 24.146.147.100, 24.146.147.221, 24.146.147.107, 24.146.147.228, 24.146.147.106, 24.146.147.227, 24.146.147.105, 24.146.147.226, 24.146.147.104, 24.146.147.225, 24.146.147.220, 24.146.147.119, 24.146.147.114, 24.146.147.235, 24.146.147.113, 24.146.147.234, 24.146.147.112, 24.146.147.233, 24.146.147.111, 24.146.147.232, 24.146.147.118, 24.146.147.239, 24.146.147.117, 24.146.147.238, 24.146.147.116, 24.146.147.237, 24.146.147.115, 24.146.147.236, 24.146.147.110, 24.146.147.231, 24.146.147.230, 24.146.147.209, 24.146.147.208, 24.146.147.207, 24.146.147.0, 24.146.147.202, 24.146.147.201, 24.146.147.200, 24.146.147.206, 24.146.147.205, 24.146.147.204, 24.146.147.203, 24.146.147.9, 24.146.147.2, 24.146.147.1, 24.146.147.4, 24.146.147.3, 24.146.147.6, 24.146.147.5, 24.146.147.8, 24.146.147.7, 24.146.147.219, 24.146.147.218, 24.146.147.213, 24.146.147.212, 24.146.147.211, 24.146.147.210, 24.146.147.217, 24.146.147.216, 24.146.147.215, 24.146.147.214, 24.146.147.147, 24.146.147.146, 24.146.147.145, 24.146.147.144, 24.146.147.149, 24.146.147.148, 24.146.147.143, 24.146.147.142, 24.146.147.141, 24.146.147.140, 24.146.147.158, 24.146.147.157, 24.146.147.156, 24.146.147.155, 24.146.147.159, 24.146.147.150, 24.146.147.154, 24.146.147.153, 24.146.147.152, 24.146.147.151, 24.146.147.18, 24.146.147.19, 24.146.147.14, 24.146.147.125, 24.146.147.246, 24.146.147.15, 24.146.147.124, 24.146.147.245, 24.146.147.16, 24.146.147.123, 24.146.147.244, 24.146.147.17, 24.146.147.122, 24.146.147.243, 24.146.147.10, 24.146.147.129, 24.146.147.11, 24.146.147.128, 24.146.147.249, 24.146.147.12, 24.146.147.127, 24.146.147.248, 24.146.147.13, 24.146.147.126, 24.146.147.247, 24.146.147.20, 24.146.147.121, 24.146.147.242, 24.146.147.120, 24.146.147.241, 24.146.147.240, 24.146.147.136, 24.146.147.135, 24.146.147.134, 24.146.147.255, 24.146.147.133, 24.146.147.254, 24.146.147.139, 24.146.147.138, 24.146.147.137, 24.146.147.132, 24.146.147.253, 24.146.147.131, 24.146.147.252, 24.146.147.130, 24.146.147.251, 24.146.147.250, 24.146.147.36, 24.146.147.37, 24.146.147.38, 24.146.147.189, 24.146.147.39, 24.146.147.188, 24.146.147.32, 24.146.147.33, 24.146.147.34, 24.146.147.35, 24.146.147.183, 24.146.147.40, 24.146.147.182, 24.146.147.41, 24.146.147.181, 24.146.147.42, 24.146.147.180, 24.146.147.187, 24.146.147.186, 24.146.147.185, 24.146.147.184, 24.146.147.29, 24.146.147.25, 24.146.147.26, 24.146.147.27, 24.146.147.28, 24.146.147.199, 24.146.147.21, 24.146.147.22, 24.146.147.23, 24.146.147.24, 24.146.147.194, 24.146.147.193, 24.146.147.30, 24.146.147.192, 24.146.147.31, 24.146.147.191, 24.146.147.198, 24.146.147.197, 24.146.147.196, 24.146.147.195, 24.146.147.190, 24.146.147.58, 24.146.147.169, 24.146.147.59, 24.146.147.168, 24.146.147.167, 24.146.147.166, 24.146.147.54, 24.146.147.55, 24.146.147.56, 24.146.147.57, 24.146.147.61, 24.146.147.161, 24.1
Source: ip traffic	Subnet 142.34.237.0/24: 142.34.237.192, 142.34.237.193, 142.34.237.194, 142.34.237.195, 142.34.237.190, 142.34.237.191, 142.34.237.196, 142.34.237.197, 142.34.237.198, 142.34.237.199, 142.34.237.181, 142.34.237.182, 142.34.237.183, 142.34.237.184, 142.34.237.180, 142.34.237.189, 142.34.237.99, 142.34.237.98, 142.34.237.97, 142.34.237.96, 142.34.237.185, 142.34.237.95, 142.34.237.186, 142.34.237.94, 142.34.237.187, 142.34.237.93, 142.34.237.188, 142.34.237.92, 142.34.237.91, 142.34.237.90, 142.34.237.170, 142.34.237.171, 142.34.237.172, 142.34.237.173, 142.34.237.89, 142.34.237.178, 142.34.237.88, 142.34.237.179, 142.34.237.87, 142.34.237.86, 142.34.237.85, 142.34.237.174, 142.34.237.84, 142.34.237.175, 142.34.237.83, 142.34.237.176, 142.34.237.82, 142.34.237.177, 142.34.237.81, 142.34.237.80, 142.34.237.160, 142.34.237.161, 142.34.237.162, 142.34.237.79, 142.34.237.78, 142.34.237.167, 142.34.237.77, 142.34.237.168, 142.34.237.76, 142.34.237.169, 142.34.237.75, 142.34.237.74, 142.34.237.163, 142.34.237.73, 142.34.237.164, 142.34.237.72, 142.34.237.165, 142.34.237.71, 142.34.237.166, 142.34.237.70, 142.34.237.150, 142.34.237.151, 142.34.237.69, 142.34.237.68, 142.34.237.67, 142.34.237.156, 142.34.237.66, 142.34.237.157, 142.34.237.65, 142.34.237.158, 142.34.237.64, 142.34.237.159, 142.34.237.63, 142.34.237.152, 142.34.237.62, 142.34.237.153, 142.34.237.61, 142.34.237.154, 142.34.237.60, 142.34.237.155, 142.34.237.149, 142.34.237.140, 142.34.237.59, 142.34.237.58, 142.34.237.57, 142.34.237.56, 142.34.237.145, 142.34.237.55, 142.34.237.146, 142.34.237.54, 142.34.237.147, 142.34.237.53, 142.34.237.148, 142.34.237.52, 142.34.237.141, 142.34.237.51, 142.34.237.142, 142.34.237.50, 142.34.237.143, 142.34.237.144, 142.34.237.6, 142.34.237.7, 142.34.237.8, 142.34.237.9, 142.34.237.138, 142.34.237.139, 142.34.237.250, 142.34.237.49, 142.34.237.48, 142.34.237.47, 142.34.237.46, 142.34.237.45, 142.34.237.134, 142.34.237.255, 142.34.237.44, 142.34.237.135, 142.34.237.43, 142.34.237.0, 142.34.237.136, 142.34.237.42, 142.34.237.1, 142.34.237.137, 142.34.237.41, 142.34.237.2, 142.34.237.130, 142.34.237.251, 142.34.237.40, 142.34.237.3, 142.34.237.131, 142.34.237.252, 142.34.237.4, 142.34.237.132, 142.34.237.253, 142.34.237.5, 142.34.237.133, 142.34.237.254, 142.34.237.127, 142.34.237.248, 142.34.237.128, 142.34.237.249, 142.34.237.129, 142.34.237.39, 142.34.237.38, 142.34.237.37, 142.34.237.36, 142.34.237.35, 142.34.237.34, 142.34.237.123, 142.34.237.244, 142.34.237.33, 142.34.237.124, 142.34.237.245, 142.34.237.32, 142.34.237.125, 142.34.237.246, 142.34.237.31, 142.34.237.126, 142.34.237.247, 142.34.237.30, 142.34.237.240, 142.34.237.120, 142.34.237.241, 142.34.237.121, 142.34.237.242, 142.34.237.122, 142.34.237.243, 142.34.237.116, 142.34.237.237, 142.34.237.117, 142.34.237.238, 142.34.237.118, 142.34.237.239, 142.34.237.119, 142.34.237.29, 142.34.237.28, 142.34.237.27, 142.34.237.26, 142.34.237.25, 142.34.237.24, 142.34.237.23, 142.34.237.112, 142.34.237.233, 142.34.237.22, 142.34.237
Source: ip traffic	Subnet 131.4.165.0/24: 131.4.165.86, 131.4.165.85, 131.4.165.88, 131.4.165.87, 131.4.165.82, 131.4.165.81, 131.4.165.84, 131.4.165.83, 131.4.165.89, 131.4.165.182, 131.4.165.183, 131.4.165.184, 131.4.165.185, 131.4.165.180, 131.4.165.181, 131.4.165.80, 131.4.165.186, 131.4.165.187, 131.4.165.188, 131.4.165.189, 131.4.165.75, 131.4.165.74, 131.4.165.77, 131.4.165.76, 131.4.165.71, 131.4.165.70, 131.4.165.73, 131.4.165.72, 131.4.165.79, 131.4.165.78, 131.4.165.193, 131.4.165.194, 131.4.165.195, 131.4.165.196, 131.4.165.190, 131.4.165.191, 131.4.165.192, 131.4.165.197, 131.4.165.198, 131.4.165.199, 131.4.165.97, 131.4.165.96, 131.4.165.99, 131.4.165.98, 131.4.165.93, 131.4.165.92, 131.4.165.95, 131.4.165.94, 131.4.165.91, 131.4.165.90, 131.4.165.42, 131.4.165.41, 131.4.165.44, 131.4.165.43, 131.4.165.40, 131.4.165.49, 131.4.165.46, 131.4.165.45, 131.4.165.48, 131.4.165.47, 131.4.165.31, 131.4.165.30, 131.4.165.33, 131.4.165.32, 131.4.165.39, 131.4.165.38, 131.4.165.35, 131.4.165.34, 131.4.165.37, 131.4.165.36, 131.4.165.64, 131.4.165.63, 131.4.165.66, 131.4.165.65, 131.4.165.60, 131.4.165.62, 131.4.165.61, 131.4.165.68, 131.4.165.67, 131.4.165.69, 131.4.165.201, 131.4.165.202, 131.4.165.203, 131.4.165.204, 131.4.165.200, 131.4.165.53, 131.4.165.209, 131.4.165.52, 131.4.165.55, 131.4.165.54, 131.4.165.205, 131.4.165.206, 131.4.165.51, 131.4.165.207, 131.4.165.50, 131.4.165.208, 131.4.165.57, 131.4.165.56, 131.4.165.59, 131.4.165.58, 131.4.165.212, 131.4.165.213, 131.4.165.214, 131.4.165.215, 131.4.165.210, 131.4.165.211, 131.4.165.216, 131.4.165.217, 131.4.165.218, 131.4.165.219, 131.4.165.102, 131.4.165.223, 131.4.165.103, 131.4.165.224, 131.4.165.104, 131.4.165.225, 131.4.165.105, 131.4.165.226, 131.4.165.220, 131.4.165.100, 131.4.165.221, 131.4.165.101, 131.4.165.222, 131.4.165.106, 131.4.165.227, 131.4.165.107, 131.4.165.228, 131.4.165.108, 131.4.165.229, 131.4.165.109, 131.4.165.113, 131.4.165.234, 131.4.165.114, 131.4.165.235, 131.4.165.115, 131.4.165.236, 131.4.165.116, 131.4.165.237, 131.4.165.230, 131.4.165.110, 131.4.165.231, 131.4.165.111, 131.4.165.232, 131.4.165.112, 131.4.165.233, 131.4.165.20, 131.4.165.22, 131.4.165.21, 131.4.165.117, 131.4.165.238, 131.4.165.118, 131.4.165.239, 131.4.165.119, 131.4.165.28, 131.4.165.27, 131.4.165.29, 131.4.165.24, 131.4.165.23, 131.4.165.26, 131.4.165.25, 131.4.165.240, 131.4.165.124, 131.4.165.245, 131.4.165.125, 131.4.165.246, 131.4.165.126, 131.4.165.247, 131.4.165.127, 131.4.165.248, 131.4.165.120, 131.4.165.241, 131.4.165.121, 131.4.165.242, 131.4.165.122, 131.4.165.243, 131.4.165.123, 131.4.165.244, 131.4.165.11, 131.4.165.10, 131.4.165.128, 131.4.165.249, 131.4.165.129, 131.4.165.17, 131.4.165.16, 131.4.165.19, 131.4.165.18, 131.4.165.13, 131.4.165.12, 131.4.165.15, 131.4.165.14, 131.4.165.250, 131.4.165.130, 131.4.165.251, 131.4.165.135, 131.4.165.136, 131.4.165.137, 131.4.165.138, 131.4.165.131, 131.4.165.252, 131.4.165.132, 131.4.165.253, 131.4.165.133, 131.4.165.254, 131.4.165.134, 131.4.165.255, 131.4.165.139,
Source: ip traffic	Subnet 137.126.168.0/24: 137.126.168.53, 137.126.168.52, 137.126.168.51, 137.126.168.50, 137.126.168.57, 137.126.168.56, 137.126.168.55, 137.126.168.54, 137.126.168.59, 137.126.168.58, 137.126.168.64, 137.126.168.63, 137.126.168.62, 137.126.168.199, 137.126.168.61, 137.126.168.68, 137.126.168.197, 137.126.168.67, 137.126.168.198, 137.126.168.66, 137.126.168.195, 137.126.168.65, 137.126.168.196, 137.126.168.60, 137.126.168.69, 137.126.168.31, 137.126.168.30, 137.126.168.35, 137.126.168.34, 137.126.168.33, 137.126.168.32, 137.126.168.39, 137.126.168.38, 137.126.168.37, 137.126.168.36, 137.126.168.42, 137.126.168.41, 137.126.168.40, 137.126.168.46, 137.126.168.45, 137.126.168.44, 137.126.168.43, 137.126.168.49, 137.126.168.48, 137.126.168.47, 137.126.168.168, 137.126.168.169, 137.126.168.166, 137.126.168.167, 137.126.168.13, 137.126.168.164, 137.126.168.12, 137.126.168.165, 137.126.168.11, 137.126.168.162, 137.126.168.10, 137.126.168.163, 137.126.168.17, 137.126.168.171, 137.126.168.16, 137.126.168.172, 137.126.168.15, 137.126.168.14, 137.126.168.170, 137.126.168.19, 137.126.168.18, 137.126.168.20, 137.126.168.157, 137.126.168.158, 137.126.168.155, 137.126.168.156, 137.126.168.24, 137.126.168.153, 137.126.168.23, 137.126.168.154, 137.126.168.22, 137.126.168.151, 137.126.168.21, 137.126.168.152, 137.126.168.159, 137.126.168.28, 137.126.168.160, 137.126.168.27, 137.126.168.161, 137.126.168.26, 137.126.168.25, 137.126.168.29, 137.126.168.188, 137.126.168.189, 137.126.168.186, 137.126.168.187, 137.126.168.184, 137.126.168.185, 137.126.168.9, 137.126.168.5, 137.126.168.6, 137.126.168.7, 137.126.168.8, 137.126.168.1, 137.126.168.193, 137.126.168.2, 137.126.168.194, 137.126.168.3, 137.126.168.191, 137.126.168.4, 137.126.168.192, 137.126.168.190, 137.126.168.0, 137.126.168.179, 137.126.168.177, 137.126.168.178, 137.126.168.175, 137.126.168.176, 137.126.168.173, 137.126.168.174, 137.126.168.182, 137.126.168.183, 137.126.168.180, 137.126.168.181, 137.126.168.124, 137.126.168.245, 137.126.168.125, 137.126.168.246, 137.126.168.122, 137.126.168.243, 137.126.168.123, 137.126.168.244, 137.126.168.120, 137.126.168.241, 137.126.168.121, 137.126.168.242, 137.126.168.240, 137.126.168.128, 137.126.168.249, 137.126.168.129, 137.126.168.126, 137.126.168.247, 137.126.168.127, 137.126.168.248, 137.126.168.113, 137.126.168.234, 137.126.168.114, 137.126.168.235, 137.126.168.111, 137.126.168.232, 137.126.168.112, 137.126.168.233, 137.126.168.230, 137.126.168.110, 137.126.168.231, 137.126.168.119, 137.126.168.117, 137.126.168.238, 137.126.168.118, 137.126.168.239, 137.126.168.115, 137.126.168.236, 137.126.168.116, 137.126.168.237, 137.126.168.146, 137.126.168.147, 137.126.168.144, 137.126.168.145, 137.126.168.142, 137.126.168.143, 137.126.168.140, 137.126.168.141, 137.126.168.148, 137.126.168.149, 137.126.168.150, 137.126.168.135, 137.126.168.136, 137.126.168.133, 137.126.168.254, 137.126.168.134, 137.126.168.255, 137.126.168.131, 137.126.168.252, 137.126.168.132, 137.126.168.253, 137.126.168.250, 137
Source: ip traffic	Subnet 42.115.135.0/24: 42.115.135.10, 42.115.135.12, 42.115.135.11, 42.115.135.14, 42.115.135.13, 42.115.135.16, 42.115.135.15, 42.115.135.18, 42.115.135.17, 42.115.135.19, 42.115.135.21, 42.115.135.20, 42.115.135.23, 42.115.135.22, 42.115.135.25, 42.115.135.24, 42.115.135.27, 42.115.135.26, 42.115.135.29, 42.115.135.28, 42.115.135.208, 42.115.135.209, 42.115.135.206, 42.115.135.207, 42.115.135.204, 42.115.135.205, 42.115.135.202, 42.115.135.203, 42.115.135.30, 42.115.135.200, 42.115.135.201, 42.115.135.32, 42.115.135.31, 42.115.135.34, 42.115.135.33, 42.115.135.36, 42.115.135.35, 42.115.135.38, 42.115.135.37, 42.115.135.39, 42.115.135.219, 42.115.135.217, 42.115.135.218, 42.115.135.215, 42.115.135.216, 42.115.135.50, 42.115.135.213, 42.115.135.214, 42.115.135.41, 42.115.135.211, 42.115.135.40, 42.115.135.212, 42.115.135.43, 42.115.135.42, 42.115.135.210, 42.115.135.45, 42.115.135.44, 42.115.135.47, 42.115.135.46, 42.115.135.49, 42.115.135.48, 42.115.135.109, 42.115.135.107, 42.115.135.228, 42.115.135.108, 42.115.135.229, 42.115.135.105, 42.115.135.226, 42.115.135.106, 42.115.135.227, 42.115.135.61, 42.115.135.103, 42.115.135.224, 42.115.135.60, 42.115.135.104, 42.115.135.225, 42.115.135.101, 42.115.135.52, 42.115.135.222, 42.115.135.51, 42.115.135.102, 42.115.135.223, 42.115.135.54, 42.115.135.220, 42.115.135.100, 42.115.135.53, 42.115.135.221, 42.115.135.56, 42.115.135.55, 42.115.135.58, 42.115.135.57, 42.115.135.59, 42.115.135.118, 42.115.135.239, 42.115.135.119, 42.115.135.70, 42.115.135.116, 42.115.135.237, 42.115.135.117, 42.115.135.238, 42.115.135.72, 42.115.135.114, 42.115.135.235, 42.115.135.71, 42.115.135.115, 42.115.135.236, 42.115.135.63, 42.115.135.112, 42.115.135.233, 42.115.135.62, 42.115.135.113, 42.115.135.234, 42.115.135.65, 42.115.135.110, 42.115.135.231, 42.115.135.64, 42.115.135.111, 42.115.135.232, 42.115.135.67, 42.115.135.66, 42.115.135.230, 42.115.135.69, 42.115.135.68, 42.115.135.5, 42.115.135.4, 42.115.135.7, 42.115.135.129, 42.115.135.6, 42.115.135.9, 42.115.135.81, 42.115.135.127, 42.115.135.248, 42.115.135.8, 42.115.135.80, 42.115.135.128, 42.115.135.249, 42.115.135.83, 42.115.135.125, 42.115.135.246, 42.115.135.82, 42.115.135.126, 42.115.135.247, 42.115.135.74, 42.115.135.123, 42.115.135.244, 42.115.135.73, 42.115.135.124, 42.115.135.245, 42.115.135.76, 42.115.135.121, 42.115.135.242, 42.115.135.75, 42.115.135.122, 42.115.135.243, 42.115.135.1, 42.115.135.78, 42.115.135.240, 42.115.135.0, 42.115.135.77, 42.115.135.120, 42.115.135.241, 42.115.135.3, 42.115.135.2, 42.115.135.79, 42.115.135.90, 42.115.135.92, 42.115.135.138, 42.115.135.91, 42.115.135.139, 42.115.135.94, 42.115.135.136, 42.115.135.93, 42.115.135.137, 42.115.135.85, 42.115.135.134, 42.115.135.255, 42.115.135.84, 42.115.135.135, 42.115.135.87, 42.115.135.132, 42.115.135.253, 42.115.135.86, 42.115.135.133, 42.115.135.254, 42.115.135.89, 42.115.135.130, 42.115.135.251, 42.115.135.88, 42.115.135.131, 42.115.135.252, 42.115.135.250, 42.115.135.149, 42.115.135.147, 42.115.135.148, 4
Source: ip traffic	Subnet 44.21.249.0/24: 44.21.249.99, 44.21.249.94, 44.21.249.93, 44.21.249.92, 44.21.249.91, 44.21.249.98, 44.21.249.97, 44.21.249.96, 44.21.249.95, 44.21.249.90, 44.21.249.79, 44.21.249.78, 44.21.249.77, 44.21.249.72, 44.21.249.71, 44.21.249.70, 44.21.249.76, 44.21.249.75, 44.21.249.74, 44.21.249.73, 44.21.249.204, 44.21.249.205, 44.21.249.89, 44.21.249.202, 44.21.249.88, 44.21.249.203, 44.21.249.200, 44.21.249.201, 44.21.249.83, 44.21.249.82, 44.21.249.81, 44.21.249.80, 44.21.249.87, 44.21.249.86, 44.21.249.85, 44.21.249.84, 44.21.249.7, 44.21.249.6, 44.21.249.5, 44.21.249.4, 44.21.249.3, 44.21.249.2, 44.21.249.1, 44.21.249.0, 44.21.249.58, 44.21.249.57, 44.21.249.56, 44.21.249.55, 44.21.249.178, 44.21.249.179, 44.21.249.176, 44.21.249.59, 44.21.249.177, 44.21.249.50, 44.21.249.174, 44.21.249.175, 44.21.249.172, 44.21.249.173, 44.21.249.54, 44.21.249.170, 44.21.249.53, 44.21.249.171, 44.21.249.9, 44.21.249.52, 44.21.249.51, 44.21.249.8, 44.21.249.69, 44.21.249.68, 44.21.249.67, 44.21.249.66, 44.21.249.189, 44.21.249.187, 44.21.249.188, 44.21.249.61, 44.21.249.185, 44.21.249.60, 44.21.249.186, 44.21.249.183, 44.21.249.184, 44.21.249.65, 44.21.249.181, 44.21.249.64, 44.21.249.182, 44.21.249.63, 44.21.249.62, 44.21.249.180, 44.21.249.36, 44.21.249.35, 44.21.249.34, 44.21.249.33, 44.21.249.39, 44.21.249.38, 44.21.249.198, 44.21.249.37, 44.21.249.199, 44.21.249.196, 44.21.249.197, 44.21.249.194, 44.21.249.195, 44.21.249.32, 44.21.249.192, 44.21.249.31, 44.21.249.193, 44.21.249.30, 44.21.249.190, 44.21.249.191, 44.21.249.47, 44.21.249.46, 44.21.249.45, 44.21.249.44, 44.21.249.49, 44.21.249.48, 44.21.249.43, 44.21.249.42, 44.21.249.41, 44.21.249.40, 44.21.249.14, 44.21.249.138, 44.21.249.13, 44.21.249.139, 44.21.249.12, 44.21.249.136, 44.21.249.11, 44.21.249.137, 44.21.249.18, 44.21.249.134, 44.21.249.255, 44.21.249.17, 44.21.249.135, 44.21.249.16, 44.21.249.132, 44.21.249.253, 44.21.249.15, 44.21.249.133, 44.21.249.254, 44.21.249.130, 44.21.249.251, 44.21.249.131, 44.21.249.252, 44.21.249.250, 44.21.249.10, 44.21.249.129, 44.21.249.25, 44.21.249.149, 44.21.249.24, 44.21.249.23, 44.21.249.147, 44.21.249.22, 44.21.249.148, 44.21.249.29, 44.21.249.145, 44.21.249.28, 44.21.249.146, 44.21.249.27, 44.21.249.143, 44.21.249.26, 44.21.249.144, 44.21.249.141, 44.21.249.142, 44.21.249.140, 44.21.249.21, 44.21.249.20, 44.21.249.19, 44.21.249.158, 44.21.249.159, 44.21.249.156, 44.21.249.157, 44.21.249.154, 44.21.249.155, 44.21.249.152, 44.21.249.153, 44.21.249.150, 44.21.249.151, 44.21.249.169, 44.21.249.167, 44.21.249.168, 44.21.249.165, 44.21.249.166, 44.21.249.163, 44.21.249.164, 44.21.249.161, 44.21.249.162, 44.21.249.160, 44.21.249.215, 44.21.249.216, 44.21.249.213, 44.21.249.214, 44.21.249.211, 44.21.249.212, 44.21.249.210, 44.21.249.208, 44.21.249.209, 44.21.249.206, 44.21.249.207, 44.21.249.105, 44.21.249.226, 44.21.249.106, 44.21.249.227, 44.21.249.103, 44.21.249.224, 44.21.249.104, 44.21.249.225, 44.21.249.101, 44.21.249.222, 44.21.249.102, 44.21.249.223, 44.21.249.220, 44.21
Source: ip traffic	Subnet 125.87.201.0/24: 125.87.201.188, 125.87.201.187, 125.87.201.189, 125.87.201.195, 125.87.201.194, 125.87.201.197, 125.87.201.196, 125.87.201.191, 125.87.201.190, 125.87.201.193, 125.87.201.192, 125.87.201.199, 125.87.201.198, 125.87.201.8, 125.87.201.9, 125.87.201.2, 125.87.201.3, 125.87.201.0, 125.87.201.1, 125.87.201.6, 125.87.201.7, 125.87.201.4, 125.87.201.5, 125.87.201.18, 125.87.201.17, 125.87.201.16, 125.87.201.15, 125.87.201.14, 125.87.201.13, 125.87.201.12, 125.87.201.11, 125.87.201.169, 125.87.201.166, 125.87.201.165, 125.87.201.168, 125.87.201.19, 125.87.201.167, 125.87.201.173, 125.87.201.172, 125.87.201.175, 125.87.201.174, 125.87.201.171, 125.87.201.170, 125.87.201.10, 125.87.201.29, 125.87.201.28, 125.87.201.27, 125.87.201.26, 125.87.201.25, 125.87.201.24, 125.87.201.23, 125.87.201.22, 125.87.201.177, 125.87.201.176, 125.87.201.179, 125.87.201.178, 125.87.201.184, 125.87.201.183, 125.87.201.186, 125.87.201.185, 125.87.201.180, 125.87.201.182, 125.87.201.181, 125.87.201.21, 125.87.201.20, 125.87.201.39, 125.87.201.38, 125.87.201.37, 125.87.201.36, 125.87.201.35, 125.87.201.34, 125.87.201.33, 125.87.201.148, 125.87.201.147, 125.87.201.149, 125.87.201.144, 125.87.201.143, 125.87.201.146, 125.87.201.145, 125.87.201.151, 125.87.201.150, 125.87.201.153, 125.87.201.152, 125.87.201.32, 125.87.201.31, 125.87.201.30, 125.87.201.49, 125.87.201.48, 125.87.201.47, 125.87.201.46, 125.87.201.45, 125.87.201.44, 125.87.201.159, 125.87.201.158, 125.87.201.155, 125.87.201.154, 125.87.201.157, 125.87.201.156, 125.87.201.162, 125.87.201.161, 125.87.201.164, 125.87.201.163, 125.87.201.160, 125.87.201.43, 125.87.201.42, 125.87.201.41, 125.87.201.40, 125.87.201.59, 125.87.201.58, 125.87.201.57, 125.87.201.129, 125.87.201.56, 125.87.201.55, 125.87.201.126, 125.87.201.247, 125.87.201.125, 125.87.201.246, 125.87.201.128, 125.87.201.249, 125.87.201.127, 125.87.201.248, 125.87.201.122, 125.87.201.243, 125.87.201.121, 125.87.201.242, 125.87.201.124, 125.87.201.245, 125.87.201.123, 125.87.201.244, 125.87.201.250, 125.87.201.131, 125.87.201.252, 125.87.201.130, 125.87.201.251, 125.87.201.54, 125.87.201.53, 125.87.201.52, 125.87.201.51, 125.87.201.50, 125.87.201.69, 125.87.201.68, 125.87.201.67, 125.87.201.66, 125.87.201.137, 125.87.201.136, 125.87.201.139, 125.87.201.138, 125.87.201.133, 125.87.201.254, 125.87.201.132, 125.87.201.253, 125.87.201.135, 125.87.201.134, 125.87.201.255, 125.87.201.140, 125.87.201.142, 125.87.201.141, 125.87.201.65, 125.87.201.64, 125.87.201.63, 125.87.201.62, 125.87.201.61, 125.87.201.60, 125.87.201.108, 125.87.201.229, 125.87.201.79, 125.87.201.107, 125.87.201.228, 125.87.201.78, 125.87.201.77, 125.87.201.109, 125.87.201.104, 125.87.201.225, 125.87.201.103, 125.87.201.224, 125.87.201.106, 125.87.201.227, 125.87.201.105, 125.87.201.226, 125.87.201.100, 125.87.201.221, 125.87.201.220, 125.87.201.102, 125.87.201.223, 125.87.201.101, 125.87.201.222, 125.87.201.230, 125.87.201.76, 125.87.201.75, 125.87.201.74, 125.87.201.73, 125.87.201.72, 125.87.201.71, 1
Source: ip traffic	Subnet 136.218.253.0/24: 136.218.253.55, 136.218.253.54, 136.218.253.57, 136.218.253.56, 136.218.253.51, 136.218.253.50, 136.218.253.150, 136.218.253.53, 136.218.253.52, 136.218.253.142, 136.218.253.143, 136.218.253.140, 136.218.253.141, 136.218.253.59, 136.218.253.146, 136.218.253.58, 136.218.253.147, 136.218.253.144, 136.218.253.145, 136.218.253.148, 136.218.253.149, 136.218.253.60, 136.218.253.66, 136.218.253.65, 136.218.253.68, 136.218.253.67, 136.218.253.62, 136.218.253.61, 136.218.253.64, 136.218.253.63, 136.218.253.131, 136.218.253.252, 136.218.253.132, 136.218.253.253, 136.218.253.250, 136.218.253.130, 136.218.253.251, 136.218.253.135, 136.218.253.69, 136.218.253.136, 136.218.253.133, 136.218.253.254, 136.218.253.134, 136.218.253.255, 136.218.253.139, 136.218.253.137, 136.218.253.138, 136.218.253.71, 136.218.253.70, 136.218.253.77, 136.218.253.76, 136.218.253.79, 136.218.253.78, 136.218.253.73, 136.218.253.171, 136.218.253.72, 136.218.253.172, 136.218.253.75, 136.218.253.74, 136.218.253.170, 136.218.253.164, 136.218.253.165, 136.218.253.162, 136.218.253.163, 136.218.253.168, 136.218.253.169, 136.218.253.166, 136.218.253.167, 136.218.253.80, 136.218.253.82, 136.218.253.81, 136.218.253.88, 136.218.253.87, 136.218.253.89, 136.218.253.84, 136.218.253.160, 136.218.253.83, 136.218.253.161, 136.218.253.86, 136.218.253.85, 136.218.253.153, 136.218.253.154, 136.218.253.151, 136.218.253.152, 136.218.253.157, 136.218.253.158, 136.218.253.155, 136.218.253.156, 136.218.253.159, 136.218.253.11, 136.218.253.10, 136.218.253.190, 136.218.253.13, 136.218.253.12, 136.218.253.193, 136.218.253.194, 136.218.253.191, 136.218.253.192, 136.218.253.19, 136.218.253.186, 136.218.253.18, 136.218.253.187, 136.218.253.184, 136.218.253.185, 136.218.253.15, 136.218.253.14, 136.218.253.17, 136.218.253.188, 136.218.253.16, 136.218.253.189, 136.218.253.22, 136.218.253.21, 136.218.253.24, 136.218.253.23, 136.218.253.182, 136.218.253.183, 136.218.253.20, 136.218.253.180, 136.218.253.181, 136.218.253.1, 136.218.253.175, 136.218.253.2, 136.218.253.29, 136.218.253.176, 136.218.253.3, 136.218.253.173, 136.218.253.4, 136.218.253.174, 136.218.253.26, 136.218.253.179, 136.218.253.25, 136.218.253.28, 136.218.253.177, 136.218.253.0, 136.218.253.27, 136.218.253.178, 136.218.253.9, 136.218.253.5, 136.218.253.6, 136.218.253.7, 136.218.253.8, 136.218.253.33, 136.218.253.32, 136.218.253.35, 136.218.253.34, 136.218.253.31, 136.218.253.30, 136.218.253.37, 136.218.253.36, 136.218.253.39, 136.218.253.38, 136.218.253.44, 136.218.253.43, 136.218.253.46, 136.218.253.45, 136.218.253.40, 136.218.253.42, 136.218.253.41, 136.218.253.197, 136.218.253.198, 136.218.253.195, 136.218.253.196, 136.218.253.48, 136.218.253.47, 136.218.253.199, 136.218.253.49, 136.218.253.201, 136.218.253.202, 136.218.253.200, 136.218.253.205, 136.218.253.206, 136.218.253.203, 136.218.253.204, 136.218.253.209, 136.218.253.207, 136.218.253.208, 136.218.253.91, 136.218.253.90, 136.218.253.93, 136.218.253.92, 136.218.253.99, 136.218.253.98, 136.218.253.
Source: ip traffic	Subnet 193.58.139.0/24: 193.58.139.164, 193.58.139.165, 193.58.139.166, 193.58.139.167, 193.58.139.168, 193.58.139.169, 193.58.139.21, 193.58.139.22, 193.58.139.20, 193.58.139.18, 193.58.139.19, 193.58.139.16, 193.58.139.17, 193.58.139.14, 193.58.139.15, 193.58.139.12, 193.58.139.13, 193.58.139.160, 193.58.139.161, 193.58.139.162, 193.58.139.163, 193.58.139.175, 193.58.139.176, 193.58.139.177, 193.58.139.178, 193.58.139.179, 193.58.139.10, 193.58.139.11, 193.58.139.170, 193.58.139.171, 193.58.139.172, 193.58.139.173, 193.58.139.174, 193.58.139.186, 193.58.139.187, 193.58.139.188, 193.58.139.189, 193.58.139.43, 193.58.139.44, 193.58.139.41, 193.58.139.42, 193.58.139.40, 193.58.139.38, 193.58.139.39, 193.58.139.36, 193.58.139.37, 193.58.139.34, 193.58.139.35, 193.58.139.180, 193.58.139.181, 193.58.139.182, 193.58.139.183, 193.58.139.184, 193.58.139.185, 193.58.139.197, 193.58.139.198, 193.58.139.199, 193.58.139.32, 193.58.139.33, 193.58.139.30, 193.58.139.31, 193.58.139.29, 193.58.139.27, 193.58.139.28, 193.58.139.25, 193.58.139.26, 193.58.139.23, 193.58.139.24, 193.58.139.190, 193.58.139.191, 193.58.139.192, 193.58.139.193, 193.58.139.194, 193.58.139.195, 193.58.139.196, 193.58.139.9, 193.58.139.7, 193.58.139.8, 193.58.139.5, 193.58.139.6, 193.58.139.3, 193.58.139.4, 193.58.139.1, 193.58.139.2, 193.58.139.0, 193.58.139.200, 193.58.139.201, 193.58.139.202, 193.58.139.203, 193.58.139.204, 193.58.139.205, 193.58.139.206, 193.58.139.207, 193.58.139.208, 193.58.139.209, 193.58.139.90, 193.58.139.91, 193.58.139.210, 193.58.139.211, 193.58.139.212, 193.58.139.213, 193.58.139.214, 193.58.139.215, 193.58.139.98, 193.58.139.216, 193.58.139.99, 193.58.139.217, 193.58.139.96, 193.58.139.218, 193.58.139.97, 193.58.139.219, 193.58.139.94, 193.58.139.95, 193.58.139.92, 193.58.139.93, 193.58.139.89, 193.58.139.220, 193.58.139.100, 193.58.139.221, 193.58.139.101, 193.58.139.222, 193.58.139.102, 193.58.139.223, 193.58.139.103, 193.58.139.224, 193.58.139.104, 193.58.139.225, 193.58.139.105, 193.58.139.226, 193.58.139.106, 193.58.139.227, 193.58.139.107, 193.58.139.228, 193.58.139.108, 193.58.139.229, 193.58.139.109, 193.58.139.230, 193.58.139.110, 193.58.139.231, 193.58.139.111, 193.58.139.232, 193.58.139.112, 193.58.139.233, 193.58.139.113, 193.58.139.234, 193.58.139.114, 193.58.139.235, 193.58.139.115, 193.58.139.236, 193.58.139.116, 193.58.139.237, 193.58.139.117, 193.58.139.238, 193.58.139.118, 193.58.139.239, 193.58.139.119, 193.58.139.120, 193.58.139.241, 193.58.139.121, 193.58.139.242, 193.58.139.122, 193.58.139.243, 193.58.139.123, 193.58.139.244, 193.58.139.124, 193.58.139.245, 193.58.139.125, 193.58.139.246, 193.58.139.126, 193.58.139.247, 193.58.139.127, 193.58.139.248, 193.58.139.65, 193.58.139.128, 193.58.139.249, 193.58.139.66, 193.58.139.129, 193.58.139.63, 193.58.139.64, 193.58.139.61, 193.58.139.62, 193.58.139.60, 193.58.139.58, 193.58.139.59, 193.58.139.56, 193.58.139.57, 193.58.139.240, 193.58.139.131, 193.58.139.252, 193.58.139.132, 193.58.139.253, 193.58.139.133, 193.5
Source: ip traffic	Subnet 73.147.223.0/24: 73.147.223.209, 73.147.223.206, 73.147.223.205, 73.147.223.208, 73.147.223.207, 73.147.223.202, 73.147.223.201, 73.147.223.204, 73.147.223.203, 73.147.223.200, 73.147.223.107, 73.147.223.228, 73.147.223.106, 73.147.223.227, 73.147.223.109, 73.147.223.108, 73.147.223.229, 73.147.223.103, 73.147.223.224, 73.147.223.102, 73.147.223.223, 73.147.223.105, 73.147.223.226, 73.147.223.104, 73.147.223.225, 73.147.223.220, 73.147.223.101, 73.147.223.222, 73.147.223.100, 73.147.223.221, 73.147.223.217, 73.147.223.216, 73.147.223.219, 73.147.223.218, 73.147.223.213, 73.147.223.212, 73.147.223.215, 73.147.223.214, 73.147.223.211, 73.147.223.210, 73.147.223.93, 73.147.223.92, 73.147.223.95, 73.147.223.94, 73.147.223.97, 73.147.223.96, 73.147.223.99, 73.147.223.98, 73.147.223.194, 73.147.223.193, 73.147.223.196, 73.147.223.195, 73.147.223.190, 73.147.223.192, 73.147.223.191, 73.147.223.198, 73.147.223.197, 73.147.223.199, 73.147.223.51, 73.147.223.50, 73.147.223.53, 73.147.223.52, 73.147.223.55, 73.147.223.54, 73.147.223.57, 73.147.223.56, 73.147.223.59, 73.147.223.58, 73.147.223.161, 73.147.223.160, 73.147.223.163, 73.147.223.162, 73.147.223.169, 73.147.223.168, 73.147.223.165, 73.147.223.164, 73.147.223.167, 73.147.223.166, 73.147.223.60, 73.147.223.62, 73.147.223.61, 73.147.223.64, 73.147.223.63, 73.147.223.66, 73.147.223.65, 73.147.223.68, 73.147.223.67, 73.147.223.69, 73.147.223.150, 73.147.223.152, 73.147.223.151, 73.147.223.158, 73.147.223.157, 73.147.223.159, 73.147.223.154, 73.147.223.153, 73.147.223.156, 73.147.223.155, 73.147.223.71, 73.147.223.70, 73.147.223.73, 73.147.223.72, 73.147.223.75, 73.147.223.74, 73.147.223.77, 73.147.223.76, 73.147.223.79, 73.147.223.78, 73.147.223.183, 73.147.223.182, 73.147.223.185, 73.147.223.184, 73.147.223.181, 73.147.223.180, 73.147.223.187, 73.147.223.186, 73.147.223.80, 73.147.223.189, 73.147.223.188, 73.147.223.82, 73.147.223.81, 73.147.223.84, 73.147.223.83, 73.147.223.86, 73.147.223.85, 73.147.223.88, 73.147.223.87, 73.147.223.89, 73.147.223.172, 73.147.223.171, 73.147.223.174, 73.147.223.173, 73.147.223.170, 73.147.223.179, 73.147.223.176, 73.147.223.175, 73.147.223.91, 73.147.223.178, 73.147.223.90, 73.147.223.177, 73.147.223.129, 73.147.223.128, 73.147.223.249, 73.147.223.11, 73.147.223.10, 73.147.223.13, 73.147.223.12, 73.147.223.15, 73.147.223.14, 73.147.223.17, 73.147.223.16, 73.147.223.19, 73.147.223.18, 73.147.223.240, 73.147.223.125, 73.147.223.246, 73.147.223.124, 73.147.223.245, 73.147.223.127, 73.147.223.248, 73.147.223.126, 73.147.223.247, 73.147.223.121, 73.147.223.242, 73.147.223.120, 73.147.223.241, 73.147.223.123, 73.147.223.244, 73.147.223.122, 73.147.223.243, 73.147.223.20, 73.147.223.118, 73.147.223.239, 73.147.223.117, 73.147.223.238, 73.147.223.22, 73.147.223.21, 73.147.223.119, 73.147.223.24, 73.147.223.23, 73.147.223.26, 73.147.223.25, 73.147.223.28, 73.147.223.27, 73.147.223.29, 73.147.223.114, 73.147.223.235, 73.147.223.113, 73.147.223.234, 73.147.223.116, 73.147.223.237, 73.147.223.115
Source: ip traffic	Subnet 144.132.240.0/24: 144.132.240.0, 144.132.240.2, 144.132.240.1, 144.132.240.159, 144.132.240.157, 144.132.240.158, 144.132.240.8, 144.132.240.155, 144.132.240.7, 144.132.240.156, 144.132.240.153, 144.132.240.9, 144.132.240.154, 144.132.240.4, 144.132.240.151, 144.132.240.3, 144.132.240.152, 144.132.240.6, 144.132.240.5, 144.132.240.150, 144.132.240.148, 144.132.240.149, 144.132.240.146, 144.132.240.147, 144.132.240.144, 144.132.240.145, 144.132.240.142, 144.132.240.143, 144.132.240.140, 144.132.240.141, 144.132.240.179, 144.132.240.177, 144.132.240.178, 144.132.240.175, 144.132.240.176, 144.132.240.173, 144.132.240.174, 144.132.240.171, 144.132.240.172, 144.132.240.14, 144.132.240.15, 144.132.240.170, 144.132.240.12, 144.132.240.13, 144.132.240.10, 144.132.240.11, 144.132.240.168, 144.132.240.169, 144.132.240.166, 144.132.240.167, 144.132.240.164, 144.132.240.165, 144.132.240.18, 144.132.240.162, 144.132.240.19, 144.132.240.163, 144.132.240.16, 144.132.240.160, 144.132.240.17, 144.132.240.161, 144.132.240.25, 144.132.240.26, 144.132.240.23, 144.132.240.24, 144.132.240.21, 144.132.240.22, 144.132.240.20, 144.132.240.199, 144.132.240.197, 144.132.240.198, 144.132.240.195, 144.132.240.196, 144.132.240.193, 144.132.240.194, 144.132.240.191, 144.132.240.192, 144.132.240.190, 144.132.240.188, 144.132.240.189, 144.132.240.186, 144.132.240.187, 144.132.240.184, 144.132.240.185, 144.132.240.182, 144.132.240.183, 144.132.240.180, 144.132.240.181, 144.132.240.78, 144.132.240.79, 144.132.240.76, 144.132.240.77, 144.132.240.74, 144.132.240.75, 144.132.240.72, 144.132.240.73, 144.132.240.70, 144.132.240.71, 144.132.240.89, 144.132.240.87, 144.132.240.88, 144.132.240.85, 144.132.240.86, 144.132.240.83, 144.132.240.84, 144.132.240.81, 144.132.240.82, 144.132.240.80, 144.132.240.218, 144.132.240.219, 144.132.240.216, 144.132.240.217, 144.132.240.214, 144.132.240.215, 144.132.240.212, 144.132.240.213, 144.132.240.210, 144.132.240.211, 144.132.240.98, 144.132.240.99, 144.132.240.96, 144.132.240.97, 144.132.240.94, 144.132.240.95, 144.132.240.92, 144.132.240.93, 144.132.240.90, 144.132.240.91, 144.132.240.209, 144.132.240.207, 144.132.240.208, 144.132.240.205, 144.132.240.206, 144.132.240.203, 144.132.240.204, 144.132.240.201, 144.132.240.202, 144.132.240.200, 144.132.240.119, 144.132.240.117, 144.132.240.238, 144.132.240.118, 144.132.240.239, 144.132.240.115, 144.132.240.236, 144.132.240.116, 144.132.240.237, 144.132.240.113, 144.132.240.234, 144.132.240.114, 144.132.240.235, 144.132.240.111, 144.132.240.232, 144.132.240.112, 144.132.240.233, 144.132.240.230, 144.132.240.110, 144.132.240.231, 144.132.240.29, 144.132.240.27, 144.132.240.28, 144.132.240.36, 144.132.240.37, 144.132.240.34, 144.132.240.35, 144.132.240.32, 144.132.240.33, 144.132.240.30, 144.132.240.31, 144.132.240.108, 144.132.240.229, 144.132.240.109, 144.132.240.106, 144.132.240.227, 144.132.240.107, 144.132.240.228, 144.132.240.104, 144.132.240.225, 144.132.240.105, 144.132.240.226, 144.132.240.102, 144.132.240.223, 1
Source: ip traffic	Subnet 133.84.205.0/24: 133.84.205.78, 133.84.205.77, 133.84.205.79, 133.84.205.74, 133.84.205.73, 133.84.205.76, 133.84.205.75, 133.84.205.70, 133.84.205.72, 133.84.205.71, 133.84.205.89, 133.84.205.88, 133.84.205.85, 133.84.205.84, 133.84.205.87, 133.84.205.86, 133.84.205.81, 133.84.205.80, 133.84.205.83, 133.84.205.82, 133.84.205.190, 133.84.205.191, 133.84.205.192, 133.84.205.193, 133.84.205.59, 133.84.205.56, 133.84.205.55, 133.84.205.58, 133.84.205.57, 133.84.205.52, 133.84.205.51, 133.84.205.54, 133.84.205.53, 133.84.205.183, 133.84.205.184, 133.84.205.50, 133.84.205.185, 133.84.205.186, 133.84.205.187, 133.84.205.188, 133.84.205.189, 133.84.205.67, 133.84.205.66, 133.84.205.69, 133.84.205.68, 133.84.205.63, 133.84.205.62, 133.84.205.65, 133.84.205.64, 133.84.205.194, 133.84.205.195, 133.84.205.61, 133.84.205.196, 133.84.205.60, 133.84.205.197, 133.84.205.198, 133.84.205.199, 133.84.205.202, 133.84.205.203, 133.84.205.204, 133.84.205.205, 133.84.205.206, 133.84.205.207, 133.84.205.208, 133.84.205.209, 133.84.205.200, 133.84.205.201, 133.84.205.213, 133.84.205.214, 133.84.205.215, 133.84.205.216, 133.84.205.217, 133.84.205.218, 133.84.205.219, 133.84.205.210, 133.84.205.211, 133.84.205.212, 133.84.205.99, 133.84.205.96, 133.84.205.95, 133.84.205.98, 133.84.205.97, 133.84.205.92, 133.84.205.91, 133.84.205.94, 133.84.205.93, 133.84.205.90, 133.84.205.125, 133.84.205.246, 133.84.205.126, 133.84.205.247, 133.84.205.127, 133.84.205.248, 133.84.205.128, 133.84.205.249, 133.84.205.129, 133.84.205.240, 133.84.205.120, 133.84.205.241, 133.84.205.121, 133.84.205.242, 133.84.205.122, 133.84.205.243, 133.84.205.123, 133.84.205.244, 133.84.205.124, 133.84.205.245, 133.84.205.136, 133.84.205.137, 133.84.205.138, 133.84.205.139, 133.84.205.250, 133.84.205.130, 133.84.205.251, 133.84.205.131, 133.84.205.252, 133.84.205.132, 133.84.205.253, 133.84.205.133, 133.84.205.254, 133.84.205.134, 133.84.205.255, 133.84.205.135, 133.84.205.103, 133.84.205.224, 133.84.205.104, 133.84.205.225, 133.84.205.105, 133.84.205.226, 133.84.205.106, 133.84.205.227, 133.84.205.107, 133.84.205.228, 133.84.205.108, 133.84.205.229, 133.84.205.109, 133.84.205.220, 133.84.205.100, 133.84.205.221, 133.84.205.101, 133.84.205.222, 133.84.205.102, 133.84.205.223, 133.84.205.114, 133.84.205.235, 133.84.205.115, 133.84.205.236, 133.84.205.116, 133.84.205.237, 133.84.205.117, 133.84.205.238, 133.84.205.118, 133.84.205.239, 133.84.205.119, 133.84.205.230, 133.84.205.110, 133.84.205.231, 133.84.205.111, 133.84.205.232, 133.84.205.112, 133.84.205.233, 133.84.205.113, 133.84.205.234, 133.84.205.170, 133.84.205.171, 133.84.205.38, 133.84.205.37, 133.84.205.39, 133.84.205.34, 133.84.205.5, 133.84.205.169, 133.84.205.33, 133.84.205.4, 133.84.205.7, 133.84.205.36, 133.84.205.35, 133.84.205.6, 133.84.205.30, 133.84.205.9, 133.84.205.8, 133.84.205.32, 133.84.205.31, 133.84.205.161, 133.84.205.162, 133.84.205.163, 133.84.205.164, 133.84.205.1, 133.84.205.165, 133.84.205.0, 133.84.205.166, 133.84.205.3, 133.84.205.167, 133.84
Source: ip traffic	Subnet 145.209.146.0/24: 145.209.146.209, 145.209.146.208, 145.209.146.207, 145.209.146.206, 145.209.146.205, 145.209.146.204, 145.209.146.203, 145.209.146.202, 145.209.146.201, 145.209.146.200, 145.209.146.219, 145.209.146.91, 145.209.146.210, 145.209.146.92, 145.209.146.90, 145.209.146.95, 145.209.146.96, 145.209.146.93, 145.209.146.94, 145.209.146.99, 145.209.146.218, 145.209.146.217, 145.209.146.97, 145.209.146.216, 145.209.146.98, 145.209.146.215, 145.209.146.214, 145.209.146.213, 145.209.146.212, 145.209.146.211, 145.209.146.109, 145.209.146.100, 145.209.146.221, 145.209.146.220, 145.209.146.108, 145.209.146.229, 145.209.146.107, 145.209.146.228, 145.209.146.106, 145.209.146.227, 145.209.146.105, 145.209.146.226, 145.209.146.104, 145.209.146.225, 145.209.146.103, 145.209.146.224, 145.209.146.102, 145.209.146.223, 145.209.146.101, 145.209.146.222, 145.209.146.111, 145.209.146.232, 145.209.146.110, 145.209.146.231, 145.209.146.230, 145.209.146.119, 145.209.146.118, 145.209.146.239, 145.209.146.117, 145.209.146.238, 145.209.146.116, 145.209.146.237, 145.209.146.115, 145.209.146.236, 145.209.146.114, 145.209.146.235, 145.209.146.113, 145.209.146.234, 145.209.146.112, 145.209.146.233, 145.209.146.122, 145.209.146.243, 145.209.146.121, 145.209.146.242, 145.209.146.120, 145.209.146.241, 145.209.146.240, 145.209.146.129, 145.209.146.128, 145.209.146.249, 145.209.146.127, 145.209.146.248, 145.209.146.126, 145.209.146.247, 145.209.146.125, 145.209.146.246, 145.209.146.124, 145.209.146.245, 145.209.146.123, 145.209.146.244, 145.209.146.133, 145.209.146.254, 145.209.146.132, 145.209.146.253, 145.209.146.131, 145.209.146.252, 145.209.146.130, 145.209.146.251, 145.209.146.250, 145.209.146.139, 145.209.146.138, 145.209.146.137, 145.209.146.136, 145.209.146.135, 145.209.146.134, 145.209.146.255, 145.209.146.2, 145.209.146.144, 145.209.146.3, 145.209.146.143, 145.209.146.4, 145.209.146.142, 145.209.146.5, 145.209.146.141, 145.209.146.6, 145.209.146.140, 145.209.146.7, 145.209.146.8, 145.209.146.9, 145.209.146.149, 145.209.146.148, 145.209.146.147, 145.209.146.0, 145.209.146.146, 145.209.146.1, 145.209.146.145, 145.209.146.155, 145.209.146.154, 145.209.146.153, 145.209.146.152, 145.209.146.151, 145.209.146.150, 145.209.146.159, 145.209.146.158, 145.209.146.157, 145.209.146.156, 145.209.146.28, 145.209.146.29, 145.209.146.166, 145.209.146.165, 145.209.146.164, 145.209.146.163, 145.209.146.162, 145.209.146.161, 145.209.146.160, 145.209.146.22, 145.209.146.23, 145.209.146.20, 145.209.146.21, 145.209.146.26, 145.209.146.27, 145.209.146.169, 145.209.146.24, 145.209.146.168, 145.209.146.25, 145.209.146.167, 145.209.146.19, 145.209.146.17, 145.209.146.18, 145.209.146.180, 145.209.146.177, 145.209.146.176, 145.209.146.175, 145.209.146.174, 145.209.146.173, 145.209.146.172, 145.209.146.171, 145.209.146.170, 145.209.146.11, 145.209.146.12, 145.209.146.10, 145.209.146.15, 145.209.146.16, 145.209.146.13, 145.209.146.179, 145.209.146.14, 145.209.146.178, 145.209.146.191, 145.209.146.190, 145.209
Source: ip traffic	Subnet 71.26.233.0/24: 71.26.233.38, 71.26.233.37, 71.26.233.36, 71.26.233.35, 71.26.233.34, 71.26.233.33, 71.26.233.32, 71.26.233.31, 71.26.233.39, 71.26.233.9, 71.26.233.30, 71.26.233.8, 71.26.233.7, 71.26.233.6, 71.26.233.5, 71.26.233.4, 71.26.233.3, 71.26.233.2, 71.26.233.49, 71.26.233.48, 71.26.233.47, 71.26.233.46, 71.26.233.45, 71.26.233.44, 71.26.233.43, 71.26.233.42, 71.26.233.41, 71.26.233.40, 71.26.233.16, 71.26.233.15, 71.26.233.59, 71.26.233.14, 71.26.233.58, 71.26.233.13, 71.26.233.57, 71.26.233.12, 71.26.233.56, 71.26.233.11, 71.26.233.55, 71.26.233.10, 71.26.233.54, 71.26.233.53, 71.26.233.19, 71.26.233.18, 71.26.233.17, 71.26.233.52, 71.26.233.51, 71.26.233.50, 71.26.233.1, 71.26.233.27, 71.26.233.0, 71.26.233.26, 71.26.233.25, 71.26.233.24, 71.26.233.23, 71.26.233.22, 71.26.233.21, 71.26.233.20, 71.26.233.64, 71.26.233.29, 71.26.233.28, 71.26.233.63, 71.26.233.62, 71.26.233.61, 71.26.233.60
Source: ip traffic	Subnet 74.3.91.0/24: 74.3.91.55, 74.3.91.56, 74.3.91.53, 74.3.91.54, 74.3.91.59, 74.3.91.57, 74.3.91.58, 74.3.91.51, 74.3.91.52, 74.3.91.50, 74.3.91.44, 74.3.91.45, 74.3.91.42, 74.3.91.43, 74.3.91.48, 74.3.91.49, 74.3.91.46, 74.3.91.47, 74.3.91.40, 74.3.91.41, 74.3.91.200, 74.3.91.201, 74.3.91.202, 74.3.91.203, 74.3.91.204, 74.3.91.205, 74.3.91.206, 74.3.91.207, 74.3.91.77, 74.3.91.208, 74.3.91.78, 74.3.91.209, 74.3.91.75, 74.3.91.76, 74.3.91.79, 74.3.91.70, 74.3.91.73, 74.3.91.74, 74.3.91.71, 74.3.91.72, 74.3.91.66, 74.3.91.67, 74.3.91.64, 74.3.91.65, 74.3.91.68, 74.3.91.69, 74.3.91.62, 74.3.91.63, 74.3.91.60, 74.3.91.61, 74.3.91.181, 74.3.91.182, 74.3.91.183, 74.3.91.184, 74.3.91.185, 74.3.91.186, 74.3.91.187, 74.3.91.188, 74.3.91.19, 74.3.91.189, 74.3.91.17, 74.3.91.18, 74.3.91.3, 74.3.91.11, 74.3.91.12, 74.3.91.2, 74.3.91.5, 74.3.91.4, 74.3.91.10, 74.3.91.7, 74.3.91.15, 74.3.91.16, 74.3.91.6, 74.3.91.9, 74.3.91.13, 74.3.91.8, 74.3.91.14, 74.3.91.1, 74.3.91.190, 74.3.91.0, 74.3.91.191, 74.3.91.170, 74.3.91.171, 74.3.91.172, 74.3.91.173, 74.3.91.174, 74.3.91.175, 74.3.91.176, 74.3.91.177, 74.3.91.178, 74.3.91.179, 74.3.91.180, 74.3.91.39, 74.3.91.33, 74.3.91.34, 74.3.91.31, 74.3.91.32, 74.3.91.37, 74.3.91.38, 74.3.91.35, 74.3.91.36, 74.3.91.30, 74.3.91.192, 74.3.91.193, 74.3.91.194, 74.3.91.195, 74.3.91.196, 74.3.91.197, 74.3.91.198, 74.3.91.199, 74.3.91.28, 74.3.91.29, 74.3.91.22, 74.3.91.23, 74.3.91.20, 74.3.91.21, 74.3.91.26, 74.3.91.27, 74.3.91.24, 74.3.91.25, 74.3.91.140, 74.3.91.141, 74.3.91.142, 74.3.91.143, 74.3.91.144, 74.3.91.145, 74.3.91.146, 74.3.91.147, 74.3.91.148, 74.3.91.149, 74.3.91.250, 74.3.91.130, 74.3.91.251, 74.3.91.131, 74.3.91.252, 74.3.91.132, 74.3.91.253, 74.3.91.133, 74.3.91.254, 74.3.91.134, 74.3.91.255, 74.3.91.135, 74.3.91.136, 74.3.91.137, 74.3.91.138, 74.3.91.139, 74.3.91.160, 74.3.91.161, 74.3.91.162, 74.3.91.163, 74.3.91.164, 74.3.91.165, 74.3.91.166, 74.3.91.167, 74.3.91.168, 74.3.91.169, 74.3.91.150, 74.3.91.151, 74.3.91.152, 74.3.91.153, 74.3.91.154, 74.3.91.155, 74.3.91.156, 74.3.91.157, 74.3.91.158, 74.3.91.159, 74.3.91.220, 74.3.91.100, 74.3.91.221, 74.3.91.101, 74.3.91.222, 74.3.91.102, 74.3.91.223, 74.3.91.103, 74.3.91.224, 74.3.91.104, 74.3.91.225, 74.3.91.105, 74.3.91.226, 74.3.91.106, 74.3.91.227, 74.3.91.107, 74.3.91.228, 74.3.91.108, 74.3.91.229, 74.3.91.99, 74.3.91.109, 74.3.91.97, 74.3.91.98, 74.3.91.91, 74.3.91.92, 74.3.91.90, 74.3.91.95, 74.3.91.96, 74.3.91.93, 74.3.91.94, 74.3.91.210, 74.3.91.211, 74.3.91.212, 74.3.91.213, 74.3.91.214, 74.3.91.215, 74.3.91.216, 74.3.91.217, 74.3.91.218, 74.3.91.88, 74.3.91.219, 74.3.91.89, 74.3.91.86, 74.3.91.87, 74.3.91.80, 74.3.91.81, 74.3.91.84, 74.3.91.85, 74.3.91.82, 74.3.91.83, 74.3.91.240, 74.3.91.120, 74.3.91.241, 74.3.91.121, 74.3.91.242, 74.3.91.122, 74.3.91.243, 74.3.91.123, 74.3.91.244, 74.3.91.124, 74.3.91.245, 74.3.91.125, 74.3.91.246, 74.3.91.126, 74.3.91.247, 74.3.91.127, 74.3.91.248, 74.3.91.128, 74.3.91.249, 74.3.91.129, 74.3.91.230, 74.3.91.110, 74.3.91.231, 74.
Source: ip traffic	Subnet 67.159.99.0/24: 67.159.99.118, 67.159.99.239, 67.159.99.119, 67.159.99.116, 67.159.99.237, 67.159.99.117, 67.159.99.238, 67.159.99.114, 67.159.99.235, 67.159.99.115, 67.159.99.236, 67.159.99.112, 67.159.99.233, 67.159.99.113, 67.159.99.234, 67.159.99.110, 67.159.99.231, 67.159.99.111, 67.159.99.232, 67.159.99.230, 67.159.99.129, 67.159.99.127, 67.159.99.248, 67.159.99.128, 67.159.99.249, 67.159.99.125, 67.159.99.246, 67.159.99.126, 67.159.99.247, 67.159.99.123, 67.159.99.244, 67.159.99.124, 67.159.99.245, 67.159.99.121, 67.159.99.242, 67.159.99.122, 67.159.99.243, 67.159.99.240, 67.159.99.120, 67.159.99.241, 67.159.99.138, 67.159.99.139, 67.159.99.136, 67.159.99.137, 67.159.99.134, 67.159.99.255, 67.159.99.135, 67.159.99.132, 67.159.99.253, 67.159.99.133, 67.159.99.254, 67.159.99.130, 67.159.99.251, 67.159.99.131, 67.159.99.252, 67.159.99.250, 67.159.99.149, 67.159.99.147, 67.159.99.148, 67.159.99.145, 67.159.99.146, 67.159.99.143, 67.159.99.144, 67.159.99.141, 67.159.99.142, 67.159.99.140, 67.159.99.85, 67.159.99.84, 67.159.99.87, 67.159.99.86, 67.159.99.81, 67.159.99.80, 67.159.99.83, 67.159.99.82, 67.159.99.89, 67.159.99.88, 67.159.99.158, 67.159.99.159, 67.159.99.156, 67.159.99.157, 67.159.99.154, 67.159.99.155, 67.159.99.152, 67.159.99.153, 67.159.99.90, 67.159.99.150, 67.159.99.151, 67.159.99.96, 67.159.99.95, 67.159.99.98, 67.159.99.97, 67.159.99.92, 67.159.99.91, 67.159.99.94, 67.159.99.93, 67.159.99.99, 67.159.99.169, 67.159.99.167, 67.159.99.168, 67.159.99.165, 67.159.99.166, 67.159.99.163, 67.159.99.164, 67.159.99.161, 67.159.99.162, 67.159.99.160, 67.159.99.8, 67.159.99.9, 67.159.99.4, 67.159.99.5, 67.159.99.6, 67.159.99.7, 67.159.99.0, 67.159.99.178, 67.159.99.1, 67.159.99.179, 67.159.99.2, 67.159.99.176, 67.159.99.3, 67.159.99.177, 67.159.99.174, 67.159.99.175, 67.159.99.172, 67.159.99.173, 67.159.99.170, 67.159.99.171, 67.159.99.189, 67.159.99.187, 67.159.99.188, 67.159.99.185, 67.159.99.186, 67.159.99.183, 67.159.99.184, 67.159.99.181, 67.159.99.182, 67.159.99.180, 67.159.99.41, 67.159.99.40, 67.159.99.43, 67.159.99.42, 67.159.99.49, 67.159.99.48, 67.159.99.45, 67.159.99.44, 67.159.99.47, 67.159.99.46, 67.159.99.198, 67.159.99.199, 67.159.99.196, 67.159.99.197, 67.159.99.194, 67.159.99.195, 67.159.99.192, 67.159.99.193, 67.159.99.190, 67.159.99.191, 67.159.99.52, 67.159.99.51, 67.159.99.54, 67.159.99.53, 67.159.99.50, 67.159.99.59, 67.159.99.56, 67.159.99.55, 67.159.99.58, 67.159.99.57, 67.159.99.63, 67.159.99.62, 67.159.99.65, 67.159.99.64, 67.159.99.61, 67.159.99.60, 67.159.99.67, 67.159.99.66, 67.159.99.69, 67.159.99.68, 67.159.99.74, 67.159.99.73, 67.159.99.76, 67.159.99.75, 67.159.99.70, 67.159.99.72, 67.159.99.71, 67.159.99.78, 67.159.99.77, 67.159.99.79, 67.159.99.10, 67.159.99.16, 67.159.99.15, 67.159.99.18, 67.159.99.17, 67.159.99.12, 67.159.99.208, 67.159.99.11, 67.159.99.209, 67.159.99.14, 67.159.99.206, 67.159.99.13, 67.159.99.207, 67.159.99.204, 67.159.99.205, 67.159.99.202, 67.159.99.203, 67.159.99.200, 67.159.99.19, 67.159.99.201,
Source: ip traffic	Subnet 218.156.60.0/24: 218.156.60.99, 218.156.60.98, 218.156.60.97, 218.156.60.96, 218.156.60.89, 218.156.60.88, 218.156.60.87, 218.156.60.86, 218.156.60.85, 218.156.60.95, 218.156.60.94, 218.156.60.93, 218.156.60.92, 218.156.60.91, 218.156.60.90, 218.156.60.59, 218.156.60.103, 218.156.60.224, 218.156.60.58, 218.156.60.102, 218.156.60.223, 218.156.60.57, 218.156.60.105, 218.156.60.226, 218.156.60.56, 218.156.60.104, 218.156.60.225, 218.156.60.55, 218.156.60.107, 218.156.60.228, 218.156.60.54, 218.156.60.106, 218.156.60.227, 218.156.60.53, 218.156.60.109, 218.156.60.52, 218.156.60.108, 218.156.60.229, 218.156.60.62, 218.156.60.61, 218.156.60.60, 218.156.60.220, 218.156.60.101, 218.156.60.222, 218.156.60.100, 218.156.60.221, 218.156.60.48, 218.156.60.114, 218.156.60.235, 218.156.60.47, 218.156.60.113, 218.156.60.234, 218.156.60.46, 218.156.60.116, 218.156.60.237, 218.156.60.45, 218.156.60.115, 218.156.60.236, 218.156.60.44, 218.156.60.118, 218.156.60.239, 218.156.60.43, 218.156.60.117, 218.156.60.238, 218.156.60.42, 218.156.60.41, 218.156.60.119, 218.156.60.49, 218.156.60.51, 218.156.60.50, 218.156.60.110, 218.156.60.231, 218.156.60.230, 218.156.60.112, 218.156.60.233, 218.156.60.111, 218.156.60.232, 218.156.60.202, 218.156.60.201, 218.156.60.79, 218.156.60.204, 218.156.60.78, 218.156.60.203, 218.156.60.77, 218.156.60.206, 218.156.60.76, 218.156.60.205, 218.156.60.75, 218.156.60.208, 218.156.60.74, 218.156.60.207, 218.156.60.209, 218.156.60.84, 218.156.60.83, 218.156.60.82, 218.156.60.81, 218.156.60.80, 218.156.60.200, 218.156.60.213, 218.156.60.69, 218.156.60.212, 218.156.60.68, 218.156.60.215, 218.156.60.67, 218.156.60.214, 218.156.60.66, 218.156.60.217, 218.156.60.65, 218.156.60.216, 218.156.60.64, 218.156.60.219, 218.156.60.63, 218.156.60.218, 218.156.60.73, 218.156.60.72, 218.156.60.71, 218.156.60.70, 218.156.60.211, 218.156.60.210, 218.156.60.15, 218.156.60.147, 218.156.60.14, 218.156.60.146, 218.156.60.13, 218.156.60.149, 218.156.60.12, 218.156.60.148, 218.156.60.11, 218.156.60.10, 218.156.60.19, 218.156.60.18, 218.156.60.17, 218.156.60.16, 218.156.60.141, 218.156.60.140, 218.156.60.143, 218.156.60.142, 218.156.60.145, 218.156.60.144, 218.156.60.158, 218.156.60.157, 218.156.60.159, 218.156.60.0, 218.156.60.1, 218.156.60.2, 218.156.60.3, 218.156.60.4, 218.156.60.5, 218.156.60.6, 218.156.60.7, 218.156.60.8, 218.156.60.9, 218.156.60.150, 218.156.60.152, 218.156.60.151, 218.156.60.154, 218.156.60.153, 218.156.60.156, 218.156.60.155, 218.156.60.37, 218.156.60.125, 218.156.60.246, 218.156.60.36, 218.156.60.124, 218.156.60.245, 218.156.60.35, 218.156.60.127, 218.156.60.248, 218.156.60.34, 218.156.60.126, 218.156.60.247, 218.156.60.33, 218.156.60.129, 218.156.60.32, 218.156.60.128, 218.156.60.249, 218.156.60.31, 218.156.60.30, 218.156.60.39, 218.156.60.38, 218.156.60.40, 218.156.60.240, 218.156.60.121, 218.156.60.242, 218.156.60.120, 218.156.60.241, 218.156.60.123, 218.156.60.244, 218.156.60.122, 218.156.60.243, 218.156.60.26, 218.156.60.136, 218.156.60.25, 218.156.60.135
Source: ip traffic	Subnet 42.163.59.0/24: 42.163.59.98, 42.163.59.97, 42.163.59.99, 42.163.59.94, 42.163.59.93, 42.163.59.96, 42.163.59.95, 42.163.59.90, 42.163.59.92, 42.163.59.91, 42.163.59.87, 42.163.59.86, 42.163.59.89, 42.163.59.88, 42.163.59.83, 42.163.59.82, 42.163.59.85, 42.163.59.84, 42.163.59.81, 42.163.59.80, 42.163.59.79, 42.163.59.76, 42.163.59.75, 42.163.59.78, 42.163.59.77, 42.163.59.72, 42.163.59.71, 42.163.59.74, 42.163.59.73, 42.163.59.70, 42.163.59.69, 42.163.59.68, 42.163.59.65, 42.163.59.64, 42.163.59.67, 42.163.59.66, 42.163.59.61, 42.163.59.60, 42.163.59.63, 42.163.59.62, 42.163.59.180, 42.163.59.58, 42.163.59.57, 42.163.59.189, 42.163.59.59, 42.163.59.54, 42.163.59.53, 42.163.59.56, 42.163.59.55, 42.163.59.50, 42.163.59.183, 42.163.59.184, 42.163.59.52, 42.163.59.181, 42.163.59.51, 42.163.59.182, 42.163.59.187, 42.163.59.188, 42.163.59.185, 42.163.59.186, 42.163.59.190, 42.163.59.191, 42.163.59.39, 42.163.59.47, 42.163.59.46, 42.163.59.49, 42.163.59.48, 42.163.59.43, 42.163.59.42, 42.163.59.45, 42.163.59.44, 42.163.59.194, 42.163.59.195, 42.163.59.41, 42.163.59.192, 42.163.59.40, 42.163.59.193, 42.163.59.198, 42.163.59.199, 42.163.59.196, 42.163.59.197, 42.163.59.29, 42.163.59.28, 42.163.59.36, 42.163.59.169, 42.163.59.35, 42.163.59.38, 42.163.59.167, 42.163.59.37, 42.163.59.168, 42.163.59.32, 42.163.59.31, 42.163.59.34, 42.163.59.33, 42.163.59.161, 42.163.59.162, 42.163.59.30, 42.163.59.160, 42.163.59.165, 42.163.59.166, 42.163.59.163, 42.163.59.164, 42.163.59.18, 42.163.59.17, 42.163.59.19, 42.163.59.25, 42.163.59.24, 42.163.59.27, 42.163.59.178, 42.163.59.26, 42.163.59.179, 42.163.59.21, 42.163.59.20, 42.163.59.23, 42.163.59.22, 42.163.59.172, 42.163.59.173, 42.163.59.170, 42.163.59.171, 42.163.59.176, 42.163.59.177, 42.163.59.174, 42.163.59.175, 42.163.59.14, 42.163.59.147, 42.163.59.13, 42.163.59.148, 42.163.59.16, 42.163.59.145, 42.163.59.15, 42.163.59.146, 42.163.59.10, 42.163.59.12, 42.163.59.149, 42.163.59.11, 42.163.59.140, 42.163.59.143, 42.163.59.144, 42.163.59.141, 42.163.59.142, 42.163.59.158, 42.163.59.159, 42.163.59.156, 42.163.59.157, 42.163.59.150, 42.163.59.151, 42.163.59.154, 42.163.59.155, 42.163.59.152, 42.163.59.153, 42.163.59.125, 42.163.59.246, 42.163.59.126, 42.163.59.247, 42.163.59.123, 42.163.59.244, 42.163.59.124, 42.163.59.245, 42.163.59.129, 42.163.59.127, 42.163.59.248, 42.163.59.128, 42.163.59.249, 42.163.59.121, 42.163.59.242, 42.163.59.122, 42.163.59.243, 42.163.59.240, 42.163.59.120, 42.163.59.241, 42.163.59.4, 42.163.59.136, 42.163.59.5, 42.163.59.137, 42.163.59.2, 42.163.59.134, 42.163.59.255, 42.163.59.3, 42.163.59.135, 42.163.59.8, 42.163.59.9, 42.163.59.6, 42.163.59.138, 42.163.59.7, 42.163.59.139, 42.163.59.250, 42.163.59.0, 42.163.59.132, 42.163.59.253, 42.163.59.1, 42.163.59.133, 42.163.59.254, 42.163.59.130, 42.163.59.251, 42.163.59.131, 42.163.59.252, 42.163.59.219, 42.163.59.103, 42.163.59.224, 42.163.59.104, 42.163.59.225, 42.163.59.101, 42.163.59.222, 42.163.59.102, 42.163.59.223, 42.163.59.107, 42.163.59.228, 42.16
Source: ip traffic	Subnet 61.193.135.0/24: 61.193.135.171, 61.193.135.172, 61.193.135.170, 61.193.135.175, 61.193.135.176, 61.193.135.173, 61.193.135.174, 61.193.135.168, 61.193.135.169, 61.193.135.166, 61.193.135.167, 61.193.135.182, 61.193.135.183, 61.193.135.180, 61.193.135.181, 61.193.135.186, 61.193.135.187, 61.193.135.184, 61.193.135.185, 61.193.135.17, 61.193.135.16, 61.193.135.15, 61.193.135.14, 61.193.135.13, 61.193.135.12, 61.193.135.11, 61.193.135.10, 61.193.135.179, 61.193.135.177, 61.193.135.178, 61.193.135.19, 61.193.135.18, 61.193.135.193, 61.193.135.194, 61.193.135.191, 61.193.135.192, 61.193.135.197, 61.193.135.198, 61.193.135.195, 61.193.135.196, 61.193.135.190, 61.193.135.188, 61.193.135.189, 61.193.135.199, 61.193.135.5, 61.193.135.6, 61.193.135.7, 61.193.135.8, 61.193.135.1, 61.193.135.2, 61.193.135.3, 61.193.135.4, 61.193.135.9, 61.193.135.0, 61.193.135.86, 61.193.135.85, 61.193.135.84, 61.193.135.83, 61.193.135.82, 61.193.135.81, 61.193.135.80, 61.193.135.209, 61.193.135.207, 61.193.135.208, 61.193.135.89, 61.193.135.88, 61.193.135.87, 61.193.135.201, 61.193.135.202, 61.193.135.200, 61.193.135.205, 61.193.135.206, 61.193.135.203, 61.193.135.204, 61.193.135.220, 61.193.135.97, 61.193.135.96, 61.193.135.95, 61.193.135.94, 61.193.135.93, 61.193.135.92, 61.193.135.91, 61.193.135.90, 61.193.135.218, 61.193.135.219, 61.193.135.99, 61.193.135.98, 61.193.135.212, 61.193.135.213, 61.193.135.210, 61.193.135.211, 61.193.135.216, 61.193.135.217, 61.193.135.214, 61.193.135.215, 61.193.135.230, 61.193.135.110, 61.193.135.231, 61.193.135.64, 61.193.135.63, 61.193.135.62, 61.193.135.61, 61.193.135.60, 61.193.135.108, 61.193.135.229, 61.193.135.69, 61.193.135.109, 61.193.135.68, 61.193.135.67, 61.193.135.66, 61.193.135.65, 61.193.135.102, 61.193.135.223, 61.193.135.103, 61.193.135.224, 61.193.135.100, 61.193.135.221, 61.193.135.101, 61.193.135.222, 61.193.135.106, 61.193.135.227, 61.193.135.107, 61.193.135.228, 61.193.135.104, 61.193.135.225, 61.193.135.105, 61.193.135.226, 61.193.135.120, 61.193.135.241, 61.193.135.121, 61.193.135.242, 61.193.135.240, 61.193.135.75, 61.193.135.74, 61.193.135.73, 61.193.135.72, 61.193.135.71, 61.193.135.70, 61.193.135.119, 61.193.135.79, 61.193.135.78, 61.193.135.77, 61.193.135.76, 61.193.135.113, 61.193.135.234, 61.193.135.114, 61.193.135.235, 61.193.135.111, 61.193.135.232, 61.193.135.112, 61.193.135.233, 61.193.135.117, 61.193.135.238, 61.193.135.118, 61.193.135.239, 61.193.135.115, 61.193.135.236, 61.193.135.116, 61.193.135.237, 61.193.135.131, 61.193.135.252, 61.193.135.132, 61.193.135.253, 61.193.135.250, 61.193.135.130, 61.193.135.251, 61.193.135.42, 61.193.135.41, 61.193.135.40, 61.193.135.49, 61.193.135.48, 61.193.135.47, 61.193.135.46, 61.193.135.45, 61.193.135.44, 61.193.135.43, 61.193.135.124, 61.193.135.245, 61.193.135.125, 61.193.135.246, 61.193.135.122, 61.193.135.243, 61.193.135.123, 61.193.135.244, 61.193.135.128, 61.193.135.249, 61.193.135.129, 61.193.135.126, 61.193.135.247, 61.193.135.127, 61.193.135.248, 61.193.135.142, 61.193.1
Source: ip traffic	Subnet 118.144.232.0/24: 118.144.232.90, 118.144.232.96, 118.144.232.95, 118.144.232.98, 118.144.232.97, 118.144.232.92, 118.144.232.91, 118.144.232.94, 118.144.232.93, 118.144.232.99, 118.144.232.74, 118.144.232.73, 118.144.232.76, 118.144.232.75, 118.144.232.70, 118.144.232.72, 118.144.232.71, 118.144.232.78, 118.144.232.77, 118.144.232.79, 118.144.232.85, 118.144.232.84, 118.144.232.87, 118.144.232.86, 118.144.232.81, 118.144.232.80, 118.144.232.83, 118.144.232.82, 118.144.232.89, 118.144.232.88, 118.144.232.52, 118.144.232.51, 118.144.232.54, 118.144.232.198, 118.144.232.53, 118.144.232.199, 118.144.232.50, 118.144.232.59, 118.144.232.56, 118.144.232.55, 118.144.232.58, 118.144.232.57, 118.144.232.63, 118.144.232.189, 118.144.232.62, 118.144.232.65, 118.144.232.187, 118.144.232.64, 118.144.232.188, 118.144.232.61, 118.144.232.60, 118.144.232.192, 118.144.232.193, 118.144.232.190, 118.144.232.191, 118.144.232.67, 118.144.232.196, 118.144.232.66, 118.144.232.197, 118.144.232.69, 118.144.232.194, 118.144.232.68, 118.144.232.195, 118.144.232.30, 118.144.232.178, 118.144.232.179, 118.144.232.32, 118.144.232.176, 118.144.232.31, 118.144.232.177, 118.144.232.38, 118.144.232.181, 118.144.232.37, 118.144.232.182, 118.144.232.39, 118.144.232.180, 118.144.232.34, 118.144.232.185, 118.144.232.33, 118.144.232.186, 118.144.232.36, 118.144.232.183, 118.144.232.35, 118.144.232.184, 118.144.232.41, 118.144.232.167, 118.144.232.40, 118.144.232.168, 118.144.232.43, 118.144.232.165, 118.144.232.42, 118.144.232.166, 118.144.232.169, 118.144.232.49, 118.144.232.170, 118.144.232.48, 118.144.232.171, 118.144.232.45, 118.144.232.174, 118.144.232.44, 118.144.232.175, 118.144.232.47, 118.144.232.172, 118.144.232.46, 118.144.232.173, 118.144.232.156, 118.144.232.157, 118.144.232.10, 118.144.232.154, 118.144.232.155, 118.144.232.158, 118.144.232.159, 118.144.232.16, 118.144.232.15, 118.144.232.160, 118.144.232.18, 118.144.232.17, 118.144.232.12, 118.144.232.163, 118.144.232.11, 118.144.232.164, 118.144.232.14, 118.144.232.161, 118.144.232.13, 118.144.232.162, 118.144.232.19, 118.144.232.145, 118.144.232.146, 118.144.232.21, 118.144.232.143, 118.144.232.20, 118.144.232.144, 118.144.232.149, 118.144.232.147, 118.144.232.148, 118.144.232.27, 118.144.232.26, 118.144.232.29, 118.144.232.28, 118.144.232.23, 118.144.232.152, 118.144.232.22, 118.144.232.153, 118.144.232.25, 118.144.232.150, 118.144.232.24, 118.144.232.151, 118.144.232.134, 118.144.232.255, 118.144.232.135, 118.144.232.132, 118.144.232.253, 118.144.232.133, 118.144.232.254, 118.144.232.138, 118.144.232.139, 118.144.232.136, 118.144.232.137, 118.144.232.141, 118.144.232.142, 118.144.232.140, 118.144.232.129, 118.144.232.123, 118.144.232.244, 118.144.232.124, 118.144.232.245, 118.144.232.121, 118.144.232.242, 118.144.232.122, 118.144.232.243, 118.144.232.127, 118.144.232.248, 118.144.232.128, 118.144.232.249, 118.144.232.125, 118.144.232.246, 118.144.232.126, 118.144.232.247, 118.144.232.130, 118.144.232.251, 118.144.232.131, 118.144.232.2

Start time (UTC):	17:25:34
Start date (UTC):	27/03/2025
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report pftp.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Threatname: Gafgyt

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.wlgsk3 (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Symbols

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTPS Proxied Packets

System Behavior

Analysis Process: pftp.elf PID: 5513, Parent PID: 5439

General

File Activities

File Opened

File Deleted

File Read

File Written

Process Activities

Process Forked

Linux Analysis Report
pftp.elf